Edit tour

Windows Analysis Report
http://www.goo.su/c1Rnox/

Overview

General Information

Sample URL:	http://www.goo.su/c1Rnox/
Analysis ID:	1521723
Tags:	openphish
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Detected suspicious crossdomain redirect

Executes massive DNS lookups (> 100)

Form action URLs do not match main URL

Found iframes

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2960 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.goo.su/c1Rnox/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=BcS38Bn9SxwQAWnphFbnazJeTs%2BBsH86bwDtxfd6tOBaqQQ2Q5BbZ6WgUXCb8im3XaQqBvzz3ciyqrU5GYs8o7Svlq3NqqTTd0m53aDBekYw%2F2k7NmH262b0H4gR HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 388Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.liveinternet.ru/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9165516179791802&output=html&adk=1812271804&adf=3025194257&abgtt=4&lmt=1727570731&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.liveinternet.ru%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aifgd=1&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727570728287&bpp=410&bdt=1682&idt=3603&shv=r20240925&mjsv=m202409260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=3653163056702&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C95339781%2C31087426%2C31087431%2C31087437%2C31087440%2C44798934%2C95331833%2C31087565%2C95335247&oid=2&pvsid=1304130316234422&tmod=555371574&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=49152&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=3741
Source: https://www.liveinternet.ru/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20240925/r20110914/zrt_lookup_fy2021.html

Source: https://www.liveinternet.ru/	HTTP Parser: Form action: /journal_redirect.php
Source: https://www.liveinternet.ru/	HTTP Parser: Form action: https://www.liveinternet.ru/member.php
Source: https://www.liveinternet.ru/	HTTP Parser: Form action: https://g.liveinternet.ru/auth/setcookie.php

Source: https://www.goo.su/c1Rnox/	HTTP Parser: No favicon
Source: https://www.goo.su/c1Rnox/	HTTP Parser: No favicon
Source: https://www.goo.su/c1Rnox/	HTTP Parser: No favicon
Source: https://www.goo.su/c1Rnox/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.goo.su/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon
Source: https://www.liveinternet.ru/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 83.222.109.51:443 -> 192.168.2.5:50405 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: yandex.ru to https://playhop.com/?clid=4446395&utm_medium=rsya&utm_source=yandex&utm_campaign=en_all_playhop_y_rsya_general_video_desk_tier_main_usa_epk_wide_int460_06.08\|113461274&utm_content=k50id\|0100000052717834411_52717834411\|cid\|113461274\|gid\|5479291355\|aid\|16399815841\|adp\|no\|pos\|none0\|src\|context_www.goo.su\|dvc\|desktop\|main&k50id=0100000052717834411_52717834411&utm_term=---autotargeting&yclid=1850220880566943743
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: yandex.ru to https://playhop.com/?clid=4446395&utm_medium=rsya&utm_source=yandex&utm_campaign=en_all_playhop_y_rsya_general_video_desk_tier_main_usa_epk_wide_int460_06.08\|113461274&utm_content=k50id\|0100000052717834411_52717834411\|cid\|113461274\|gid\|5479291355\|aid\|16399815842\|adp\|no\|pos\|none0\|src\|context_www.liveinternet.ru\|dvc\|desktop\|main&k50id=0100000052717834411_52717834411&utm_term=---autotargeting&yclid=12545672572499132415

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.198.232
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.35

Source: chromecache_317.2.dr, chromecache_471.2.dr	String found in binary or memory: fb.innerHTML = '<iframe src="http://www.facebook.com/plugins/like.php?href='+url+'&layout=button_count&show_faces=false&ampaction=like&font=trebuchet+ms&colorscheme=light&" scrolling="no" frameborder="0" allowTransparency="true" style="height:20px;"></iframe>'; equals www.facebook.com (Facebook)
Source: chromecache_317.2.dr, chromecache_471.2.dr	String found in binary or memory: fb.innerHTML = '<iframe src="https://www.facebook.com/plugins/like.php?href='+url+'&layout=button_count&show_faces=false&ampaction=like&font=trebuchet+ms&colorscheme=light&" scrolling="no" frameborder="0" allowTransparency="true" style="height:20px;"></iframe>'; equals www.facebook.com (Facebook)
Source: chromecache_317.2.dr, chromecache_471.2.dr	String found in binary or memory: comm.innerHTML = '<iframe src="http://www.liveinternet.ru/ReActive/static/twitter/" frameborder="0" width="100%" height="auto" style="margin-top:10px;padding:10px;"></iframe>'; equals www.twitter.com (Twitter)
Source: chromecache_293.2.dr, chromecache_573.2.dr	String found in binary or memory: tag.src = "//www.youtube.com/player_api"; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr, chromecache_471.2.dr	String found in binary or memory: <a href="http://www.twitter.com/'+user.screenName+'">@'+user.screenName+'</a><img style="display:block; margin-top:12px;" src="'+user.profileImageUrl+'" /></div></div><div id="tcomm"></div>'; equals www.twitter.com (Twitter)
Source: chromecache_355.2.dr, chromecache_364.2.dr, chromecache_488.2.dr, chromecache_497.2.dr	String found in binary or memory: "facebook": "http://www.facebook.com/MediametricsTula/", equals www.facebook.com (Facebook)
Source: chromecache_355.2.dr, chromecache_364.2.dr, chromecache_488.2.dr, chromecache_497.2.dr	String found in binary or memory: "facebook": "https://www.facebook.com/Mediametrics-Piter-970968629659260/", equals www.facebook.com (Facebook)
Source: chromecache_355.2.dr, chromecache_364.2.dr, chromecache_488.2.dr, chromecache_497.2.dr	String found in binary or memory: "facebook": "https://www.facebook.com/mediametrics.ru?fref=ts", equals www.facebook.com (Facebook)
Source: chromecache_355.2.dr, chromecache_364.2.dr, chromecache_488.2.dr, chromecache_497.2.dr	String found in binary or memory: "facebook": "https://www.facebook.com/radiomediametricssochi", equals www.facebook.com (Facebook)
Source: chromecache_355.2.dr, chromecache_364.2.dr, chromecache_488.2.dr, chromecache_497.2.dr	String found in binary or memory: "facebook": "https://www.facebook.com/radiommkz/", equals www.facebook.com (Facebook)
Source: chromecache_369.2.dr, chromecache_320.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_369.2.dr, chromecache_320.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_585.2.dr, chromecache_526.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_585.2.dr, chromecache_526.2.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_369.2.dr, chromecache_320.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr, chromecache_596.2.dr, chromecache_446.2.dr, chromecache_598.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_369.2.dr, chromecache_320.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)
Source: chromecache_449.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.goo.su
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: enduresopens.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: an.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: counter.yadro.ru
Source: global traffic	DNS traffic detected: DNS query: st.top100.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: top-fwz1.mail.ru
Source: global traffic	DNS traffic detected: DNS query: kraken.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: yastatic.net
Source: global traffic	DNS traffic detected: DNS query: avatars.mds.yandex.net
Source: global traffic	DNS traffic detected: DNS query: ads.adfox.ru
Source: global traffic	DNS traffic detected: DNS query: yandex.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: privacy-cs.mail.ru
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: favicon.yandex.net
Source: global traffic	DNS traffic detected: DNS query: px.arcspire.io
Source: global traffic	DNS traffic detected: DNS query: acint.net
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: cm.a.mts.ru
Source: global traffic	DNS traffic detected: DNS query: cm.tns-counter.ru
Source: global traffic	DNS traffic detected: DNS query: cmr.bidderstack.com
Source: global traffic	DNS traffic detected: DNS query: cr.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: dm.hybrid.ai
Source: global traffic	DNS traffic detected: DNS query: 3848094281727570692732.cm.a.mts.ru
Source: global traffic	DNS traffic detected: DNS query: dmg.digitaltarget.ru
Source: global traffic	DNS traffic detected: DNS query: ssp-rtb.sape.ru
Source: global traffic	DNS traffic detected: DNS query: dsp.mpartner.digital
Source: global traffic	DNS traffic detected: DNS query: euw-ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: exchange.buzzoola.com
Source: global traffic	DNS traffic detected: DNS query: eye.targetads.io
Source: global traffic	DNS traffic detected: DNS query: kimberlite.io
Source: global traffic	DNS traffic detected: DNS query: match.new-programmatic.com
Source: global traffic	DNS traffic detected: DNS query: mitdmp.whiteboxdigital.ru
Source: global traffic	DNS traffic detected: DNS query: sm.rtb.mts.ru
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: nr.bidderstack.com
Source: global traffic	DNS traffic detected: DNS query: px.adhigh.net
Source: global traffic	DNS traffic detected: DNS query: rtb-eu-warsaw.intent.ai
Source: global traffic	DNS traffic detected: DNS query: s.uuidksinc.net
Source: global traffic	DNS traffic detected: DNS query: vma.mts.ru
Source: global traffic	DNS traffic detected: DNS query: shopnetic.com
Source: global traffic	DNS traffic detected: DNS query: ssp.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: sync.bumlam.com
Source: global traffic	DNS traffic detected: DNS query: sync.dmp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: mts-dsp-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: sync.gonet-ads.com
Source: global traffic	DNS traffic detected: DNS query: sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: x01.aidata.io
Source: global traffic	DNS traffic detected: DNS query: yandex-dmp-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: yandex-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: 48369b4b-9d6b-4305-8d15-5a33c3933fea.sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: sync.dsp.solta.io
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.mail.ru
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: t.rtbwave.com
Source: global traffic	DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic	DNS traffic detected: DNS query: playhop.com
Source: global traffic	DNS traffic detected: DNS query: yandex.com
Source: global traffic	DNS traffic detected: DNS query: static.playhop.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: games-sdk.playhop.com
Source: global traffic	DNS traffic detected: DNS query: video-preview.s3.yandex.net
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: games.playhop.com
Source: global traffic	DNS traffic detected: DNS query: www.liveinternet.ru
Source: global traffic	DNS traffic detected: DNS query: i.li.ru
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: content.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.viqeo.tv
Source: global traffic	DNS traffic detected: DNS query: pb.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: yhb.p.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: adfox-hb-bidder.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: matchid.adfox.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ev.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: sse.games.playhop.com
Source: global traffic	DNS traffic detected: DNS query: api.viqeo.tv
Source: global traffic	DNS traffic detected: DNS query: radio.mediametrics.ru
Source: global traffic	DNS traffic detected: DNS query: stats.viqeo.tv
Source: global traffic	DNS traffic detected: DNS query: metrics.viqeo.tv
Source: global traffic	DNS traffic detected: DNS query: sentry.viqeo.tv
Source: global traffic	DNS traffic detected: DNS query: data.videonow.ru
Source: global traffic	DNS traffic detected: DNS query: spx.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: sync.videonow.ru
Source: global traffic	DNS traffic detected: DNS query: sync.adspend.space
Source: global traffic	DNS traffic detected: DNS query: rtb.videonow.ru
Source: global traffic	DNS traffic detected: DNS query: a.utraff.com
Source: global traffic	DNS traffic detected: DNS query: adx.com.ru
Source: global traffic	DNS traffic detected: DNS query: prodmp.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.al-adtech.com
Source: global traffic	DNS traffic detected: DNS query: sync.opendsp.ru

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:44:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Powered-By: PHP/8.2.13Cache-Control: no-cache, privatepragma: no-cacheexpires: -1Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVFT0R4dzVMVlpKTmsySDIwSWZsNVE9PSIsInZhbHVlIjoicHQzS1k1Q3BuSVU2STZEait5WXk5c2VWZ1JqRTBqQWErOHpLRG1DTnVVQWFMUVhoQWMrdmtlSUpGSm9vY0NTZzJPeWJBMmErV0ExQW9EVFEwTjB2RnJ0NGtvdmJ3UGpPZUNpeWwyOVNhTXNDVy9BRlBRY1lnVDJUc1VQQ2t5NDIiLCJtYWMiOiI0ZGYyMGU0MGFhOWEzZjQ5YjZkZDVjMzhmNTBiN2ZlYzY2ZTcwN2Y5NTNhNTY5Njg4NzI3OTIxOWU1OWViOGU4IiwidGFnIjoiIn0%3D; expires=Sun, 29 Sep 2024 19:24:38 GMT; Max-Age=67200; path=/; secure; samesite=laxSet-Cookie: goosu_session=eyJpdiI6IjUzM3k5b09yelFPSndxZk1WZmxUN2c9PSIsInZhbHVlIjoiemJ5b25ycDV1U2p6WUF6QklMSDh5cS8xRlNLc2V2WHMyU3NuWVRSenphUkRrSXdYanhRWUlXK0N3V3BWRzFEeUF6ZEl5TkYzT1dHOSs0aUhkdlI1N3BveWQrSzM4K3c3Rmh3L1N0NDFNMXQ5b1NFU1JBb1doVGpKeTZLUElSNysiLCJtYWMiOiI0NWVhODc2NmU1M2M5YzNlNzMzZTlhNTNhNGQzNWNhNTcyZjI3MmIzN2ZjMDg3ZjZmOTVkMzdhYTU4OGNmMzU3IiwidGFnIjoiIn0%3D; expires=Sun, 29 Sep 2024 19:24:38 GMT; Max-Age=67200; path=/; httponly; samesite=laxCF-Cache-Status: DYNAMIC
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:45:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Powered-By: PHP/8.2.13Cache-Control: no-cache, privatepragma: no-cacheexpires: -1CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZE7DgJ2HsMIsylGfLcH9%2Bn1yiQH13tVBSwr0fd4QVFp6evhCzutJz5qdIq%2Bfe9QsWnO9sGzzhsO6cFXDtg3jDnK1cvgB9k4LneUc7%2F09pxzcZD4%2BlgGcjO7HGxTO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8ca7f30efad40f74-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:45:35 GMTContent-Type: text/plain;charset=utf-8Content-Length: 22Connection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Credentials: trueX-Backend-id: f21-ruX-Error-Id: 7TXd97ftZ9pPragma: no-cacheExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: no-cacheCache-Control: no-store
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:45:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Powered-By: PHP/8.2.13Cache-Control: no-cache, privatepragma: no-cacheexpires: -1CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dz98DMxtmhNLgDAEQNBuM40Eri%2BA7slyf81yMsqkaGupxOtr1fln9I8BskSA6QaWdhSRQQoGRz6H9eydZWEPXxIhp18oBWOifEsa1tqnNoIOL7kLBz%2FTZEk1zpr3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8ca7f3fc28c54339-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.goo.su/c1Rnox/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2960 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2960 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 --field-trial-handle=2264,i,7894936519533421233,12773706743546917260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source	Detection	Scanner	Label	Link
http://www.goo.su/c1Rnox/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering
http://www.goo.su/c1Rnox/	5%	Virustotal		Browse

