challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found 0 B URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP 104.18.94.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 28 Jan 2025 23:50:52 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/dc9b2fe37153/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 9094e31f5f7f568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.25.14:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Jan 2025 23:50:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 541154
expires: Sun, 18 Jan 2026 23:50:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KTxxFI%2FzIhGORM0F5C5JTtLE3RHWiNX7mirVcgiGyZmoDVVJETIwzZvHOKnyNf0XJcf3EKSfwcoo4lTemY8DcC8h73DWlUpzttj0KOwitmwrGW9%2BwCvSTjLrLPmpFjSMVhrASa5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9094e31f7f6d5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.66.137:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Jan 2025 23:50:52 GMT
age: 1861786
x-served-by: cache-lga21931-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 45775
x-timer: S1738108252.130809,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
developers.cloudflare.com/favicon.png
104.16.2.189200 OK 937 B URL developers.cloudflare.com/favicon.png
IP 104.16.2.189:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash fc3b7bbe7970f47579127561139060e2
3f7c5783fe1f4404cb16304a5a274778ea3abd25
85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe
GET /favicon.png HTTP/1.1
Host: developers.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Jan 2025 23:50:52 GMT
content-type: image/png
content-length: 937
cache-control: public, max-age=0, must-revalidate
etag: "6be7ff94b6151f8cfbf08b53a17e2ac1"
set-cookie: __cf_bm=26tO0QI0uaQeSPjVPvTR5iAOTLyAB8PIh.0lTXuaXtY-1738108252-1.0.1.1-mfiWVFWludqxGnhdyAAHu9zfMxhE1ShjaQrw1pPHNTfCFgaPQPGBN8CwD1RbjC8RO4akDkr1L6btOb3XbGJAfA; path=/; expires=Wed, 29-Jan-25 00:20:52 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
cf-ray: 9094e321bc3fb4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.25.14:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 541163
expires: Sun, 18 Jan 2026 23:51:01 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAqblRXaOdv%2F452kdTn6THfZdqYDZjHneWKOIwQn75o9UoNaCwGW8txC5Kz1rAAuQAZZR%2FruKaUYv5%2FHULAdzRQAlpAE4kRRca4aLRO4C8lizRafixdFY8Uf2Uu8XK8Jkg0OnMt4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9094e35848311c16-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.66.137:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Jan 2025 23:51:01 GMT
age: 1861795
x-served-by: cache-lga21931-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 45780
x-timer: S1738108261.186689,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK 14 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP 104.17.25.14:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Hash 2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 541163
expires: Sun, 18 Jan 2026 23:51:01 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyw%2Fp4vYX3ehkdgBB%2F298d8ysSYsOkj%2B34qAIGnnZo66BS1NdcVobDZWR5mPyNylEsXs1lzwx0%2FN3qSSPQjCZEimCfrItdWNVFrMQJvBQjjjJoQw9zvEYKWKiYXgW%2BF7rXyKuA2N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9094e35d2a391c16-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 151.101.66.137:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Jan 2025 23:51:01 GMT
age: 1861796
x-served-by: cache-lga21931-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 45781
x-timer: S1738108262.951754,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
143.204.55.81200 OK 11 kB URL GET HTTP/2 ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
IP 143.204.55.81:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Hash 12bdacc832185d0367ecc23fd24c86ce
4422f316eb4d8c8d160312bb695fd1d944cbff12
877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0
GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10796
date: Wed, 08 Jan 2025 00:58:09 GMT
server: nginx
last-modified: Tue, 23 Feb 2021 04:20:08 GMT
etag: "12bdacc832185d0367ecc23fd24c86ce"
expires: Thu, 08 Jan 2026 00:58:09 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3fH7fWp3MzakTn2A-m_fEWteLmDWQBgoc3rpUTXsS1-i4tbDavWRmA==
age: 1810373
X-Firefox-Spdy: h2
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found 0 B URL GET HTTP/2 github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
IP 140.82.121.4:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Tue, 28 Jan 2025 23:50:10 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250128T235010Z&X-Amz-Expires=300&X-Amz-Signature=aefb3d2a9c7d29ed98a501b513000e801e86036ac16b295431020392a2fe8a4a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: F742:B1E44:2630EF1:274E4CD:67996D65
X-Firefox-Spdy: h2
GET peg.udighaloindy.ru/qr7i6AiQNGONeOHJi5E2vriIl3hagm7gh9YzevhgeHzL767140
188.114.97.1200 OK 892 B URL GET HTTP/3 peg.udighaloindy.ru/qr7i6AiQNGONeOHJi5E2vriIl3hagm7gh9YzevhgeHzL767140
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash 41d62ca205d54a78e4298367482b4e2b
839aae21ed8ecfc238fdc68b93ccb27431cd5393
20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /qr7i6AiQNGONeOHJi5E2vriIl3hagm7gh9YzevhgeHzL767140 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/webp
content-length: 892
