dd8bc1d83a2c560c2f0e6342968b0af6.llasistemas.com.br/zqunuatasjd/seihfhguhay/xkaiiwlodjh/Zaiwurtyegfect/Slhozx/YWRvbGZvLnBhc3RvcmlAc2x1cnBtYWlsLm5ldA==
108.179.253.23200 OK 1.9 kB URL dd8bc1d83a2c560c2f0e6342968b0af6.llasistemas.com.br/zqunuatasjd/seihfhguhay/xkaiiwlodjh/Zaiwurtyegfect/Slhozx/YWRvbGZvLnBhc3RvcmlAc2x1cnBtYWlsLm5ldA==
IP 108.179.253.23:0
ASN #19871 NETWORK-SOLUTIONS-HOSTING
File type HTML document, Unicode text, UTF-8 text, with very long lines (794)
Hash ab54192b9a5cd4f1109c1ebf004abf93
a5793e8ed7b28c8f9e3eb4b87626082c2e02f1c8
4acce2e43aff2da7e698092b5481f54773e6921717c8144c622317372fde142c
GET /zqunuatasjd/seihfhguhay/xkaiiwlodjh/Zaiwurtyegfect/Slhozx/YWRvbGZvLnBhc3RvcmlAc2x1cnBtYWlsLm5ldA== HTTP/1.1
Host: dd8bc1d83a2c560c2f0e6342968b0af6.llasistemas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 1867
content-type: text/html;charset=UTF-8
date: Tue, 25 Feb 2025 12:31:32 GMT
server: Apache
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.95.41302 Found 0 B URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP 104.18.95.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Feb 2025 12:31:35 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/b0e4a89976ce/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 9177b6954e770b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
yuou.aphiustone.ru/GIeNI/
104.21.96.1200 OK 34 kB URL yuou.aphiustone.ru/GIeNI/
IP 104.21.96.1:0
File type HTML document, ASCII text, with very long lines (65364)
Hash 0e17cc9b04c41722c833df8fcf3e456c
74fc6d75483b07be4d70d8a0a3107e66a8e48674
53bc3d87cd939c2abbabbddef54e3d04ba63cff318004368823e7baa8be36aeb
GET /GIeNI/ HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dd8bc1d83a2c560c2f0e6342968b0af6.llasistemas.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Feb 2025 12:31:34 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nD%2FJI3C%2FjhNuAYD0saYM9b4QY3nX%2FAnfekd3aopOzt9kf43mpS0KGo92zsu%2BT%2BZDHCOOP1EdBLwdm3SnXGwtUGX0%2Fp0NOmffFWzZQW3OIFOPsHkjnIDa9ML6Jd3q%2FoVhMa%2Ba"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: XSRF-TOKEN=eyJpdiI6IjdWQm5Id3dROUNZemxYbHJDVTBmVUE9PSIsInZhbHVlIjoiOVR2OXRscjN6WWxpSE5RTnVDSGJ5b2JJc0VRNFdOU0tvU2dkYVJzdUpwWHlXZlpmUkczOGpiZ0FkMGxlSHFiSnE4WFhTSzc1U2ZkakYvLytwR0FrVFBvKy9WV3V1WTJ6YW5CUzg1VkRCMGRPR3hPNkNpN2JZSUlFcXhRUW44K3giLCJtYWMiOiIyMTJjNGVmZDJjYjNiOWYyMmMwNGE3NjYzMGZiODJkN2UzMjk5Y2VkNjgyNTVjMzUzMzRkMGU2NjVjN2YwOWNmIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:34 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkYvQTlwVk9LS1cyY1c0SGlwdDh3VFE9PSIsInZhbHVlIjoiWklGWi92eExyWjFBM0d3RVNRdU9scURMTnlBeDZlV1VmMHZJN1dpS3R4T0RSRExmRmVNa3FsMXhSeXgvbVMyWnE4ZnFiZ0o1a3NZSnhWQ3phMW5ISmpKb1Nic2VKaFYwK1NRK0F2cUJyaGtLNmpWejRrdFBIOUZuc0FxWEUxT0ciLCJtYWMiOiJhMDgwNjA4NjZkNTU3MmFjNWU5MjFmMzBlZGRiMTcxODlmNGM3NDcxNDQ2NmM3MjJhNzA0ODJmOTFmYTQ0MTlhIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:34 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 9177b68dbfbb1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1329&min_rtt=1325&rtt_var=505&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1476&delivery_rate=2098747&cwnd=251&unsent_bytes=0&cid=d186ea186fce0f4c&ts=246&x=0", cfL4;desc="?proto=TCP&rtt=6329&min_rtt=452&rtt_var=11714&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3279&recv_bytes=1307&delivery_rate=6581818&cwnd=254&unsent_bytes=0&cid=62e0e9b296ff8d1a&ts=762&x=0"
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.130.137:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Feb 2025 12:31:35 GMT
age: 1728352
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 135291
x-timer: S1740486695.259922,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
developers.cloudflare.com/favicon.png
104.16.2.189200 OK 937 B URL developers.cloudflare.com/favicon.png
IP 104.16.2.189:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash fc3b7bbe7970f47579127561139060e2
3f7c5783fe1f4404cb16304a5a274778ea3abd25
85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe
GET /favicon.png HTTP/1.1
Host: developers.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Feb 2025 12:31:35 GMT
content-type: image/png
content-length: 937
cache-control: public, max-age=0, must-revalidate
etag: "6be7ff94b6151f8cfbf08b53a17e2ac1"
set-cookie: __cf_bm=swtQjm2bAOwDX8Wlf_wVYLWEg276W_8iCok4oGVi.QM-1740486695-1.0.1.1-PI5AmllBDrZqSPNR2.KBZimYsGuARsJUaNmv52sQHaMeBQ7gXDEenNnJFNVqfIAkoS601AHF3_SHqbcrm50JfA; path=/; expires=Tue, 25-Feb-25 13:01:35 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
cf-ray: 9177b6969ba8b505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.25.14:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 891662
expires: Sun, 15 Feb 2026 12:31:44 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qm1Y2JRI9NA6qAcXQtuVF0JursN6ntFrvCQM98D90x1mQoMujEug1Y%2FbZWl1BqQM0LKyl2n3RXqF6GucS9cTMw1tomilCYNphJVzKcrueSmTFOiCqYGtPekzGGfjlTN8MJ0GmM1K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9177b6ce5bc156a8-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.130.137:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Feb 2025 12:31:44 GMT
age: 1728361
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 135309
x-timer: S1740486704.382405,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.130.137:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Feb 2025 12:31:46 GMT
age: 1728363
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 135310