Source	Detection	Scanner	Link
securepubads.g.doubleclick.net	0%	Virustotal	Browse
sync.gonet-ads.com	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
enduresopens.com	5%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
favicon.yandex.net	0%	Virustotal	Browse
an.yandex.ru	0%	Virustotal	Browse
acint.net	0%	Virustotal	Browse
r.mail.ru	0%	Virustotal	Browse
www.liveinternet.ru	0%	Virustotal	Browse
euw-ice.360yield.com	0%	Virustotal	Browse
p-vip.al-adtech.com	0%	Virustotal	Browse
s3.yandex.net	0%	Virustotal	Browse
balancer.bidderstack.com	0%	Virustotal	Browse
cm.tns-counter.ru	0%	Virustotal	Browse
pagead-googlehosted.l.google.com	0%	Virustotal	Browse
playhop.com	0%	Virustotal	Browse
matchid-production.adfox.yandex.ru	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
youtube-ui.l.google.com	0%	Virustotal	Browse
mc.yandex.ru	0%	Virustotal	Browse
cmr.bidderstack.com	0%	Virustotal	Browse
kimberlite.io	0%	Virustotal	Browse
stun4.l.google.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
securepubads.g.doubleclick.net	142.250.184.194	true	false	0%, Virustotal, Browse	unknown
enduresopens.com	23.109.170.26	true	false	5%, Virustotal, Browse	unknown
sync.gonet-ads.com	23.109.14.90	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	66.102.1.155	true	false	0%, Virustotal, Browse	unknown
an.yandex.ru	77.88.21.90	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.36	true	false	0%, Virustotal, Browse	unknown
s3.yandex.net	93.158.134.158	true	false	0%, Virustotal, Browse	unknown
p-vip.al-adtech.com	45.139.25.119	true	false	0%, Virustotal, Browse	unknown
favicon.yandex.net	87.250.250.36	true	false	0%, Virustotal, Browse	unknown
matchid-production.adfox.yandex.ru	93.158.134.118	true	false	0%, Virustotal, Browse	unknown
pagead-googlehosted.l.google.com	172.217.16.193	true	false	0%, Virustotal, Browse	unknown
acint.net	193.3.184.7	true	false	0%, Virustotal, Browse	unknown
avatars-proxy.playhop.com	87.250.250.58	true	false		unknown
www.liveinternet.ru	88.212.202.50	true	false	0%, Virustotal, Browse	unknown
r.mail.ru	95.163.41.56	true	false	0%, Virustotal, Browse	unknown
cm.tns-counter.ru	194.226.130.227	true	false	0%, Virustotal, Browse	unknown
euw-ice.360yield.com	52.51.158.7	true	false	0%, Virustotal, Browse	unknown
balancer.bidderstack.com	142.132.211.137	true	false	0%, Virustotal, Browse	unknown
playhop.com	213.180.193.237	true	false	0%, Virustotal, Browse	unknown
youtube-ui.l.google.com	142.250.74.206	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	0%, Virustotal, Browse	unknown
mc.yandex.ru	77.88.21.119	true	false	0%, Virustotal, Browse	unknown
stun4.l.google.com	74.125.250.129	true	false	0%, Virustotal, Browse	unknown
cmr.bidderstack.com	185.149.242.236	true	false	0%, Virustotal, Browse	unknown
kimberlite.io	217.199.220.44	true	false	0%, Virustotal, Browse	unknown
rtb.videonow.ru	212.76.131.55	true	false		unknown
mitdmp.whiteboxdigital.ru	81.163.17.245	true	false		unknown
dsp.mpartner.digital	84.38.189.213	true	false		unknown
sm.rtb.mts.ru	217.66.147.42	true	false		unknown
ssp-rtb.sape.ru	193.3.184.217	true	false		unknown
metrics.viqeo.tv	83.222.109.48	true	false		unknown
yandex.com	77.88.55.88	true	false		unknown
stats.viqeo.tv	83.222.109.36	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
ssp.ads.betweendigital.com	188.42.34.64	true	false		unknown
yandex.ru	77.88.44.55	true	false		unknown
7419859658157092812-otm.ops.beeline.ru	37.9.245.57	true	false		unknown
www.goo.su	104.21.38.221	true	false		unknown
lvs-dec-vip2.rtbwave.com	148.153.84.157	true	false		unknown
spx.otm-r.com	194.55.244.195	true	false		unknown
data.videonow.ru	212.76.131.56	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		unknown
cl-833a9536.edgecdn.ru	95.181.182.182	true	false		unknown
3848094281727570692732.cm.a.mts.ru	185.65.149.228	true	false		unknown
ad-ru.p.otm-r.com	194.55.244.184	true	false		unknown
i.li.ru	88.212.202.50	true	false		unknown
eye.targetads.io	51.250.77.168	true	false		unknown
stun3.l.google.com	74.125.250.129	true	false		unknown
sync.dsp.solta.io	217.199.220.72	true	false		unknown
1010--d3bcb62b-1ea6-46d7-9a33-dae17a0d77f4.stbid.ru	188.120.241.43	true	false		unknown
x01.aidata.io	89.108.120.76	true	false		unknown
adx.com.ru	83.222.105.114	true	false		unknown
sync.programmatica.com	85.198.116.135	true	false		unknown
top-fwz1.mail.ru	95.163.52.67	true	false		unknown
balance.segmento.ru	45.9.24.193	true	false		unknown
prodmp.ru	193.106.92.202	true	false		unknown
ssp.adriver.ru	195.209.109.19	true	false		unknown
cm.g.doubleclick.net	142.250.184.226	true	false		unknown
api.viqeo.tv	83.222.109.50	true	false		unknown
krf.r.mail.ru	95.163.52.89	true	false		unknown
2e2qdr4l9f.a.trbcdn.net	151.236.122.216	true	false		unknown
ads.adfox.ru	77.88.21.179	true	false		unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false		unknown
a.utraff.com	104.26.7.189	true	false		unknown
analytics-alv.google.com	216.239.36.181	true	false		unknown
avatars.mds.yandex.net	87.250.247.181	true	false		unknown
px.arcspire.io	35.177.4.157	true	false		unknown
www3.l.google.com	142.250.185.110	true	false		unknown
sync.adspend.space	172.67.69.82	true	false		unknown
td.doubleclick.net	142.250.186.66	true	false		unknown
www.acint.net	142.132.138.212	true	false		unknown
sync.opendsp.ru	185.175.47.157	true	false		unknown
cm.a.mts.ru	185.65.149.228	true	false		unknown
svc02.de.viqeo.tv	49.12.120.75	true	false		unknown
radio.mediametrics.ru	88.212.196.115	true	false		unknown
pb.adriver.ru	195.209.109.24	true	false		unknown
shopnetic.com	23.111.37.244	true	false		unknown
playhop-sse-prod.yandex.net	213.180.193.248	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
a.lotus-dsp.ru	104.21.94.226	true	false		unknown
counter.yadro.ru	88.212.201.204	true	false		unknown
sync.videonow.ru	212.76.131.50	true	false		unknown
bid-iad-static.yeahtargeter.com	47.253.61.56	true	false		unknown
stats2.videonow.ru	212.76.131.37	true	false		unknown
sync.bumlam.com	31.172.81.145	true	false		unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.72.48.144	true	false		unknown
yastatic.net	178.154.131.217	true	false		unknown
dm.hybrid.ai	37.230.131.21	true	false		unknown
s.uuidksinc.net	31.220.27.134	true	false		unknown
dmp.sbermarketing.ru	37.18.110.198	true	false		unknown
cr.frontend.weborama.fr	34.111.129.221	true	false		unknown
sync.otm-r.com	194.55.244.195	true	false		unknown
ev.adriver.ru	195.209.109.27	true	false		unknown
dmg.digitaltarget.ru	185.15.175.132	true	false		unknown
vma.mts.ru	217.66.147.33	true	false		unknown
kraken.rambler.ru	81.19.89.18	true	false		unknown
content.adriver.ru	23.111.217.124	true	false		unknown
match.new-programmatic.com	217.65.2.150	true	false		unknown
rtb-eu-warsaw.intent.ai	unknown	unknown	false		unknown
yandex-sync.rutarget.ru	unknown	unknown	false		unknown