content-disposition: inline; filename="qr7i6AiQNGONeOHJi5E2vriIl3hagm7gh9YzevhgeHzL767140"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3lbYzhoxLGp0bDS0LdK0Wa4He%2FJw1EBvGgE%2BzJSVWtNCrV8We6Gwvg1kPlKDQZy2bRCAmQpp7mo5N8D2Ne%2BQvYKhLI0Uh4qWJ9WPt%2FLrEqZOvqAB%2FGK33qn6FvaEXXrsNcY8Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d48e9b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4330&min_rtt=4315&rtt_var=1243&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2206&delivery_rate=644489&cwnd=251&unsent_bytes=0&cid=5e9e02334c0d9f41&ts=151&x=0", cfL4;desc="?proto=QUIC&rtt=1288&min_rtt=680&rtt_var=439&sent=146&recv=61&lost=0&retrans=0&sent_bytes=109417&recv_bytes=24974&delivery_rate=2405181&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10515&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/uvDvKifj0WtJfajqB4WiA2fKqra648BXMtYmQoZK9mqq0T34130
188.114.97.1200 OK 644 B URL GET HTTP/3 peg.udighaloindy.ru/uvDvKifj0WtJfajqB4WiA2fKqra648BXMtYmQoZK9mqq0T34130
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash 541b83c2195088043337e4353b6fd60d
f09630596b6713217984785a64f6ea83e91b49c5
2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /uvDvKifj0WtJfajqB4WiA2fKqra648BXMtYmQoZK9mqq0T34130 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/webp
content-length: 644
content-disposition: inline; filename="uvDvKifj0WtJfajqB4WiA2fKqra648BXMtYmQoZK9mqq0T34130"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUfpkrf4PbIeD8Mgp0%2F5xxHRBJSIoy8XJbc1q9jpNw2L%2BVTRI9UwPToj2T1iCNiuIV8YxwFxJOUkSd3mRkU3ulstafBC1qa6KbeOfOB5gtd3RUyuU85TFnY30ZRtTZB9eo3isQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d48e5b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5047&min_rtt=4935&rtt_var=1930&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2207&delivery_rate=577102&cwnd=215&unsent_bytes=0&cid=6851dfca0c6e8066&ts=153&x=0", cfL4;desc="?proto=QUIC&rtt=1288&min_rtt=680&rtt_var=439&sent=148&recv=61&lost=0&retrans=0&sent_bytes=111205&recv_bytes=24974&delivery_rate=2405181&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10516&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/ghhLEkN0kPtTNG1iI3MdmIWf1MV5mxy9EKWMJBHz8IxQIe0O012205
188.114.97.1200 OK 25 kB URL GET HTTP/3 peg.udighaloindy.ru/ghhLEkN0kPtTNG1iI3MdmIWf1MV5mxy9EKWMJBHz8IxQIe0O012205
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash f9a795e2270664a7a169c73b6d84a575
0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8
d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /ghhLEkN0kPtTNG1iI3MdmIWf1MV5mxy9EKWMJBHz8IxQIe0O012205 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/webp
content-length: 25216
content-disposition: inline; filename="ghhLEkN0kPtTNG1iI3MdmIWf1MV5mxy9EKWMJBHz8IxQIe0O012205"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kp%2Fdz3qMjpK1AazuCYOETshozlHSkjU1CvAd%2FIUQtvuduTpaZqdrxi7bbh99zPOZ5GF8ZuTR%2FiMwjFhzkJGpx4IATW%2FcXJ8eTORicsbRviA8hLA2lZ94ydXy0zWwQXyYuwVABA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d68feb4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5605&min_rtt=5601&rtt_var=2103&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2210&delivery_rate=508480&cwnd=248&unsent_bytes=0&cid=831da8cfa96b9ec8&ts=88&x=0", cfL4;desc="?proto=QUIC&rtt=1534&min_rtt=852&rtt_var=682&sent=123&recv=55&lost=0&retrans=0&sent_bytes=85872&recv_bytes=24702&delivery_rate=22224&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10474&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/qrjwVVwGEKsrxbM6oO2WNguxpWDZE7lSqA3s6RHiwTp8DGWBuv5E0shyuHrSHEhUnnCjKXmNX30fWjH6XoL9Hfef234
188.114.97.1200 OK 9.6 kB URL GET HTTP/3 peg.udighaloindy.ru/qrjwVVwGEKsrxbM6oO2WNguxpWDZE7lSqA3s6RHiwTp8DGWBuv5E0shyuHrSHEhUnnCjKXmNX30fWjH6XoL9Hfef234
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4946eb373b18d178c93d473489673bb6
16477acb73b63ca251d37401249e7e4515febd24
666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /qrjwVVwGEKsrxbM6oO2WNguxpWDZE7lSqA3s6RHiwTp8DGWBuv5E0shyuHrSHEhUnnCjKXmNX30fWjH6XoL9Hfef234 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/webp
content-length: 9648
content-disposition: inline; filename="qrjwVVwGEKsrxbM6oO2WNguxpWDZE7lSqA3s6RHiwTp8DGWBuv5E0shyuHrSHEhUnnCjKXmNX30fWjH6XoL9Hfef234"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVV1OQxxdvbwEuf%2BYEDGdtbz0EXuMDQLG8D4aNcmPHl1gXLPTxdTMbQk8Oac8mrxAlyBT2LIXgZK%2ByjyyihDpPiQDUvhJtzbXb9%2F163RDzgxB%2FhwBnJcUM6G2B2v%2BBBq5DEXMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d6900b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4707&min_rtt=4672&rtt_var=1379&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2247&delivery_rate=582294&cwnd=251&unsent_bytes=0&cid=1de6bb1a2769e0ac&ts=134&x=0", cfL4;desc="?proto=QUIC&rtt=1135&min_rtt=680&rtt_var=332&sent=173&recv=65&lost=0&retrans=0&sent_bytes=138321&recv_bytes=25156&delivery_rate=10740741&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10531&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/uv8Oq975xh5vaKlaFmVG2lFmu7dkLRGFY45ELbNRseUed5MAvtuXIqVOZoN6JJef258
188.114.97.1200 OK 18 kB URL GET HTTP/3 peg.udighaloindy.ru/uv8Oq975xh5vaKlaFmVG2lFmu7dkLRGFY45ELbNRseUed5MAvtuXIqVOZoN6JJef258
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4b52ecdc33382c9dca874f551990e704
8f3bf8e41cd4cdddb17836b261e73f827b84341b
cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /uv8Oq975xh5vaKlaFmVG2lFmu7dkLRGFY45ELbNRseUed5MAvtuXIqVOZoN6JJef258 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/webp
content-length: 17842
content-disposition: inline; filename="uv8Oq975xh5vaKlaFmVG2lFmu7dkLRGFY45ELbNRseUed5MAvtuXIqVOZoN6JJef258"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26wZ8OQ1KmOTb2Wogo6NAJzU%2Focz1f08IsvLr8M%2BiNApDgooKSpsXCW%2BenkBNOW5jyXtXVRKQOs9c7XGjblo02NyEA5H9OXaoTc%2F7w1eUxKkyLlMc1Z5JfNVzxN7O4OqD%2Bdj%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d6902b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5226&min_rtt=5204&rtt_var=1506&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2223&delivery_rate=531442&cwnd=251&unsent_bytes=0&cid=e9caf7872b62e3b4&ts=135&x=0", cfL4;desc="?proto=QUIC&rtt=1135&min_rtt=680&rtt_var=332&sent=164&recv=65&lost=0&retrans=0&sent_bytes=127551&recv_bytes=25156&delivery_rate=10740741&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10529&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-bold.woff