x-timer: S1740486706.206821,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.25.14:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 891664
expires: Sun, 15 Feb 2026 12:31:46 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aOaBptnNzBJe2tIi5EGVPVrv6MhzR2%2Fen1lV00zEEeJNdqOiXeY3Ss0faVQBefUZlX4I%2BtjV6AAR3yel%2Byk99zf396bMlzsND4VtuSFAScV9k9PP5NJLMwMhcwvT6zdsviqwxrad"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9177b6d9dc0f56a8-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.3302 Found 0 B URL GET HTTP/2 github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
IP 140.82.121.3:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerSectigo Limited
Subjectgithub.com
FingerprintE4:33:71:DD:D6:91:4A:75:B6:1F:9E:4F:74:6D:9B:F0:DD:26:FC:3A
ValidityWed, 05 Feb 2025 00:00:00 GMT - Thu, 05 Feb 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Tue, 25 Feb 2025 12:29:53 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T122953Z&X-Amz-Expires=300&X-Amz-Signature=2497ee633d09be87b8b7518954f987fe51e1143a75fa0e409f24209c236c6174&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 2CB7:241BF1:728712:7504C5:67BDB832
X-Firefox-Spdy: h2
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
18.165.140.53200 OK 11 kB URL GET HTTP/2 ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
IP 18.165.140.53:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Hash 12bdacc832185d0367ecc23fd24c86ce
4422f316eb4d8c8d160312bb695fd1d944cbff12
877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0
GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10796
server: nginx
last-modified: Tue, 23 Feb 2021 04:20:08 GMT
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 20 Feb 2025 19:53:24 GMT
expires: Fri, 20 Feb 2026 19:53:24 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: "12bdacc832185d0367ecc23fd24c86ce"
x-cache: Hit from cloudfront
via: 1.1 caaeeba7a64afd629b7d4bf6bfaac0c4.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
x-amz-cf-id: DmIf-65cjsP3cpoQj3zdxU9fQataX9Gn37gO7629RcANIlyw-dLdCg==
age: 405501
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/qrAMGHsPlWbQcpZWtfef56LzG8sCWhe8z45140
104.21.96.1200 OK 892 B URL GET HTTP/3 yuou.aphiustone.ru/qrAMGHsPlWbQcpZWtfef56LzG8sCWhe8z45140
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash 41d62ca205d54a78e4298367482b4e2b
839aae21ed8ecfc238fdc68b93ccb27431cd5393
20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /qrAMGHsPlWbQcpZWtfef56LzG8sCWhe8z45140 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/webp
content-length: 892
server: cloudflare
content-disposition: inline; filename="qrAMGHsPlWbQcpZWtfef56LzG8sCWhe8z45140"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iFMwDURiAv6VF787IfD009VPaNmcP3GOY%2Ff8WdOwyeJ9AlC7T%2BmL0HOj94DjYLaodZ8EeweHrjXzBLrpU32ccin66IAXfNKSLUK3LBdH0dL8lt58%2F%2F1sx3xvABVdpTk1onDD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1321&min_rtt=1266&rtt_var=395&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2187&delivery_rate=2197530&cwnd=243&unsent_bytes=0&cid=95655d94bcb0d048&ts=231&x=0"
cf-ray: 9177b6d9f94856cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/opIN2a8CqtNCkNhzU1bgNsRco12ljtK4IQs78WFSdPdGD1PDm1r6InEwtNcd231
104.21.96.1200 OK 9.6 kB URL GET HTTP/3 yuou.aphiustone.ru/opIN2a8CqtNCkNhzU1bgNsRco12ljtK4IQs78WFSdPdGD1PDm1r6InEwtNcd231
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4946eb373b18d178c93d473489673bb6
16477acb73b63ca251d37401249e7e4515febd24
666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /opIN2a8CqtNCkNhzU1bgNsRco12ljtK4IQs78WFSdPdGD1PDm1r6InEwtNcd231 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/webp
content-length: 9648
server: cloudflare
content-disposition: inline; filename="opIN2a8CqtNCkNhzU1bgNsRco12ljtK4IQs78WFSdPdGD1PDm1r6InEwtNcd231"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ksHNuyhZ91x%2BbjogiX5VSir8XvqjBLoxZuc6Q41JLiZrXopcOcxXFyFexoBM0musFovFmbTG7MvvYYl8OjwAqxv5wRaKtHYwveVqswGvygSBUCsw%2B3%2FIqpJQIp%2FXedqrBxG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1412&min_rtt=1285&rtt_var=573&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2212&delivery_rate=2216342&cwnd=252&unsent_bytes=0&cid=7095510c12623af5&ts=229&x=0"
cf-ray: 9177b6da194e56cb-OSL
alt-svc: h3=":443"; ma=86400
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T122953Z&X-Amz-Expires=300&X-Amz-Signature=2497ee633d09be87b8b7518954f987fe51e1143a75fa0e409f24209c236c6174&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.111.133200 OK 10 kB URL GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T122953Z&X-Amz-Expires=300&X-Amz-Signature=2497ee633d09be87b8b7518954f987fe51e1143a75fa0e409f24209c236c6174&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
IP 185.199.111.133:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10017)
Hash 6c20a2be8ba900bc0a7118893a2b1072
ff7766fde1f33882c6e1c481ceed6f6588ea764c
b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500
GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T122953Z&X-Amz-Expires=300&X-Amz-Signature=2497ee633d09be87b8b7518954f987fe51e1143a75fa0e409f24209c236c6174&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 07 Dec 2021 16:38:45 GMT
etag: "0x8D9B9A009499A1E"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000
x-ms-version: 2023-11-03
x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT
x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=randexp.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 3538