Name	Malicious	Reputation
https://st.top100.ru/top100/top100.js	false	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9165516179791802&output=html&adk=1812271804&adf=3025194257&abgtt=4&lmt=1727570731&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.liveinternet.ru%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aifgd=1&aipaq=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1727570728287&bpp=410&bdt=1682&idt=3603&shv=r20240925&mjsv=m202409260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=3653163056702&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C95339781%2C31087426%2C31087431%2C31087437%2C31087440%2C44798934%2C95331833%2C31087565%2C95335247&oid=2&pvsid=1304130316234422&tmod=555371574&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=49152&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=3741	false	unknown
https://mc.yandex.com/watch/92757394/1?page-url=https%3A%2F%2Fplayhop.com%2F%3Fclid%3D4446395%26k50id%3D0100000052717834411_52717834411%26yclid%3D1850220880566943743&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570768_d06356f211cda3b8c580b5510fc4ff60bbf8eca933499039916245784ccf134e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A1%3Adp%3A1%3Als%3A985938304644%3Ahid%3A753828485%3Az%3A-240%3Ai%3A20240928204607%3Aet%3A1727570767%3Ac%3A1%3Arn%3A66522070%3Arqn%3A12%3Au%3A1727570755763366931%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1727570705871%3Agi%3AR0ExLjEuNTQyNzYzODY4LjE3Mjc1NzA3MTc%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1727570768&t=gdpr(31)mc(g-2-p-25)clc(0-0-0)rqnt(12)lt(1088000)aw(0)rcm(1)yu(306900791727570709)cdl(na)eco(21176838)ti(1)	false	unknown
https://dmg.digitaltarget.ru/1/6323/i/i?a=622&e=bb9b3146a75f4e236f29547cabc5a349c59ef7fb&i=965584092	false	unknown
https://yandex.ru/an/rtbcount/1KNenUCQ0cq200000000U9nJ_2Dro7g-oGz_mtVER-ybbNVuM_vPz2ED0GWyOIAX7zhtEyHopP1aI6K4YcU-Stvv2YHUoWRarPu24gsC878ce-yx1Z1OoCWa0s6jPApbXB3sCiugb60u2kQVPMG6Ybnb11btbv41gFOluomc1eQvJ22HfKm7WD9hcQO1sMUP_WF1AoO1lyRiC--S6HdABdrDCLTcO_ZB13AYbPaLIFOoAmB9gSmWpNEPcK3M0YKLGBQoR6HsVP2ViTLOkEuayy-e7FwCRmTKhu9LtWMJFvaTdFWXZcPv_EeCcBM2vOZS3XQc0op_OO3n0ilXnvDFp-zvyaVy9Wl4Gn_i7xBehJwqzT7Qg_PlMK3U-i3oPsl7lS-JU__uBs3bEidQ_bW0hF82QqD3Kul3JTQVIddSzV71gbzPGOPsi3MmJ623Qvd1TkLmy0AsdHk-7B-xUCxYCumhsM367s3pEC76_8YDrw32mygp9C8ekp2orFmd6ymX4zbFPjbbt_1-Qp-BdTtGqCZ4mjHW1JlZ1dR67UoC9zZ57x2t73amQ_RSams5FzXvEZY25t2SlSEyWgF9OWF7Nw4T78otE302-2a70qE3VIydo6DJEK61lO2pWNa5vm_63PnY9pWPBt0oVk1a_C79sC7rUS62kymBk816VkJwlD7Kjl7d8eT6Rh3RcFOuT89P2qw-TG00rqdQ4W00?pcode-active-testids=1121753%2C0%2C96	false	unknown
https://adfox-hb-bidder.rutarget.ru/bid	false	unknown
https://match.360yield.com/match?external_user_id=2471ca4f-2906-4806-aabb-98bad2273f65&publisher_dsp_id=429&publisher_call_type=redirect	false	unknown
https://exchange.buzzoola.com/cookiesync/redirect/yandex?redirect_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbuzzooladspis%2F%24%7BUUID%7D	false	unknown
https://prodmp.ru/li?guid=6B828CD2E2080704A383&uid=d3bcb62b-1ea6-46d7-9a33-dae17a0d77f4&r=https%3A%2F%2Fdmg.digitaltarget.ru%2F1%2F224%2Fi%2Fi%3Fa%3D224%26e%3Dd3bcb62b-1ea6-46d7-9a33-dae17a0d77f4%26i%3D1727570770628%26r%3Dhttps%253A%252F%252Fan.yandex.ru%252Fmapuid%252Fdmpmediadesk%252Fd3bcb62b-1ea6-46d7-9a33-dae17a0d77f4%253Fsign%253D2cde0df4%2526location%253Dhttps%25253A%25252F%25252F1010--d3bcb62b-1ea6-46d7-9a33-dae17a0d77f4.stbid.ru%25252F%25253Fr%25253Dhttps%252525253A%252525252F%252525252Ftop-fwz1.mail.ru%252525252Fcounter%252525253Fid%252525253D3138228&version=2.0	false	unknown
https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10506.aH_wcuyma9g4Bd0gCtKTSCAxEGheIWeQ4i2Tk6n6gdNSeita1pW-qLAH35oDiFVknQFaObXezA7ukHOoEPfFUituCIQCS6Q1qXi9-v-zFDib3oH9_oPkrswRUU0e0Jx9aYBucvjNYjQKy02U3R_NSxk6osw9hLiq5aHDWeKtpLgA5sPgc77Cjy5WpYqelZuRvRGR5rx1s9FokhJ_sCDIhUz6CpPTb8LsjUxwb-GTV4g%2C.5n8WOPExDvmuAoERDz95eF-4X5w%2C	false	unknown
https://mc.yandex.com/watch/1677322/1?page-url=https%3A%2F%2Fwww.goo.su%2Fc1Rnox%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570690_89ca97f7dcd18405d19bb580b9425071eccf2410f88191f27c37fc5d2815c84e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A2%3Adp%3A1%3Als%3A572600150804%3Ahid%3A595968867%3Az%3A-240%3Ai%3A20240928204449%3Aet%3A1727570689%3Ac%3A1%3Arn%3A589798215%3Arqn%3A1%3Au%3A1727570682543665603%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A2489%3Awv%3A2%3Ads%3A10%2C650%2C454%2C4%2C70%2C0%2C%2C1185%2C0%2C%2C%2C%2C2375%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1727570676155%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1727570689&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(364300)aw(1)rcm(1)cdl(na)eco(2179136)dss(2)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%229084661727570681925%22%7D%7D	false	unknown
https://www.goo.su/	false	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxXIWE-1z_CEQG0MWuUb5eRak7dPtJMeSrYHtJjhaaYK7EfBcxaRnaCsIU-FsxkIHIyQpZqgU1fOaLLJUwWndAYByLrzcuxDclr7gBE7PjtCA7vh9gU1-UeKzFrt7tAeQse2H0xiCQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NTcwNzQ4LDYzMTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubGl2ZWludGVybmV0LnJ1LyIsbnVsbCxbWzgsIkdFaF9Idld5ZDZRIl0sWzksImVuLVVTIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d	false	unknown
https://sync.dmp.otm-r.com/match/amberdata?r=https%3A%2F%2Fdmg.digitaltarget.ru%2F1%2F7493%2Fi%2Fi%3Fa%3D656%26e%3D%7Bpid%7D%26i%3D123	false	unknown
https://sync.bumlam.com/?src=yandex2	false	unknown
https://yastatic.net/s3/games-static/_/build/catalog/desktop/playhop/PageDescriptionNew.component.async.e17503830fe0de5ccd57.css	false	unknown
https://fundingchoicesmessages.google.com/i/21939239661?ers=3	false	unknown
https://mc.yandex.com/watch/92757394/1?page-url=https%3A%2F%2Fplayhop.com%2F%3Fclid%3D4446395%26k50id%3D0100000052717834411_52717834411%26yclid%3D1850220880566943743&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570768_d06356f211cda3b8c580b5510fc4ff60bbf8eca933499039916245784ccf134e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A1%3Adp%3A1%3Als%3A985938304644%3Ahid%3A753828485%3Az%3A-240%3Ai%3A20240928204607%3Aet%3A1727570767%3Ac%3A1%3Arn%3A665687695%3Arqn%3A16%3Au%3A1727570755763366931%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1727570705871%3Agi%3AR0ExLjEuNTQyNzYzODY4LjE3Mjc1NzA3MTc%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1727570768&t=gdpr(31)mc(g-2-p-25)clc(0-0-0)rqnt(16)lt(1088000)aw(0)rcm(1)yu(306900791727570709)cdl(na)eco(21176838)ti(1)	false	unknown
https://stats.viqeo.tv/stats?referer=https%3A%2F%2Fwww.liveinternet.ru%2F&page_type=web&user_key=2ee61b55a871190dacb5338779ddf9240ec5b68b&site_id=1250&event=thirdQuartile&container=recommend_player&custom_tag&profile_id=1614&rand=4194664e78a9ef54b4d6d1e67de05e2a&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=362968&video_id=71d67ae418ed84dd3eeb&user_id=0	false	unknown
https://dmg.digitaltarget.ru/1/7612/i/i?a=2367&e=3d034c84-8c7d-41d8-8380-50f7ee534ed7&i=14979074928261940580	false	unknown
https://yastatic.net/partner-code-bundles/1124850/eb8fa3db2e8d709b36ab.js	false	unknown
https://sync.bumlam.com/?src=yandex2&s_data=CAIQARiMxuK3BqIBEA68xjp9_BHvm3sAJZDIJDY*	false	unknown
https://data.videonow.ru/?profile_id=5015393&format=vast&vpaid=0&multi=1&vpmute=1&plcmt=2&flash=0&w=400&h=225&location=https%3A%2F%2Fwww.liveinternet.ru%2F	false	unknown
https://a.utraff.com/sync?ssp=3046&id=ZvijCFwqE-0	false	unknown
https://mc.yandex.com/watch/1677322?page-url=https%3A%2F%2Fwww.goo.su%2F&page-ref=https%3A%2F%2Fwww.goo.su%2Fc1Rnox%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570720_0015665b11de39d1d97a955046337c0ee022c652a0d5004671b2e7d27bf8870f&browser-info=pv%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A2%3Adp%3A1%3Als%3A572600150804%3Ahid%3A433132429%3Az%3A-240%3Ai%3A20240928204520%3Aet%3A1727570720%3Ac%3A1%3Arn%3A313453419%3Arqn%3A4%3Au%3A1727570682543665603%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1727570713845%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1727570720%3At%3A%D0%A1%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD%D0%B0%2C%20%D0%B2%D0%BE%D0%B7%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D0%B2%D1%8B%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BB%D0%B8%D1%81%D1%8C%20%D0%B2%20%D0%BD%D0%B0%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B8%20%D0%B0%D0%B4%D1%80%D0%B5%D1%81%D0%B0&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(336700)aw(0)rcm(0)cdl(na)eco(2179136)dss(2)ti(0)&force-urlencoded=1	false	unknown
https://static.playhop.com/images/93ec2_1892995_378e9/4cb0bd70a/2a0000019201020a_46de404/178c34f043463c7fecb4_ec0b01/pjpg350x209	false	unknown
https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10506.RgIKHLcrDf8M84wLFs0w9yFm7zqLY1nI4KR2_zFpuFp82vpv9kleF7OPNnAvspYO.DCZN27brrtk6KrIYypyUh6-1CNg%2C	false	unknown
https://dmg.digitaltarget.ru/1/224/i/i?a=224&e=d3bcb62b-1ea6-46d7-9a33-dae17a0d77f4&i=2888884583458872288&r=https%3A%2F%2Fprodmp.ru%2Fadspend-sync.gif%3Fdsp_provider_id%3D2%26uid%3Dd3bcb62b-1ea6-46d7-9a33-dae17a0d77f4%26r%3D	false	unknown
https://an.yandex.ru/mapuid/targetrtbis/	false	unknown
https://static.playhop.com/images/477ec_6238841_7c8a8/66440e4a5/2a00000191e6ec59_8a22895/ea77837ac300b6531f43_9d79c4/pjpg350x209	false	unknown
https://an.yandex.ru/mapuid/mediasurferis/MbVJIpbwMfMAicZBIbBfaQMwjNUVPZfV	false	unknown
https://stats.viqeo.tv/stats?referer=https%3A%2F%2Fwww.liveinternet.ru%2F&page_type=web&user_key=2ee61b55a871190dacb5338779ddf9240ec5b68b&site_id=1250&event=5s&container=recommend_player&custom_tag&profile_id=1614&rand=6264d058ab2f4743a496971132b656cf&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=362968&video_id=71d67ae418ed84dd3eeb&user_id=0	false	unknown
https://static.playhop.com/images/124da_1892995_07ba5/a9db02a87/2a00000187b1c069_9eac98c/65255f9f4b24a297bb67_2812fb/pjpg350x209	false	unknown
https://mc.yandex.com/watch/54140170?wmode=7&page-url=https%3A%2F%2Fwww.goo.su%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A1%3Adp%3A0%3Als%3A1223827019821%3Ahid%3A37619081%3Az%3A-240%3Ai%3A20240928204554%3Aet%3A1727570754%3Ac%3A1%3Arn%3A409561204%3Arqn%3A7%3Au%3A1727570682543665603%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C604%2C522%2C46%2C2%2C0%2C%2C124%2C0%2C%2C%2C%2C1301%3Aco%3A0%3Acpf%3A1%3Ans%3A1727570752135%3Agi%3AR0ExLjEuMzIwMjAxODMyLjE3Mjc1NzA2ODI%3D%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1727570754%3At%3A%D0%A1%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD%D0%B0%2C%20%D0%B2%D0%BE%D0%B7%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D0%B2%D1%8B%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BB%D0%B8%D1%81%D1%8C%20%D0%B2%20%D0%BD%D0%B0%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B8%20%D0%B0%D0%B4%D1%80%D0%B5%D1%81%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(0)rcm(0)cdl(na)eco(21037572)ti(1)	false	unknown
https://top-fwz1.mail.ru/counter?id=3138228	false	unknown
https://static.playhop.com/images/dc6ee_1892995_a04df/ee4d953d8/2a000001857702a9_60fce0a/0b08ff2bbe032a273487_004c0a/pjpg350x209	false	unknown
https://yastatic.net/s3/games-static/_/build/catalog/desktop/playhop/index.eabdda467d44a6690701.css	false	unknown
https://sync.programmatica.com/match/SbermarketingMatch	false	unknown
https://static.playhop.com/images/e8cc1_1881371_ec16f/a6384ed07/2a0000017cb73d5b_867e24f/515e6ec07953681dc1e6_0b56ac/pjpg350x209	false	unknown
https://yandex.ru/an/rtbcount/1MfVJoNQ0Ja200000000U9nJ59rzph5LE5BFyBAB99jlROU_fUZY7saCGE094mcTedSjCrQoF8mXbH4edddPvUmh7w1uAOXNUmf8j3A2o9cCVcqCOB2GqIS3mbh9k4CJmjhBE4DHak4ec7-MaHaeSfKHPC1THWOP1eQ_ZBEO61ZcCe54bZ8jO6LWMClq2yW-o_GV25un2IW-divwsOMHuKT5GPgvCXl3NoOMaCNCG9KClSoAG78gCqZpN6OcaBL0ynKu11WOM4uoYzPBvyI-sXTo5In_5qp-P7PmueSubKLE8n4anB22vLmFqmuMfWCi_s60yIOBnF4Vx1-op9e90ZVjtxA0lF21PUgsNNrNFXnPexU0bUiaQ-yz0R3AhwmWZHri3ImJsE0gPh1TEHoyW6t9f0d_hzo--9jv9HlCi0Di7YVOc1-nyMOOU5gL1QPavXH6bfh_P8DPEv4Tnbh0phY2dN43k-CETfuJxE8Fs5VkV_Av_UAPkr8_s7awE0mNS02TluBZp0N63HmxWdTmCDxYm0YqfnmC30tslPmW3qpb1Fbj0MS3ymhEmWsSZ2SuUIvmCdxWPFp1oRY02sZMHowmpNUEE3HoWrd2jnmwmQm39nyu002ORhGf	false	unknown
https://rtb.videonow.ru/?profile_id=5015393&location=https%3A%2F%2Fwww.liveinternet.ru%2F&pb=1&link_key=e0012b87cf533dcb9b5448599360b39f&w=400&h=225&container=&stableid=	false	unknown
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202409240101/pubads_impl.js	false	unknown
https://mc.yandex.com/watch/1677322?page-url=https%3A%2F%2Fwww.goo.su%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570760_6cd58a535468d6dbdeefb281fba7b42e4aad51defbeb74a2de2652b8efabccec&browser-info=pv%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A2%3Adp%3A1%3Als%3A572600150804%3Ahid%3A37619081%3Az%3A-240%3Ai%3A20240928204601%3Aet%3A1727570761%3Ac%3A1%3Arn%3A351404484%3Arqn%3A6%3Au%3A1727570682543665603%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1727570752135%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1727570761%3At%3A%D0%A1%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD%D0%B0%2C%20%D0%B2%D0%BE%D0%B7%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D0%B2%D1%8B%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BB%D0%B8%D1%81%D1%8C%20%D0%B2%20%D0%BD%D0%B0%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B8%20%D0%B0%D0%B4%D1%80%D0%B5%D1%81%D0%B0&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(164300)aw(0)rcm(0)cdl(na)eco(2179136)dss(2)ti(0)&force-urlencoded=1	false	unknown