188.114.97.1200 OK 36 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-bold.woff
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format, TrueType, length 35970, version 1.0
Hash 496b7bbde91c7dc7cf9bbabbb3921da8
2bd3c406a715ab52dad84c803c55bf4a6e66a924
ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-bold.woff HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff
content-length: 35970
content-disposition: inline; filename="GDSherpa-bold.woff"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2rnref7%2FYhGUEMtjCSyFo6binppWPtw375xk8w1l4u9QKxnMpD1F%2BybsqFOov2CknMYyrYgXQH%2F9TpZWYNdPCT8fTr5jJ%2FEUnDgw4dEQSoMnOtYKKtE24RFrTVsjkoQtvLogpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d38d3b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4321&min_rtt=4288&rtt_var=1265&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2195&delivery_rate=640287&cwnd=251&unsent_bytes=0&cid=327bdf83c64d74c8&ts=194&x=0", cfL4;desc="?proto=QUIC&rtt=1095&min_rtt=680&rtt_var=241&sent=203&recv=74&lost=0&retrans=0&sent_bytes=166336&recv_bytes=25565&delivery_rate=5436663&cwnd=33600&unsent_bytes=0&cid=5e959a6865c2e638&ts=10584&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-bold.woff2
188.114.97.1200 OK 28 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-bold.woff2
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Hash a4bca6c95fed0d0c5cc46cf07710dcec
73b56e33b82b42921db8702a33efd0f2b2ec9794
5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-bold.woff2 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff2
content-length: 28000
content-disposition: inline; filename="GDSherpa-bold.woff2"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5nORKi0BKXSqWhovIpjhPTkaZ0iRdfIk%2BntQM%2BI%2BGFsU6wA0lENAoKitBf5SK%2Bzio7x2s6glKzwTinuIFq9%2FMZb31GEKKx9C%2FWwbFJqKDzwkRfbbctqDWNrHd%2BsQ9%2FC%2B38deQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d28c8b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5515&min_rtt=5514&rtt_var=2071&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2196&delivery_rate=515195&cwnd=212&unsent_bytes=0&cid=57bc855865b314f3&ts=193&x=0", cfL4;desc="?proto=QUIC&rtt=1230&min_rtt=680&rtt_var=452&sent=235&recv=75&lost=0&retrans=0&sent_bytes=204081&recv_bytes=25611&delivery_rate=11991490&cwnd=67200&unsent_bytes=0&cid=5e959a6865c2e638&ts=10589&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-regular.woff
188.114.97.1200 OK 37 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-regular.woff
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format, TrueType, length 36696, version 1.0
Hash a69e9ab8afdd7486ec0749c551051ff2
c34e6aa327b536fb48d1fe03577a47c7ee2231b8
fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-regular.woff HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff
content-length: 36696
content-disposition: inline; filename="GDSherpa-regular.woff"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stXLdjsXST5c6aHKb5IPim5BL1qy18ODF45oUrHNaBj%2FWW3D9OePrlLx92x%2BCzG6FM%2BJalLWlfHCPONWUbGH7IefbozPf%2BWdK5lHWyHs7oSMneTs9R9Vm5RdLtGZnU77DW5%2Fcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d48ddb4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5645&min_rtt=5531&rtt_var=2156&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2198&delivery_rate=514915&cwnd=251&unsent_bytes=0&cid=cf0de572ad7de804&ts=188&x=0", cfL4;desc="?proto=QUIC&rtt=1189&min_rtt=680&rtt_var=420&sent=267&recv=76&lost=0&retrans=0&sent_bytes=239355&recv_bytes=25657&delivery_rate=2016039&cwnd=67200&unsent_bytes=0&cid=5e959a6865c2e638&ts=10592&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-regular.woff2
188.114.97.1200 OK 29 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-regular.woff2
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Hash 17081510f3a6f2f619ec8c6f244523c7
87f34b2a1532c50f2a424c345d03fe028db35635
2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-regular.woff2 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff2
content-length: 28584
content-disposition: inline; filename="GDSherpa-regular.woff2"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QXHn2HaO26nd0qDwNHWJrhHPw7NFnKt1sXxP5DcUTG6H1qwKiHH6Pk4ckNzSuXzAUeV3Dhela2WCzjmXYfrqkssi3eni%2BzPgHvcCzygxNrdFI8S%2B7rxYF7Kfpmm8pZszodRzlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d38dab4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5565&min_rtt=5512&rtt_var=2105&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2199&delivery_rate=516690&cwnd=191&unsent_bytes=0&cid=9d23f5fb6e359125&ts=204&x=0", cfL4;desc="?proto=QUIC&rtt=1221&min_rtt=680&rtt_var=464&sent=300&recv=78&lost=0&retrans=0&sent_bytes=277855&recv_bytes=25749&delivery_rate=5172416&cwnd=82200&unsent_bytes=0&cid=5e959a6865c2e638&ts=10613&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-vf.woff2
188.114.97.1200 OK 44 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-vf.woff2
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Hash 2a05e9e5572abc320b2b7ea38a70dcc1
d5fa2a856d5632c2469e42436159375117ef3c35
3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-vf.woff2 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff2
content-length: 43596