date: Tue, 25 Feb 2025 12:31:46 GMT
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 11369, 0
x-timer: S1740486706.441179,VS0,VE98
content-length: 10245
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/wxrCUq0Qd6qLV2p5RZTQsZNIRN4j54UIopETetDv7Z7XsZcRJ2634130
104.21.96.1200 OK 644 B URL GET HTTP/3 yuou.aphiustone.ru/wxrCUq0Qd6qLV2p5RZTQsZNIRN4j54UIopETetDv7Z7XsZcRJ2634130
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash 541b83c2195088043337e4353b6fd60d
f09630596b6713217984785a64f6ea83e91b49c5
2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /wxrCUq0Qd6qLV2p5RZTQsZNIRN4j54UIopETetDv7Z7XsZcRJ2634130 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: image/webp
content-length: 644
server: cloudflare
content-disposition: inline; filename="wxrCUq0Qd6qLV2p5RZTQsZNIRN4j54UIopETetDv7Z7XsZcRJ2634130"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MfUQ1QUfOrReFCgcLjikX0nns7INk2%2F3s7sTHB1BVQ8aC%2FY3aYmpFX4H4DQ6iM2KLJy8BiTIewX6Atb73S2oyBRweeI6Sc2TzFTMzlzgKbjWRIMI2TqfohLc7lI1hLVUQ9Xc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1412&min_rtt=1383&rtt_var=577&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2205&delivery_rate=1761286&cwnd=252&unsent_bytes=0&cid=75ab926cd65e01be&ts=431&x=0"
cf-ray: 9177b6d9f94756cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/ijnkYfZfU3v6aps9oZ686TBmYkB9j3klv5mgN4q5m4aNmjOdef210
104.21.96.1200 OK 25 kB URL GET HTTP/3 yuou.aphiustone.ru/ijnkYfZfU3v6aps9oZ686TBmYkB9j3klv5mgN4q5m4aNmjOdef210
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash f9a795e2270664a7a169c73b6d84a575
0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8
d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /ijnkYfZfU3v6aps9oZ686TBmYkB9j3klv5mgN4q5m4aNmjOdef210 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/webp
content-length: 25216
server: cloudflare
content-disposition: inline; filename="ijnkYfZfU3v6aps9oZ686TBmYkB9j3klv5mgN4q5m4aNmjOdef210"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mYzvJI%2BceqCAE3FV%2Fd0cZhY%2FqvrrOjZXGxMF73na9vzvVjMnfLQa724rerbdy4f%2FAFOjy4gAOGBsZhflWY9zSeg5GU8fQ5rcY5Tf78CwsxG1548ypWoG5IyIdVDfqnSDJVIK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1281&min_rtt=1259&rtt_var=488&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2202&delivery_rate=2262112&cwnd=249&unsent_bytes=0&cid=bb632d2c82101c89&ts=230&x=0"
cf-ray: 9177b6da194d56cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/stDjziLTZju7zDAsh70kfizvAI0j7b7hyFZStR71Qpq2gbKdmnwzdoSJteTeU0VAEvYU4MqIPYef254
104.21.96.1200 OK 18 kB URL GET HTTP/3 yuou.aphiustone.ru/stDjziLTZju7zDAsh70kfizvAI0j7b7hyFZStR71Qpq2gbKdmnwzdoSJteTeU0VAEvYU4MqIPYef254
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4b52ecdc33382c9dca874f551990e704
8f3bf8e41cd4cdddb17836b261e73f827b84341b
cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /stDjziLTZju7zDAsh70kfizvAI0j7b7hyFZStR71Qpq2gbKdmnwzdoSJteTeU0VAEvYU4MqIPYef254 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: image/webp
content-length: 17842
server: cloudflare
content-disposition: inline; filename="stDjziLTZju7zDAsh70kfizvAI0j7b7hyFZStR71Qpq2gbKdmnwzdoSJteTeU0VAEvYU4MqIPYef254"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BD%2BVeQAjpM8QJMQOW6hYmHYg0uuIRfh6FmiBO26jayeegeXwzF9Qg9uS77rKPsKi%2FoZMlBl2CgGmiNmIDVcmH85%2FBz7L0n2YAzp8FHW6w9%2B0EPjXq9ijxk7sLj6pbJinErs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=2016&min_rtt=1815&rtt_var=824&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2228&delivery_rate=1569146&cwnd=224&unsent_bytes=0&cid=f83d7e67c2cf0ae3&ts=416&x=0"
cf-ray: 9177b6da194f56cb-OSL
alt-svc: h3=":443"; ma=86400
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
18.165.140.53200 OK 20 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
IP 18.165.140.53:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 20416, version 2.197
Hash d99a7377dabb55772ca9f986b0a04b57
2b5fcd8431953c44e410d0489899e74f6d2cfecc
affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149
GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yuou.aphiustone.ru
DNT: 1
Connection: keep-alive
Referer: https://ok4static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
date: Mon, 10 Feb 2025 01:49:35 GMT
server: nginx
last-modified: Tue, 07 Nov 2023 18:56:28 GMT
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
expires: Tue, 10 Feb 2026 01:49:35 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 caaeeba7a64afd629b7d4bf6bfaac0c4.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
x-amz-cf-id: URC9C8t8bHqGqxGhVdiWoVw3jKRlRufc7JBzi6fub5AKRdvr1X3U0Q==
age: 1334532
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/GDSherpa-regular.woff2
104.21.96.1200 OK 29 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-regular.woff2
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Hash 17081510f3a6f2f619ec8c6f244523c7
87f34b2a1532c50f2a424c345d03fe028db35635
2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-regular.woff2 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff2
content-length: 28584
server: cloudflare
content-disposition: inline; filename="GDSherpa-regular.woff2"
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KjYgQlHRqNfAykkjQPU8Z%2F%2FZ8tJnS%2BrOpizNMBX20wP5iS8%2BiEeyODALn7JziKjbPTfW1mPVEv7lfezt5U9bhtP%2FXcMBcI2MmDVXx6UO8CTZN1ZTLJ3EpDP4OKABIoDXDP%2B6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1351&min_rtt=1292&rtt_var=466&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2193&delivery_rate=1833869&cwnd=251&unsent_bytes=0&cid=ade38a548f21985b&ts=576&x=0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9177b6d9e94356cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/GDSherpa-bold.woff2