https://static.playhop.com/images/1b305_2977039_5a996/7b435eecc/2a00000191ffaa95_cf7c34e/a0d52290ea3ad54eb87b_dc3bf0/pjpg350x209	false	unknown
https://ad.mail.ru/hbid_yandex/	false	unknown
https://mc.yandex.com/watch/92757394/1?page-url=https%3A%2F%2Fplayhop.com%2F%3Fclid%3D4446395%26k50id%3D0100000052717834411_52717834411%26yclid%3D1850220880566943743&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1727570768_d06356f211cda3b8c580b5510fc4ff60bbf8eca933499039916245784ccf134e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Ao9c5bf6xvm0ltj7jomr8aqekm3%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1461%3Acn%3A1%3Adp%3A1%3Als%3A985938304644%3Ahid%3A753828485%3Az%3A-240%3Ai%3A20240928204607%3Aet%3A1727570767%3Ac%3A1%3Arn%3A763011113%3Arqn%3A6%3Au%3A1727570755763366931%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1727570705871%3Agi%3AR0ExLjEuNTQyNzYzODY4LjE3Mjc1NzA3MTc%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1727570768&t=gdpr(31)mc(g-2-p-25)clc(0-0-0)rqnt(6)lt(1088000)aw(0)rcm(1)yu(306900791727570709)cdl(na)eco(21176838)ti(1)	false	unknown
https://mc.yandex.com/sync_cookie_image_check	false	unknown
https://ev.adriver.ru/cgi-bin/json.cgi?ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1&cfa=1&sid=1&loc=https%3A%2F%2Fwww.liveinternet.ru%2F&custom=308%3D0%3B309%3D0	false	unknown
https://fundingchoicesmessages.google.com/f/AGSKWxUVCaSesfcUyis99Se6bBAvDWnSOzdVmwAeHtu03G7pg28Gx3Xj-C01JmP6zixTFY6JhdrTMXYmiZE1J7azKBLX9HStUhJwaXTzro1DaPwlAF_16sGc7eAwq79A0CYA9hoPzMw4bg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI3NTcwNzU0LDk3NTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cubGl2ZWludGVybmV0LnJ1LyIsbnVsbCxbWzgsIkdFaF9Idld5ZDZRIl0sWzksImVuLVVTIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d	false	unknown
https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fan.yandex.ru%252Fmapuid%252Fsapeis%252F$%257BUSER_ID%257D&dp=14	false	unknown
https://counter.yadro.ru/hit;li_face?r;s1280102424;uhttps%3A//www.liveinternet.ru/;hLiveInternet%20@%20%u0421%u0442%u0430%u0442%u0438%u0441%u0442%u0438%u043A%u0430%20%u0438%20%u0434%u043D%u0435%u0432%u043D%u0438%u043A%u0438%2C%20%u043F%u043E%u0447%u0442%u0430%20%u0438%20%u043F%u043E%u0438%u0441%u043A;0.32744810135230473	false	unknown
https://sync.dsp.solta.io/match/dmp_amberdata?id=1&fp=NzZkOWUzNzkxMDNjNDg5ZA	false	unknown
https://ads.betweendigital.com/adjson?t=adfox	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://playhop.com/uz	chromecache_410.2.dr	false		unknown
https://sync.otm-r.com/match/limiter?limit=10&r=https%3A%2F%2Ffcpe.beeline.ru%2Fsync%2Fme%3Fguid%3DE	chromecache_299.2.dr, chromecache_308.2.dr	false		unknown
https://www.liveinternet.ru/users/4264982/profile/	chromecache_522.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_431.2.dr, chromecache_453.2.dr	false	URL Reputation: safe	unknown
http://i.li.ru/ext/tv.akado.ru/images/data/akadotv/channelimage/image/114226/disney_33.jpg	chromecache_522.2.dr	false		unknown
https://www.liveinternet.ru/users/5859060/post507704634/	chromecache_522.2.dr	false		unknown
https://playhop.com/uk	chromecache_410.2.dr	false		unknown
https://games-sdk.playhop.com/games/api/sdk/v1	chromecache_511.2.dr	false		unknown
http://g.liveinternet.ru/recover.php	chromecache_547.2.dr	false		unknown
https://playhop.com/tr	chromecache_410.2.dr	false		unknown
http://www.3dnews.ru	chromecache_522.2.dr	false		unknown
https://playhop.com/th	chromecache_410.2.dr	false		unknown
https://playhop.com/tk	chromecache_410.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_293.2.dr, chromecache_573.2.dr	false		unknown
https://playhop.com/sr	chromecache_410.2.dr	false		unknown
https://www.liveinternet.ru/openid/server/server.php/idpXrds	chromecache_522.2.dr	false		unknown
http://chat.li.ru/	chromecache_522.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_570.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://playhop.com/sk	chromecache_410.2.dr	false		unknown
https://playhop.com/ro	chromecache_410.2.dr	false		unknown
https://www.liveinternet.ru/users/3903672/post507701724/	chromecache_522.2.dr	false		unknown
https://playhop.com/ru	chromecache_410.2.dr	false		unknown
https://www.liveinternet.ru/users/lomovolga/	chromecache_522.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_573.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_570.2.dr, chromecache_451.2.dr	false		unknown
https://yastatic.net/s3/games-static/favicons/playhop/square/icon-48.png	chromecache_301.2.dr	false		unknown
https://sync.dmp.otm-r.com/match/sape	chromecache_299.2.dr, chromecache_308.2.dr	false		unknown
http://www.liveinternet.ru/app/tv/	chromecache_522.2.dr	false		unknown
https://www.liveinternet.ru/users/lomovolga/profile/	chromecache_522.2.dr	false		unknown
https://top-fwz1.mail.ru/counter?id=3128781;js=na	chromecache_591.2.dr, chromecache_622.2.dr	false		unknown
http://www.twitter.com/	chromecache_317.2.dr, chromecache_471.2.dr	false		unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_585.2.dr, chromecache_526.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/safevalues/issues	chromecache_492.2.dr	false		unknown
https://yastatic.net/s3/games-static/favicons/playhop/square/icon-72.png	chromecache_301.2.dr	false		unknown
https://playhop.com/pl	chromecache_410.2.dr	false		unknown
https://www.liveinternet.ru/users/5293045/profile/	chromecache_522.2.dr	false		unknown
https://playhop.com/pt	chromecache_410.2.dr	false		unknown
https://debug.videonow.ru?&profile_id=5015393&adv_id=8405&category_id=18&user_id=bb9b3146a75f4e236f2	chromecache_299.2.dr, chromecache_308.2.dr	false		unknown
http://www.technohelp.ru	chromecache_522.2.dr	false		unknown
https://g.liveinternet.ru/recover.php	chromecache_522.2.dr	false		unknown
http://doctor.ru/read/402	chromecache_522.2.dr	false		unknown
http://doctor.ru/read/403	chromecache_522.2.dr	false		unknown
http://doctor.ru/read/401	chromecache_522.2.dr	false		unknown
https://cse.google.com/cse.js	chromecache_570.2.dr, chromecache_451.2.dr	false		unknown
https://cdn.ampproject.org/rtv/$	chromecache_570.2.dr, chromecache_451.2.dr	false		unknown
https://www.liveinternet.ru/rating/ru/	chromecache_522.2.dr	false		unknown
https://www.liveinternet.ru/users/5859060/	chromecache_522.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
188.120.241.43	1010--d3bcb62b-1ea6-46d7-9a33-dae17a0d77f4.stbid.ru	Russian Federation	29182	THEFIRST-ASRU	false
193.106.92.202	prodmp.ru	Russian Federation	48614	ITSOFT-ASRU	false
148.153.84.157	lvs-dec-vip2.rtbwave.com	United States	63199	CDSC-AS1US	false
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
213.180.193.248	playhop-sse-prod.yandex.net	Russian Federation	13238	YANDEXRU	false
142.250.74.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
217.199.220.44	kimberlite.io	Russian Federation	31430	TEL-NET-ASRU	false
93.158.134.158	s3.yandex.net	Russian Federation	13238	YANDEXRU	false
213.180.204.36	unknown	Russian Federation	13238	YANDEXRU	false
138.201.160.249	unknown	Germany	24940	HETZNER-ASDE	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
23.109.170.26	enduresopens.com	Netherlands	7979	SERVERS-COMUS	false
95.163.41.56	r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
213.180.193.237	playhop.com	Russian Federation	13238	YANDEXRU	false
23.111.37.244	shopnetic.com	Russian Federation	7979	SERVERS-COMUS	false
195.209.109.18	unknown	Russian Federation	52007	ADRIVER-ASRU	false
88.212.196.115	radio.mediametrics.ru	Russian Federation	39134	UNITEDNETRU	false
188.42.34.64	ssp.ads.betweendigital.com	Luxembourg	7979	SERVERS-COMUS	false
142.250.185.110	www3.l.google.com	United States	15169	GOOGLEUS	false
89.108.119.43	unknown	Russian Federation	43146	AGAVA3RU	false
77.88.21.90	an.yandex.ru	Russian Federation	13238	YANDEXRU	false
81.19.89.18	kraken.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.89.17	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
95.163.52.67	top-fwz1.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
87.250.247.181	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
87.250.250.90	unknown	Russian Federation	13238	YANDEXRU	false
87.250.247.182	unknown	Russian Federation	13238	YANDEXRU	false
23.109.14.90	sync.gonet-ads.com	Netherlands	7979	SERVERS-COMUS	false
87.250.247.183	unknown	Russian Federation	13238	YANDEXRU	false
185.175.47.157	sync.opendsp.ru	Russian Federation	50340	SELECTEL-MSKRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.69.82	sync.adspend.space	United States	13335	CLOUDFLARENETUS	false
88.212.202.52	unknown	Russian Federation	39134	UNITEDNETRU	false
77.88.21.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
47.253.61.56	bid-iad-static.yeahtargeter.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
195.209.109.19	ssp.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
45.9.24.193	balance.segmento.ru	Russian Federation	210053	R5IT-ASRU	false
151.236.71.248	unknown	Russian Federation	57363	CDNVIDEO-ASRU	false
217.65.2.150	match.new-programmatic.com	Russian Federation	3175	CITYTELECOM-MSKRU	false
172.240.127.130	unknown	United States	7979	SERVERS-COMUS	false
195.209.109.24	pb.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
217.66.147.40	unknown	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
84.38.189.213	dsp.mpartner.digital	Russian Federation	49505	SELECTELRU	false
194.190.76.35	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
195.209.109.26	unknown	Russian Federation	52007	ADRIVER-ASRU	false
88.212.202.50	www.liveinternet.ru	Russian Federation	39134	UNITEDNETRU	false
31.172.81.145	sync.bumlam.com	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
52.51.158.7	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
194.55.244.184	ad-ru.p.otm-r.com	unknown	34959	KVIKTEL_LLCRU	false
178.154.131.217	yastatic.net	Russian Federation	13238	YANDEXRU	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
178.154.131.215	unknown	Russian Federation	13238	YANDEXRU	false
138.201.65.66	unknown	Germany	24940	HETZNER-ASDE	false
104.26.7.189	a.utraff.com	United States	13335	CLOUDFLARENETUS	false
31.172.81.147	unknown	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
172.217.18.98	unknown	United States	15169	GOOGLEUS	false
49.12.120.75	svc02.de.viqeo.tv	Germany	24940	HETZNER-ASDE	false
217.66.147.42	sm.rtb.mts.ru	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
194.55.244.195	spx.otm-r.com	unknown	34959	KVIKTEL_LLCRU	false
195.209.109.30	unknown	Russian Federation	52007	ADRIVER-ASRU	false
104.21.94.226	a.lotus-dsp.ru	United States	13335	CLOUDFLARENETUS	false
95.163.52.89	krf.r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
185.65.149.228	3848094281727570692732.cm.a.mts.ru	Russian Federation	197068	QRATORRU	false
217.199.220.72	sync.dsp.solta.io	Russian Federation	31430	TEL-NET-ASRU	false
193.3.184.217	ssp-rtb.sape.ru	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
83.222.115.14	unknown	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
193.3.184.216	unknown	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
37.18.110.198	dmp.sbermarketing.ru	Netherlands	204291	FAVORITBK-ASRU	false
77.88.21.36	unknown	Russian Federation	13238	YANDEXRU	false
193.3.184.7	acint.net	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
195.201.198.232	unknown	Germany	24940	HETZNER-ASDE	false
185.15.175.130	unknown	Russian Federation	43226	SAFEDATAUplinksRU	false
212.76.131.37	stats2.videonow.ru	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
142.250.186.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
23.111.217.124	content.adriver.ru	Russian Federation	7979	SERVERS-COMUS	false
185.15.175.132	dmg.digitaltarget.ru	Russian Federation	43226	SAFEDATAUplinksRU	false
213.180.193.90	unknown	Russian Federation	13238	YANDEXRU	false
54.72.48.144	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.132.138.212	www.acint.net	Canada	22686	UNIVERSITYOFWINNIPEG-ASNCA	false
66.102.1.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
193.232.150.61	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
93.158.134.118	matchid-production.adfox.yandex.ru	Russian Federation	13238	YANDEXRU	false
87.250.251.119	unknown	Russian Federation	13238	YANDEXRU	false
31.220.27.134	s.uuidksinc.net	Netherlands	39572	ADVANCEDHOSTERS-ASNL	false
142.250.184.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.30.160.207	unknown	United States	16509	AMAZON-02US	false
195.201.194.16	unknown	Germany	24940	HETZNER-ASDE	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
185.149.242.234	unknown	Russian Federation	49505	SELECTELRU	false
35.177.4.157	px.arcspire.io	United States	16509	AMAZON-02US	false
185.149.242.236	cmr.bidderstack.com	Russian Federation	49505	SELECTELRU	false
52.16.205.161	unknown	United States	16509	AMAZON-02US	false
212.76.131.50	sync.videonow.ru	Russian Federation	42632	MNOGOBYTE-ASMoscowRussiaRU	false
87.250.250.58	avatars-proxy.playhop.com	Russian Federation	13238	YANDEXRU	false
104.21.38.221	www.goo.su	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521723
Start date and time:	2024-09-29 02:43:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.goo.su/c1Rnox/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@35/551@468/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.liveinternet.ru/click