content-disposition: inline; filename="GDSherpa-vf.woff2"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=66cn%2BEJSQWW92QJlrTere3fkug2tm3GTHWS3aPQ5yG%2FztZP5u2Jjfb8ZTFrgwsc4JFHPagmxD50Bh9Jfcziluc%2FZcDowmwVnCyxu2KiC%2B8U0dWYu2MjxIj7WXycMI8gwyhWytg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d48dfb4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4728&min_rtt=4689&rtt_var=1371&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2195&delivery_rate=583726&cwnd=251&unsent_bytes=0&cid=a2ef08631a27eea2&ts=237&x=0", cfL4;desc="?proto=QUIC&rtt=1122&min_rtt=680&rtt_var=418&sent=337&recv=82&lost=0&retrans=0&sent_bytes=319977&recv_bytes=25930&delivery_rate=12468120&cwnd=82200&unsent_bytes=0&cid=5e959a6865c2e638&ts=10674&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/GDSherpa-vf2.woff2
188.114.97.1200 OK 93 kB URL GET HTTP/3 peg.udighaloindy.ru/GDSherpa-vf2.woff2
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Hash bcd7983ea5aa57c55f6758b4977983cb
ef3a009e205229e07fb0ec8569e669b11c378ef1
6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /GDSherpa-vf2.woff2 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: font/woff2
content-length: 93276
content-disposition: inline; filename="GDSherpa-vf2.woff2"
cache-control: max-age=14400
last-modified: Tue, 28 Jan 2025 23:51:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6cy35a8tbeYLXHF9Og6Zj3abywYHYKu9NfWGji4w2JeZQLORoWQFSqP%2B%2F%2BNuj%2BDuFVL%2FtnwX5Xp8UIxAmBQ3%2FdwRDjGWFDBjjUGDCt3XePaqyxnoinWJ9RLtm7fz5bmUpjYUSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d48e3b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5506&min_rtt=5504&rtt_var=2068&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2196&delivery_rate=515661&cwnd=237&unsent_bytes=0&cid=4674a326b7ebb353&ts=237&x=0", cfL4;desc="?proto=QUIC&rtt=1246&min_rtt=680&rtt_var=561&sent=375&recv=83&lost=0&retrans=0&sent_bytes=365517&recv_bytes=25976&delivery_rate=8830914&cwnd=82200&unsent_bytes=0&cid=5e959a6865c2e638&ts=10681&x=1", cfExtPri, cfHdrFlush;dur=0
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250128T235010Z&X-Amz-Expires=300&X-Amz-Signature=aefb3d2a9c7d29ed98a501b513000e801e86036ac16b295431020392a2fe8a4a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.109.133200 OK 10 kB URL GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250128T235010Z&X-Amz-Expires=300&X-Amz-Signature=aefb3d2a9c7d29ed98a501b513000e801e86036ac16b295431020392a2fe8a4a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
IP 185.199.109.133:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10017)
Hash 6c20a2be8ba900bc0a7118893a2b1072
ff7766fde1f33882c6e1c481ceed6f6588ea764c
b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500
GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250128T235010Z&X-Amz-Expires=300&X-Amz-Signature=aefb3d2a9c7d29ed98a501b513000e801e86036ac16b295431020392a2fe8a4a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 07 Dec 2021 16:38:45 GMT
etag: "0x8D9B9A009499A1E"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000
x-ms-version: 2023-11-03
x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT
x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=randexp.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 28 Jan 2025 23:51:02 GMT
age: 1707
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 11369, 165
x-timer: S1738108262.251868,VS0,VE0
content-length: 10245
X-Firefox-Spdy: h2
peg.udighaloindy.ru/lmQda3T5340JS1bxxuPwge2JgqrxzlBUgBdyXew
188.114.97.1200 OK 82 kB URL peg.udighaloindy.ru/lmQda3T5340JS1bxxuPwge2JgqrxzlBUgBdyXew
IP 188.114.97.1:0
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
Hash 55096264bf8c020d4015c11b59e5d11b
3525228d1311cdcd21d3fc08472e7abf5d41e273
7959abebf490d4b9db49515154b2d538ecd1d18f824089a5368c7ad3253b2af6
POST /lmQda3T5340JS1bxxuPwge2JgqrxzlBUgBdyXew HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 6
Origin: https://peg.udighaloindy.ru
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/ZaFDgc/
Cookie: XSRF-TOKEN=eyJpdiI6IlI3c1Z4RjRNVFdtM25tdmxqOWlic0E9PSIsInZhbHVlIjoiUHNhb0ptOTh5Z2l1aTVKbUg4QnJiemVKVDBHSDNNZ2dMMGpLVUlNT1VpcFUzTFhIYWIySHJwTCtXb0I2eVhoZldzK1JaYk04akZ6ZDhaVDRaaDNsMWFjeElqcDRCOWx3NzcrTVNQb2VvTEJpQ0xFaUxTc3NNSWl4aHFmczVHR00iLCJtYWMiOiI3YzI2ZjRkYWJmODNmZGIzNThkNjZmMmVhMWJjNDc5YTlhYTI1MzM2YjI2MTZlYzBhY2NiYWMyNWUxOGM2NWRhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilh1WnlkTXlrODNqMXpGTzNpWlZjSHc9PSIsInZhbHVlIjoiTTYrTlpYQk0reW54Q1ZaK21nbVlmUlNuSmRXV2pJZmpydEFxR3dNYm52cHN5MlYwZy9FWWRXNmVFSUg0ZWJ3TkFuYjRYanVhTkdvaDJGOUxxMHl1VytaYllocG5nVmRiVVEyU3JQZ0Zlek9pa0dVTEMxOElRakJDM1ptYlBJV2oiLCJtYWMiOiIyNzY3MTEzNWUyMDM1ZjUyNDZlYzMxZDJmMmM3M2ZmZTFjNDliM2ZkMmM0OGU2ODVhZTUxOGJmZTg0MGIxNGM1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:01 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9aMglRROhLXkfkiBR24gyOine3sExhFhTtWLKlP4l0FRVtmGmqvJWtQJNRKZ38K3F4YoQrRfPBE7hWXHDhcgVN2MA8MUUwBExTpiCCXIXnhxVgEC%2FtZeZD37nNsb5Cw%2BmKoghw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Inc5M1pPZTJYb3ArMWhJMzlXMmFybFE9PSIsInZhbHVlIjoiaS9uVE9TQmY5SkhCWjhxUnBtWFRBTlZoaGk5UmM0ZXdHd2RaakNhbENTWVFsOU5VdVZZeEN3V3dxdWx0TWN2T0ZQckQwdU5mZTRDT09KWDQ5aGhicVJ3R2l0OHQwTzJ4YmFhb011ZDVyOWFOMjlvYkVoeXBZdjd0d0JnYjRHdEIiLCJtYWMiOiI3YjAwNTU1Y2IwMTA4MGEyMzI0M2M3ZTM0MTI2M2IzZGMyMmI3YWUxMmNhNTRlNzMxNzg0NTRkYzRlOGIwNzQwIiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:01 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkVVb2hDT2JCUE5EeU80Ly9VcFRxU1E9PSIsInZhbHVlIjoicW9yWmhwbWlKSmpOT091c0lsbS9YektZWEpQdEVTV211SGxKaWpVdnB5bWc4cEJMVWx6bVM0UWpCVEVZWER1aUlqQjJVb0RFYU5PRTE5TEdObWdTak1KMVJEY0pzQTA4UFkweVQ3OXBaNjIvZTcwMTd4VnZKdUl6Yi9aRXBGd1oiLCJtYWMiOiJiMDc4MDBjYzg0ZjQ0NWQ0NWZlODRlYzBlYTJkYzI3NWVjZDE3ZjFlYzI2YmFmMmZhNjE5OWU5ODgwNDMyNDgyIiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:01 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e358edabb4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5133&min_rtt=5131&rtt_var=1929&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2262&delivery_rate=553009&cwnd=228&unsent_bytes=0&cid=ee2caa492586ff93&ts=102&x=0", cfL4;desc="?proto=QUIC&rtt=3742&min_rtt=1395&rtt_var=2716&sent=29&recv=15&lost=0&retrans=0&sent_bytes=13613&recv_bytes=5693&delivery_rate=36917&cwnd=12000&unsent_bytes=0&cid=5e959a6865c2e638&ts=9729&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/ij39mPlWszUdzl7rqVCGRzqXKUwfX5ouaOqzMPH4MArX89w2X2oPFs1EZMeF3N2BRUrlR0Cudui99QYeab230