104.21.96.1200 OK 28 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-bold.woff2
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Hash a4bca6c95fed0d0c5cc46cf07710dcec
73b56e33b82b42921db8702a33efd0f2b2ec9794
5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-bold.woff2 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff2
content-length: 28000
server: cloudflare
content-disposition: inline; filename="GDSherpa-bold.woff2"
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4EPfJ9K0bBp3V7Cas1q%2FyJSR0QQcTC3yBe%2FF48qSiRYRuQ%2Fl9Uq8L%2FJShcgEROKKVvQcu5qMzYCfyQ4h2xlRYP0V23yxv15iISgwmNLkLCH10J1vpcX1hViHo1b8wODMSjV%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1328&min_rtt=1227&rtt_var=532&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2190&delivery_rate=2321108&cwnd=163&unsent_bytes=0&cid=50d86c0e294212f2&ts=609&x=0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9177b6d9e94156cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/GDSherpa-regular.woff
104.21.96.1200 OK 37 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-regular.woff
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format, TrueType, length 36696, version 1.0
Hash a69e9ab8afdd7486ec0749c551051ff2
c34e6aa327b536fb48d1fe03577a47c7ee2231b8
fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-regular.woff HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff
content-length: 36696
server: cloudflare
content-disposition: inline; filename="GDSherpa-regular.woff"
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mfYFOuNMqkR%2Bcz%2FabrnkhWWsllR%2FWuEMl2cWfeA%2BcYCIEwkHZ4jJnCUuzN7SzrgNeM6nyx4JHRpXOsAt6XXxJvJyOTGemzAmQmGsuI%2Bt3gXwzNJFO%2FYJvUTcLpsAgmtgjF6y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1389&min_rtt=1370&rtt_var=420&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2192&delivery_rate=1936097&cwnd=239&unsent_bytes=0&cid=8ce8444d09a13c94&ts=606&x=0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9177b6d9f94456cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/GDSherpa-bold.woff
104.21.96.1200 OK 36 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-bold.woff
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format, TrueType, length 35970, version 1.0
Hash 496b7bbde91c7dc7cf9bbabbb3921da8
2bd3c406a715ab52dad84c803c55bf4a6e66a924
ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-bold.woff HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff
content-length: 35970
server: cloudflare
content-disposition: inline; filename="GDSherpa-bold.woff"
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2Bm54H3ZPY7Du4ly4lAR9VujyBmmI1v2%2B99zidN2u89ngTDLrjhesk20mc3dUdzWo5JdtMcdCIZ84VRNimamn92lDKfv9m9VMlH7zRo6k8exZekRGJYgTT0wYXjlzDS4d8Yp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1377&min_rtt=1342&rtt_var=440&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2189&delivery_rate=1889847&cwnd=246&unsent_bytes=0&cid=e09d31b085855b2c&ts=643&x=0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9177b6d9e94256cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/34ctXlcdoync6720
104.21.96.1200 OK 7.4 kB URL GET HTTP/3 yuou.aphiustone.ru/34ctXlcdoync6720
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type ASCII text, with very long lines (26765), with no line terminators
Hash 1a862a89d5633fac83d763886726740d
e5ce3aa454c992a13fd406a9647d7afbf831051f
5c22fd904edb792331a7307ddf4a790e0d1318924f6d8e7362fa6b55d5ab6fbb
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /34ctXlcdoync6720 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: text/css;charset=UTF-8
cf-ray: 9177b6d9e93f56cb-OSL
server: cloudflare
content-disposition: inline; filename="34ctXlcdoync6720"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2FuSpnVc5DtXmFJxIEbeF1lRyOzzu%2FRhIha04W5j5cJ8MM8B1E7vlfhttDMEu7LY%2FRh3Npj8fIKDBR3FBtbamlk1iLik8Mi33h2gZf7ICU1RryzNX1gcpGA99NJOsGh7fWRc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1368&rtt_var=590&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2158&delivery_rate=2081871&cwnd=251&unsent_bytes=0&cid=6bf564602c26cd5f&ts=220&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/GDSherpa-vf2.woff2
104.21.96.1200 OK 93 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-vf2.woff2
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Hash bcd7983ea5aa57c55f6758b4977983cb
ef3a009e205229e07fb0ec8569e669b11c378ef1
6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-vf2.woff2 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff2
content-length: 93276
server: cloudflare
content-disposition: inline; filename="GDSherpa-vf2.woff2"
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vLnSs1ValSrWZ4vdsvs30IiLG7U%2BP%2BxDYT3UmjP9BTJknG1jr6s2X3jGqs3qBhZtjrriacSBQnJjpcMlF3lxlM2i92MqnJhO0yF5oaXyVBZE1P8X5u40a0aX9O8qQbDazxM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1199&min_rtt=1143&rtt_var=427&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2190&delivery_rate=1917845&cwnd=251&unsent_bytes=0&cid=be3d142e79e2be73&ts=786&x=0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9177b6d9f94656cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/GDSherpa-vf.woff2
104.21.96.1200 OK 44 kB URL GET HTTP/3 yuou.aphiustone.ru/GDSherpa-vf.woff2