Input	Output
URL: https://www.goo.su/c1Rnox/ Model: jbxai	{ "brand":["playhop.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Find out more", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.goo.su/c1Rnox/ Model: jbxai	{ "brand":["X"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://playhop.com/?clid=4446395&k50id=0100000052717834411_52717834411&yclid=1850220880566943743 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":["LivInternet"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://playhop.com/?clid=4446395&utm_medium=rsya&utm_source=yandex&utm_campaign=en_all_playhop_y_rsya_general_video_desk_tier_main_usa_EPK_wide_int460_06.08\|113461274&utm_content=k50id\|0100000052717834411_52717834411\|cid\|113461274\|gid\|5479291355\|aid\|1639 Model: jbxai	{ "brand":["Stard", "Granny"], "contains_trigger_text":true, "trigger_text":"Click here to view document", "prominent_button_name":"Sign in", "text_input_field_labels":["Email", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://playhop.com/?clid=4446395&utm_medium=rsya&utm_source=yandex&utm_campaign=en_all_playhop_y_rsya_general_video_desk_tier_main_usa_EPK_wide_int460_06.08\|113461274&utm_content=k50id\|0100000052717834411_52717834411\|cid\|113461274\|gid\|5479291355\|aid\|1639 Model: jbxai	{ "phishing_score":8, "brands":"Stard", "legit_domain":"stard.com", "classification":"unknown", "reasons":["The brand 'Stard' is not well-known or commonly recognized.", "The URL 'playhop.com' does not match the brand 'Stard'.", "The domain 'playhop.com' does not contain any elements that directly associate it with 'Stard'.", "The presence of input fields for email and password on an unrelated domain is suspicious."], "brand_matches":[false], "url_match":true, "brand_input":"Stard", "input_fields":"Email, Password"}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":["LiveInternet"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":["LiveInternet"], "contains_trigger_text":true, "trigger_text":"Play with your friends. Just try now.", "prominent_button_name":"unknown", "text_input_field_labels":["USD U - 89, 10 .", "EUR U - 95, 62 ."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":["LiveInternet"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.liveinternet.ru/ Model: jbxai	{ "brand":["LiveInternet"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://playhop.com/?clid=4446395&utm_medium=rsya&utm_source=yandex&utm_campaign=en_all_playhop_y_rsya_general_video_desk_tier_main_usa_EPK_wide_int460_06.08\|113461274&utm_content=k50id\|0100000052717834411_52717834411\|cid\|113461274\|gid\|5479291355\|aid\|1639 Model: jbxai	{ "brand":["LiveInternet"], "contains_trigger_text":true, "trigger_text":"VIEW SHARED FILE", "prominent_button_name":"unknown", "text_input_field_labels":["EUR", "USD"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.goo.su/c1Rnox/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Windows Analysis Report
http://www.goo.su/c1Rnox/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 23:44:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9796612220828926
Encrypted:	false
SSDEEP:	48:8jdzT7rnHiZidAKZdA19ehwiZUklqehEJy+3:85DCr/y
MD5:	A2810ADD73A887056FD095D346AF6807
SHA1:	ECA4E21E4239BB378878955D9D9B056DBD4B926A
SHA-256:	F9FD8C1AF284E0B5B4A1C917BCF08D91063907CF12D5B3E34A6DAB02DFF4EB50
SHA-512:	8440FF2A979E37C5726A4D977BA186A5926839EB8F6946F5B6E7DA0B2F9C2E6FA5C5F555F9D1244D9E253DB1162C93DC77AECC439B7484B9CB8D7538BD5DDF95
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....A{.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........9M.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:37 UTC	660	OUT	GET /c1Rnox/ HTTP/1.1 Host: www.goo.su Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:38 UTC	1195	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:44:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.2.13 Cache-Control: no-cache, private pragma: no-cache expires: -1 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVFT0R4dzVMVlpKTmsySDIwSWZsNVE9PSIsInZhbHVlIjoicHQzS1k1Q3BuSVU2STZEait5WXk5c2VWZ1JqRTBqQWErOHpLRG1DTnVVQWFMUVhoQWMrdmtlSUpGSm9vY0NTZzJPeWJBMmErV0ExQW9EVFEwTjB2RnJ0NGtvdmJ3UGpPZUNpeWwyOVNhTXNDVy9BRlBRY1lnVDJUc1VQQ2t5NDIiLCJtYWMiOiI0ZGYyMGU0MGFhOWEzZjQ5YjZkZDVjMzhmNTBiN2ZlYzY2ZTcwN2Y5NTNhNTY5Njg4NzI3OTIxOWU1OWViOGU4IiwidGFnIjoiIn0%3D; expires=Sun, 29 Sep 2024 19:24:38 GMT; Max-Age=67200; path=/; secure; samesite=lax Set-Cookie: goosu_session=eyJpdiI6IjUzM3k5b09yelFPSndxZk1WZmxUN2c9PSIsInZhbHVlIjoiemJ5b25ycDV1U2p6WUF6QklMSDh5cS8xRlNLc2V2WHMyU3NuWVRSenphUkRrSXdYanhRWUlXK0N3V3BWRzFEeUF6ZEl5TkYzT1dHOSs0aUhkdlI1N3BveWQrSzM4K3c3Rmh3L1N0NDFNMXQ5b1NFU1JBb1doVGpKeTZLUElSNysiLCJtYWMiOiI0NWVhODc2NmU1M2M5YzNlNzMzZTlhNTNhNGQzNWNhNTcyZjI3MmIzN2ZjMDg3ZjZmOTVkMzdhYTU4OGNmMzU3IiwidGFnIjoiIn0%3D; expires=Sun, 29 Sep 2024 19:24:38 GMT; Max-Age=67200; path=/; httponly; samesite=lax CF-Cache-Status: DYNAMIC
2024-09-29 00:44:38 UTC	408	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 42 63 53 33 38 42 6e 39 53 78 77 51 41 57 6e 70 68 46 62 6e 61 7a 4a 65 54 73 25 32 42 42 73 48 38 36 62 77 44 74 78 66 64 36 74 4f 42 61 71 51 51 32 51 35 42 62 5a 36 57 67 55 58 43 62 38 69 6d 33 58 61 51 71 42 76 7a 7a 33 63 69 79 71 72 55 35 47 59 73 38 6f 37 53 76 6c 71 33 4e 71 71 54 54 64 30 6d 35 33 61 44 42 65 6b 59 77 25 32 46 32 6b 37 4e 6d 48 32 36 32 62 30 48 34 67 52 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c 3a 20 7b 22 73 75 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcS38Bn9SxwQAWnphFbnazJeTs%2BBsH86bwDtxfd6tOBaqQQ2Q5BbZ6WgUXCb8im3XaQqBvzz3ciyqrU5GYs8o7Svlq3NqqTTd0m53aDBekYw%2F2k7NmH262b0H4gR"}],"group":"cf-nel","max_age":604800}NEL: {"su
2024-09-29 00:44:38 UTC	1369	IN	Data Raw: 31 62 35 66 0d 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 20 22 2f 22 3b 0a 20 20 20 20 7d 2c 20 33 36 30 30 30 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 Data Ascii: 1b5f<script> setTimeout(function() { window.location.href= "/"; }, 36000);</script><!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Not Found</ti
2024-09-29 00:44:38 UTC	1369	IN	Data Raw: 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 3e 0a 3c 64 69 76 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 61 73 79 6e 63 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 65 6e 64 75 72 65 73 6f 70 65 6e 73 2e 63 6f 6d 2f 74 74 6b 58 49 76 75 6e 6f 64 59 2f 36 39 34 38 39 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 2d 63 65 6e 74 65 72 20 70 6f 73 69 74 69 6f 6e 2d 72 65 66 20 66 75 6c 6c 2d 68 65 69 67 68 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 64 65 22 3e 0a 34 30 34 20 3c 2f 64 69 76 3e 0a 3c 64 69 Data Ascii: } </style></head><body><div><div><script data-cfasync="false" async type="text/javascript" src="//enduresopens.com/ttkXIvunodY/69489"></script></div></div><div class="flex-center position-ref full-height"><div class="code">404 </div><di
2024-09-29 00:44:38 UTC	1369	IN	Data Raw: 6e 66 69 67 27 2c 20 27 55 41 2d 31 34 34 36 36 31 34 30 35 2d 31 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 6c 69 76 65 69 6e 74 65 72 6e 65 74 2e 72 75 2f 63 6c 69 63 6b 22 20 27 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 63 6f 75 6e 74 65 Data Ascii: nfig', 'UA-144661405-1'); </script><div class="text-center"><script type="text/javascript"> document.write('<a href="//www.liveinternet.ru/click" '+ 'target="_blank"><img src="//counte
2024-09-29 00:44:38 UTC	1369	IN	Data Raw: 20 7d 20 63 61 74 63 68 28 65 29 20 7b 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 Data Ascii: } catch(e) { } }); var n = d.getElementsByTagName("script")[0], s = d.createElement("script"), f = function () { n.parentNode.insertBe
2024-09-29 00:44:38 UTC	1369	IN	Data Raw: 79 6d 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 79 6d 28 35 34 31 34 30 31 37 30 2c 20 22 69 6e 69 74 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 6d 61 70 3a 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 63 6b 4c 69 6e 6b 73 3a 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 75 72 61 74 65 54 72 61 63 6b 42 6f 75 6e 63 65 3a 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 65 62 76 69 73 6f 72 3a 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ym"); ym(54140170, "init", { clickmap:true, trackLinks:true, accurateTrackBounce:true, webvisor:true
2024-09-29 00:44:38 UTC	170	IN	Data Raw: 63 6f 75 6e 74 65 72 3f 69 64 3d 33 31 32 38 37 38 31 3b 6a 73 3d 6e 61 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 22 20 61 6c 74 3d 22 54 6f 70 2e 4d 61 69 6c 2e 52 75 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: counter?id=3128781;js=na" style="border:0;position:absolute;left:-9999px;" alt="Top.Mail.Ru" /> </div></noscript></div></div></body></html>
2024-09-29 00:44:38 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-09-29 00:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:38 UTC	519	OUT	OPTIONS /report/v4?s=BcS38Bn9SxwQAWnphFbnazJeTs%2BBsH86bwDtxfd6tOBaqQQ2Q5BbZ6WgUXCb8im3XaQqBvzz3ciyqrU5GYs8o7Svlq3NqqTTd0m53aDBekYw%2F2k7NmH262b0H4gR HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.goo.su Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:39 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sun, 29 Sep 2024 00:44:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:39 UTC	466	OUT	POST /report/v4?s=BcS38Bn9SxwQAWnphFbnazJeTs%2BBsH86bwDtxfd6tOBaqQQ2Q5BbZ6WgUXCb8im3XaQqBvzz3ciyqrU5GYs8o7Svlq3NqqTTd0m53aDBekYw%2F2k7NmH262b0H4gR HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 388 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:39 UTC	388	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 31 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 38 2e 32 32 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 2e 73 75 2f 63 31 52 6e Data Ascii: [{"age":0,"body":{"elapsed_time":1115,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.38.221","status_code":404,"type":"http.error"},"type":"network-error","url":"https://www.goo.su/c1Rn
2024-09-29 00:44:39 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 29 Sep 2024 00:44:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:40 UTC	527	OUT	GET /ttkXIvunodY/69489 HTTP/1.1 Host: enduresopens.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.goo.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:40 UTC	1402	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:44:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.goo.su Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires Access-Control-Max-Age: 600 Access-Control-Allow-Methods: GET, POST, OPTIONS X-Frame-Options: SAMEORIGIN Set-Cookie: GL_UI4=eJw9jd1Og0AUhPmn1YJOwgP4CEBtiZfGh%2BglOeweKBZ2m2WF%2BPZuTPRqvky%2ByXieFxRP8Ndkj%2FCLTnip67oqBTXHrq%2Bor1nUTIKbV3o7Mx9PZ%2BzHpbXUTWwj7JaZjG3tGuEwsGIzilZoyRmenfXX3JTeVIS4M6Rkhnh2xpQh7YzeFjZFiEjRzEg%2Brka7jGf61AZhVTWOR%2BXYLxHopQjzB6SXUUk3zA8IqjLPEw%2BP94lsr83cjjLxEQ%2BGJMN%2Fx06Q5UGbb6SSl5vVd0BPsv33f3%2FDrSqRSF5H4c61vbL5AbYXTuA%3D; expires=Mon, 30-Sep-2024 00:44:40 GMT; Max-Age=86400; path=/; secure; SameSite=None Set-Cookie: GL_GI10=eJwNy0EKwjAQBdDMINVSFT72AD1BQCPivlvppnTRpbShhMIkJFHx9vr2TynF9R7sAqq7vt70%2BWK0MaAFPPTgSXAYxGU7N31%2BZptAEdyN4CjYdfbTjD6uoOlYghyq1kp%2Bxe%2FDyQqWhLL1Mfj4n6BQKHD22w04zbUCvYvTDwanHT8%3D; expires=Mon, 30-Sep-2024 00:44:40 GMT; Max-Age=86400; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff
2024-09-29 00:44:40 UTC	14982	IN	Data Raw: 66 62 34 30 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 33 36 34 35 3a 6e 3d 3e 7b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 74 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 61 74 28 74 5b 32 5d 2c 22 20 7b 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 7d 22 29 3a 65 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 74 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 Data Ascii: fb40;(function(){(()=>{"use strict";var n={3645:n=>{n.exports=function(n){var t=[];return t.toString=function(){return this.map((function(t){var e=n(t);return t[2]?"@media ".concat(t[2]," {").concat(e,"}"):e})).join("")},t.i=function(n,e,o){"string"==ty
2024-09-29 00:44:40 UTC	16384	IN	Data Raw: 3d 65 2c 65 2e 24 3d 6f 2e 24 2c 65 2e 70 3d 6f 2e 70 2c 65 2e 70 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 28 6e 2e 5f 3d 65 29 7d 29 29 2c 64 2e 4f 2e 6c 65 6e 67 74 68 26 26 73 2e 70 75 73 68 28 64 29 3b 62 72 65 61 6b 20 6e 7d 6e 75 6c 6c 21 3d 64 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 26 26 64 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 28 78 2c 64 2e 52 2c 6b 29 2c 6e 75 6c 6c 21 3d 64 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 26 26 64 2e 4f 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 67 2c 76 2c 70 29 7d 29 29 7d 64 2e 63 6f 6e 74 65 78 74 3d 6b 2c 64 2e 70 72 6f 70 73 3d 78 2c 64 2e 73 74 61 Data Ascii: =e,e.$=o.$,e.p=o.p,e.p.forEach((function(n){n&&(n._=e)})),d.O.length&&s.push(d);break n}null!=d.componentWillUpdate&&d.componentWillUpdate(x,d.R,k),null!=d.componentDidUpdate&&d.O.push((function(){d.componentDidUpdate(g,v,p)}))}d.context=k,d.props=x,d.sta
2024-09-29 00:44:40 UTC	16384	IN	Data Raw: 65 3a 27 6c 65 66 74 27 2c 73 6c 69 64 65 72 41 6c 69 67 6e 3a 27 74 6f 70 27 7d 2c 7b 73 6c 69 64 65 72 53 69 64 65 3a 27 74 6f 70 27 2c 73 6c 69 64 65 72 41 6c 69 67 6e 3a 27 63 65 6e 74 65 72 27 7d 5d 2c 6a 74 3d 7b 72 69 67 68 74 3a 7b 74 6f 70 3a 30 2c 63 65 6e 74 65 72 3a 31 2c 62 6f 74 74 6f 6d 3a 32 7d 2c 62 6f 74 74 6f 6d 3a 7b 63 65 6e 74 65 72 3a 33 7d 2c 6c 65 66 74 3a 7b 62 6f 74 74 6f 6d 3a 34 2c 63 65 6e 74 65 72 3a 35 2c 74 6f 70 3a 36 7d 2c 74 6f 70 3a 7b 63 65 6e 74 65 72 3a 37 7d 7d 2c 41 74 3d 6e 3d 3e 54 74 5b 6e 5d 2c 4d 74 3d 5b 5b 36 2c 37 5d 2c 5b 5d 2c 5b 30 2c 31 5d 2c 5b 34 2c 32 5d 2c 5b 33 2c 32 5d 2c 5b 5d 2c 5b 37 2c 30 5d 2c 5b 36 2c 30 5d 5d 2c 52 74 3d 5b 5b 32 2c 34 2c 33 2c 35 2c 31 2c 36 2c 37 5d 2c 5b 34 2c 35 2c 33 Data Ascii: e:'left',sliderAlign:'top'},{sliderSide:'top',sliderAlign:'center'}],jt={right:{top:0,center:1,bottom:2},bottom:{center:3},left:{bottom:4,center:5,top:6},top:{center:7}},At=n=>Tt[n],Mt=[[6,7],[],[0,1],[4,2],[3,2],[],[7,0],[6,0]],Rt=[[2,4,3,5,1,6,7],[4,5,3
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 29 2e 74 68 65 6e 28 28 6e 3d 3e 7b 69 66 28 6e 5b 30 5d 29 72 65 74 75 72 6e 20 6e 5b 30 5d 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 6e 66 27 29 7d 29 29 2c 74 6f 3d 6e 3d 3e 7b 63 6f 6e 73 74 20 74 3d 71 28 28 28 29 3d 3e 48 65 28 6e 29 29 2c 5b 6e 5d 29 2c 65 3d 58 28 28 74 3d 3e 7b 74 26 26 7a 6e 28 6e 2c 74 29 7d 29 2c 5b 6e 5d 29 2c 6f 3d 58 28 28 28 6e 2c 74 29 3d 3e 7b 65 28 7b 77 69 64 74 68 3a 6e 2c 68 65 69 67 68 74 3a 74 7d 29 7d 29 2c 5b 6e 5d 29 2c 69 3d 58 28 28 28 29 3d 3e 6f 28 27 30 27 2c 27 30 27 29 29 2c 5b 6e 5d 29 3b 72 65 74 75 72 6e 7b 73 68 6f 77 49 66 72 61 6d 65 3a 6f 2c 68 69 64 65 49 66 72 61 6d 65 3a 69 2c 61 70 70 6c 79 53 74 79 6c 65 4f 6e 49 66 72 61 6d 65 3a 65 2c 69 66 72 61 6d 65 44 6f 63 75 6d 65 6e 74 3a Data Ascii: ).then((n=>{if(n[0])return n[0];throw new Error('nf')})),to=n=>{const t=q((()=>He(n)),[n]),e=X((t=>{t&&zn(n,t)}),[n]),o=X(((n,t)=>{e({width:n,height:t})}),[n]),i=X((()=>o('0','0')),[n]);return{showIframe:o,hideIframe:i,applyStyleOnIframe:e,iframeDocument:
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 72 6d 69 5c 22 3a 5c 22 34 70 70 6f 63 3a 5c 5c 2f 5c 5c 2f 66 30 6c 72 6d 66 63 36 6f 66 30 63 2e 64 36 6a 5c 5c 2f 6a 70 30 5c 5c 2f 76 67 77 37 67 5c 5c 2f 61 6c 61 61 65 68 66 76 66 71 77 37 65 62 62 67 64 64 62 6b 35 38 35 71 33 66 38 38 37 6b 35 37 2e 67 68 37 68 62 68 38 77 65 38 2e 62 35 38 5c 22 2c 5c 22 64 36 30 70 71 31 30 66 6d 5c 22 3a 7b 5c 22 75 6d 31 6c 63 5c 22 3a 7b 5c 22 35 58 65 5c 22 3a 35 38 38 2c 5c 22 65 58 35 5c 22 3a 65 35 38 7d 2c 5c 22 31 63 5f 33 69 72 31 6c 5c 22 3a 70 6d 72 66 7d 2c 5c 22 70 66 71 63 66 6d 5c 22 3a 7b 5c 22 70 74 6f 66 5c 0d 0a 62 66 65 33 0d 0a 22 3a 5c 22 32 66 6d 70 31 64 71 69 5c 22 2c 5c 22 6a 36 6c 66 69 5c 22 3a 5c 22 6a 31 30 6a 71 78 5c 22 2c 5c 22 6e 31 6c 70 34 5c 22 3a 65 38 38 2c 5c 22 75 72 70 Data Ascii: rmi\":\"4ppoc:\\/\\/f0lrmfc6of0c.d6j\\/jp0\\/vgw7g\\/alaaehfvfqw7ebbgddbk585q3f887k57.gh7hbh8we8.b58\",\"d60pq10fm\":{\"um1lc\":{\"5Xe\":588,\"eX5\":e58},\"1c_3ir1l\":pmrf},\"pfqcfm\":{\"ptof\bfe3":\"2fmp1dqi\",\"j6lfi\":\"j10jqx\",\"n1lp4\":e88,\"urp
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 78 30 2c 30 78 31 5d 2c 5b 30 78 34 2c 30 78 32 5d 2c 5b 30 78 33 2c 30 78 32 5d 2c 5b 5d 2c 5b 30 78 37 2c 30 78 30 5d 2c 5b 30 78 36 2c 30 78 30 5d 5d 2c 49 44 3d 5b 5b 30 78 32 2c 30 78 34 2c 30 78 33 2c 30 78 35 2c 30 78 31 2c 30 78 36 2c 30 78 37 5d 2c 5b 30 78 34 2c 30 78 35 2c 30 78 33 2c 30 78 36 2c 30 78 32 5d 2c 5b 30 78 30 2c 30 78 37 2c 30 78 36 2c 30 78 35 2c 30 78 31 2c 30 78 34 5d 2c 5b 30 78 37 2c 30 78 36 2c 30 78 30 2c 30 78 35 2c 30 78 31 5d 2c 5b 30 78 36 2c 30 78 37 2c 30 78 30 2c 30 78 31 2c 30 78 32 2c 30 78 35 5d 2c 5b 30 78 30 2c 30 78 31 2c 30 78 32 2c 30 78 37 2c 30 78 33 5d 2c 5b 30 78 34 2c 30 78 33 2c 30 78 32 2c 30 78 31 2c 30 78 35 2c 30 78 30 5d 2c 5b 30 78 33 2c 30 78 32 2c 30 78 34 2c 30 78 35 2c 30 78 31 2c 30 78 30 5d Data Ascii: x0,0x1],[0x4,0x2],[0x3,0x2],[],[0x7,0x0],[0x6,0x0]],ID=[[0x2,0x4,0x3,0x5,0x1,0x6,0x7],[0x4,0x5,0x3,0x6,0x2],[0x0,0x7,0x6,0x5,0x1,0x4],[0x7,0x6,0x0,0x5,0x1],[0x6,0x7,0x0,0x1,0x2,0x5],[0x0,0x1,0x2,0x7,0x3],[0x4,0x3,0x2,0x1,0x5,0x0],[0x3,0x2,0x4,0x5,0x1,0x0]