188.114.97.1200 OK 1.3 kB URL GET HTTP/3 peg.udighaloindy.ru/ij39mPlWszUdzl7rqVCGRzqXKUwfX5ouaOqzMPH4MArX89w2X2oPFs1EZMeF3N2BRUrlR0Cudui99QYeab230
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type RIFF (little-endian) data, Web/P image
Hash 32ca2081553e969f9fdd4374134521ad
7b09924c4c3d8b6e41fe38363e342da098be4173
216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /ij39mPlWszUdzl7rqVCGRzqXKUwfX5ouaOqzMPH4MArX89w2X2oPFs1EZMeF3N2BRUrlR0Cudui99QYeab230 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:03 GMT
content-type: image/webp
content-length: 1298
content-disposition: inline; filename="ij39mPlWszUdzl7rqVCGRzqXKUwfX5ouaOqzMPH4MArX89w2X2oPFs1EZMeF3N2BRUrlR0Cudui99QYeab230"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5U5zZVpsrej3jYJQFVHCQcPRM5dzOvLZHpVOkUHjZiK9jJJmL3PN2uA%2FuBg5xWEYbUYqCkikJWEr4wzXU7X0d6cy51ru8YErJ%2BFlqzlkBZkFakvsXyM%2FQuWnnda622K3hVq8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e3635d25b4fa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4392&min_rtt=4363&rtt_var=1267&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2241&delivery_rate=631625&cwnd=220&unsent_bytes=0&cid=d9f23e66bc6c9a13&ts=140&x=0", cfL4;desc="?proto=QUIC&rtt=1106&min_rtt=640&rtt_var=378&sent=471&recv=92&lost=0&retrans=0&sent_bytes=471719&recv_bytes=29264&delivery_rate=968804&cwnd=156600&unsent_bytes=0&cid=5e959a6865c2e638&ts=11434&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/wxNffVSYhE1jFlvICiW9EtY4y7K84mnoV6Q9Y3ve0JUJWKr5xw8SHCFuy90180
188.114.97.1200 OK 2.9 kB URL GET HTTP/3 peg.udighaloindy.ru/wxNffVSYhE1jFlvICiW9EtY4y7K84mnoV6Q9Y3ve0JUJWKr5xw8SHCFuy90180
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type SVG Scalable Vector Graphics image
Hash e924de0d471df54b6280f3dc8b187cb8
857f03226070b502a9e06b4249710ec10be4c9e9
24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /wxNffVSYhE1jFlvICiW9EtY4y7K84mnoV6Q9Y3ve0JUJWKr5xw8SHCFuy90180 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/svg+xml
content-disposition: inline; filename="wxNffVSYhE1jFlvICiW9EtY4y7K84mnoV6Q9Y3ve0JUJWKr5xw8SHCFuy90180"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eL7GKg88fcM6fKHZYqm%2F8bMy5ic8FapP6rNRExoWEDoYwNcKTzESbFsh65hMn%2FRCQfqtOGUohSt6g9gkzp51Y7LAL59ok%2FuNRz0oI6MFTKPoEIIZXs%2BpqnHejAxDrLzXVPKdfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d58eeb4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6014&min_rtt=5868&rtt_var=2305&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2218&delivery_rate=485344&cwnd=248&unsent_bytes=0&cid=e23c9024e5c8a920&ts=150&x=0", cfL4;desc="?proto=QUIC&rtt=1199&min_rtt=680&rtt_var=378&sent=183&recv=66&lost=0&retrans=0&sent_bytes=149131&recv_bytes=25202&delivery_rate=1296036&cwnd=33600&unsent_bytes=0&cid=5e959a6865c2e638&ts=10532&x=1", cfExtPri, cfHdrFlush;dur=0
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
143.204.55.81200 OK 10 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
IP 143.204.55.81:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type ASCII text, with very long lines (10450)
Hash e0d37a504604ef874bad26435d62011f
4301f0d2b729ae22adece657d79eccaa25f429b1
c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179
GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Fri, 10 Jan 2025 02:18:42 GMT
server: nginx
last-modified: Thu, 14 Mar 2024 00:03:58 GMT
etag: W/"e0d37a504604ef874bad26435d62011f"
x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1
expires: Sat, 10 Jan 2026 02:18:42 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mOKO55BTigRt7_SXJFUpPJcBkqgeQgGzpq9f0fZoniG9y3Qu_zbpfA==
age: 1632740
X-Firefox-Spdy: h2
GET peg.udighaloindy.ru/mnxiftEGbgulSMGxgZX7CM7DAtFsuvl8zy8eMOmSnJn2242s9M90150
188.114.97.1200 OK 270 B URL GET HTTP/3 peg.udighaloindy.ru/mnxiftEGbgulSMGxgZX7CM7DAtFsuvl8zy8eMOmSnJn2242s9M90150
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type SVG Scalable Vector Graphics image
Hash 0c09c5ea7c28d6feb4d124957dde0a0d
1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e
b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /mnxiftEGbgulSMGxgZX7CM7DAtFsuvl8zy8eMOmSnJn2242s9M90150 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/svg+xml
content-disposition: inline; filename="mnxiftEGbgulSMGxgZX7CM7DAtFsuvl8zy8eMOmSnJn2242s9M90150"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJDA3wHkUQetM9MYIOJ%2FzGeqswgqvEFkhP4q%2F6XIV45pxAywoxj7Ikmd70e56uWR6NJhjal2zRuFuYOgqs6yDQMuoE4gWCETuBLAOp2jT62bCLI6n0%2FihCVcwTnl0WZCc8PhYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d58ebb4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4975&min_rtt=4936&rtt_var=1458&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2211&delivery_rate=554841&cwnd=249&unsent_bytes=0&cid=f1447f86f6a0f1a4&ts=148&x=0", cfL4;desc="?proto=QUIC&rtt=1164&min_rtt=680&rtt_var=365&sent=162&recv=64&lost=0&retrans=0&sent_bytes=125424&recv_bytes=25110&delivery_rate=7250254&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10522&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/favicon.ico