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Hash 2a05e9e5572abc320b2b7ea38a70dcc1
d5fa2a856d5632c2469e42436159375117ef3c35
3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-vf.woff2 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: font/woff2
content-length: 43596
server: cloudflare
content-disposition: inline; filename="GDSherpa-vf.woff2"
cf-cache-status: MISS
last-modified: Tue, 25 Feb 2025 12:31:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pzSV1WAO3EGM%2FOkQuo%2FpvixJ1CpFjy5kMJkm5HpQULb3av5YL0nSFvkNZpWrTw1maeNRsQwec8kwM18SxXk5LLN0jJVDQnWci55wz2txgbCs9%2FUyuwZ8jTUDFe%2BNYtyYhAvj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1223&min_rtt=1185&rtt_var=472&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2188&delivery_rate=2403375&cwnd=251&unsent_bytes=0&cid=37839f60770a09a1&ts=758&x=0"
cache-control: max-age=14400
cf-ray: 9177b6d9f94556cb-OSL
alt-svc: h3=":443"; ma=86400
POST hklpe4y4mujucjyzrs1frnmj9tlkmbcnpftrouyy3iqgilfsszuymbdzcb.opjsnxq.ru/229631712961453623DCvtqGJCJOBODGVNTHQZUVLQVVEXOZPMMRIWKDpqzlcR3FCtF12jJuv33
104.21.16.1200 OK 712 B URL POST HTTP/2 hklpe4y4mujucjyzrs1frnmj9tlkmbcnpftrouyy3iqgilfsszuymbdzcb.opjsnxq.ru/229631712961453623DCvtqGJCJOBODGVNTHQZUVLQVVEXOZPMMRIWKDpqzlcR3FCtF12jJuv33
IP 104.21.16.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectopjsnxq.ru
FingerprintED:28:10:35:BF:81:A1:32:1F:3C:7F:50:C2:6F:9D:DC:3F:4A:F4:B4
ValidityWed, 19 Feb 2025 10:23:28 GMT - Tue, 20 May 2025 11:22:11 GMT
File type ASCII text, with very long lines (536), with no line terminators
Hash b700a2408fff4601b18b91dd7b1adf0f
294a42cbff29c06fe6bff0cc3d5d6b93f7fda3dc
23731d6f86bfade6b1fd1acf5985785e9e1cb0f155f662cf89464d7a6f2c04b6
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
Quad9 DNS malicious Sinkholed
POST /229631712961453623DCvtqGJCJOBODGVNTHQZUVLQVVEXOZPMMRIWKDpqzlcR3FCtF12jJuv33 HTTP/1.1
Host: hklpe4y4mujucjyzrs1frnmj9tlkmbcnpftrouyy3iqgilfsszuymbdzcb.opjsnxq.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 119
Origin: https://yuou.aphiustone.ru
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Feb 2025 12:31:51 GMT
content-type: text/plain; charset=utf-8
vary: Origin
access-control-allow-origin: https://yuou.aphiustone.ru
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QeOXVRJ0V734aFGqd9Zm%2FVNjEksLiejc58XcllHzv75a4kY1ZBckHxfyxEYiI1sXm0Bc11y0q1W8fH6b0xgqCfja%2BTROKu5aRaH8LyVRoTEHg4QlNM9myczmgAErVzHN7pYpemCqHv%2BWmOEhUyyte6yf4dVcXZ65CG5ukWvImUAjwLEMIwKSvXD26cJmECpPaeLGc8LKyuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9177b6f41e27b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=818&min_rtt=504&rtt_var=357&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3269&recv_bytes=1561&delivery_rate=3150108&cwnd=253&unsent_bytes=0&cid=4746f4b5fadeb2ad&ts=1152&x=0"
X-Firefox-Spdy: h2
location.services.mozilla.com/v1/country?key=no-mozilla-api-key
35.190.72.216200 OK 45 B URL location.services.mozilla.com/v1/country?key=no-mozilla-api-key
IP 35.190.72.216:0
Hash 6aaea1b4e41c32104faa9a0ffb941938
396890ef2e1e114cb792d7cafdec0342b5a35b78
adaecf23a14a64db5915718f88d4e7679741121d8546937adc0fed553791246c
GET /v1/country?key=no-mozilla-api-key HTTP/1.1
Host: location.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Feb 2025 12:32:00 GMT
content-type: application/json
content-length: 45
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/xyY1SlAfrsj5rcd30
104.21.96.1200 OK 36 kB URL GET HTTP/3 yuou.aphiustone.ru/xyY1SlAfrsj5rcd30
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type ASCII text, with CRLF line terminators
Hash 38501e3fbbbd89b56aa5ba35de1a32fe
d9b31981b6f834e8480ba28fbc1cff1be772f589
a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /xyY1SlAfrsj5rcd30 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: text/css;charset=UTF-8
cf-ray: 9177b6d9e94056cb-OSL
server: cloudflare
content-disposition: inline; filename="xyY1SlAfrsj5rcd30"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFwOmuQl5Blg88KPvCIlXr1WggSRUi2gck33J1MbLe2d%2F1a6JKdn%2FwOc6y9JByngZQYg2kI59eAO4rgrTWGGarxIRLu8JGddVR2TfbfXIb7C8M0%2BPpINk%2F7fk86wGVn5W54q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1263&min_rtt=1248&rtt_var=479&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2159&delivery_rate=2282051&cwnd=246&unsent_bytes=0&cid=923785b67d8f36cf&ts=235&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/kl7qjD9mhoOWy92drWINVe8XSau3LfVE8wxmfskHCUrQEEnqNtUaLcYmjd56170
104.21.96.1200 OK 7.4 kB URL GET HTTP/3 yuou.aphiustone.ru/kl7qjD9mhoOWy92drWINVe8XSau3LfVE8wxmfskHCUrQEEnqNtUaLcYmjd56170
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type SVG Scalable Vector Graphics image
Hash bca9b46fee32162356ba5b4783e614dc
cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5
fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /kl7qjD9mhoOWy92drWINVe8XSau3LfVE8wxmfskHCUrQEEnqNtUaLcYmjd56170 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/svg+xml
cf-ray: 9177b6da094a56cb-OSL
server: cloudflare
content-disposition: inline; filename="kl7qjD9mhoOWy92drWINVe8XSau3LfVE8wxmfskHCUrQEEnqNtUaLcYmjd56170"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=khBtS%2B4xHHfeAEY3WxUFtseEsHtze7bZgJ9ii6D%2BEk%2FX2J0AsKmNsBbuvKtVymmYcqf0e55EzWkNsROlObkXOzMWes9DO1S5KyYsxBnPUqJspsDlNfagLnxVJT5M21jHFu2p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1305&min_rtt=1304&rtt_var=490&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2212&delivery_rate=2184049&cwnd=252&unsent_bytes=0&cid=48b7c054637f04f1&ts=226&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