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:41 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:44:41 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=144021 Date: Sun, 29 Sep 2024 00:44:41 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:41 UTC	520	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.goo.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:41 UTC	1166	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 201876 Content-Type: application/javascript Date: Sun, 29 Sep 2024 00:44:41 GMT ETag: "66f443dc-31494" Expires: Sun, 29 Sep 2024 01:44:41 GMT Last-Modified: Wed, 25 Sep 2024 17:09:48 GMT Set-Cookie: i=9F4WH3vTenR4eDj8YjnKZVfzdEVCoGgAtz6W5InV97V60n8QDWAtzVWWfWKKZyHUQVaTkOM2HsCLUDJKgHVE99aJRx0=; Expires=Tue, 29-Sep-2026 00:44:41 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2720445101727570681; Expires=Tue, 29-Sep-2026 00:44:41 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=3579209181727570681; Path=/; Domain=.yandex.ru; Expires=Mon, 29 Sep 2025 00:44:41 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-09-29 00:44:41 UTC	2433	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4f 65 28 61 2c 63 2c 62 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 28 77 69 6e 64 6f 77 2c 22 63 2e 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 43 29 7b 28 43 3d 50 65 28 6c 2c 6d 2c 22 22 2c 43 29 28 6c 2c 6d 29 29 26 26 28 5a 28 43 2e 74 68 65 6e 29 3f 43 2e 74 68 65 6e 28 67 29 3a 67 28 43 29 29 3b 72 65 74 75 72 6e 20 43 7d 66 75 6e 63 74 69 6f 6e 20 67 28 43 29 7b 43 26 26 28 5a 28 43 29 3f 70 2e 70 75 73 68 28 43 29 3a 6f 61 28 43 29 26 26 78 28 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 76 61 72 20 4d 3d 4e 5b 30 5d 3b 4e 3d 4e 5b 31 5d 3b 5a 28 4e 29 26 26 28 22 75 22 3d 3d 3d 4d Data Ascii: (function(){try{(function(){function Oe(a,c,b,d){var e=this;return A(window,"c.i",function(){function f(C){(C=Pe(l,m,"",C)(l,m))&&(Z(C.then)?C.then(g):g(C));return C}function g(C){C&&(Z(C)?p.push(C):oa(C)&&x(function(N){var M=N[0];N=N[1];Z(N)&&("u"===M
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 5d 3b 76 61 72 20 64 3d 22 61 75 63 74 69 6f 6e 49 6e 69 74 22 3d 3d 3d 61 2c 65 3d 22 61 75 63 74 69 6f 6e 45 6e 64 22 3d 3d 3d 61 2c 66 3d 22 61 64 52 65 6e 64 65 72 46 61 69 6c 65 64 22 3d 3d 3d 61 7c 7c 22 61 64 52 65 6e 64 65 72 53 75 63 63 65 65 64 65 64 22 3d 3d 3d 61 3b 66 7c 7c 62 2e 52 63 26 26 21 64 7c 7c 28 62 2e 52 63 3d 6e 28 63 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 29 7c 7c 76 6f 69 64 20 30 2c 21 62 2e 52 63 26 26 0a 64 26 26 28 62 2e 52 63 3d 63 2e 74 69 6d 65 73 74 61 6d 70 29 29 3b 76 61 72 20 67 3d 45 28 5b 61 2c 62 5d 2c 4c 6c 29 3b 22 62 69 64 52 65 71 75 65 73 74 65 64 22 3d 3d 3d 61 3f 78 28 67 2c 63 2e 62 69 64 73 29 3a 66 3f 4d 6c 28 61 2c 62 2c 63 29 3a 65 3f 28 62 2e 4f 65 3d 63 2e 61 75 63 74 69 6f 6e 45 6e 64 7c 7c 63 Data Ascii: ];var d="auctionInit"===a,e="auctionEnd"===a,f="adRenderFailed"===a\|\|"adRenderSucceeded"===a;f\|\|b.Rc&&!d\|\|(b.Rc=n(c,"auctionStart")\|\|void 0,!b.Rc&&d&&(b.Rc=c.timestamp));var g=E([a,b],Ll);"bidRequested"===a?x(g,c.bids):f?Ml(a,b,c):e?(b.Oe=c.auctionEnd\|\|c
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 7b 4f 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 62 29 7b 76 61 72 20 64 3d 63 2e 4b 3b 69 66 28 64 29 7b 76 61 72 20 65 3d 47 28 61 29 2e 43 28 22 61 64 42 6c 6f 63 6b 45 6e 61 62 6c 65 64 22 29 3b 65 26 26 64 2e 44 28 22 61 64 62 22 2c 65 29 7d 62 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 6d 28 61 29 7b 76 61 72 20 63 3d 0a 41 28 61 2c 22 69 2e 63 6c 63 68 22 2c 41 6d 29 3b 6b 61 28 61 29 2e 46 28 61 2e 64 6f 63 75 6d 65 6e 74 2c 5b 22 63 6c 69 63 6b 22 5d 2c 76 28 61 2c 63 29 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 64 3d 76 61 2e 4e 61 2c 65 3d 61 2e 59 61 5b 76 61 2e 24 62 5d 2c 66 3d 21 21 65 2e 5f 69 6e 66 6f 72 6d 65 72 3b 65 2e 5f 69 6e 66 6f 72 6d 65 Data Ascii: a){return{O:function(c,b){var d=c.K;if(d){var e=G(a).C("adBlockEnabled");e&&d.D("adb",e)}b()}}}function zm(a){var c=A(a,"i.clch",Am);ka(a).F(a.document,["click"],v(a,c),{passive:!1});return function(b){var d=va.Na,e=a.Ya[va.$b],f=!!e._informer;e._informe
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 74 22 3d 3d 3d 74 79 70 65 6f 66 20 43 26 26 64 6e 2e 74 65 73 74 28 22 22 2b 43 29 29 79 5b 68 5d 3d 43 2c 79 2e 73 75 62 6d 69 74 3d 41 28 61 2c 22 66 76 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4e 3d 7b 74 61 72 67 65 74 3a 79 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 7d 3b 0a 6d 28 22 64 6f 63 75 6d 65 6e 74 22 29 28 4e 29 3b 72 65 74 75 72 6e 20 79 5b 68 5d 28 29 7d 29 7d 2c 6b 29 7d 29 2c 71 3d 41 28 61 2c 22 75 66 76 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 78 28 79 61 2c 66 29 3b 78 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 26 26 28 72 2e 73 75 62 6d 69 74 3d 72 5b 68 5d 29 7d 2c 6b 29 3b 63 2e 66 6c 75 73 68 28 29 7d 29 3b 72 65 74 75 72 6e 7b 73 74 61 72 74 3a 70 2c 73 74 6f 70 3a 71 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 61 2c 63 29 Data Ascii: t"===typeof C&&dn.test(""+C))y[h]=C,y.submit=A(a,"fv",function(){var N={target:y,type:"submit"};m("document")(N);return y[h]()})},k)}),q=A(a,"ufv",function(){x(ya,f);x(function(r){r&&(r.submit=r[h])},k);c.flush()});return{start:p,stop:q}}function en(a,c)
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 61 74 68 2e 70 6f 77 28 32 2c 2d 66 29 2a 38 33 38 38 36 30 38 29 26 38 33 38 38 36 30 37 29 3e 3e 3e 30 2c 62 2c 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 64 28 61 2c 63 2c 62 29 7b 63 5b 62 5d 3d 0a 61 26 32 35 35 3b 63 5b 62 2b 31 5d 3d 61 3e 3e 3e 38 26 32 35 35 3b 63 5b 62 2b 32 5d 3d 61 3e 3e 3e 31 36 26 32 35 35 3b 63 5b 62 2b 33 5d 3d 61 3e 3e 3e 32 34 7d 66 75 6e 63 74 69 6f 6e 20 62 69 28 61 2c 63 2c 62 2c 64 29 7b 61 3d 63 5b 30 5d 3b 66 6f 72 28 63 3d 63 5b 31 5d 3b 61 3b 29 62 5b 64 2b 2b 5d 3d 63 26 31 32 37 7c 31 32 38 2c 63 3d 28 63 3e 3e 3e 37 7c 61 3c 3c 32 35 29 3e 3e 3e 30 2c 61 3e 3e 3e 3d 37 3b 66 6f 72 28 3b 31 32 37 3c 63 3b 29 62 5b 64 2b 2b 5d 3d 63 26 31 32 37 7c 31 32 38 2c 63 3e 3e 3e 3d 37 3b 62 5b 64 2b 2b 5d 3d 63 7d 66 75 Data Ascii: ath.pow(2,-f)*8388608)&8388607)>>>0,b,d)}}function jd(a,c,b){c[b]=a&255;c[b+1]=a>>>8&255;c[b+2]=a>>>16&255;c[b+3]=a>>>24}function bi(a,c,b,d){a=c[0];for(c=c[1];a;)b[d++]=c&127\|128,c=(c>>>7\|a<<25)>>>0,a>>>=7;for(;127<c;)b[d++]=c&127\|128,c>>>=7;b[d++]=c}fu
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 61 28 6c 29 26 26 22 65 76 65 6e 74 22 3d 3d 3d 68 29 29 7b 68 3d 75 66 28 6b 2c 6c 29 3b 62 72 65 61 6b 20 61 7d 68 3d 76 6f 69 64 20 30 7d 69 66 28 64 3d 68 7c 7c 4d 6f 28 64 29 29 6d 62 28 61 2c 28 65 3d 7b 7d 2c 65 2e 63 6f 75 6e 74 65 72 4b 65 79 3d 0a 63 2c 65 2e 6e 61 6d 65 3d 22 65 63 6f 6d 6d 65 72 63 65 22 2c 65 2e 64 61 74 61 3d 64 2c 65 29 29 2c 62 28 28 66 3d 7b 7d 2c 66 2e 5f 5f 79 6d 3d 28 67 3d 7b 7d 2c 67 2e 65 63 6f 6d 6d 65 72 63 65 3d 5b 64 5d 2c 67 29 2c 66 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 6f 28 61 29 7b 76 61 72 20 63 3d 6e 28 61 2c 22 65 63 6f 6d 6d 65 72 63 65 22 29 3b 69 66 28 6f 61 28 63 29 29 72 65 74 75 72 6e 20 61 3d 68 61 28 6a 63 28 4e 6f 29 2c 65 61 28 63 29 29 2c 61 3d 4f 28 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 Data Ascii: a(l)&&"event"===h)){h=uf(k,l);break a}h=void 0}if(d=h\|\|Mo(d))mb(a,(e={},e.counterKey=c,e.name="ecommerce",e.data=d,e)),b((f={},f.__ym=(g={},g.ecommerce=[d],g),f))}}function Mo(a){var c=n(a,"ecommerce");if(oa(c))return a=ha(jc(No),ea(c)),a=O(function(b,d)
2024-09-29 00:44:41 UTC	8168	IN	Data Raw: 4a 69 28 61 2c 63 2c 62 29 7b 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 30 29 3b 63 3d 45 61 28 63 29 3b 63 3d 4f 28 66 75 6e 63 74 69 6f 6e 28 64 2c 0a 65 29 7b 76 61 72 20 66 3d 65 5b 30 5d 2c 67 3d 65 5b 31 5d 2c 68 3d 6f 61 28 67 29 3b 69 66 28 21 68 26 26 28 65 63 28 61 2c 67 29 26 26 28 67 3d 22 22 2b 67 29 2c 21 66 61 28 67 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 68 29 67 3d 4a 69 28 61 2c 67 2c 62 2b 31 29 3b 65 6c 73 65 20 69 66 28 21 62 26 26 48 28 66 2c 6c 70 29 29 67 3d 4b 2e 72 65 73 6f 6c 76 65 28 67 29 3b 65 6c 73 65 7b 22 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 3d 3d 3d 66 3f 67 3d 71 68 28 61 2c 67 29 3a 22 65 6d 61 69 6c 22 3d 3d 3d 66 26 26 28 67 3d 70 68 28 67 29 29 3b 69 66 28 21 67 29 72 65 74 75 72 6e 20 64 3b 67 3d 4b 69 28 Data Ascii: Ji(a,c,b){void 0===b&&(b=0);c=Ea(c);c=O(function(d,e){var f=e[0],g=e[1],h=oa(g);if(!h&&(ec(a,g)&&(g=""+g),!fa(g)))return d;if(h)g=Ji(a,g,b+1);else if(!b&&H(f,lp))g=K.resolve(g);else{"phone_number"===f?g=qh(a,g):"email"===f&&(g=ph(g));if(!g)return d;g=Ki(
2024-09-29 00:44:42 UTC	8168	IN	Data Raw: 29 6d 3d 21 30 3b 6d 26 26 21 63 2e 52 61 26 26 28 65 2e 44 28 64 2c 0a 68 2c 35 32 35 36 30 30 2c 62 29 2c 65 2e 44 28 22 64 22 2c 22 22 2b 67 2c 35 32 35 36 30 30 2c 62 29 29 3b 66 2e 44 28 64 2c 68 29 3b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 4d 70 28 61 2c 63 29 7b 72 65 74 75 72 6e 21 63 2e 52 61 26 26 57 69 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 56 69 28 61 2c 63 29 7b 76 61 72 20 62 3d 55 61 28 61 29 2c 64 3d 47 63 28 61 29 2c 65 3d 63 2e 53 64 7c 7c 22 75 69 64 22 3b 72 65 74 75 72 6e 5b 62 2e 43 28 65 29 2c 64 2e 43 28 65 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 63 28 61 29 7b 76 61 72 20 63 3d 47 28 61 29 2c 62 3d 63 2e 43 28 22 68 69 74 49 64 22 29 3b 62 7c 7c 28 62 3d 52 61 28 61 29 2c 63 2e 44 28 22 68 69 74 49 64 22 2c 62 Data Ascii: )m=!0;m&&!c.Ra&&(e.D(d,h,525600,b),e.D("d",""+g,525600,b));f.D(d,h);return h}function Mp(a,c){return!c.Ra&&Wi(a,c)}function Vi(a,c){var b=Ua(a),d=Gc(a),e=c.Sd\|\|"uid";return[b.C(e),d.C(e)]}function vc(a){var c=G(a),b=c.C("hitId");b\|\|(b=Ra(a),c.D("hitId",b
2024-09-29 00:44:42 UTC	8168	IN	Data Raw: 70 3d 30 3b 70 3d 56 70 28 61 2c 0a 67 2c 68 29 3b 72 65 74 75 72 6e 20 6b 28 67 2c 68 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 71 29 7b 76 61 72 20 72 3d 70 2c 74 2c 79 3b 6d 62 28 61 2c 28 74 3d 7b 7d 2c 74 2e 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 53 75 63 63 65 73 73 22 2c 74 2e 64 61 74 61 3d 28 79 3d 7b 7d 2c 79 2e 62 6f 64 79 3d 71 2c 79 2e 72 65 71 75 65 73 74 49 64 3d 72 2c 79 29 2c 74 29 29 3b 72 65 74 75 72 6e 7b 70 62 3a 71 2c 68 67 3a 65 7d 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 71 29 7b 76 61 72 20 72 3d 70 2c 74 2c 79 3b 6d 62 28 61 2c 28 74 3d 7b 7d 2c 74 2e 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 46 61 69 6c 22 2c 74 2e 64 61 74 61 3d 28 79 3d 7b 7d 2c 79 2e 65 72 72 6f 72 3d 71 2c 79 2e 72 65 71 75 65 73 74 Data Ascii: p=0;p=Vp(a,g,h);return k(g,h).then(function(q){var r=p,t,y;mb(a,(t={},t.name="requestSuccess",t.data=(y={},y.body=q,y.requestId=r,y),t));return{pb:q,hg:e}})["catch"](function(q){var r=p,t,y;mb(a,(t={},t.name="requestFail",t.data=(y={},y.error=q,y.request
2024-09-29 00:44:42 UTC	8168	IN	Data Raw: 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 72 71 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 28 63 29 3a 5b 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 71 28 61 29 7b 72 65 74 75 72 6e 20 58 28 61 29 3f 5b 5d 3a 62 67 28 66 75 6e 63 74 69 6f 6e 28 63 2c 62 29 7b 63 2e 70 75 73 68 28 5b 62 2c 61 5b 62 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 2c 5b 5d 2c 49 6a 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 6a 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 62 63 28 61 2c 62 29 26 26 63 2e 70 75 73 68 28 62 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 53 64 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 61 2c 31 30 29 7d 63 61 74 63 68 28 63 Data Ascii: urn c}function rq(a){return function(c){return c?a(c):[]}}function sq(a){return X(a)?[]:bg(function(c,b){c.push([b,a[b]]);return c},[],Ij(a))}function Ij(a){var c=[],b;for(b in a)bc(a,b)&&c.push(b);return c}function Sd(a){try{return parseInt(a,10)}catch(c