188.114.97.1404 Not Found 0 B URL GET HTTP/3 peg.udighaloindy.ru/favicon.ico
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6ImNHYm9SNWpZelE3RGZFZkNwdHNVZGc9PSIsInZhbHVlIjoiMnB6YTRTZjc2YlNCS0hEeUVScXUzRXpYVHdZSTk0S25wZkZIdlhSR2VxR3JkU0NYYUF3WVJoWUwxZ3N1cW9aQW9kQ3g5MCtWUmErV0dXMU9BT3JZSkdMam1jUmhTMTdibDd3R0laRWFDbkx4UkVObjlqamNvS2NPb1dkYk5ORG0iLCJtYWMiOiJhNjJjMDY0ZjA1MGNjNjJiMDMxOGNhOTRmZmZhNzQ2NDMwZDNhYWY2ZTkxNTNhMGZlNTQ4M2IzMjIyOWI0MzkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlBBQ3A5bmdyVFdZM0JQT1NuTU5vc3c9PSIsInZhbHVlIjoiazNvY21oeTNsdWVFbWdzSm05K3drVm56OXpJZ2VWOVFBNlNGaEpZc0trMkd2T2xwNzljQnJTeE10bVpzOFlXaFNKaGY5ZkpjUStsb2NpWkVwSWYyeUJySy9PWVE1ckNydXI4c2lVWVVjZnR0M2ZOSEJhTE1vc2NsNStYSWZRd2giLCJtYWMiOiIxNTg2NGUxMDI3YzZlZmI2NmQ5MGZiYjFhMzBjMjczYTc0Yjk1YWIyN2QyYzZjMWMyOGZjYWQ2OGJiYjVkODE4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 28 Jan 2025 23:51:03 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IlEYN0wjBvpUnRPWsi8f%2B4QtGUIdJT5ESifKIIsLPJu%2BMmo60p%2BwKQlRavmz5ytOO2Iwh5TkLz1J2mR0CnvVyUWnAajinlYAynEH6%2FmTK4BSlSEmjPm90Tj7X3iv35xRGYY9GA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2
priority: u=6,i=?0
server: cloudflare
cf-ray: 9094e3649e08b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4924&min_rtt=4918&rtt_var=1857&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2112&delivery_rate=572807&cwnd=249&unsent_bytes=0&cid=2cafcc66fa7120e8&ts=146&x=0", cfL4;desc="?proto=QUIC&rtt=1084&min_rtt=640&rtt_var=327&sent=474&recv=94&lost=0&retrans=0&sent_bytes=473971&recv_bytes=30233&delivery_rate=1638863&cwnd=156600&unsent_bytes=0&cid=5e959a6865c2e638&ts=11449&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/klUfm60qZDBfSvrGvc53BeetSdUlQklRFj3KlpX1jc7Ue7S8wx220
188.114.97.1200 OK 1.9 kB URL GET HTTP/3 peg.udighaloindy.ru/klUfm60qZDBfSvrGvc53BeetSdUlQklRFj3KlpX1jc7Ue7S8wx220
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type SVG Scalable Vector Graphics image
Hash 4b5c228b4faba433d06ec569ed855b2d
a7d3882b93e332460e7c59510a6a811ef011983f
eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /klUfm60qZDBfSvrGvc53BeetSdUlQklRFj3KlpX1jc7Ue7S8wx220 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:03 GMT
content-type: image/svg+xml
content-disposition: inline; filename="klUfm60qZDBfSvrGvc53BeetSdUlQklRFj3KlpX1jc7Ue7S8wx220"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcvvJ%2FfxhLliX3cIuOPtzwgmoKjqtT3L13vFlcYWq3lRk%2FcRwOOSoTcXpx8TRh25PS44LwvvC%2FUIRTqC6Dt4r67QdRqOld9OPO63kqfKVqg%2FiA7Oh9biUoY17HwW%2BkjQ2kpnfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e3635d20b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5152&min_rtt=5136&rtt_var=1959&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2209&delivery_rate=540417&cwnd=252&unsent_bytes=0&cid=ff1851b6976ac3a4&ts=136&x=0", cfL4;desc="?proto=QUIC&rtt=1111&min_rtt=640&rtt_var=490&sent=469&recv=91&lost=0&retrans=0&sent_bytes=470140&recv_bytes=29218&delivery_rate=11110&cwnd=156600&unsent_bytes=0&cid=5e959a6865c2e638&ts=11431&x=1", cfExtPri, cfHdrFlush;dur=0
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
143.204.55.81200 OK 20 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
IP 143.204.55.81:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 20416, version 2.197
Hash d99a7377dabb55772ca9f986b0a04b57
2b5fcd8431953c44e410d0489899e74f6d2cfecc
affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149
GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://peg.udighaloindy.ru
DNT: 1
Connection: keep-alive
Referer: https://ok4static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
date: Mon, 27 Jan 2025 07:42:18 GMT
server: nginx
last-modified: Tue, 07 Nov 2023 18:56:28 GMT
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
expires: Tue, 27 Jan 2026 07:42:18 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MtoSbZnJuQ0kquphp5DrBmSrcbx3DiyWG3LjR6AFU7LvlYG271LEzQ==
age: 144524
X-Firefox-Spdy: h2
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
143.204.55.81200 OK 223 kB URL GET HTTP/2 ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
IP 143.204.55.81:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerDigiCert Inc
Subject*.oktacdn.com
Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5
ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
Size 223 kB (222931 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Wed, 08 Jan 2025 17:13:18 GMT
server: nginx
last-modified: Tue, 14 May 2024 21:48:24 GMT
etag: W/"0329c939fca7c78756b94fbcd95e322b"
x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20
expires: Thu, 08 Jan 2026 17:13:18 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tuseRTR-sPFDnWLT6Ih8oR0CxSHHmVSMXP9EstGbFx9G2RLkJg6mfw==
age: 1751864
X-Firefox-Spdy: h2
POST peg.udighaloindy.ru/bfck3FxbKJF4ZdK1Lnas5dU3slArVdfoFQnTg4S7tj9CArVKiT2Nv2
188.114.97.1200 OK 91 B URL POST HTTP/3 peg.udighaloindy.ru/bfck3FxbKJF4ZdK1Lnas5dU3slArVdfoFQnTg4S7tj9CArVKiT2Nv2
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 348478242d981ddc47795f90e6f89d2a
8f862536625baf2d0eb45d44acc9802c71df79e1
99691950fad5cb4b6df0bab904cc60d404840fe839c3614ffb841898ecdb3ddb
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
POST /bfck3FxbKJF4ZdK1Lnas5dU3slArVdfoFQnTg4S7tj9CArVKiT2Nv2 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 55
Origin: https://peg.udighaloindy.ru
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:03 GMT
content-type: application/json