18.165.140.53200 OK 10 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
IP 18.165.140.53:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type ASCII text, with very long lines (10450)
Hash e0d37a504604ef874bad26435d62011f
4301f0d2b729ae22adece657d79eccaa25f429b1
c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179
GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Thu, 14 Mar 2024 00:03:58 GMT
x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Sat, 22 Feb 2025 06:22:03 GMT
expires: Sun, 22 Feb 2026 06:22:03 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"e0d37a504604ef874bad26435d62011f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 caaeeba7a64afd629b7d4bf6bfaac0c4.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
x-amz-cf-id: _DPkQ0PxFrpMFTDreSt0vMe1EqXTYFtI3JzbGuttt48_v9Bi4loW6w==
age: 281383
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/ijVedtOixL38C0BJgkDMR9Zcc6T8dXYDaAtVGM7HopzsxkKohJUaDI5yR1IsshS0SbCBzei9ab229
104.21.96.1200 OK 1.3 kB URL GET HTTP/3 yuou.aphiustone.ru/ijVedtOixL38C0BJgkDMR9Zcc6T8dXYDaAtVGM7HopzsxkKohJUaDI5yR1IsshS0SbCBzei9ab229
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type RIFF (little-endian) data, Web/P image
Hash 32ca2081553e969f9fdd4374134521ad
7b09924c4c3d8b6e41fe38363e342da098be4173
216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /ijVedtOixL38C0BJgkDMR9Zcc6T8dXYDaAtVGM7HopzsxkKohJUaDI5yR1IsshS0SbCBzei9ab229 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: image/webp
content-length: 1298
server: cloudflare
content-disposition: inline; filename="ijVedtOixL38C0BJgkDMR9Zcc6T8dXYDaAtVGM7HopzsxkKohJUaDI5yR1IsshS0SbCBzei9ab229"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9QBl4SorRImlNMQzPRf9RMmDv5kPOOkKaB5zNk99y7YOLPyuUsdn0OLaJ7Fta6CHgRt7LkHAPChiqLuV%2BdmEqyy81dwF9Ow%2FQs7oZxMswIC0HHhbcIgwrRytOPx4YsdMlEwU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1327&min_rtt=1315&rtt_var=519&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2226&delivery_rate=2008462&cwnd=251&unsent_bytes=0&cid=9307d28f46d3cb1e&ts=228&x=0"
cf-ray: 9177b6e0296456cb-OSL
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/favicon.ico
104.21.96.1404 Not Found 0 B URL GET HTTP/3 yuou.aphiustone.ru/favicon.ico
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6InduS1VNd3BrelJiZWdkczBSdkNya3c9PSIsInZhbHVlIjoiRkRobGxOUytOUTBDdWxudWUzQjhYaHR0cW1RTGJLVEszY2tOWDBpaUUwU3hwY1lRQWk5S3liUXpLRnlzY1AyTEUrdmdnZU9RRm5ybDErQUxBZlZrWHh0ck1TTFN4eVF6KzFzSTZyK2V3dktXYVgvaXp6NjFlT3BsNzdVQ3hDQVUiLCJtYWMiOiIxOTE5ODM0NWM5ZTBkOTlkOGQ2NWVkMTdlMjI5ZjMyYTYwYTE3ODJmODBjODk2MjFhMThkZmI1NWM3YTZmMjJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkcvYkVtZUdCTzdnNWNrT1EyYVgweEE9PSIsInZhbHVlIjoiNGxHWjBRelViemR4WkpadGIxQWc1NTEvVzhocEJ4VGxzZm0wQy93OVdnaytrbEh1TEZuWW00VDBMdHZmNythK1BKbGZKQWx3cG1MSDA0cjM5dG1zVWJTQ3pmSi85anF0S0E0YU1CZ2gwWkFQLzVPSmJrRFJmYkVwNUd5WjNzWGUiLCJtYWMiOiI1ODQ2YWRjYzI1MjVhMThjMDcwNDhmZTE0MWQ3MDMwMTAyNThhNDlhYjliYTE5M2UzYjExYWEyNDUwY2JiYmRjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 25 Feb 2025 12:31:48 GMT
content-type: text/html; charset=UTF-8
cf-ray: 9177b6eaa9d456cb-OSL
server: cloudflare
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odyGhs%2BHYbYX3r%2FxpI6mOzjZi4QWi%2F3%2BDbDkgsQOVJHft8qY9S%2B4FpA1kELGu4Vg242Mpzc9e0iKrp5yJxzR%2F2ymw4GOvx5OOvWKU9paP8E6xJm%2Fxc0dAbIfx7ha0mZKAc5v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=1383&min_rtt=1368&rtt_var=544&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2107&delivery_rate=1907568&cwnd=250&unsent_bytes=0&cid=3938223214aa4765&ts=20&x=0"
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/56L7H4nyNePur96FiuQijMHXHWScyUdsg967106
104.21.96.1200 OK 4.8 MB URL GET HTTP/3 yuou.aphiustone.ru/56L7H4nyNePur96FiuQijMHXHWScyUdsg967106
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
Size 4.8 MB (4756466 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /56L7H4nyNePur96FiuQijMHXHWScyUdsg967106 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: application/javascript
cf-ray: 9177b6da295056cb-OSL
server: cloudflare
content-disposition: inline; filename="56L7H4nyNePur96FiuQijMHXHWScyUdsg967106"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cDLScFbgXtnYAG%2B0cyyGQV3V6tdjJk6o6O9nheaJeIDYVHiqMfZqYYzoDrX5mhfHoThXqDIUJZ%2F%2B6dCvwu7y%2BSsWTQlF1Y7pPOwFsyhjbjfS8q7EYaANHoJwjnLtncvy6j1v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1661&min_rtt=1448&rtt_var=542&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2152&delivery_rate=1774454&cwnd=251&unsent_bytes=0&cid=c947c53153470d79&ts=215&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/opQ9qtqH3woDAH3BBCvIdiju5aKh0sLhR97cD23SZ4Je6CN7ef199
104.21.96.1200 OK 268 B URL GET HTTP/3 yuou.aphiustone.ru/opQ9qtqH3woDAH3BBCvIdiju5aKh0sLhR97cD23SZ4Je6CN7ef199
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type SVG Scalable Vector Graphics image
Hash 1318aafc1fb9ded0c623e5b9a557e6df
0917cdd7633cd1642b02b2b785416ec7e5106dcc
d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /opQ9qtqH3woDAH3BBCvIdiju5aKh0sLhR97cD23SZ4Je6CN7ef199 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/svg+xml
cf-ray: 9177b6da094c56cb-OSL
server: cloudflare