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:41 UTC	522	OUT	GET /top100/top100.js HTTP/1.1 Host: st.top100.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.goo.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:41 UTC	875	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:44:41 GMT Content-Type: application/javascript Content-Length: 130845 Connection: close x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc x-amz-request-id: 000001923B29307AA0E7686DECE492ED ETag: "b26220e51cae4662e0c8e6e259947973" Last-Modified: Fri, 27 Sep 2024 10:57:18 GMT x-amz-meta-s3cmd-attrs: atime:1727434505/ctime:1727434504/gid:0/gname:root/md5:b26220e51cae4662e0c8e6e259947973/mode:33188/mtime:1727434500/uid:0/uname:root x-amz-tagging-count: 0 x-amz-content-sha256: e9e2cdd0b14593792b034dd03f667abbe33e54d6ac792fca694424f779edef2f x-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA X-CDN-Request-Id: de8837a8d592868791dd078f92129355 X-CDN-Edge-Id: 2018 X-CDN-Edge-Cache: HIT Accept-Ranges: bytes
2024-09-29 00:44:41 UTC	15509	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 34 31 34 3a 28 74 2c 6e 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 69 28 38 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 69 7d 7d 29 7d 2c 37 36 39 3a 28 74 2c 6e 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 6f 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6e 2e 75 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 69 28 38 35 34 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 Data Ascii: (()=>{var t={414:(t,n,i)=>{"use strict";n.t=void 0;var r=i(86);Object.defineProperty(n,"t",{enumerable:!0,get:function(){return r.i}})},769:(t,n,i)=>{"use strict";Object.defineProperty(n,"o",{value:!0}),n.u=void 0;var r=i(854),e=function(){function t(t){t
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 3e 31 36 26 32 35 35 2c 69 5b 32 5d 3d 6e 3e 3e 3e 38 26 32 35 35 2c 69 5b 33 5d 3d 32 35 35 26 6e 2c 69 5b 34 5d 3d 28 6e 3d 70 61 72 73 65 49 6e 74 28 74 2e 73 6c 69 63 65 28 39 2c 31 33 29 2c 31 36 29 29 3e 3e 3e 38 2c 69 5b 35 5d 3d 32 35 35 26 6e 2c 69 5b 36 5d 3d 28 6e 3d 70 61 72 73 65 49 6e 74 28 74 2e 73 6c 69 63 65 28 31 34 2c 31 38 29 2c 31 36 29 29 3e 3e 3e 38 2c 69 5b 37 5d 3d 32 35 35 26 6e 2c 69 5b 38 5d 3d 28 6e 3d 70 61 72 73 65 49 6e 74 28 74 2e 73 6c 69 63 65 28 31 39 2c 32 33 29 2c 31 36 29 29 3e 3e 3e 38 2c 69 5b 39 5d 3d 32 35 35 26 6e 2c 69 5b 31 30 5d 3d 28 6e 3d 70 61 72 73 65 49 6e 74 28 74 2e 73 6c 69 63 65 28 32 34 2c 33 36 29 2c 31 36 29 29 2f 31 30 39 39 35 31 31 36 32 37 37 37 36 26 32 35 35 2c 69 5b 31 31 5d 3d 6e 2f 34 32 Data Ascii: >16&255,i[2]=n>>>8&255,i[3]=255&n,i[4]=(n=parseInt(t.slice(9,13),16))>>>8,i[5]=255&n,i[6]=(n=parseInt(t.slice(14,18),16))>>>8,i[7]=255&n,i[8]=(n=parseInt(t.slice(19,23),16))>>>8,i[9]=255&n,i[10]=(n=parseInt(t.slice(24,36),16))/1099511627776&255,i[11]=n/42
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 3d 3d 2d 2d 65 26 26 6e 28 72 29 7d 63 61 74 63 68 28 74 29 7b 69 28 74 29 7d 7d 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 72 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 6f 28 75 2c 72 5b 75 5d 29 7d 29 29 7d 2c 55 2e 61 6e 79 3d 50 2c 55 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 4d 2c 55 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 3f 74 3a 6e 65 77 20 55 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 55 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 69 28 74 29 7d 29 29 7d 2c 55 2e 72 61 63 65 Data Ascii: ==--e&&n(r)}catch(t){i(t)}}for(var u=0;u<r.length;u++)o(u,r[u])}))},U.any=P,U.allSettled=M,U.resolve=function(t){return t&&"object"==typeof t&&t.constructor===U?t:new U((function(n){n(t)}))},U.reject=function(t){return new U((function(n,i){i(t)}))},U.race
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 6e 2c 74 29 7d 2c 72 2e 63 72 65 61 74 65 44 61 74 61 43 68 61 6e 6e 65 6c 28 22 22 29 2c 72 2e 63 72 65 61 74 65 4f 66 66 65 72 28 29 2e 74 68 65 6e 28 28 74 3d 3e 7b 72 2e 73 65 74 4c 6f 63 61 6c 44 65 73 63 72 69 70 74 69 6f 6e 28 74 29 7d 29 29 7d 29 29 7d 29 29 7d 58 69 28 29 7b 74 68 69 73 2e 4a 69 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 74 28 29 29 29 7d 7d 76 61 72 20 45 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 74 72 79 7b 63 28 72 2e 6e 65 78 74 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 74 72 79 7b 63 28 Data Ascii: n,t)},r.createDataChannel(""),r.createOffer().then((t=>{r.setLocalDescription(t)}))}))}))}Xi(){this.Ji.forEach((t=>t()))}}var Et=function(t,n,i,r){return new(i\|\|(i=Promise))((function(e,o){function u(t){try{c(r.next(t))}catch(t){o(t)}}function s(t){try{c(
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 3d 3d 3d 5f 6e 26 26 28 74 68 69 73 2e 6c 6f 28 29 2c 74 68 69 73 2e 61 6f 5b 74 5d 3d 6e 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 6e 28 64 6f 63 75 6d 65 6e 74 2c 5f 6e 2c 74 68 69 73 2e 76 6f 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 61 6f 5b 5f 6e 5d 28 74 29 7d 2c 74 7d 28 29 2c 4e 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 68 65 61 64 3d 30 2c 74 68 69 73 2e 64 6f 3d 30 2c 74 68 69 73 2e 71 75 65 75 65 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 71 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nction(t,n){t===_n&&(this.lo(),this.ao[t]=n)},t.prototype.lo=function(){Mn(document,_n,this.vo.bind(this))},t.prototype.vo=function(t){this.ao[_n](t)},t}(),Nn=function(){function t(){this.head=0,this.do=0,this.queue=[]}return t.prototype.enqueue=function(
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 74 75 72 6e 20 69 3d 74 3c 3d 30 3f 30 3a 28 69 3d 74 2f 6e 2a 31 30 30 29 3e 31 30 30 3f 31 30 30 3a 69 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 69 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 71 73 28 21 30 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 49 73 5b 74 2e 74 79 70 65 5d 3f 74 68 69 73 2e 49 73 5b 74 2e 74 79 70 65 5d 2b 2b 3a 74 68 69 73 2e 49 73 5b 74 2e 74 79 70 65 5d 3d 31 2c 74 68 69 73 2e 55 73 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3f 28 74 68 69 73 2e 42 73 28 21 30 29 2c 74 68 69 73 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 Data Ascii: turn i=t<=0?0:(i=t/n*100)>100?100:i,Math.round(i)},n.prototype.zs=function(){this.qs(!0)},n.prototype.ls=function(t){this.Is[t.type]?this.Is[t.type]++:this.Is[t.type]=1,this.Us()},n.prototype.vs=function(){document.hidden?(this.Bs(!0),this.visibilityState
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 7d 2c 74 28 6e 2c 69 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 26 26 6e 75 6c 6c 21 3d 3d 69 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 69 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 7d 74 28 6e 2c 69 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 69 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: Property.call(n,i)&&(t[i]=n[i])},t(n,i)};return function(n,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+String(i)+" is not a constructor or null");function r(){this.constructor=n}t(n,i),n.prototype=null===i?Object.create
2024-09-29 00:44:41 UTC	16384	IN	Data Raw: 2e 4c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 66 28 21 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4d 65 2e 4f 75 28 22 75 73 61 62 69 6c 69 74 79 22 2c 74 68 69 73 2e 75 66 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 4e 61 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4d 65 2e 4f 75 28 22 6d 65 64 69 61 22 2c 74 68 69 73 2e 73 66 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 4e 61 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4d 65 2e 4f 75 28 22 65 63 6f 6d 6d 65 72 63 65 22 2c 74 68 69 73 2e 63 66 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 4e 61 Data Ascii: .Lo=function(){this.ef(!0)},t.prototype.Ga=function(){this.Me.Ou("usability",this.uf.bind(this),this.Na)},t.prototype.$a=function(){this.Me.Ou("media",this.sf.bind(this),this.Na)},t.prototype.Xa=function(){this.Me.Ou("ecommerce",this.cf.bind(this),this.Na
2024-09-29 00:44:41 UTC	648	IN	Data Raw: 74 26 26 73 28 74 5b 6e 5d 29 26 26 74 5b 6e 5d 2e 61 70 70 6c 79 28 74 2c 69 29 7d 29 29 29 7d 2c 74 7d 28 29 3b 74 72 79 7b 69 66 28 6b 65 2e 56 68 28 22 4b 72 61 6b 65 6e 22 29 2c 6b 65 2e 56 68 28 22 74 6f 70 31 30 30 22 29 2c 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 26 26 6c 28 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 29 29 7b 76 61 72 20 4d 65 3d 6e 65 77 20 43 65 3b 66 6f 72 28 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 3d 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 2e 72 65 76 65 72 73 65 28 29 3b 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 2e 6c 65 6e 67 74 68 3b 29 4d 65 2e 70 75 73 68 28 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 2e 70 6f 70 28 29 29 3b 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 3d 4d 65 7d 77 69 6e 64 6f 77 5b 48 6e 2e 65 75 5d 7c 7c 28 77 69 6e 64 6f Data Ascii: t&&s(t[n])&&t[n].apply(t,i)})))},t}();try{if(ke.Vh("Kraken"),ke.Vh("top100"),window[Hn.eu]&&l(window[Hn.eu])){var Me=new Ce;for(window[Hn.eu]=window[Hn.eu].reverse();window[Hn.eu].length;)Me.push(window[Hn.eu].pop());window[Hn.eu]=Me}window[Hn.eu]\|\|(windo