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eYQU9NZUxQpXdIN7MyWhFcTRiK9o1D89uO3Nyq1JVh8M68pi2hC5BAhsHdpmVNzSdDWVzNRp9BUUO99xL%2BvRGlj4Fd7EocUus73UhDk6Wz5S8UF8hYKx1uvHyB1iqANa%2B4drLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImNHYm9SNWpZelE3RGZFZkNwdHNVZGc9PSIsInZhbHVlIjoiMnB6YTRTZjc2YlNCS0hEeUVScXUzRXpYVHdZSTk0S25wZkZIdlhSR2VxR3JkU0NYYUF3WVJoWUwxZ3N1cW9aQW9kQ3g5MCtWUmErV0dXMU9BT3JZSkdMam1jUmhTMTdibDd3R0laRWFDbkx4UkVObjlqamNvS2NPb1dkYk5ORG0iLCJtYWMiOiJhNjJjMDY0ZjA1MGNjNjJiMDMxOGNhOTRmZmZhNzQ2NDMwZDNhYWY2ZTkxNTNhMGZlNTQ4M2IzMjIyOWI0MzkzIiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:03 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IlBBQ3A5bmdyVFdZM0JQT1NuTU5vc3c9PSIsInZhbHVlIjoiazNvY21oeTNsdWVFbWdzSm05K3drVm56OXpJZ2VWOVFBNlNGaEpZc0trMkd2T2xwNzljQnJTeE10bVpzOFlXaFNKaGY5ZkpjUStsb2NpWkVwSWYyeUJySy9PWVE1ckNydXI4c2lVWVVjZnR0M2ZOSEJhTE1vc2NsNStYSWZRd2giLCJtYWMiOiIxNTg2NGUxMDI3YzZlZmI2NmQ5MGZiYjFhMzBjMjczYTc0Yjk1YWIyN2QyYzZjMWMyOGZjYWQ2OGJiYjVkODE4IiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:03 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e3633d02b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4386&min_rtt=4331&rtt_var=1320&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2381&delivery_rate=612209&cwnd=251&unsent_bytes=0&cid=7437c546331e0151&ts=87&x=0", cfL4;desc="?proto=QUIC&rtt=1146&min_rtt=640&rtt_var=561&sent=466&recv=90&lost=0&retrans=0&sent_bytes=468468&recv_bytes=29172&delivery_rate=915844&cwnd=156600&unsent_bytes=0&cid=5e959a6865c2e638&ts=11368&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/abgk63Wb5ulE0ErsFKS0ef30
188.114.97.1200 OK 36 kB URL GET HTTP/3 peg.udighaloindy.ru/abgk63Wb5ulE0ErsFKS0ef30
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type ASCII text, with CRLF line terminators
Hash 38501e3fbbbd89b56aa5ba35de1a32fe
d9b31981b6f834e8480ba28fbc1cff1be772f589
a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /abgk63Wb5ulE0ErsFKS0ef30 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="abgk63Wb5ulE0ErsFKS0ef30"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q6DsOcGc0SawukIumOywceQ4K7z1UnylNFGjah%2F4OpnBKSvXHMz9gYhfbB7a906RLqR0YDkHE6%2FyW8HWnKQ3ahsUmQIX10Ft8q89uecv02ALqVvHS2vxhZd7IJqIbyPt3PxvAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 9094e35d28c6b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5168&min_rtt=5141&rtt_var=1499&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2173&delivery_rate=533833&cwnd=252&unsent_bytes=0&cid=7929328b88a79485&ts=137&x=0", cfL4;desc="?proto=QUIC&rtt=1508&min_rtt=852&rtt_var=564&sent=132&recv=56&lost=0&retrans=0&sent_bytes=95756&recv_bytes=24748&delivery_rate=3287312&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10488&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
188.114.97.1200 OK 142 kB URL User Request GET HTTP/3 peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type HTML document, ASCII text, with very long lines (52489), with CRLF line terminators
Size 142 kB (142288 bytes)
Hash a4347c5251ab88a781cfa13e660f9b50
fa4c6b3f1fcd7a1aa413c7074041e5561dbf8d73
a6f4a7d708f7c44a59c4c5470b5954cfaadd52b527c9881505f70033a380ef90
Analyzer Verdict Alert urlquery suspicious Suspicious - Anti-debugging code
GET /DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/ZaFDgc/
Cookie: XSRF-TOKEN=eyJpdiI6Inc5M1pPZTJYb3ArMWhJMzlXMmFybFE9PSIsInZhbHVlIjoiaS9uVE9TQmY5SkhCWjhxUnBtWFRBTlZoaGk5UmM0ZXdHd2RaakNhbENTWVFsOU5VdVZZeEN3V3dxdWx0TWN2T0ZQckQwdU5mZTRDT09KWDQ5aGhicVJ3R2l0OHQwTzJ4YmFhb011ZDVyOWFOMjlvYkVoeXBZdjd0d0JnYjRHdEIiLCJtYWMiOiI3YjAwNTU1Y2IwMTA4MGEyMzI0M2M3ZTM0MTI2M2IzZGMyMmI3YWUxMmNhNTRlNzMxNzg0NTRkYzRlOGIwNzQwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVVb2hDT2JCUE5EeU80Ly9VcFRxU1E9PSIsInZhbHVlIjoicW9yWmhwbWlKSmpOT091c0lsbS9YektZWEpQdEVTV211SGxKaWpVdnB5bWc4cEJMVWx6bVM0UWpCVEVZWER1aUlqQjJVb0RFYU5PRTE5TEdObWdTak1KMVJEY0pzQTA4UFkweVQ3OXBaNjIvZTcwMTd4VnZKdUl6Yi9aRXBGd1oiLCJtYWMiOiJiMDc4MDBjYzg0ZjQ0NWQ0NWZlODRlYzBlYTJkYzI3NWVjZDE3ZjFlYzI2YmFmMmZhNjE5OWU5ODgwNDMyNDgyIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:01 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKcKWMml8INbnrBIhOICVXqhniG1MP5dOxnmlzg5lBVOpVLvAOhkctYMtYDSgzpDjYwNNKUYE1UY7kFVB%2FTqSplUNCMeydC36dJTVXmVmeouk3dA%2BvyM5XLRaJQdaP8%2FB%2BgjXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:01 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D; expires=Wed, 29-Jan-2025 01:51:01 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=1,i=?0
server: cloudflare
cf-ray: 9094e35abeebb4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4977&min_rtt=4933&rtt_var=1881&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2257&delivery_rate=577336&cwnd=251&unsent_bytes=0&cid=2a18ace10663863d&ts=189&x=0", cfL4;desc="?proto=QUIC&rtt=4333&min_rtt=1395&rtt_var=3581&sent=34&recv=19&lost=0&retrans=0&sent_bytes=15495&recv_bytes=6793&delivery_rate=1418&cwnd=12000&unsent_bytes=0&cid=5e959a6865c2e638&ts=10118&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/rsxyMmeyUxqLEDwVNl4otOxEmeR52GyCTHPvMzkijypfwWWFAmsjMCOyHxV4w0gef200
188.114.97.1200 OK 268 B URL GET HTTP/3 peg.udighaloindy.ru/rsxyMmeyUxqLEDwVNl4otOxEmeR52GyCTHPvMzkijypfwWWFAmsjMCOyHxV4w0gef200
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type SVG Scalable Vector Graphics image
Hash 1318aafc1fb9ded0c623e5b9a557e6df
0917cdd7633cd1642b02b2b785416ec7e5106dcc
d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /rsxyMmeyUxqLEDwVNl4otOxEmeR52GyCTHPvMzkijypfwWWFAmsjMCOyHxV4w0gef200 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/svg+xml
