{"report_id":"092224cd-cb6a-4d55-b60a-a4e5fe535782","version":6,"status":"done","tags":["microsoft","phishing","suspicious"],"date":"2025-02-04T14:31:18Z","url":{"schema":"http","addr":"NAD5zRsOhy5082706.eastafricasafaris.co.tz/document/review/qvq1FT/christa.hudak@slurpmail.net","fqdn":"nad5zrsohy5082706.eastafricasafaris.co.tz","domain":"eastafricasafaris.co.tz","tld":"co.tz"},"ip":{"addr":"162.213.253.115","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"title":"nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-15T14:31:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xtiu.ntonteral.ru","ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-15","domain_rank":0,"first_seen":"2025-02-04T14:31:18.888594Z","last_seen":"2025-02-04T14:31:18.888594Z","alert_count":1,"request_count":1,"received_data":1104,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-01-29T01:55:05.300699Z","alert_count":0,"request_count":2,"received_data":30017,"sent_data":920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-01-29T02:26:04.03477Z","alert_count":0,"request_count":2,"received_data":17990,"sent_data":930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-01-29T02:21:42.028592Z","alert_count":0,"request_count":2,"received_data":63018,"sent_data":864,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nzcn.nusiblerser.ru","ip":{"addr":"104.21.63.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-09","domain_rank":0,"first_seen":"2025-02-04T14:31:18.894344Z","last_seen":"2025-02-04T14:31:18.894344Z","alert_count":20,"request_count":25,"received_data":820944,"sent_data":31847,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ok4static.oktacdn.com","ip":{"addr":"143.204.55.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-11-11","domain_rank":16592,"first_seen":"2018-06-15T05:36:50Z","last_seen":"2025-02-04T11:31:03.620705Z","alert_count":0,"request_count":4,"received_data":267514,"sent_data":2062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"github.com","ip":{"addr":"140.82.121.4","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2025-01-29T02:22:02.813442Z","alert_count":0,"request_count":1,"received_data":4338,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01T21:34:29Z","last_seen":"2025-01-29T04:43:47.048803Z","alert_count":0,"request_count":1,"received_data":11087,"sent_data":891,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nad5zrsohy5082706.eastafricasafaris.co.tz","ip":{"addr":"162.213.253.115","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":236,"sent_data":474,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-06T17:37:40.630881Z","times_seen":462872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.4","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c20a2be8ba900bc0a7118893a2b1072","sha1":"ff7766fde1f33882c6e1c481ceed6f6588ea764c","sha256":"b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500","sha512":"8f80ad8adc44845d24e13d56738a2ca2a73ee6fcdc187542ba4aaebbf8817935d053a2acfb0d425b9cc0c582b5091e1c9fe16b90b3aa682187645067c267fc41","ssdeep":"192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj","tlshash":"ce22a58932933026af5391b440bf140af2f69589d45cade8ab29d1e27d7290d46f7f38","size":10245,"data":"","first_seen":"2024-05-30T22:56:13Z","last_seen":"2026-05-06T16:31:48.675943Z","times_seen":52378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"052fc25bb21af1da5c2861759ae0bd2c","sha1":"9721872a637f507d7c23e63f6cb9c843a13c6213","sha256":"d5d72a87e7141038a2efad9678d407b78d17d7eab8d443a833dcb798b0cc8ca0","sha512":"3b1d18b396271c2b0d20acd0baf02bd05e3307c6e481fe7f525374e0cc0976ab460d822220b7da0ba412cffb1e97d8bff3447bb95544618276d32900db074149","ssdeep":"","tlshash":"aa518ed6f03164bd686dbbad67aef990363f3ec8c051a2443c0c0d66b354965c3a5eb8","size":2187,"data":"","first_seen":"2025-02-04T14:31:23.282553Z","last_seen":"2025-02-04T14:31:23.282553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"898a5d5ba8f126d39937a5bbbe937a42","sha1":"0ac43340726b24e159a586a0505e5eceaa025230","sha256":"1f4b685345b3a24d25a3c238693b9e40d7f1cff5e0e0efec08fc46b05c653c89","sha512":"ebdc3d56b8db520209920f51ee4a41cee646b1d278ab31d2cc6da55d5d515d9fc64a88ff1fafdf09f6a1b2abe35eb2c6b052fd7f6134bf49015d7eff0a219006","ssdeep":"","tlshash":"bc4179d8e0b368b1a87ef27d274ff891373224c7d049e685390c0e65bf4492583a5ea9","size":1893,"data":"","first_seen":"2025-02-04T14:31:23.284156Z","last_seen":"2025-02-04T14:31:23.284156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/34lqMoq2Y1QwSQvapyEccmrXa3Ogh56TDmaWRRkJNQ89108","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"378be0bda52e0dc309ba19e0e8dc3af0","sha1":"88de4b6325b9af80fcf458097f05ae8a10f6df0a","sha256":"0eb68b87fd0c31cf0110c8688f47f26699bdc1483c3034a983396a3b4548324c","sha512":"33f13c857a0596c70e604f366afdc1a2872fc8b77e0414d6f67be1d55a80ae133ce1d6dace68f7add35eb9e737d41309c53244dce0aa68d6dfe9d3f10d18e139","ssdeep":"1536:2nwWm57Ed3jk4FWynNEBqTiCDXEOynNEIyqT5505z5l5HEYyFdf7ASCz5YEWynNT:2nSTef2b6Is","tlshash":"10d394593e24d8e927025eff322598f8f44a0c6525821a9af21cbd5d39d2b13f9f70b1","size":136817,"data":"","first_seen":"2025-01-27T23:50:46.774078Z","last_seen":"2025-02-05T01:24:48.589543Z","times_seen":2855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09106ffb33fd598d6dac0536c17c0ee","sha1":"7dfc403b6b8b3b6c21a735fe1282026b66b1827f","sha256":"c0f009ea862434e2f422d8041768bf731e623e328dabed9724f22d4c7a8fdd76","sha512":"be4eae402970cbf39539eaf87551a2a8e611c3e0d45cbe79eea5eff529a07a37968dacada45d93cee2ab98403643bd1c8d269c9741a43b10f848637f86ec6458","ssdeep":"","tlshash":"12119aef34449a3e0dcf4c8ac3af83c43c9f0c00ad0a1041088fa9160918c80c47bc11","size":658,"data":"","first_seen":"2025-01-27T23:50:46.776769Z","last_seen":"2025-02-11T00:19:31.875518Z","times_seen":1997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a263f05dcb3bcde3d5e018757658084","sha1":"d5b23ac6a5d6c094ab82e42d76af266a64a59a83","sha256":"c87628d46b89e436392f9e5492a251b4882bb9e4479ec84c8b13ffc791a72690","sha512":"fd933e20e5c74dbf37b405315c6f32bacc2567d2e9786a5b34ce420a7e59a8a07b9e79336c0cc1c41761ab7cf69597574943fcb83192a304cab2b0f3bb6f455e","ssdeep":"384:lQOWDI6eVpjQAd6jk3ifisGixi21Q46dizn:liDmyaw421Q4Dzn","tlshash":"7c52829af471187049fb21f7b8bb418439347126f981c916f07cc95c6f30ac262b7aea","size":13767,"data":"","first_seen":"2025-02-04T14:31:23.301634Z","last_seen":"2025-02-04T14:31:23.301634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc78dfe6688754262c9dcbe491c2dc1f","sha1":"7ab5dd7bafbf21ad52323ae8d6f1e6fd2f181703","sha256":"a68acabdeb32ae04bce8f9b650a2ef34c56557544b0f8b5feb3059c76fe89cb8","sha512":"c87d1772b44964e89a29a82c862446b226fe0e38a9937f405ce90233d2aa5d2fb82230e83a29ff957ca6694959443b2898d8a18e0fd9d0313dd050ec90ec81cb","ssdeep":"1536:fMv4lieP8/C8vbNUGyCW1eWSAR4+Q1VOq7YPiQy+u8IShDbZu/ls5feFTGeyBen4:flwx7TNiWAR4hEmdQW/sfTYLJURpzwK","tlshash":"d1d33c0b118294f1c55c366af2cdbf4e51ba062f10bed2b60b572b4de37151a2e271af","size":130914,"data":"","first_seen":"2025-02-04T14:31:23.30345Z","last_seen":"2025-02-04T14:31:23.30345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-05-06T16:40:08.376716Z","times_seen":151746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"d6454f2e2b6ba96ae251708ac29caaef","sha1":"147a128e3f223e5975cab7d55d9f7676c8d34cdc","sha256":"5358fe8bfbe1ae9c07750607b32852f342ab2ef110ab9245f2f393b3e3634630","sha512":"776994cf865cc28c53d65eb19fd4fa3ae08ac5345f7a8ce7d00e9367fda3c0f7ddfae642b61277284991ff7ca908859396fb5e979c8eea2953eebb9137feceac","ssdeep":"192:IFu78QObXWAobF2IaDQ6Y/XQsKI213iSpoEiHigiEiKioiXHiQaOZAJryLLsXvw:IFu78QOrWAo52Ias/pggSpoEiHigiEib","tlshash":"2e02c7379e8b2d118bf1aa1671dd4bc5682c478a28c380dd7e1d9fc88b0d96675e42d8","size":8810,"data":"","first_seen":"2025-02-04T14:31:23.305472Z","last_seen":"2025-02-04T14:31:23.305472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"40c8eda28ca79baa9f5469b026dd843c","sha1":"a48b9391990d241b587418c2a22132c3171f87db","sha256":"8dae800b24f4e2dea32e8ce473693457c17a984cf2de8975ee758723ee25c6f9","sha512":"13413a2fec3affe608b4de67d6c60f378c12ed3ce14fac49cddc7fbaef706a7631360c92cabbd82ca6600fd36e229ce8eda2f0f8a5317a612ec8bcde54506b0a","ssdeep":"384:qG04HoHVRZWppUZLtVUGdWalJuzslumallWzYgmtympNM:30jLZWMfdWalJytmall/pO","tlshash":"b1f3df7ff11217bfa2d2ce9b36a36e5d22223c55c60f9305a05bb793b74237d1a42690","size":168829,"data":"","first_seen":"2025-02-04T14:31:23.307322Z","last_seen":"2025-02-04T14:31:23.307322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a4a92e7865bd957f0bd22422ccbc40ea","sha1":"850c9cd5d800309c125ced80cafd7a69720fa2e0","sha256":"019a9807a928d3a0528eb7204c919e113dec117ab49ac2e06018204938f878be","sha512":"202e04156dd597ad341e67ff1e8c5b7c1b2437839b4f2c655a87ff2dbd9346b3e381fa679062107a14343ff82cff076e444b630b9c71ff0666bd3973247141b1","ssdeep":"192:/6atNDfG2mxaQc251TPaOMdZV1Lk7C/L4tGEbII:/Xy2qaQc251TPa3d71LgCQbII","tlshash":"e102d9866c0a2c425bb0771a5bdea5d8fd3e1bd778808186780ced49af3041e46d6fed","size":9013,"data":"","first_seen":"2025-02-04T14:31:23.309193Z","last_seen":"2025-02-04T14:31:23.309193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"776e822969352577ebbe4177d62a7564","sha1":"9d4293cd6e8a0b8f3882925c662f12635deebc99","sha256":"a10bbd45dcb47c3cb581816b6cede77720db091c8c25e568f20f6707a57791fa","sha512":"eef4f4d6a277e9ec881a30b6e28957ab398a507b5528daa0cf029cf6fb81ac9d98277ea85f55c58a80ec092e11c766bd8e9e3c283fbc33ccd7c728e62a5ba7fc","ssdeep":"768:ljZ+oHV5wkGcpYtMpGP/I5lhiuq4KcQmG941zo6mZTkrXyfoijXcqnssuc9JxlQZ:lHVjppGP/I5l44AZTY9Usu9blQVcQr","tlshash":"0793821a20d1053b40b381f269754b8efe66c55bc70a9214b6fc93db6ff6c02dd639a8","size":96697,"data":"","first_seen":"2025-02-04T14:31:23.31107Z","last_seen":"2025-02-04T14:31:23.31107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"nad5zrsohy5082706.eastafricasafaris.co.tz/document/review/qvq1FT/christa.hudak@slurpmail.net","fqdn":"nad5zrsohy5082706.eastafricasafaris.co.tz","domain":"eastafricasafaris.co.tz","tld":"co.tz"},"ip":{"addr":"162.213.253.115","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:30:48.326156207Z","timestamp":1738679448326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /document/review/qvq1FT/christa.hudak@slurpmail.net HTTP/1.1\r\nHost: nad5zrsohy5082706.eastafricasafaris.