content-disposition: inline; filename="opQ9qtqH3woDAH3BBCvIdiju5aKh0sLhR97cD23SZ4Je6CN7ef199"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ulsmnmKiqJgiaWx8zDPIxOywLMOU2kqyEOQGPfwMAtdQl%2B2Iovg0%2FZjjSztfHqOeW66JeaHJ0V74Mr7i1nWO8VbOvw0WPJrVZlnkBd%2FRKrizDNcBnAWzFvAVRV63YZJtO8nd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1207&min_rtt=1200&rtt_var=465&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2202&delivery_rate=2254948&cwnd=251&unsent_bytes=0&cid=788b5afbd4025891&ts=217&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/mn6HkzPrITYUGFgAFMtYFZXFmtphfz1bkll7u7HaOOQJtNvzVewiTLxar78145
104.21.96.1200 OK 270 B URL GET HTTP/3 yuou.aphiustone.ru/mn6HkzPrITYUGFgAFMtYFZXFmtphfz1bkll7u7HaOOQJtNvzVewiTLxar78145
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type SVG Scalable Vector Graphics image
Hash 0c09c5ea7c28d6feb4d124957dde0a0d
1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e
b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /mn6HkzPrITYUGFgAFMtYFZXFmtphfz1bkll7u7HaOOQJtNvzVewiTLxar78145 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/svg+xml
cf-ray: 9177b6da094956cb-OSL
server: cloudflare
content-disposition: inline; filename="mn6HkzPrITYUGFgAFMtYFZXFmtphfz1bkll7u7HaOOQJtNvzVewiTLxar78145"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTWmdEzBkRdHPwYeCWms%2B6RVH%2BHdiiQexrGMMMtZCSBuMlbL5D5zKjedux4lvHupfULrFL3VMCMiKC%2BFQjFAM16yOse80ZtztKs70ryZbk60sX71RUNNl5AbXZTTaNh%2Brukj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1282&min_rtt=1235&rtt_var=430&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2211&delivery_rate=1973665&cwnd=245&unsent_bytes=0&cid=84dcc288339e91f5&ts=228&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST yuou.aphiustone.ru/bapvbe0azyFzQ2uZaVr2fX0wS6Ps1l0s45GnTAZQ69
104.21.96.1200 OK 2.8 kB URL POST HTTP/3 yuou.aphiustone.ru/bapvbe0azyFzQ2uZaVr2fX0wS6Ps1l0s45GnTAZQ69
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2841), with no line terminators
Hash 0e0a7d4fef8fc8c88765881667de3bca
4d84da25d633489cf86b41da8938dc8a580681e6
199870acb44b483cf8d8fe1f98571e4b1d68a3a5961ed3eaa2bcba775f9040d5
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
POST /bapvbe0azyFzQ2uZaVr2fX0wS6Ps1l0s45GnTAZQ69 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 57
Origin: https://yuou.aphiustone.ru
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: application/json
cf-ray: 9177b6dfc96156cb-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvoynrOmt9lLpoYqjijvQGbJFnn6KvlqIg5tqKWT4FzWvjoftBJPfPclRgYCtF8yLZp9ku5aIrPbnBVyKgYSdQHk0Y3adIrtqsor0Cv%2F12TDWHgk8uLPOwTr%2F5Gr7Tjn7t6Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1246&min_rtt=1245&rtt_var=470&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2363&delivery_rate=2263910&cwnd=239&unsent_bytes=0&cid=22ddce2921e6ad98&ts=243&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6InduS1VNd3BrelJiZWdkczBSdkNya3c9PSIsInZhbHVlIjoiRkRobGxOUytOUTBDdWxudWUzQjhYaHR0cW1RTGJLVEszY2tOWDBpaUUwU3hwY1lRQWk5S3liUXpLRnlzY1AyTEUrdmdnZU9RRm5ybDErQUxBZlZrWHh0ck1TTFN4eVF6KzFzSTZyK2V3dktXYVgvaXp6NjFlT3BsNzdVQ3hDQVUiLCJtYWMiOiIxOTE5ODM0NWM5ZTBkOTlkOGQ2NWVkMTdlMjI5ZjMyYTYwYTE3ODJmODBjODk2MjFhMThkZmI1NWM3YTZmMjJlIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:47 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkcvYkVtZUdCTzdnNWNrT1EyYVgweEE9PSIsInZhbHVlIjoiNGxHWjBRelViemR4WkpadGIxQWc1NTEvVzhocEJ4VGxzZm0wQy93OVdnaytrbEh1TEZuWW00VDBMdHZmNythK1BKbGZKQWx3cG1MSDA0cjM5dG1zVWJTQ3pmSi85anF0S0E0YU1CZ2gwWkFQLzVPSmJrRFJmYkVwNUd5WjNzWGUiLCJtYWMiOiI1ODQ2YWRjYzI1MjVhMThjMDcwNDhmZTE0MWQ3MDMwMTAyNThhNDlhYjliYTE5M2UzYjExYWEyNDUwY2JiYmRjIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:47 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/yzJpjmnYEYdyPvVo1kU9Qa4WMLhJop3nl5Tcx1go9KjCab180
104.21.96.1200 OK 2.9 kB URL GET HTTP/3 yuou.aphiustone.ru/yzJpjmnYEYdyPvVo1kU9Qa4WMLhJop3nl5Tcx1go9KjCab180
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type SVG Scalable Vector Graphics image
Hash e924de0d471df54b6280f3dc8b187cb8
857f03226070b502a9e06b4249710ec10be4c9e9
24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /yzJpjmnYEYdyPvVo1kU9Qa4WMLhJop3nl5Tcx1go9KjCab180 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:46 GMT
content-type: image/svg+xml
cf-ray: 9177b6da094b56cb-OSL
server: cloudflare
content-disposition: inline; filename="yzJpjmnYEYdyPvVo1kU9Qa4WMLhJop3nl5Tcx1go9KjCab180"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9ytV83nUFWpFHRwSJmRgjNNvFrHoEwLGCeugqOer9Ej4n1yfofT4eeF8gGPeDXAU5TlNOYcg9yzQlUNZbQpJrN9ln5XuaBWarjEMoLgQuWipyIIVvXXCkEuc5KP6%2Fq7asz%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1375&min_rtt=1357&rtt_var=418&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2198&delivery_rate=1903743&cwnd=252&unsent_bytes=0&cid=9921f49aa761f169&ts=230&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
18.165.140.53200 OK 223 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
IP 18.165.140.53:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
Size 223 kB (222931 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 14 May 2024 21:48:24 GMT
x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Fri, 21 Feb 2025 21:16:29 GMT
expires: Sat, 21 Feb 2026 21:16:29 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"0329c939fca7c78756b94fbcd95e322b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 caaeeba7a64afd629b7d4bf6bfaac0c4.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
x-amz-cf-id: iFi48BOIAtmtnoWMsKuwA5RexV1_DPET3wYz1y5KyHcgm8Ie6jzKUw==
age: 314117
X-Firefox-Spdy: h2
GET get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK 336 B URL GET HTTP/2 get.geojs.io/v1/ip/geo.json