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:41 UTC	523	OUT	GET /system/context.js HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.goo.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:41 UTC	1265	IN	HTTP/1.1 200 Ok Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 ETag: "847e3594c790822ef9ed7416d9861838-1124850" Expires: Sun, 29 Sep 2024 01:44:41 GMT Keep-Alive: timeout=600 Set-Cookie: i=n/wOhNLw6n9aJbqbgketcVlmp2GGLYNWFC8YxGF8Ejmum6+jh8EXVk0pJ0QiSozhO4zkwF11cDmnNGwZ9pKyCMKunYU=; Expires=Tue, 29-Sep-2026 00:44:41 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2689598401727570681; Expires=Tue, 29-Sep-2026 00:44:41 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=235696111727570681; Path=/; Domain=.yandex.ru; Expires=Mon, 29 Sep 2025 00:44:41 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYPnF4rcGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; Path=/; Domain=.yandex.ru; Expires=Mon, 03 Nov 2025 00:44:41 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Transfer-Encoding: chunked X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1727570681607061-28531907054326569700320-production-app-host-klg-pcode-236.klg.yp-c.yandex.net
2024-09-29 00:44:41 UTC	7686	IN	Data Raw: 31 44 46 45 0d 0a 2f 2a 21 20 76 3a 31 31 32 34 38 35 30 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 63 6f 6e 74 65 78 74 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 Data Ascii: 1DFE/! v:1124850 b:default c:loaders/context /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__p
2024-09-29 00:44:41 UTC	23	IN	Data Raw: 31 31 0d 0a 76 6f 69 64 20 30 2c 74 2e 76 3d 66 75 6e 63 74 69 0d 0a Data Ascii: 11void 0,t.v=functi
2024-09-29 00:44:41 UTC	8159	IN	Data Raw: 31 46 44 37 0d 0a 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 22 6e 6f 4d 6f 64 75 6c 65 22 69 6e 20 65 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 32 32 31 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f 43 41 4c 5f 53 54 4f 52 41 47 45 5f 50 41 52 41 4d 45 54 45 52 3d 76 6f 69 64 20 30 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f Data Ascii: 1FD7on(e){try{if("noModule"in e.HTMLScriptElement.prototype)return!0}catch(e){}return!1}},22130:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DEBUG_CONSOLE_ENABLED_LOCAL_STORAGE_PARAMETER=void 0,t.DEBUG_CONSOLE_ENABLED_LO
2024-09-29 00:44:41 UTC	14	IN	Data Raw: 39 0d 0a 73 2e 63 75 72 72 65 6e 63 0d 0a Data Ascii: 9s.currenc
2024-09-29 00:44:41 UTC	8167	IN	Data Raw: 31 46 44 46 0d 0a 79 3d 69 7d 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 70 72 69 63 65 2c 6f 3d 74 2e 75 6e 69 74 3b 69 66 28 21 65 2e 69 73 49 6e 74 28 72 29 29 7b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 2d 54 48 22 5d 7d 29 3b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 30 30 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 30 2d 54 48 22 5d 7d 29 7d 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 29 2c 75 Data Ascii: 1FDFy=i}return e.increaseUnit=function(t){var r=t.price,o=t.unit;if(!e.isInt(r)){if(o===n["1-TH"])return e.increaseUnit({price:100r,unit:n["100-TH"]});if(o===n["100-TH"])return e.increaseUnit({price:10r,unit:n["1000-TH"]})}return{price:Math.floor(r),u
2024-09-29 00:44:41 UTC	6	IN	Data Raw: 31 0d 0a 35 0d 0a Data Ascii: 15
2024-09-29 00:44:41 UTC	8175	IN	Data Raw: 31 46 45 37 0d 0a 30 22 2c 65 5b 22 41 64 54 79 70 65 43 68 6f 73 65 6e 22 5d 3d 22 30 36 30 22 2c 65 5b 22 42 75 6e 64 6c 65 4c 6f 61 64 65 64 22 5d 3d 22 30 37 30 22 2c 65 5b 22 42 75 6e 64 6c 65 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 4f 6c 64 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 48 42 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 7d 28 63 7c 7c 28 74 2e 6e 78 3d 63 3d 7b 7d 29 29 2c 74 2e 6b 4e 3d 6e 65 77 20 75 28 7b 69 6e 69 74 53 74 65 70 73 3a 28 6f 3d 7b 7d 2c 6f 5b 63 2e 41 64 43 68 6f 73 65 6e 5d 3d 31 2c 6f 5b 63 2e 41 64 43 72 65 61 74 65 64 5d 3d 31 2c 6f 5b 63 2e 41 64 53 74 61 72 74 65 64 52 65 6e 64 65 72 5d 3d 31 2c 6f 5b 63 2e 41 64 66 6f 78 58 68 72 52 65 71 75 65 73 74 50 72 65 70 61 72 65 Data Ascii: 1FE70",e["AdTypeChosen"]="060",e["BundleLoaded"]="070",e["BundleRendered"]="080",e["OldRendered"]="080",e["HBRendered"]="080"}(c\|\|(t.nx=c={})),t.kN=new u({initSteps:(o={},o[c.AdChosen]=1,o[c.AdCreated]=1,o[c.AdStartedRender]=1,o[c.AdfoxXhrRequestPrepare
2024-09-29 00:44:41 UTC	8169	IN	Data Raw: 31 46 45 31 0d 0a 74 65 6d 5c 2f 63 6f 6e 74 65 78 74 5c 2e 6a 73 2f 69 3b 74 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 65 2e 59 41 5f 53 53 50 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 53 50 5f 45 52 52 4f 52 5f 4c 4f 47 53 2c 6f 3d 65 2e 59 41 5f 4d 4f 42 5f 53 44 4b 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 44 4b 5f 45 52 52 4f 52 5f 4c 4f 47 53 3b 28 30 2c 6e 28 34 38 31 39 29 2e 6f 6e 29 28 77 69 6e 64 6f 77 2c 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 7c 7c 74 29 7b 76 61 72 20 69 3d 74 3f 22 55 4e 43 41 55 47 48 54 5f 53 53 50 22 3a 22 55 4e 43 41 55 47 48 54 5f 53 44 4b 22 3b 28 30 2c 6e 28 33 37 31 39 35 29 2e 65 72 72 6f 72 29 28 65 2c 69 2c 7b 63 6f 64 65 3a 69 7d 2c 31 30 Data Ascii: 1FE1tem\/context\.js/i;t.R=function(){var e=window,t=e.YA_SSP_PAGE&&e.YA_SSP_ERROR_LOGS,o=e.YA_MOB_SDK_PAGE&&e.YA_SDK_ERROR_LOGS;(0,n(4819).on)(window,"error",(function(e){if(o\|\|t){var i=t?"UNCAUGHT_SSP":"UNCAUGHT_SDK";(0,n(37195).error)(e,i,{code:i},10
2024-09-29 00:44:41 UTC	12	IN	Data Raw: 37 0d 0a 74 69 6f 6e 2e 68 72 0d 0a Data Ascii: 7tion.hr
2024-09-29 00:44:41 UTC	2640	IN	Data Raw: 41 34 39 0d 0a 65 66 2c 76 61 6c 75 65 3a 74 2e 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 7d 2c 22 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 41 64 66 6f 78 22 2c 31 30 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 6f 73 65 42 75 74 74 6f 6e 3d 74 2e 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 6f 73 65 42 75 74 74 6f 6e 2c 74 2e 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 6f 73 65 42 75 74 74 6f 6e 26 26 6e 28 33 39 30 32 29 2e 6c 6f 67 67 65 72 2e 74 72 61 63 65 4c 6f 67 28 7b 75 72 6c 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 76 61 6c 75 65 3a 74 2e 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 6f 73 65 42 75 74 74 6f 6e 7d 2c 22 64 69 Data Ascii: A49ef,value:t.fullscreenDuration},"fullscreenDurationAdfox",10),this._disableFullscreenCloseButton=t.disableFullscreenCloseButton,t.disableFullscreenCloseButton&&n(3902).logger.traceLog({url:window.location.href,value:t.disableFullscreenCloseButton},"di

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:44:41 UTC	658	OUT	GET /hit?t44.11;r;s1280102424;uhttps%3A//www.goo.su/c1Rnox/;hNot%20Found;0.9926144367812813 HTTP/1.1 Host: counter.yadro.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.goo.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:44:41 UTC	591	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.17.9 Date: Sun, 29 Sep 2024 00:44:41 GMT Content-Type: text/html Content-Length: 32 Connection: close Location: https://counter.yadro.ru/hit?q;t44.11;r;s1280102424;uhttps%3A//www.goo.su/c1Rnox/;hNot%20Found;0.9926144367812813 Expires: Fri, 29 Sep 2023 21:00:00 GMT Pragma: no-cache Cache-control: no-cache P3P: policyref="/w3c/p3p.xml", CP="UNI" Set-Cookie: FTID=1c-ABv3WT-8t1c-ABv002BH8; path=/; expires=Sun, 28 Sep 2025 21:00:00 GMT; HttpOnly; Secure; SameSite=None; domain=.yadro.ru Strict-Transport-Security: max-age=86400
2024-09-29 00:44:41 UTC	32	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 4d 6f 76 65 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body>Moved</body></html>