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:47 GMT\r\nserver: Apache\r\nx-powered-by: PHP/7.4.33\r\nrefresh: 0;url=https://nZCn.nusiblerser.ru/CzvWGW/#Mchrista.hudak@slurpmail.net\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.123Z","timestamp":1738679460123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1112351\r\nexpires: Sun, 25 Jan 2026 14:30:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6hiMQRr%2FTZH%2FqHz1eGAg%2FFHg3IGbfk%2BHQX8dRm7AkAs5xp4p1UQmX0jrkq5kGU21Hb9wHGy2wz%2FS4BbWCUBXiRkuVz1FD3AE7Jn9XmzeWjKrkeXafDAmVmSw2nOUDBVUoXFDQsWo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 90cb5c5e7a9956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-05-06T16:40:08.376716Z","times_seen":151746,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:30:49.400737355Z","timestamp":1738679449400,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 04 Feb 2025 14:30:49 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/6682e961b853/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cb5c5eba2556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.096Z","timestamp":1738679460096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Jun 2024 00:00:00 GMT","end":"Wed, 25 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5","sha256":"AB:77:AE:8B:01:C3:97:E7:80:17:A2:C0:A0:8D:8A:BE:C9:8A:77:1C:06:8C:B9:64:E1:7B:E5:9F:3B:E7:EC:FA"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 04 Feb 2025 14:30:49 GMT\r\nage: 2432984\r\nx-served-by: cache-lga21931-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 364118\r\nx-timer: S1738679449.442486,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30875,"size_decoded":89501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-06T17:37:40.630881Z","times_seen":462872,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/b/6682e961b853/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:30:49.732679713Z","timestamp":1738679449732,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/b/6682e961b853/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 30 Jan 2025 10:28:27 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cb5c5f1a8956b9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17116,"size_decoded":48122,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48121)","md5":"ec49b36b4df75f725a1bbabe33c02200","sha1":"3a8e012c4afbfdd60dc5fb7787bec1019c2e7693","sha256":"acc0f6a3825a97a4cd1b5b959e258a01ef4f21c2c55124f9bab349e0f83e3b7a","sha512":"c1613b7699254d395c800486eee3d563371fc44a1d936af63e58d04473671f0f2640f503146e70cd96cec71d73410b55e81ebc7dced03e0275344dcc1de49241","ssdeep":"768:nCbU/Cru5h5taq75KvO0fV9/KFeWlzQylfTGjBsgVX29wDBslY1L8ep7K1oiSJvU:4ru5h5taq7gGYV9yjcyly29Qs3","tlshash":"18231b587266797317e980e0617ba34373297a39f94ccc509823c97526acecad133fb9","first_seen":"2025-01-30T15:28:33.631406Z","last_seen":"2025-02-04T20:02:22.460217Z","times_seen":2583,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"xtiu.ntonteral.ru/tp411k5","fqdn":"xtiu.ntonteral.ru","domain":"ntonteral.ru","tld":"ru"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:30:58.739809292Z","timestamp":1738679458739,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tp411k5 HTTP/1.1\r\nHost: xtiu.ntonteral.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/\r\nOrigin: https://nzcn.nusiblerser.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1QihEh6zqC%2Bt3FiqJT7dPapqpGbKWqLuM0aBaTyV4pbBitipxlGM1IpgG4iNM2XazoimbyR%2BMelTfOdBEQzCCpkCyKVaecyVjiN4hMq5pG6FI7SV7Fc4%2BggE4N1cE2vFJrK2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90cb5c955e7c0b55-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6330\u0026min_rtt=458\u0026rtt_var=11767\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3200\u0026recv_bytes=1094\u0026delivery_rate=8305927\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=34c614203b472124\u0026ts=386\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":285,"size_decoded":1,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-05-06T16:56:12.56062Z","times_seen":108761,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/CzvWGW/","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:30:59.197735628Z","timestamp":1738679459197,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /CzvWGW/ HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJQRG1pMlp6OTFWMlR1VmJaWTFJc0E9PSIsInZhbHVlIjoiMzZrd0crU3R0dTNKV0Z0Z2ZLU045SUN5RnF0UitINk1mT1pQNWREK0dKR0o3NDkxT21DSFRuazFEay82WWxScmtadUNwa2V0WFZoQlVTaUFkejJiemtmVmhDUXhDUUVaMkp6ajVKS0xxbGpLNXJQZHU0UnNEZ3F2clNHRTBGWm0iLCJtYWMiOiI2MGUxODQ0ZWM0MmQ4ZTE5YzMxMWQzZWQ3NTY5ZDNhY2QwZjhmMmE5MjBhMGRjNWI5ZGM3ZWExNzRiMjA3ZWQ2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVlbmFtNEpPaWpjU3g3WUNtZFc3V1E9PSIsInZhbHVlIjoiWVh6dWt6N2ppOXFnVGptT1JFTVBub1Qzekx3d0dZbzNGVEVFbHFsY092dmFjT2xCZFU5RUxRV0V5dlE5M0d5eloyWVUvWVlOOEgzVXJpUmpKQWdlY204NEIxbWFFdGpnRGY1RjR5cDQrRjRJMTltanVJenpzcU93ZHRPTGROWEUiLCJtYWMiOiI5ZTE2ZjMyZDUxNDBmYWIwYzMzY2ExOWY5ODQ5Y2Y1ZWI0NWY4NzFkYmNjMTdjMGMzZDJkZGQ3YjEyYzVkY2M3IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S8qhDTHA87WbV8kR4vnQOgVD81Fs9FQp2w8wTCA%2FKKU%2FcU%2BkZmWGIql72Fa2jeINLwZkxgIDELPzE1LCLiYt%2B3Rs1U9LCWkfi%2B8XmGuP%2B%2FhlJMmQcyFgU2t3sNg%2Ftw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlBnQXhLVUlDZERVMEV4MVhXRHluYWc9PSIsInZhbHVlIjoiL2dWNm0rbDc2c0dyeVB0Q2ZiWk0vL3JIQUNhdGcwZjJSMjNTbUF3akl0SGpLdW9iSTJGOExJOEM1eHA5U0J0M2ZpbTVTZ05RNXdXNXNXWS9CREEwYW1BYThNVFZWR1M2VjVWUHFrOHVtWlRUcndSdVNIU0ZzUm1MejFMSW9MNnkiLCJtYWMiOiJjM2Q1ZDdiMjBhYzQ1OTlhZTRlMjliM2E4ZjhiOTdkMDY3ZGYzZGVkZDQxMGFmOWUzMTA1NTk4ZGZmZGU3NmI1IiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Im5jT1NrT0hZV213MmRzMGs3TWdEcHc9PSIsInZhbHVlIjoiSWR0UU9kV1ZZOW1DWFdUdDdXcnBaWXNzTXQyd0VXcmxxMzBWVmYzTVkyTTVodU5qMlI2UjY3d0ZNQkpwT1JQckxlU0x1N1NkL3h5UFROUFpzeHE4Y0I2V1JKVGd2aGZHMzhlR2VFUjQ2UHpWd2JlbU9BNGFmK29mdlBMNy9UeVkiLCJtYWMiOiJjOGM1OWIwYTlmZWMyM2IwNzEzYWZjNDA4NmZkZWE1MDk5NjE1NGI5MjZkYzgxNWQ3MTY4NDA1ODdkYmNlZWIzIiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5c9a3ba30b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5058\u0026min_rtt=5026\u0026rtt_var=1908\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2154\u0026delivery_rate=566653\u0026cwnd=234\u0026unsent_bytes=0\u0026cid=33abed45ed7913a1\u0026ts=149\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=3475\u0026min_rtt=2193\u0026rtt_var=1444\u0026sent=18\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=6440\u0026recv_bytes=3904\u0026delivery_rate=221\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=10169\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23716,"size_decoded":17344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12065), with CRLF line terminators","md5":"6ec9dc8fb555c1318aaeeff1eba43430","sha1":"d7b0772bb32c505944b26a8a1eedb740d3ec416f","sha256":"4c825bc1dd313d92a3ca93e22db79718015a785054fd66f92856ce6a60fd2bf0","sha512":"ee28a246e62b61599c811e02efb54b0d62833273b2312f6e1ad65254ffa5ca16809b93ae4a1e075ffd9662513d30fc4d3c765fdae5586e17f52fbd859fb11312","ssdeep":"192:+AK2HCAAT85ddr1v9y8Zq7g3zwicI1LHLcj0KYjpiyxvJSbOoj0hppgxbd6qrdum:xkAAT8ddZAcqU3zlHG09xdoIGTlrHlrd","tlshash":"a372ae5885c12a2e1eb4de802957e71ef4716b8f78d460c38d3eee4561f376a07c1ea8","first_seen":"2025-02-04T14:31:23.24651Z","last_seen":"2025-02-04T14:31:23.24651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.096Z","timestamp":1738679460096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Jun 2024 00:00:00 GMT","end":"Wed, 25 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5","sha256":"AB:77:AE:8B:01:C3:97:E7:80:17:A2:C0:A0:8D:8A:BE:C9:8A:77:1C:06:8C:B9:64:E1:7B:E5:9F:3B:E7:EC:FA"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 04 Feb 2025 14:30:59 GMT\r\nage: 2432994\r\nx-served-by: cache-lga21931-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 364132\r\nx-timer: S1738679459.187677,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30875,"size_decoded":89501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-06T17:37:40.630881Z","times_seen":462872,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.123Z","timestamp":1738679460123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1112362\r\nexpires: Sun, 25 Jan 2026 14:31:00 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FWKI6YJ9U4cQDnC3RPlJdOEkGKARy0%2F8%2FUAvdxGbaEwFputMePW%2FR%2F2G6F5DsnWUfNXkwiD86OU%2FGT%2F2T%2Fo%2FYXLbLuNyjuQmfcQlmLeOkC73scfqki%2FE97nvDsTz6oIo7pFwxH3p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1aeecb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-05-06T16:40:08.376716Z","times_seen":151746,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/zciVQcIrq8W6einevv3XsUu8ul7LERl4qrHDZqJU8v7fq","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T14:31:00.150622885Z","timestamp":1738679460150,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"POST /zciVQcIrq8W6einevv3XsUu8ul7LERl4qrHDZqJU8v7fq HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 36\r\nOrigin: https://nzcn.nusiblerser.