IP 104.26.0.100:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectgeojs.io
Fingerprint55:74:AA:F3:7A:AF:02:8B:48:DB:6E:73:EB:A1:95:20:EC:13:2D:8E
ValidityTue, 31 Dec 2024 05:30:37 GMT - Mon, 31 Mar 2025 06:30:13 GMT
File type troff or preprocessor input, ASCII text, with very long lines (394), with no line terminators
Hash 7b202ba63e60bd31155a74010b08baeb
b375e8ddfe2e49a84cb3e7f39295e1ae617da817
3eb2b33f645df1569609b7fdf48d894bdcdc991881c0c132b6220d5eb4197ff3
GET /v1/ip/geo.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yuou.aphiustone.ru
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Feb 2025 12:31:50 GMT
content-type: application/json
x-request-id: c972762671c98a77a4d881e3fd4b5a9b-ASH
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
geojs-backend: ash-01
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w4uH4sboloqIOjCbFaX0AHCjhcSlI8jJHYcGXmxxkk8B2tzgI%2FsYh5wNMdKEzaL9L4X3v0Je4bcmLyLef0GXI2DzRXbN%2BIfzvOEz%2FHVcQjy1tYQCKRtOmVGOMryzTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9177b6f2d80e56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=713&min_rtt=478&rtt_var=286&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3265&recv_bytes=1250&delivery_rate=3906474&cwnd=254&unsent_bytes=0&cid=7bc20b146d00a336&ts=132&x=0"
X-Firefox-Spdy: h2
GET yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
104.21.96.1200 OK 290 kB URL User Request GET HTTP/3 yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
IP 104.21.96.1:443
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
Size 290 kB (290426 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/GIeNI/
Cookie: XSRF-TOKEN=eyJpdiI6Ijl5SHRVM0RiQXZaZkQxTjB4QW45bEE9PSIsInZhbHVlIjoidjlkWXNsMTZaSW9QdHNHVUtlQi95MWlaS0pmOWROeWp5VmVJcGtyM3VQak1aOTAyL0IvRWJFVnBqRnhadkhGVG5taTdQc3VYS0hHRFkvSGpMbWNDU2Z0dnQxTlE2a2EyRUlVRjdHbGVENFlZeWEvT3NrU3JFY3hnTTN2d3BrVFYiLCJtYWMiOiI3YzU3MDBiNWVlYzk3NWM1NGY1MzNmMTIzMDMxNzM0MGI1MWIxYzMzOTZiOTcyZDVkY2VhNGIyYWI4MTZjYzRlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imd5N04zcmVhSkFEcTZvejJhWjVXbUE9PSIsInZhbHVlIjoidXpzU3JiTitKeVlma01paEZ3UEpERE05NGd0eTVYTDVscUJNbWp3VmhmQXFtczFPNm5XWDloemxhdDFWZUZaZ3BOL0JMZlg1TGFPN0lRb05NS3RZYWpsOGxYa2RkMkpMNVRhN2cwU2FidWRITVBIakRPYjh6Rm5vNGxCYjFweEgiLCJtYWMiOiI4YjRmYjFhODExMDRhNjI3YTBhYWI4ZmNlM2YyMTU0N2JlYzgxYmEzZGE2MTdkZTgzZWVmZTE5MWM5OTYwMzE3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:45 GMT
content-type: text/html; charset=UTF-8
cf-ray: 9177b6d3e91d56cb-OSL
server: cloudflare
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=myKWtoD5vQiBryIO7T9ZwFr8nbKtHjR%2BGJt4XjI7F4znefiIjsyr4EIXSVwyuViDN5X7UnwVbP6blcu%2B8yulvT8Un%2ByOAJaU8sjwYIkJEGvkoUkcNA20MGdY372pAjN3tu5r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=1458&min_rtt=1404&rtt_var=565&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2249&delivery_rate=2028490&cwnd=251&unsent_bytes=0&cid=3346bc00dedd5552&ts=268&x=0"
set-cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:45 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 14:31:45 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET yuou.aphiustone.ru/mnVPK489M24hwfH5kjvNnXyMd1tZIHxRklPPlGiAcCNIAKT6AyQcdIJMu7uv220
104.21.96.1200 OK 1.9 kB URL GET HTTP/3 yuou.aphiustone.ru/mnVPK489M24hwfH5kjvNnXyMd1tZIHxRklPPlGiAcCNIAKT6AyQcdIJMu7uv220
IP 104.21.96.1:443
Requested by https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Certificate IssuerGoogle Trust Services
Subjectaphiustone.ru
FingerprintB8:C4:11:02:D9:24:A5:ED:BA:FD:4E:27:4B:8E:7E:B5:A0:60:45:6D
ValidityFri, 07 Feb 2025 10:51:59 GMT - Thu, 08 May 2025 11:50:18 GMT
File type SVG Scalable Vector Graphics image
Hash 4b5c228b4faba433d06ec569ed855b2d
a7d3882b93e332460e7c59510a6a811ef011983f
eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /mnVPK489M24hwfH5kjvNnXyMd1tZIHxRklPPlGiAcCNIAKT6AyQcdIJMu7uv220 HTTP/1.1
Host: yuou.aphiustone.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yuou.aphiustone.ru/VALNEBEYYMVLKBYhxnflh4ffvca8i7beqpb?HLRDQBTWJIZQYTRFKJVAZZFI
Cookie: XSRF-TOKEN=eyJpdiI6IjJySEZYcWpibHJoUnJIY25od2JqZEE9PSIsInZhbHVlIjoiMzFteXNzRUVmcy83SXovQVRYQ052Y0RKSHYrbGNyeTF2R1ptQTBZTXpkQmhZN3dxeDhyS3BTTk5UT08yRDhJNXFwWkpUbVBBcmNQaWp0bVh3TmtlNVBjQTdnUDNaeWptbkJGWW1BUkhRdURtdCtEQmNBQWVBSTg4eDFrMGN1ZkoiLCJtYWMiOiIyZDRjZWIxNTMzMzkyNTg0YzViODhlNjk1ZmFkZTY4MzY4OTkzZDY3OTE0NWVkNmUwYTMxM2ViNTZiZjUwNGExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVjOUprVTA3QnhKWVpSZDVEaHdiQmc9PSIsInZhbHVlIjoiZS8xM05VVWhxNUtaMzN5dVVmRUl5NElmQTkrSUZIRlBLSTBBT0RHdjFzbzRuaUVrd2hXU3IxR2VSUDdVTDg0R09URVBFcE92eENTZ09OZGxFSnBBcGVIT2E0L0hwUUVabzN6a296R2ZNay9OVy9hV01rRWU5d0Yrd1FxcHZ4SXMiLCJtYWMiOiIwMjNiMWQwYWQwM2IzNGYyMWJkZWYyMGYwNTIxYjE2ODVkYjc4NmQzOWYxMTZmZmI3NzMzM2IyOGIxMTU5YTlhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Feb 2025 12:31:47 GMT
content-type: image/svg+xml
cf-ray: 9177b6e0196356cb-OSL
server: cloudflare
content-disposition: inline; filename="mnVPK489M24hwfH5kjvNnXyMd1tZIHxRklPPlGiAcCNIAKT6AyQcdIJMu7uv220"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JDAvXUuOFnrPVJSGPLQnLggvyC0wF%2BB%2BJI1XUuItMM%2FHFL7QrWuYkglmTpsAjzSjDX4pcWvf%2FBX5SzHcT2wyN1RAcpnes9LQwcU0crffRZtR0QasFotTf%2B1DS10IvQR3U75Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=2611&min_rtt=1246&rtt_var=1408&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2212&delivery_rate=2285714&cwnd=167&unsent_bytes=0&cid=84cf286f78e96b59&ts=225&x=0"
vary: accept-encoding
content-encoding: br
alt-svc: h3=":443"; ma=86400