content-disposition: inline; filename="rsxyMmeyUxqLEDwVNl4otOxEmeR52GyCTHPvMzkijypfwWWFAmsjMCOyHxV4w0gef200"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bUJg7i7XDArIfCMpKS5AncuhFIsP1fUI5gswt9PiDqovFQ0B8q7SgHdFjn4fFexM58GI0XnH8xQzBtIs8dnGETkntdKhe39lOm4wQtU%2FjiLyX4pALBDX%2FqoxE9GJy740Dqxlbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d58f0b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5624&min_rtt=5596&rtt_var=1626&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2224&delivery_rate=493245&cwnd=251&unsent_bytes=0&cid=94296729e11f5029&ts=149&x=0", cfL4;desc="?proto=QUIC&rtt=1135&min_rtt=680&rtt_var=332&sent=163&recv=65&lost=0&retrans=0&sent_bytes=126477&recv_bytes=25156&delivery_rate=10740741&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10529&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/56eF0795zcd5b9d6718
188.114.97.1200 OK 24 kB URL GET HTTP/3 peg.udighaloindy.ru/56eF0795zcd5b9d6718
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type ASCII text, with very long lines (23854), with no line terminators
Hash 8025ea2266871f7af97c89d4b43dc4a6
b80f1279a6438e2325d0ece6642ba34cebd9b4d8
bad46ff2d915998c6f922bfca9b0f01b805f3b548cf038da1bf6643fe371385e
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /56eF0795zcd5b9d6718 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="56eF0795zcd5b9d6718"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DR136ekK9SRGGEhizy78OKSGiyxLqCo7bzVNGYQ8%2BQcLicL5O6zGgY%2BiKcJlKAwZ9FWHDOeyVZaUBRMKmX3Kq6Wfbeq4pF%2BDmrQW43Ydgi8FcMKpcYqgAqshNZ1F9jztXjgqOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 9094e35d28c2b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4385&min_rtt=4346&rtt_var=1282&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2168&delivery_rate=622922&cwnd=248&unsent_bytes=0&cid=ea0ebaec3a6c7b74&ts=150&x=0", cfL4;desc="?proto=QUIC&rtt=1567&min_rtt=852&rtt_var=822&sent=119&recv=54&lost=0&retrans=0&sent_bytes=81246&recv_bytes=24657&delivery_rate=6146833&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10457&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/kleW7Qx5wP3B20XnmCsWCmRzEneWwx6h4KocIUWyARqfg78170
188.114.97.1200 OK 7.4 kB URL GET HTTP/3 peg.udighaloindy.ru/kleW7Qx5wP3B20XnmCsWCmRzEneWwx6h4KocIUWyARqfg78170
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
File type SVG Scalable Vector Graphics image
Hash bca9b46fee32162356ba5b4783e614dc
cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5
fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /kleW7Qx5wP3B20XnmCsWCmRzEneWwx6h4KocIUWyARqfg78170 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: image/svg+xml
content-disposition: inline; filename="kleW7Qx5wP3B20XnmCsWCmRzEneWwx6h4KocIUWyARqfg78170"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ryGKf%2FY9e%2F4ouYN5Hg5k1%2FVLLk%2B384LH39qstv7xypgrAInnCe%2BRReIu0TPwPVTtNqcNv8CwP0A4nx2myzlatF1sV3kBH%2FS%2FKKJgeeo1%2BFOqzx0yd09QAw4yDpG7tUSrTipHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9094e35d58edb4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4130&min_rtt=4076&rtt_var=1251&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2206&delivery_rate=639281&cwnd=231&unsent_bytes=0&cid=7a815bc88d005cd9&ts=143&x=0", cfL4;desc="?proto=QUIC&rtt=1338&min_rtt=680&rtt_var=452&sent=143&recv=60&lost=0&retrans=0&sent_bytes=106065&recv_bytes=24929&delivery_rate=4227038&cwnd=20400&unsent_bytes=0&cid=5e959a6865c2e638&ts=10512&x=1", cfExtPri, cfHdrFlush;dur=0
GET peg.udighaloindy.ru/56XuX0G4vEAJjxijpXrvhe56uuhl089106
188.114.97.1200 OK 137 kB URL GET HTTP/3 peg.udighaloindy.ru/56XuX0G4vEAJjxijpXrvhe56uuhl089106
IP 188.114.97.1:443
Requested by https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Certificate IssuerGoogle Trust Services
Subjectudighaloindy.ru
Fingerprint11:5E:E1:F0:FF:87:9A:43:29:98:9C:67:05:A3:BE:D6:89:7A:64:78
ValidityThu, 16 Jan 2025 12:23:04 GMT - Wed, 16 Apr 2025 13:21:51 GMT
Size 137 kB (136817 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /56XuX0G4vEAJjxijpXrvhe56uuhl089106 HTTP/1.1
Host: peg.udighaloindy.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://peg.udighaloindy.ru/DNLYMRXZTECWRNHGYap4j4wnxv8qybwm8u6?CKUZRZBKQHKOEEGCFKEHVVKMT
Cookie: XSRF-TOKEN=eyJpdiI6IlpGdldKVnhWRlRPRURJSUw2SzVtcFE9PSIsInZhbHVlIjoiWFpZRXRKSjRlR09WV2NuOGo0SXZXb0xOdnhGQk95eHpweGpVaTA4NFpMUHJOaVJobnNVU3BxSU0wQ0lQTWZKRmFTcmVTSVdJdlowZW1LUGZKcEo5S0tOckdsaUhiWWFpa1ZmZllQSG85eUFTOTIvbCtCS2JlME9wWVgrVTN0TFkiLCJtYWMiOiJlMmMyMjVlMzIwMDkyZGMyNjc4NGIzNGE0YzU3N2VhNjExYTJjODgzN2VhNTc0ZDY2MGM1NzU5YzMyMTZiYTQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilp0LzU1d29Razh4U0h4OHZlY3JGYXc9PSIsInZhbHVlIjoiRUZIMjVESmdmYXN5dVUrOGJrT3hjNU1VVlhtNmY5WVk0ZVpiUnMrclJDU0dGMWVXTjBmc3R4NGtKTm5CeDhiZGNwK0dNQTNlUWNRaVhFVlZQZFYyUUhUVlJaMUs3L2t1SGlGdzVnQkoxNU5xeVlYTHV6OHBxT0o1VE02SHZhbkUiLCJtYWMiOiIyMGE3YzJlNGIxZWIzNDgxNDQ3MTJlNzY2MzJkN2RkMWEyZDNlZTUzMGIwYzNmMmZiM2VkYzAxYWNmNDVjN2QyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Jan 2025 23:51:02 GMT
content-type: application/javascript
content-disposition: inline; filename="56XuX0G4vEAJjxijpXrvhe56uuhl089106"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rirIurMRL0%2BMlti5vJKQ0RBTsbAzN7J2fGYTfcUdE%2FIxffnQnBCOjCkA98a483%2FdchimRYQnk9hkmvhUxXZDKM64n4jVjABIeoqQ0K5HfOlGKj9WDRP0ucKAH5EWxokk%2B03f1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 9094e35d6904b4fa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5595&min_rtt=5554&rtt_var=1621&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2154&delivery_rate=493331&cwnd=239&unsent_bytes=0&cid=5035cd191a37205e&ts=148&x=0", cfL4;desc="?proto=QUIC&rtt=1172&min_rtt=680&rtt_var=366&sent=189&recv=70&lost=0&retrans=0&sent_bytes=153878&recv_bytes=25382&delivery_rate=726243&cwnd=33600&unsent_bytes=0&cid=5e959a6865c2e638&ts=10545&x=1", cfExtPri, cfHdrFlush;dur=0