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/CzvWGW/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBnQXhLVUlDZERVMEV4MVhXRHluYWc9PSIsInZhbHVlIjoiL2dWNm0rbDc2c0dyeVB0Q2ZiWk0vL3JIQUNhdGcwZjJSMjNTbUF3akl0SGpLdW9iSTJGOExJOEM1eHA5U0J0M2ZpbTVTZ05RNXdXNXNXWS9CREEwYW1BYThNVFZWR1M2VjVWUHFrOHVtWlRUcndSdVNIU0ZzUm1MejFMSW9MNnkiLCJtYWMiOiJjM2Q1ZDdiMjBhYzQ1OTlhZTRlMjliM2E4ZjhiOTdkMDY3ZGYzZGVkZDQxMGFmOWUzMTA1NTk4ZGZmZGU3NmI1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5jT1NrT0hZV213MmRzMGs3TWdEcHc9PSIsInZhbHVlIjoiSWR0UU9kV1ZZOW1DWFdUdDdXcnBaWXNzTXQyd0VXcmxxMzBWVmYzTVkyTTVodU5qMlI2UjY3d0ZNQkpwT1JQckxlU0x1N1NkL3h5UFROUFpzeHE4Y0I2V1JKVGd2aGZHMzhlR2VFUjQ2UHpWd2JlbU9BNGFmK29mdlBMNy9UeVkiLCJtYWMiOiJjOGM1OWIwYTlmZWMyM2IwNzEzYWZjNDA4NmZkZWE1MDk5NjE1NGI5MjZkYzgxNWQ3MTY4NDA1ODdkYmNlZWIzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jQX1HoP4bL1HvUjgjrkQ72A2iqDlLebcmrRyzFWJYks0phe%2B%2FHKgIyjk7I8J290IyQMm6RlUIBh9R0xGkfBIAVEvLYDlChQ3NLYrV2o00UVmWv%2BXRSKTelIOw9ZhMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkU1V1NQV2RYa2dERjdEdTJ2Wi9ra2c9PSIsInZhbHVlIjoiZVBMa05MS1dJejM1MmFmWkZFTEVCSTlpY0NzcEdtcXVVVG90N2pIRDErSlkxa3lBVjNVZ0IzOTFVWEFkM3hUMXRqMExMMk5WbU1mZ1VvRDd3UEtlQmh6T2prZnduUkw3SHRGYkEvWXZERVB5cW0vMWZqNTJtMVZuOUVSdW9OOFkiLCJtYWMiOiI0NjY4MGJlYzE1MmJiY2ZhZWMzYWFlNTc1NWNkMTA3MDY0MmE4Y2U5NTA4ZTVhOWY5MGM5OTFmNThlZDdjOGM4IiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjFXRWxwWmtqNkNrS0hodWpQRStzVnc9PSIsInZhbHVlIjoiV25DSGJ3ekZqUlpsUDFYaFNvRjlrTlVVVTU0cmVyUWc5d3VZbTJLYW02TWJPc3hQQU9lTXhVQXRWWW9jMWsyYVoxUEJISHU0am9LUm53dmFvb1pZN2FqeUR6bE4xVXg5RUViUkNaWkF4bEppVmVGMkZ5VURWWllENFd0TEIrZlgiLCJtYWMiOiJjNmJjYjk1MzRhNWNiNTdiNjk1OTcyYTM4YTI3MTg3Y2IxNTEyNTQ0ZGFkNzBlYTJmODI2MDk2ZGY3MGFiYTljIiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5c9c5d950b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4943\u0026min_rtt=4931\u0026rtt_var=1873\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2291\u0026delivery_rate=566540\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=a9757e14d91b74ad\u0026ts=127\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=2517\u0026min_rtt=749\u0026rtt_var=1786\u0026sent=33\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=18123\u0026recv_bytes=5957\u0026delivery_rate=2942356\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=10480\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92771,"size_decoded":272,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"01ce5fe70b50f663c991ce5ec09acdd9","sha1":"8a9092a496d31ee60f384c1daefb40f87f3a535d","sha256":"9958b0c34965d87feb96e012a8f1f1c2cb56be68a6888e4d800d2b7403405fd2","sha512":"5e4e9fdcb1044fca11f2b216dfb9be86f0932048bd5a943aca11246ac9a02629e43e119b298c721d2d3b406e469fa93f891a4ad89efcdecce34017961e63f7ee","ssdeep":"","tlshash":"03d02bf5e41e8931b8437644cdbb5c574a8cac2140cfa688469c5f3196656155711397","first_seen":"2025-02-04T14:31:23.24971Z","last_seen":"2025-02-04T14:31:23.24971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.165Z","timestamp":1738679460165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 10796\r\nserver: nginx\r\nlast-modified: Tue, 23 Feb 2021 04:20:08 GMT\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jan 2025 00:59:17 GMT\r\nexpires: Thu, 29 Jan 2026 00:59:17 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: \"12bdacc832185d0367ecc23fd24c86ce\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: k58GG5xtGR245XigKsMmwzo8hbYwr2nauaLYG2iAFd2WUSl88LzeBQ==\r\nage: 567103\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10796,"size_decoded":10796,"mime_type":"image/png","magic":"PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced","md5":"12bdacc832185d0367ecc23fd24c86ce","sha1":"4422f316eb4d8c8d160312bb695fd1d944cbff12","sha256":"877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0","sha512":"36c319ac7f75202190e7a59f3f3c92892a71d5f17663e672319a745b6574bcfde7c89b35f480cb15a193924dacb9d67f8ca1e1bc2bf33fc5ccbfa152cc7ba2d0","ssdeep":"192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0","tlshash":"7122af89d5a7d9387f3ff18c00be1fcb46f8a1f9760608b93989875d0641d9c188c499","first_seen":"2023-05-04T21:28:17Z","last_seen":"2026-04-10T13:26:22.651449Z","times_seen":38427,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.4","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.114Z","timestamp":1738679460114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Tue, 04 Feb 2025 14:29:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250204T142946Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=11bb2da77b20fd8b126bb83e14e73d7383dc1168e24baf48acf67930c5e4e594\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: 84AD:19B9B2:1DFB7BB:1EA26DD:67A224A4\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":100,"dns":20,"connect":24,"send":0,"wait":24,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/uvWvCCAu7xUYPr7WbScGqrUSw0brtaCJjM12127","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.154Z","timestamp":1738679460154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /uvWvCCAu7xUYPr7WbScGqrUSw0brtaCJjM12127 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 644\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uvWvCCAu7xUYPr7WbScGqrUSw0brtaCJjM12127\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vRqmgRjtvNYIRxadDrV9lM8zapS5kNkfmLoQB5K9Jtvnlcz8rnT%2F9tb8esFkD1MWq41HT5piAmeYehCaQ3xcegRaTE65MNO9CNFIwlEDvLBgp2PWNykzAlxjdDapKQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 90cb5ca1dc4b0b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=9078\u0026min_rtt=8272\u0026rtt_var=3880\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2177\u0026delivery_rate=204980\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=cbbe3690eb4751b0\u0026ts=124\u0026x=0\", cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":644,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"541b83c2195088043337e4353b6fd60d","sha1":"f09630596b6713217984785a64f6ea83e91b49c5","sha256":"2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f","sha512":"b2ae42ba9d3a63d3acb179051b005f2589f147d94f044616ae5dc5705e873f16057c56934262841191263b4c35804ef188bd38cf69cce0f4b2cf76c05f17b8ad","ssdeep":"","tlshash":"f4f00e3613a40b4ce5643ff860d10f03f37c7e22cb17aa66c10082221f049c86c9c2ca","first_seen":"2025-01-27T17:47:42.408787Z","last_seen":"2025-09-19T23:18:03.500571Z","times_seen":37683,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/opiuf67pC0jd0WG6Y0AvefR12ViobxaL845140","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.155Z","timestamp":1738679460155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /opiuf67pC0jd0WG6Y0AvefR12ViobxaL845140 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 892\r\ncontent-disposition: inline; filename=\"opiuf67pC0jd0WG6Y0AvefR12ViobxaL845140\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OQWmJyjvtIWLEf3Ud4DpyFuHwwmCC386tDwLcrGl1mVzYCR0l7dO26MFyuS6OxqF0so9c6Lf6WYM0ysnUx2C1qdk0Id2pngL8KcS7iD9tf2wcNGTOX6mZ0ChRc7giQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc4d0b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5820\u0026min_rtt=4796\u0026rtt_var=3359\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2175\u0026delivery_rate=262585\u0026cwnd=244\u0026unsent_bytes=0\u0026cid=85b03de7b49b8cc8\u0026ts=129\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1240\u0026min_rtt=612\u0026rtt_var=435\u0026sent=121\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=93375\u0026recv_bytes=24729\u0026delivery_rate=1782048\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11401\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":892,"size_decoded":892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41d62ca205d54a78e4298367482b4e2b","sha1":"839aae21ed8ecfc238fdc68b93ccb27431cd5393","sha256":"20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40","sha512":"82b9806490a0db493da16466738437b9bb54b979075db58c89ca0d192d780ddb5ed888e10ce76a53d48d30d5013791cac7ab468d85b61d32766140dd53dc9044","ssdeep":"","tlshash":"a41120296b6053c8e7156bbc60c11f92ebbdb9124712627782c093366b489c6255c2d2","first_seen":"2025-01-27T17:47:42.408008Z","last_seen":"2025-09-19T23:18:03.480147Z","times_seen":36702,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-bold.woff","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.137Z","timestamp":1738679460137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-bold.woff HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lpHRXc0khV1zBvS65BUyoBbwqzwwgRitwKwi0%2FIou2jcG%2Fv7Qf6LCFwvf3%2BNy%2FjjCg6iLDACHRXXCzPw%2FQACcZULYy43sCnWdjK%2BcKQ%2B%2FTJVdye1Q1%2BpDf41QKuuHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1cc230b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7464\u0026min_rtt=5921\u0026rtt_var=2687\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2178\u0026delivery_rate=411204\u0026cwnd=210\u0026unsent_bytes=0\u0026cid=2fecb4e9efc36e50\u0026ts=196\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1190\u0026min_rtt=612\u0026rtt_var=349\u0026sent=132\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=101903\u0026recv_bytes=24865\u0026delivery_rate=2477193\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11512\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":35970,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-06T16:31:48.669436Z","times_seen":90482,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-bold.woff2","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.133Z","timestamp":1738679460133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-bold.woff2 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lOw0UX%2F9Nz6yTtycofNN%2Bnbo4jMUUWP2OHtTCgj8fXiqxQtuXOdfyznJiyqgP9WLMM%2BvT61Lz0%2BCiiBp%2BDIUjl8V%2B17WiiEggqBHghQiWynLRsqHgZFEXwq5FszB1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1bc1d0b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6558\u0026min_rtt=5791\u0026rtt_var=2104\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2179\u0026delivery_rate=414737\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=a01fee69b9c1820c\u0026ts=262\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1141\u0026min_rtt=612\u0026rtt_var=266\u0026sent=166\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=139712\u0026recv_bytes=25048\u0026delivery_rate=1497\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11558\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":28000,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-05-06T16:31:48.66542Z","times_seen":94933,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-regular.woff2","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.141Z","timestamp":1738679460141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-regular.woff2 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0wtVUIsJ%2F8KPlycIdnesJdb5BP2WsW4lDx4zPE0eKaXIhYrIM4C5m7kL2ln%2FAPIx5Ej9E6a%2Fsgz3%2Big%2B9SKvnjiXOq%2BYp2AmHi2EGn54LzDdwwIMp99mxoY%2FD7cv%2FQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1cc250b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7877\u0026min_rtt=7243\u0026rtt_var=2474\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2181\u0026delivery_rate=341364\u0026cwnd=207\u0026unsent_bytes=0\u0026cid=3c38c0c61f8bf47b\u0026ts=267\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1231\u0026min_rtt=612\u0026rtt_var=379\u0026sent=191\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=169272\u0026recv_bytes=25094\u0026delivery_rate=8663771\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11598\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":28584,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-05-06T16:50:58.316629Z","times_seen":104065,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-regular.woff","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.143Z","timestamp":1738679460143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-regular.woff HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C%2BmAkdWZtgj2Txnoi0Qa474R74irJbfUJbDbLPiADtsfEgNNkBvQBFaC3ml2AaIT7dEtfMs9U212WBT%2FuR7pcI%2BSZe2zb6UVt2sSDjQ7tQAgEA6Y8R4nF7vZjMQweg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1cc270b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6940\u0026min_rtt=6629\u0026rtt_var=3109\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2180\u0026delivery_rate=312246\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=2069ffe42e923ec1\u0026ts=259\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1293\u0026min_rtt=612\u0026rtt_var=408\u0026sent=217\u0026recv=66\u0026lost=0\u0026retrans=0\u0026sent_bytes=199451\u0026recv_bytes=25140\u0026delivery_rate=8882896\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11605\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":36696,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-06T16:31:48.657572Z","times_seen":90412,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-vf.woff2","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.145Z","timestamp":1738679460145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-vf.woff2 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\ncontent-disposition: inline; filename=\"GDSherpa-vf.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:00 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=81wAe3xq34xwAjgBn3Ft30a754ss%2BMOKtnWDfu8oNhktQronlaXcakLUnQwQJGaKXCESzWB9lruEC6gs%2FOJwJEM04W%2FsXOu7kEr6BeT%2BU2RsfjKDtgdIfEkHis9Uww%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1cc280b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6994\u0026min_rtt=6325\u0026rtt_var=3711\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2177\u0026delivery_rate=243814\u0026cwnd=210\u0026unsent_bytes=0\u0026cid=ac43553a3acba202\u0026ts=335\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1322\u0026min_rtt=612\u0026rtt_var=365\u0026sent=250\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=237938\u0026recv_bytes=25186\u0026delivery_rate=10899408\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11689\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":43596,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-05-06T16:31:48.63735Z","times_seen":91876,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250204T142946Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=11bb2da77b20fd8b126bb83e14e73d7383dc1168e24baf48acf67930c5e4e594\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.345Z","timestamp":1738679460345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250204%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250204T142946Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=11bb2da77b20fd8b126bb83e14e73d7383dc1168e24baf48acf67930c5e4e594\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Tue, 07 Dec 2021 16:38:45 GMT\r\netag: \"0x8D9B9A009499A1E\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000\r\nx-ms-version: 2023-11-03\r\nx-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT\r\nx-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=randexp.min.js\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\nage: 788\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\nx-served-by: cache-iad-kiad7000045-IAD, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 11369, 0\r\nx-timer: S1738679460.441024,VS0,VE108\r\ncontent-length: 10245\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10245,"size_decoded":10245,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (10017)","md5":"6c20a2be8ba900bc0a7118893a2b1072","sha1":"ff7766fde1f33882c6e1c481ceed6f6588ea764c","sha256":"b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500","sha512":"8f80ad8adc44845d24e13d56738a2ca2a73ee6fcdc187542ba4aaebbf8817935d053a2acfb0d425b9cc0c582b5091e1c9fe16b90b3aa682187645067c267fc41","ssdeep":"192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj","tlshash":"ce22a58932933026af5391b440bf140af2f69589d45cade8ab29d1e27d7290d46f7f38","first_seen":"2024-05-30T22:56:13Z","last_seen":"2026-05-06T16:31:48.675943Z","times_seen":52378,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":78,"dns":1,"connect":26,"send":0,"wait":534,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:01.204Z","timestamp":1738679461204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nzcn.nusiblerser.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ok4static.oktacdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 20416\r\ndate: Mon, 27 Jan 2025 07:42:18 GMT\r\nserver: nginx\r\nlast-modified: Tue, 07 Nov 2023 18:56:28 GMT\r\netag: \"d99a7377dabb55772ca9f986b0a04b57\"\r\nx-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc\r\nexpires: Tue, 27 Jan 2026 07:42:18 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: u8g8zHySy040gsGmPXxXohnvxAssRzeAUPyLuQKRSnW0bipzMyFPng==\r\nage: 715723\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20416,"size_decoded":20416,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20416, version 2.197","md5":"d99a7377dabb55772ca9f986b0a04b57","sha1":"2b5fcd8431953c44e410d0489899e74f6d2cfecc","sha256":"affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149","sha512":"cb80ebc6424029c45e86ddf6c18eb43284605678ede88119301cc6493c21e282cace48fd849fc14e5d73c6aecf83645cc3a58051d5d8e22197e09912a41e3130","ssdeep":"384:e/Apz8weEie675kzn2XOvHNE18xEZJymoDyV+5uxfv3CBi3n9SDonvPsp:eFvhQL2XgE1mBDg+E/CBi39SDoHsp","tlshash":"d592d00d9a200f9581271db08a0b434edbb8e0575e4dedddf083312bde81259d25aafb","first_seen":"2023-04-17T18:58:51Z","last_seen":"2026-04-26T09:26:20.381799Z","times_seen":36473,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/klDu4YCVMfmigsONRPqrehRVT9TiXQopprmlNpp8uy496O9BZg0yHRN9gq47CdGfyz230","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:01.173Z","timestamp":1738679461173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /klDu4YCVMfmigsONRPqrehRVT9TiXQopprmlNpp8uy496O9BZg0yHRN9gq47CdGfyz230 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1298\r\ncontent-disposition: inline; filename=\"klDu4YCVMfmigsONRPqrehRVT9TiXQopprmlNpp8uy496O9BZg0yHRN9gq47CdGfyz230\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U5rjKeD%2BhxzBZACEIRPOeAXIv2M1S19nRD4AK%2F2uYERKCcFGXFuGa9siFuxdVe5aTUL%2BiGWqPP2cwIz2YSqJgcTILYevlfyADYEbxQOCTyWEgN9qX3pp%2B9t69MUeqw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca84b6a0b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4110\u0026min_rtt=4106\u0026rtt_var=1548\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2206\u0026delivery_rate=687756\u0026cwnd=236\u0026unsent_bytes=0\u0026cid=fcee5840b64f8ed8\u0026ts=120\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1374\u0026min_rtt=612\u0026rtt_var=340\u0026sent=293\u0026recv=72\u0026lost=0\u0026retrans=0\u0026sent_bytes=285614\u0026recv_bytes=28260\u0026delivery_rate=1095064\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=12388\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1298,"size_decoded":1298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32ca2081553e969f9fdd4374134521ad","sha1":"7b09924c4c3d8b6e41fe38363e342da098be4173","sha256":"216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587","sha512":"f75749c6344fcd7bf06872a3678bb2eb4cae2ddc31cc5d1ee73efba843705577841667733a83163af4336ec8a32df93e7a36155bd6282d7bb86159644975948c","ssdeep":"","tlshash":"53210aba23a84b4df0121e3016c04b92b7b5b9329ad693938106cf330f964cd7c6c08e","first_seen":"2025-01-27T17:47:42.419846Z","last_seen":"2025-09-19T23:18:03.501321Z","times_seen":33195,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/ghskoldCggu31f20b0CIcq30AhAYsKJHIz8ih0T8qklzvqPbAxgvsbYx7Fjsb5312204","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.166Z","timestamp":1738679460166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /ghskoldCggu31f20b0CIcq30AhAYsKJHIz8ih0T8qklzvqPbAxgvsbYx7Fjsb5312204 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25216\r\ncontent-disposition: inline; filename=\"ghskoldCggu31f20b0CIcq30AhAYsKJHIz8ih0T8qklzvqPbAxgvsbYx7Fjsb5312204\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vA5s0yhC5rFcEzK9YpBzHHR%2FYhY8P%2B5dF6zPOYEIFj66LaZlMliQPJsDqzoycnyQjVCSdBxx%2F4%2FXl8tJhb5fNdegQQKfpGrEx892MYy%2FoGSHq3zbbMCeBVIBz%2B1pmA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1ec5e0b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6094\u0026min_rtt=5176\u0026rtt_var=3777\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2205\u0026delivery_rate=227457\u0026cwnd=245\u0026unsent_bytes=0\u0026cid=dca01e1b40e399ad\u0026ts=132\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1252\u0026min_rtt=612\u0026rtt_var=272\u0026sent=305\u0026recv=76\u0026lost=0\u0026retrans=0\u0026sent_bytes=295431\u0026recv_bytes=28443\u0026delivery_rate=256655\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=14226\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25216,"size_decoded":25216,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9a795e2270664a7a169c73b6d84a575","sha1":"0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8","sha256":"d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740","sha512":"e17c8d922f52c8ab36d9c0a7dc41d32735cf1680ea653056308c6d23255fdbe40b96c68f0e7f8b3b521b6acb080cd825f94320364b0a70141606a4449d980517","ssdeep":"768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs","tlshash":"35b2afbf1ad14f30c51a6435a2ef6d51f7cde3186f900ae895b046519b2e9bacf2d80c","first_seen":"2025-01-27T17:47:42.413017Z","last_seen":"2025-09-19T23:18:03.462271Z","times_seen":37027,"resource_available":false,"data":null}},"time_used":3123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3043,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/qrUuPIkIJyHAyiv1wYuYiJigvHCwOn7bfnvR9rR44yuvgbBWiirpzftDxaot6p0bsE7miUuY3dVxS8fLcd238","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.167Z","timestamp":1738679460167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /qrUuPIkIJyHAyiv1wYuYiJigvHCwOn7bfnvR9rR44yuvgbBWiirpzftDxaot6p0bsE7miUuY3dVxS8fLcd238 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9648\r\ncontent-disposition: inline; filename=\"qrUuPIkIJyHAyiv1wYuYiJigvHCwOn7bfnvR9rR44yuvgbBWiirpzftDxaot6p0bsE7miUuY3dVxS8fLcd238\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HOd%2F%2FKYc%2BkCSkaFuT%2FnFrpJ7uAuKbzUJWdhYGa%2FSU7vUjBaETyvWkyALCDL9mss3XHCWKA6hAZSLMQu6Cq3L%2FwDwd9yxDxAUtkiaEaB20fKH21%2FNHZej1RksEUAtdA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1fc650b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5491\u0026min_rtt=4906\u0026rtt_var=2432\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2222\u0026delivery_rate=358961\u0026cwnd=248\u0026unsent_bytes=0\u0026cid=5cc4d2d6d08a107b\u0026ts=240\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1129\u0026min_rtt=612\u0026rtt_var=228\u0026sent=332\u0026recv=81\u0026lost=0\u0026retrans=0\u0026sent_bytes=323324\u0026recv_bytes=28670\u0026delivery_rate=859044\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=14330\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9648,"size_decoded":9648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4946eb373b18d178c93d473489673bb6","sha1":"16477acb73b63ca251d37401249e7e4515febd24","sha256":"666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92","sha512":"f684b90b748dc8399f76c5d8f94af6c4e6869143f18d19ce435b25eaa14e9647b120467bdd0795895676dc0cccdeabf82beb2f46ce2c5bf4c58ed9c134f30c48","ssdeep":"192:gwTgBYruFELhYmwd93mjW0l9OsENOLWcXdN4CLrHZfTtjOZgYM5cWjAaP6:gwTgBxaYmo5mS0l9OsuOL3NNVLlfTtjE","tlshash":"4a12af6f53b87b4cece19e3e4c48d73398fde91606176ac54a81a0c8d3988573a5228e","first_seen":"2025-01-27T17:47:42.409718Z","last_seen":"2025-09-19T23:18:03.495565Z","times_seen":37083,"resource_available":false,"data":null}},"time_used":3151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3144,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/GDSherpa-vf2.woff2","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.152Z","timestamp":1738679460152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\ncontent-disposition: inline; filename=\"GDSherpa-vf2.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 04 Feb 2025 14:31:03 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sgwVpPHCEEFG4hT3AFz98ncTgV3rsyoKSSaC86fQHeKr1Fn0Til0UmzVYsUlKZ5PRJNdDci8gmkaBIlkz35ukVhPyeF2djTAB%2BmUkY%2FaqZZBeBaDYHHl1WiLrH1tsA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc470b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5143\u0026min_rtt=4891\u0026rtt_var=1852\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2177\u0026delivery_rate=436608\u0026cwnd=232\u0026unsent_bytes=0\u0026cid=ee66596d8f4d90b4\u0026ts=212\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1082\u0026min_rtt=612\u0026rtt_var=190\u0026sent=343\u0026recv=84\u0026lost=0\u0026retrans=0\u0026sent_bytes=334153\u0026recv_bytes=28805\u0026delivery_rate=1025562\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=14458\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":93276,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-05-06T16:31:48.666565Z","times_seen":91711,"resource_available":false,"data":null}},"time_used":3313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3287,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/stMyxxK0IDPP9qgCDc8rTNedzKN2fDM6pw74BcJ21oI3vDVInb67agkvqLgkr6gPwIzghWVPkVroryEwSxgh253","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.168Z","timestamp":1738679460168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /stMyxxK0IDPP9qgCDc8rTNedzKN2fDM6pw74BcJ21oI3vDVInb67agkvqLgkr6gPwIzghWVPkVroryEwSxgh253 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17842\r\ncontent-disposition: inline; filename=\"stMyxxK0IDPP9qgCDc8rTNedzKN2fDM6pw74BcJ21oI3vDVInb67agkvqLgkr6gPwIzghWVPkVroryEwSxgh253\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JE6bWbCThX8P0CXU0ffEGO4Xr5ZfPTMIUg9Z7a6v8iTuIacG0C5PRd7pwF1MAdCb%2Bpf%2BVX2ueAZOscOQYFZR9GjgABNUUwVXlQT9Gng66jebNx4FZ6m8oXDg%2Fdj%2F2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1fc660b55-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4974\u0026min_rtt=4953\u0026rtt_var=1872\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2224\u0026delivery_rate=575005\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=f987a5b0da9d1732\u0026ts=123\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1177\u0026min_rtt=612\u0026rtt_var=285\u0026sent=424\u0026recv=87\u0026lost=0\u0026retrans=0\u0026sent_bytes=430622\u0026recv_bytes=28942\u0026delivery_rate=3065943\u0026cwnd=105600\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=15244\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17842,"size_decoded":17842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b52ecdc33382c9dca874f551990e704","sha1":"8f3bf8e41cd4cdddb17836b261e73f827b84341b","sha256":"cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342","sha512":"ac3d3c82bad9147ae5f083ed49c81a744f672ddfbb262135aa3f2c6601f8dffea11d8e323cef025c36d76c6f2515aa6814b622cf504ca01d13346e9ea989048f","ssdeep":"384:EwTZQ74B48VtrMvbt0sAvPTMaf+j5s8OYbqarRbjy5Qg1AR/kf63z/:hTa4B4mtYztAvPTMFhOYb3Rbu571AJa6","tlshash":"6c8218ba77256ca7e25c2bb77afd731b8062d78480681d92740f038aaf3913693901f5","first_seen":"2025-01-27T17:47:42.411749Z","last_seen":"2025-09-19T23:18:03.455649Z","times_seen":36919,"resource_available":false,"data":null}},"time_used":4117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4056,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-04T14:30:59.592Z","timestamp":1738679459592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/CzvWGW/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkU1V1NQV2RYa2dERjdEdTJ2Wi9ra2c9PSIsInZhbHVlIjoiZVBMa05MS1dJejM1MmFmWkZFTEVCSTlpY0NzcEdtcXVVVG90N2pIRDErSlkxa3lBVjNVZ0IzOTFVWEFkM3hUMXRqMExMMk5WbU1mZ1VvRDd3UEtlQmh6T2prZnduUkw3SHRGYkEvWXZERVB5cW0vMWZqNTJtMVZuOUVSdW9OOFkiLCJtYWMiOiI0NjY4MGJlYzE1MmJiY2ZhZWMzYWFlNTc1NWNkMTA3MDY0MmE4Y2U5NTA4ZTVhOWY5MGM5OTFmNThlZDdjOGM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFXRWxwWmtqNkNrS0hodWpQRStzVnc9PSIsInZhbHVlIjoiV25DSGJ3ekZqUlpsUDFYaFNvRjlrTlVVVTU0cmVyUWc5d3VZbTJLYW02TWJPc3hQQU9lTXhVQXRWWW9jMWsyYVoxUEJISHU0am9LUm53dmFvb1pZN2FqeUR6bE4xVXg5RUViUkNaWkF4bEppVmVGMkZ5VURWWllENFd0TEIrZlgiLCJtYWMiOiJjNmJjYjk1MzRhNWNiNTdiNjk1OTcyYTM4YTI3MTg3Y2IxNTEyNTQ0ZGFkNzBlYTJmODI2MDk2ZGY3MGFiYTljIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:30:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B4hEmN9zcfd%2B4%2B9BaKoHY5xDIAfCkDoxDaLwBc9KIkLFEgrBylHpvkIOgGLmqMyrVi3plKhlHIrzgnIRCTrqkl7ILgViit6hRsirc93ajthhTXFe1ffYiKYcXrCT%2FA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:30:59 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5c9e78510b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5554\u0026min_rtt=5527\u0026rtt_var=1604\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2238\u0026delivery_rate=502558\u0026cwnd=219\u0026unsent_bytes=0\u0026cid=b1738b3e41bd25ac\u0026ts=263\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=2937\u0026min_rtt=749\u0026rtt_var=2463\u0026sent=38\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=19998\u0026recv_bytes=7045\u0026delivery_rate=1419\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=10958\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142170,"size_decoded":142170,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (52491), with CRLF line terminators","md5":"7bd87fa387bd56e868a79491ec6eedae","sha1":"0212045dfc81f43757e9f386ba890add4bdbf363","sha256":"dd346ec36a17e2a25a63dcf584e0e251e40abefd6af60b80735aa6b85c3a099f","sha512":"494be64aa40e2c068040844134eb4eb5c42c26a2dc89135e98c8696f993a480897eeeca8dbbab398bac6305b7f8e3a9864c0e6e6e80b1a1df6ffa103d94abf01","ssdeep":"1536:gdZiJMv4lieP8/C8vbNUGyCW1eWSAR4+Q1VOq7YPiQy+u8IShDbZu/ls5feFTGeB:llwx7TNiWAR4hEmdQW/sfTYLJURpzwl","tlshash":"c1d34c0b118294f5c55c366af3cdaf4e51bb022f00bed2b62b561f4de37191a2e2716e","first_seen":"2025-02-04T14:31:23.266785Z","last_seen":"2025-02-04T14:31:23.266785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/favicon.ico","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:04.442Z","timestamp":1738679464442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IjFsc1VWWnZhTjAyK0xIRkhnOW1relE9PSIsInZhbHVlIjoicjRtc3ROQ08weHVOY1FkUVpHMkVPM1MvVUEvdkVtL29yNlBzb3JhVUxtOTg5ak43ay8zQmZ2bXplbC9vcGFxWlNQSkp3TGt5SUV2czlPaDI1d0NhOFloRzFWRkZNdUQ3RUI4U1lxbi9HbXVIbCtIMXlxbXRDdU44RzREdlZ1YWEiLCJtYWMiOiI5ZGQxYmRkZmU0NTllZmFhZjM3NDIyNzg0OTYzYzBmZjM3OGI0NzM5YzhmZGYzMThiNmEwZTQxN2E5NzZhNGZkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Inp4NEhwdkpYS0hydWRqbFgxcXNwSFE9PSIsInZhbHVlIjoiaVNDUWsrWGlPNjkxMGExMHRUR0tUSUJBSkpDemp4b29XSm5xN2pDSm9lSElDMmIrVno3clhtdjI5QzJweS9vN0VQdm5vQzRLYWpSSGEyWHc1MWlMNnJ4YW94MlZpb0x2U05KSk1EY2o5ZUdEcDRKZ2VOd3BDaGRnWitweitQbUYiLCJtYWMiOiIzMWQ1YjQ1MWFkZmVlY2MxYzE1YzJiOTJjMjExN2UzODA4Y2JkZjkwZGUxOWIyMTZmMDVjYWRhY2JmNjBhNWE4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 04 Feb 2025 14:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wyOCGQp1FJgNBn3Cr%2Bg9JhDNqXBQnT5fdMAFpowI63YNucF%2Bv7w0c%2BDMtzJsoTKE75f3mVlcj7tkxY1mRBEqXE5wnJKjkwhqaYYRWx9Zbn0GtqpRAPTF75JC3ontfw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 5\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5cbcca390b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4975\u0026min_rtt=4973\u0026rtt_var=1870\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2106\u0026delivery_rate=570398\u0026cwnd=247\u0026unsent_bytes=0\u0026cid=3c61491837b09f9f\u0026ts=227\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=960\u0026min_rtt=608\u0026rtt_var=330\u0026sent=483\u0026recv=109\u0026lost=0\u0026retrans=0\u0026sent_bytes=478184\u0026recv_bytes=30800\u0026delivery_rate=4051292\u0026cwnd=105600\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=15491\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/56pfgfQabXNO6711","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.127Z","timestamp":1738679460127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /56pfgfQabXNO6711 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-disposition: inline; filename=\"56pfgfQabXNO6711\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8GrbPY%2FyzafIbuD1IlT3Nt8Q6MtLLSkKn8az7IJhiEo3oCZ%2FbEobfwvRt%2BEuT%2FagLTbEqusRNYuT5R4I2nFAmKv7cTXVFyqoaLJbyybCel3Iwy5A2MPjcEASDamndw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1bc130b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5198\u0026min_rtt=5029\u0026rtt_var=1737\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2146\u0026delivery_rate=461887\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=c045fbbb6f2c2426\u0026ts=123\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1164\u0026min_rtt=612\u0026rtt_var=619\u0026sent=112\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=85330\u0026recv_bytes=24592\u0026delivery_rate=1611\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23854,"size_decoded":23854,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23854), with no line terminators","md5":"8025ea2266871f7af97c89d4b43dc4a6","sha1":"b80f1279a6438e2325d0ece6642ba34cebd9b4d8","sha256":"bad46ff2d915998c6f922bfca9b0f01b805f3b548cf038da1bf6643fe371385e","sha512":"87680aaab3a4f7f16645558fc3680a7577cd84e7479d4dc06fd36e3f38b583f6c7e13161cdbb1f6e63be66721672814e2a375a6207d4806e5873abf0666b9a4a","ssdeep":"384:OtafGtz2omXX44PL5Ky0sdY8xbXob4YEb+VkfipSgfW:GafSz2omXX44PL5Ky0sdY8xbXoEYW+5K","tlshash":"9eb2ba6173003369f127c13771d2aa8a21359542e6b75b7db876b1a8cfd60832b3365f","first_seen":"2025-01-27T17:47:42.413948Z","last_seen":"2025-02-05T01:27:18.176454Z","times_seen":2798,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/yz4vumqyzIhPR8OaBYruvXmpBopCdCwsDh1JejpCAezqCSWQxab180","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.159Z","timestamp":1738679460159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /yz4vumqyzIhPR8OaBYruvXmpBopCdCwsDh1JejpCAezqCSWQxab180 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"yz4vumqyzIhPR8OaBYruvXmpBopCdCwsDh1JejpCAezqCSWQxab180\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AEs5YnE%2BlgLn47u7Rzr8Kunn%2B%2BgQbRYeIbDhxqu2%2F%2B5okHSiMoWCMNKK40Jld6%2FuL3oGol1Ise6618%2F%2Fy%2BTBnjgammt1WV083Xv6uUEheGe8j54sK9JTLMst1RqLSw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc540b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4937\u0026min_rtt=4917\u0026rtt_var=1421\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2191\u0026delivery_rate=564072\u0026cwnd=244\u0026unsent_bytes=0\u0026cid=fc2ca749d5ff6d8b\u0026ts=129\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1390\u0026min_rtt=612\u0026rtt_var=410\u0026sent=288\u0026recv=68\u0026lost=0\u0026retrans=0\u0026sent_bytes=283471\u0026recv_bytes=25232\u0026delivery_rate=11420609\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=12183\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2905,"size_decoded":2905,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e924de0d471df54b6280f3dc8b187cb8","sha1":"857f03226070b502a9e06b4249710ec10be4c9e9","sha256":"24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33","sha512":"cd4e7a7bd510fc76aaa8efe77f8d78db1b4051b7a27ad9d9e23e620d0c51c7f2e2c0446610340040c75b0c82442f92c099d091788a1b783d65e429b141dcb3ee","ssdeep":"","tlshash":"5d51ec770368eede9190e3881b21b21eb3a4896474fb81d08f879d46ec066b7927cd60","first_seen":"2023-05-07T13:54:23Z","last_seen":"2025-04-06T10:50:06.516306Z","times_seen":22460,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1010,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.164Z","timestamp":1738679460164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Thu, 14 Mar 2024 00:03:58 GMT\r\nx-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Fri, 31 Jan 2025 02:19:39 GMT\r\nexpires: Sat, 31 Jan 2026 02:19:39 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: W/\"e0d37a504604ef874bad26435d62011f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 94UlhB7zkLHh3SfNkpBBIVlogCdrMexFfsBSSyXrEQwcToftYFCv3w==\r\nage: 389481\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10498,"size_decoded":10498,"mime_type":"text/css","magic":"ASCII text, with very long lines (10450)","md5":"e0d37a504604ef874bad26435d62011f","sha1":"4301f0d2b729ae22adece657d79eccaa25f429b1","sha256":"c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179","sha512":"ef838fd58e0d12596726894ab9418c1fbe31833c187c3323ebfd432970eb1593363513f12114e78e008012cdef15b504d603afe4bb10ae5c47674045acc5221e","ssdeep":"192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON","tlshash":"0a22724186196412409b6f13f0dabac27f0a221df52292bffb3d496cddea8561730f39","first_seen":"2024-03-14T18:17:02Z","last_seen":"2026-05-06T16:31:48.658627Z","times_seen":48220,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":59,"dns":56,"connect":1,"send":0,"wait":3,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/xyItQ5NXYzpqGY5cd30","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.130Z","timestamp":1738679460130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /xyItQ5NXYzpqGY5cd30 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:00 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-disposition: inline; filename=\"xyItQ5NXYzpqGY5cd30\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yKeGeWKngBVkWCSkn8hwIMS8uPDa8WpX3JWcuIPpNx7RPKOg%2BVxZFVxsTeyCqklJn2aqhn1b%2B08L5j2ybVs%2FUQP0fqu999rkJ8pcb2ST60ShyVS7pl9CwTtKYW5h3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1bc180b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5717\u0026min_rtt=4958\u0026rtt_var=2750\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2149\u0026delivery_rate=325709\u0026cwnd=237\u0026unsent_bytes=0\u0026cid=1e98d80ab45c72c9\u0026ts=202\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1257\u0026min_rtt=612\u0026rtt_var=360\u0026sent=123\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=95136\u0026recv_bytes=24775\u0026delivery_rate=780185\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=11447\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35786,"size_decoded":35786,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"38501e3fbbbd89b56aa5ba35de1a32fe","sha1":"d9b31981b6f834e8480ba28fbc1cff1be772f589","sha256":"a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b","sha512":"1547937aa9b366e76de44933ef48ef60e3d043245e8e3e01c97dfc2981f6b1f61463d9d30992fbcf2ca25fc1b7b32ff808b9789cfb965d74455522fc58e0c08c","ssdeep":"192:hToogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkf1WcrScuH9Ye3YdersR8Q5oqWjfuogF:h0DKAaZtJsOodwuhx5P6mqjDggJkLRn","tlshash":"07f2ac86255066385f3a277bf3ab00aceb6882b347961564b4bcb454cffc6e410d2d9f","first_seen":"2025-01-27T17:47:42.420764Z","last_seen":"2026-01-31T00:55:03.975062Z","times_seen":44016,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/klHayipV8yrgAKC4xTzlNfFxaHwMf8cdgp6JX7f5y07QlUj6jY9Z78170","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.157Z","timestamp":1738679460157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /klHayipV8yrgAKC4xTzlNfFxaHwMf8cdgp6JX7f5y07QlUj6jY9Z78170 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"klHayipV8yrgAKC4xTzlNfFxaHwMf8cdgp6JX7f5y07QlUj6jY9Z78170\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ssk1RdYPifeB7wbiO%2BLzIRGqerAdgcfoTV0gPGarslfTIsZ%2F%2BpCueW8OhK7zsGDrErR5BKyH6lm2yEP498xbxp1h3mMEfvJ%2FDqRGGtgFVhXyid5WMpHk7jTT7%2BqyZg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc520b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5266\u0026min_rtt=4960\u0026rtt_var=2001\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2194\u0026delivery_rate=389283\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=d8405070b3971930\u0026ts=137\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1251\u0026min_rtt=612\u0026rtt_var=360\u0026sent=302\u0026recv=75\u0026lost=0\u0026retrans=0\u0026sent_bytes=292083\u0026recv_bytes=28397\u0026delivery_rate=58422\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=13211\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7390,"size_decoded":7390,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bca9b46fee32162356ba5b4783e614dc","sha1":"cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5","sha256":"fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec","sha512":"ae7f8bc5b83d440a727e230138a3a633b7d5a73c123ae0db661081a7f4f13fb4155bc55aaac65ca7dfb0d76c619cf21e99e1a56e876253d67fe8a59c2d0a15ec","ssdeep":"192:8dEMK4RwdEdEMK4RwIwm6xiD7x9m9t6EQ3FabrItDWOO6Dcy:8dEMVwudEMVwIwtxiDHmP6lFeItDWOOe","tlshash":"dbe187d532f9e1e85482bbfd6681f17c3e1339fa7a32d99083d65c18dc8a00c45adca2","first_seen":"2023-05-10T21:54:10Z","last_seen":"2025-04-06T10:50:06.515793Z","times_seen":21752,"resource_available":false,"data":null}},"time_used":2039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/rs09BSrCOT3cmMjwG8oOvyhc8gVb8ESF6ghpvJUQ5rTrMaMAEd5FVqxgef200","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.160Z","timestamp":1738679460160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /rs09BSrCOT3cmMjwG8oOvyhc8gVb8ESF6ghpvJUQ5rTrMaMAEd5FVqxgef200 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:03 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"rs09BSrCOT3cmMjwG8oOvyhc8gVb8ESF6ghpvJUQ5rTrMaMAEd5FVqxgef200\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wzF1wfUNFP%2F86XraETwx3baDT8T9aOFcsxV1q156v6qphmfB%2B2WQZqvoc89C04SzIUVMrMMHl7fPPu9IL5tpv4NXw3mXTKw%2BEOY4WUwj6bwdqI7IDsELZVNDgwdvIA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc560b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5649\u0026min_rtt=5623\u0026rtt_var=1622\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2198\u0026delivery_rate=492904\u0026cwnd=237\u0026unsent_bytes=0\u0026cid=b6cefa35a9611053\u0026ts=188\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1162\u0026min_rtt=612\u0026rtt_var=289\u0026sent=319\u0026recv=79\u0026lost=0\u0026retrans=0\u0026sent_bytes=309646\u0026recv_bytes=28579\u0026delivery_rate=3887659\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=14281\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":268,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1318aafc1fb9ded0c623e5b9a557e6df","sha1":"0917cdd7633cd1642b02b2b785416ec7e5106dcc","sha256":"d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4","sha512":"a81f1cfdc923effa9e7afe6899bbe1114bbc25b197db0a282d366f409507714ecbf7c5ead82c86f62115953f11b80ea96da244e42bfb063b7e5c23e538395d2a","ssdeep":"","tlshash":"05d0c2f0a0a0f54d8308e25a16a4a4b025aa749801ee042ca4a2071a21084efb8e4638","first_seen":"2023-09-01T07:29:56Z","last_seen":"2025-04-05T02:13:18.209121Z","times_seen":19072,"resource_available":false,"data":null}},"time_used":3107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.163Z","timestamp":1738679460163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 14 May 2024 21:48:24 GMT\r\nx-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Wed, 29 Jan 2025 17:13:28 GMT\r\nexpires: Thu, 29 Jan 2026 17:13:28 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: W/\"0329c939fca7c78756b94fbcd95e322b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 9GNixJIm5ptpvgMp0zg2pF3KVXXtwfIWrhxahBlRGSrKv_8nQS1XEg==\r\nage: 508652\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222931,"size_decoded":222931,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":59,"dns":59,"connect":1,"send":0,"wait":3,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/mnK0EVPAdAIbe1wtP5LvyPi8r4s6HfpxIyij1PyLSEDWdGRc62iTVTa69huv220","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:01.171Z","timestamp":1738679461171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /mnK0EVPAdAIbe1wtP5LvyPi8r4s6HfpxIyij1PyLSEDWdGRc62iTVTa69huv220 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"mnK0EVPAdAIbe1wtP5LvyPi8r4s6HfpxIyij1PyLSEDWdGRc62iTVTa69huv220\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DIKM%2Ba7wr1CP%2FIOyYrRyW6wx2BkZqXI2v03DbxwAtbM7LqF5sQo62VRXBck7nLJ7S28LGR7%2F8kjMFzDqE0o9Yxn%2BmQNkHUYb70c2mBoo%2ByUJMgKxDva296089r08wA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca84b670b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5584\u0026min_rtt=5264\u0026rtt_var=2038\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2200\u0026delivery_rate=426986\u0026cwnd=247\u0026unsent_bytes=0\u0026cid=582cd37398ac4277\u0026ts=125\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1349\u0026min_rtt=612\u0026rtt_var=306\u0026sent=297\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=289363\u0026recv_bytes=28306\u0026delivery_rate=11211\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=12391\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1864,"size_decoded":1864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b5c228b4faba433d06ec569ed855b2d","sha1":"a7d3882b93e332460e7c59510a6a811ef011983f","sha256":"eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed","sha512":"bb88e91a51d760531b2b8349102a757795c6aa66e94ce7aae8edde47485c07a2ae12428ce2b76804a877fd8bc986ca2469bd6302b9904765b52f1110a87050d9","ssdeep":"","tlshash":"b441df1adb15e532ec05c3aeea74cca9311ab1ed6ce944c57dc6c33fa2605fe4688390","first_seen":"2023-05-02T01:14:44Z","last_seen":"2025-04-06T10:50:06.513586Z","times_seen":21399,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/34lqMoq2Y1QwSQvapyEccmrXa3Ogh56TDmaWRRkJNQ89108","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.171Z","timestamp":1738679460171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /34lqMoq2Y1QwSQvapyEccmrXa3Ogh56TDmaWRRkJNQ89108 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:04 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline; filename=\"34lqMoq2Y1QwSQvapyEccmrXa3Ogh56TDmaWRRkJNQ89108\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=He%2Fl9NoqktFo3%2FU1oDi82jYLHTnmvxh8Cwi4Tn6Sh5emcBkkhXvA%2BOPNJP%2B4usCzBPqBwnTVWpcrSGGGqUgT6qvRIuxm2IVPqVbhF2T9HoLYhEMYY269C3dOWKETIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1fc670b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5169\u0026min_rtt=5157\u0026rtt_var=1469\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2148\u0026delivery_rate=544654\u0026cwnd=177\u0026unsent_bytes=0\u0026cid=8460aadbd2fd122f\u0026ts=116\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1112\u0026min_rtt=612\u0026rtt_var=345\u0026sent=426\u0026recv=88\u0026lost=0\u0026retrans=0\u0026sent_bytes=432014\u0026recv_bytes=28987\u0026delivery_rate=587861\u0026cwnd=105600\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=15246\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":136817,"size_decoded":136817,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T17:45:53.632738Z","times_seen":14749736,"resource_available":true,"data":null}},"time_used":4261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4058,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/lvOKF5OrNHBniq8xEkVicBurmvYG1KtvZWvlQYwiWpui28jwbv6jl","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:01.155Z","timestamp":1738679461155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"POST /lvOKF5OrNHBniq8xEkVicBurmvYG1KtvZWvlQYwiWpui28jwbv6jl HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 55\r\nOrigin: https://nzcn.nusiblerser.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:01 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BPxCCs83useaGQHWqnF77U4sCTaKbcMRRkHwM1EFrL8VTfBCRJce3FF0xQ7gRh7ufwK9K6cpBoTRNOxlr4xc07xJaLfnxxe6lqP%2FDxOYR7DEi604WVJ04wibO%2Fdk8Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjFsc1VWWnZhTjAyK0xIRkhnOW1relE9PSIsInZhbHVlIjoicjRtc3ROQ08weHVOY1FkUVpHMkVPM1MvVUEvdkVtL29yNlBzb3JhVUxtOTg5ak43ay8zQmZ2bXplbC9vcGFxWlNQSkp3TGt5SUV2czlPaDI1d0NhOFloRzFWRkZNdUQ3RUI4U1lxbi9HbXVIbCtIMXlxbXRDdU44RzREdlZ1YWEiLCJtYWMiOiI5ZGQxYmRkZmU0NTllZmFhZjM3NDIyNzg0OTYzYzBmZjM3OGI0NzM5YzhmZGYzMThiNmEwZTQxN2E5NzZhNGZkIiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:31:01 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Inp4NEhwdkpYS0hydWRqbFgxcXNwSFE9PSIsInZhbHVlIjoiaVNDUWsrWGlPNjkxMGExMHRUR0tUSUJBSkpDemp4b29XSm5xN2pDSm9lSElDMmIrVno3clhtdjI5QzJweS9vN0VQdm5vQzRLYWpSSGEyWHc1MWlMNnJ4YW94MlZpb0x2U05KSk1EY2o5ZUdEcDRKZ2VOd3BDaGRnWitweitQbUYiLCJtYWMiOiIzMWQ1YjQ1MWFkZmVlY2MxYzE1YzJiOTJjMjExN2UzODA4Y2JkZjkwZGUxOWIyMTZmMDVjYWRhY2JmNjBhNWE4IiwidGFnIjoiIn0%3D; expires=Tue, 04-Feb-2025 16:31:01 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca83b550b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5554\u0026min_rtt=5497\u0026rtt_var=1586\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2361\u0026delivery_rate=508571\u0026cwnd=246\u0026unsent_bytes=0\u0026cid=d2233deea4d60d03\u0026ts=134\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1349\u0026min_rtt=612\u0026rtt_var=306\u0026sent=295\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=287818\u0026recv_bytes=28306\u0026delivery_rate=11211\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=12391\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13,"size_decoded":13,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"84c972a57833e89690c343e6be06fd54","sha1":"f2a6b01cfd636b926d63d178e23b073532712bb1","sha256":"b56c541453e071de90d0842d3560027951c5086abbdc1d543982b4c1f609645a","sha512":"2a3d1e6da4dd7813e4c34ffc176eb5b767062e9e7c7f14bf633c5efa0f1a6ccff79aa58e1b0f02f3ed54cedd83793a1004d5240b9eff83a455651257f3dc3660","ssdeep":"","tlshash":"616000cc00fcc000000303030fcc0030f00c00000f0300c00c30c03000030003030000","first_seen":"2023-09-05T03:12:50Z","last_seen":"2025-03-26T16:06:24.622496Z","times_seen":765,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nzcn.nusiblerser.ru/mnSBgIZRU1FTrQTJQBoklVusXqJw11LWewozdq6G78150","fqdn":"nzcn.nusiblerser.ru","domain":"nusiblerser.ru","tld":"ru"},"ip":{"addr":"104.21.63.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG","date":"2025-02-04T14:31:00.156Z","timestamp":1738679460156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nusiblerser.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jan 2025 18:25:33 GMT","end":"Wed, 09 Apr 2025 19:22:09 GMT"},"fingerprint":{"sha1":"25:35:61:06:3D:FE:E5:7A:DB:B6:7F:FC:10:F1:D2:69:4E:32:C7:62","sha256":"DD:08:D5:6D:8E:53:DC:27:E0:C1:76:71:B3:C3:EC:2E:F2:45:F5:5F:39:2D:03:6A:B2:38:B5:15:A0:B3:48:7F"}}},"request":{"raw":"GET /mnSBgIZRU1FTrQTJQBoklVusXqJw11LWewozdq6G78150 HTTP/1.1\r\nHost: nzcn.nusiblerser.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nzcn.nusiblerser.ru/bmebwioblkjsviids511m6humjruinchqz?ECYJIPIJULYMURG\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhXNjd0Y1h2VkFyUWcxWGxBRW1OS1E9PSIsInZhbHVlIjoiN0pqeFkrbjhpTHV1SWkwUzRjM3Azb2dmSTc0TzdycTZJV0xWY3lkU2kxV1ZEcDB1WTlzOEhMR3M1WWxtMHJyYlVBTGQ4VmZGVnN2eEprSU5ob25LNjZXTlZmd3JzbktNRC9HVWdpUnVTYnBQaDFCdDdiakF2cGNlN2JYWmRjZnkiLCJtYWMiOiIwMjQxMmEzODU4M2JkNzkzMzkyOTUzMDVjYzFhODdhYmI3YmZmZjRmZDQ2MDY0OGEyMzkzYmE3YWJkYTA1ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1NTFRqdllCQ0xueTMzUk9WbVpZeUE9PSIsInZhbHVlIjoienFUVzYyT0dyeHRwZGZiemUwRVNrcVZEQ0JRZkt3NVNTOXMyMmVxdjRUWXdna3E4b3gvMDYwWlVWQVNtakgxMENEcnNDUVFWdnNMejRCQkJyc2ZJZ2tJMjh1bmV4Z3hTYlBTcml5b3RTRWQ1U2IwYTVLL0dXZFVLREt3dzE1VDQiLCJtYWMiOiIwMmU1NTMxMDRmZGZkNjMxOTJkZDBkZGUzYzQzNGUyYzM1NjAyYTRkY2JlNmNmOGIwZTMzZmYwZWY3NDNjMjQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 04 Feb 2025 14:31:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"mnSBgIZRU1FTrQTJQBoklVusXqJw11LWewozdq6G78150\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UF5S7yXkfemTuRp7BhH%2FRJHE8VzpOdDlt6Hy%2FEz9fSm3oh0oSZgssBe1Ihwv%2FpDVZNO6r27DlBaybWOt3j0b%2B9Z85YhmykcMCWIdWArt1w0bNhkvdkEOeEdxzryX1Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 90cb5ca1dc500b55-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5740\u0026min_rtt=5544\u0026rtt_var=1944\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2182\u0026delivery_rate=406276\u0026cwnd=243\u0026unsent_bytes=0\u0026cid=7240d1b368ed7bbf\u0026ts=118\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1251\u0026min_rtt=612\u0026rtt_var=360\u0026sent=301\u0026recv=75\u0026lost=0\u0026retrans=0\u0026sent_bytes=291044\u0026recv_bytes=28397\u0026delivery_rate=58422\u0026cwnd=52800\u0026unsent_bytes=0\u0026cid=fcc851a27fce3c59\u0026ts=13196\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":270,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c09c5ea7c28d6feb4d124957dde0a0d","sha1":"1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e","sha256":"b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a","sha512":"01161867b3ca0386b132618e04fa09bd0dea1e14a8445001e0683f7a2689deb555bed1c31ec69813d0542284e281cc629c323cb8f56899de0b027e46f651a5ca","ssdeep":"","tlshash":"f0d02bb56358bd4d812ca1d20bd031612147b08cb6ef6038dbcd04243404c7bbda8f38","first_seen":"2023-05-12T00:56:48Z","last_seen":"2025-04-06T09:35:55.879922Z","times_seen":19857,"resource_available":false,"data":null}},"time_used":2024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2024,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}