{"report_id":"f4001c2a-7f69-46e4-91b2-4e1e06b6d945","version":6,"status":"done","tags":["microsoft","phishing","outlook","suspicious"],"date":"2025-02-14T16:50:19Z","url":{"schema":"http","addr":"eiku5vqro5.brightnexst.ru/pax6lf1/","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"104.21.41.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"title":"Auth Login"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-25T16:50:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"github.com","ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2025-02-12T02:24:48.267107Z","alert_count":0,"request_count":1,"received_data":4338,"sent_data":462,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01T21:34:29Z","last_seen":"2025-02-12T04:57:10.298777Z","alert_count":0,"request_count":1,"received_data":11086,"sent_data":897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-02-12T02:32:29.360585Z","alert_count":0,"request_count":1,"received_data":406,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-02-12T01:55:41.567041Z","alert_count":0,"request_count":3,"received_data":45017,"sent_data":1405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-02-12T02:23:52.531638Z","alert_count":0,"request_count":1,"received_data":31509,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"developers.cloudflare.com","ip":{"addr":"104.16.3.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":592034,"first_seen":"2012-09-07T16:49:35Z","last_seen":"2025-02-11T23:54:18.338027Z","alert_count":0,"request_count":1,"received_data":1654,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eiku5vqro5.brightnexst.ru","ip":{"addr":"172.67.146.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-09","domain_rank":0,"first_seen":"2025-02-13T08:17:10.777644Z","last_seen":"2025-02-13T08:17:10.777644Z","alert_count":24,"request_count":25,"received_data":1080806,"sent_data":31796,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ok4static.oktacdn.com","ip":{"addr":"143.204.55.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-11-11","domain_rank":16592,"first_seen":"2018-06-15T05:36:50Z","last_seen":"2025-02-11T11:34:33.934813Z","alert_count":0,"request_count":4,"received_data":267518,"sent_data":2086,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-02-13","alert":"Generic/Spear Phishing","trigger":"eiku5vqro5.brightnexst.ru/pax6lf1/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9073a9116a34938197daa9f7764f60f8","sha1":"30696b2e9787217d6190bb2066b5fab0304a2935","sha256":"cc37e6fcbb1a8c812bb5e12d17a2dafceab4f0d3200a52e16c546c3b28a8d525","sha512":"56851d656c9664b51dae37cfc54dade2b4e3ebfefb45b3b9a22b53200b4c96c82a4d0e971c5ac156cde7be807dbc349a83c4e48e71eafb8e2266e743a3804066","ssdeep":"","tlshash":"5641acd8b0f368b268aef27d674fe9d0373128c7d009e645380c0da4bf9596643a6e95","size":1891,"data":"","first_seen":"2025-02-14T16:50:21.157589Z","last_seen":"2025-02-14T16:50:21.157589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-17T14:14:14.701409Z","times_seen":451104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6eccafe9c4070dcad971d195c4509712","sha1":"1128d09a69b9be5093a17369ce4741e3593f27bd","sha256":"c5bc2d5a615fd94c40a86ba0a324f08875e9a481eef937739bd39dd22aeb1dff","sha512":"8f6476f3ccaf881524463d9912b3e8d9cfc7934415720a7444766e0634d49c56d38bacdd52a352d15ae83b892bee756bb8715efaae37609af014c1f98d440974","ssdeep":"1536:qcM8KWzxLNHwYyrkxabE2g8/RIGzGbJfM5px7/eVu4yoaRBu19KOD9Ou/nHa1I+9:qcMRQxHwYy9bdgdfgeSUnoufHaCytO1C","tlshash":"39d33ad28b135e1dc6ad536c5134aaafbc942b8c1ec235a337ca775fab925183c73508","size":139952,"data":"","first_seen":"2025-02-14T16:50:21.15871Z","last_seen":"2025-02-14T16:50:21.15871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-17T14:14:01.92252Z","times_seen":150943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0677008f81d2481b1d00a758cb6e9b48","sha1":"16cb9fc0216211acc1f238294c54715b5892858b","sha256":"932cd45154e1e27fa6412cdf27677183d30381dcc4216253d6cba3a9ba1428e0","sha512":"74fc6ee1ff27f11572c7b93c441df269cf891e095d8d265a3d4f44598217b635c534c81c359b933b8ef41b4e092990a9f14b77654d68450b0dd7975c764aadce","ssdeep":"","tlshash":"bb111cef36499e3d5ecb4d5a937fc3c8399f0c54a90a9152084ea9260d18d80d47bd91","size":746,"data":"","first_seen":"2025-02-14T16:50:21.160011Z","last_seen":"2025-02-14T16:50:21.160011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c20a2be8ba900bc0a7118893a2b1072","sha1":"ff7766fde1f33882c6e1c481ceed6f6588ea764c","sha256":"b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500","sha512":"8f80ad8adc44845d24e13d56738a2ca2a73ee6fcdc187542ba4aaebbf8817935d053a2acfb0d425b9cc0c582b5091e1c9fe16b90b3aa682187645067c267fc41","ssdeep":"192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj","tlshash":"ce22a58932933026af5391b440bf140af2f69589d45cade8ab29d1e27d7290d46f7f38","size":10245,"data":"","first_seen":"2024-05-30T22:56:13Z","last_seen":"2026-04-17T13:31:36.220544Z","times_seen":52271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfc9f6e1b7bb15f1f471f7d8178aa51c","sha1":"99ec14e9a159d6acb96a32d74a26e8cfa5a4f789","sha256":"38d6d37e829a8a2e614fb7ebcf5c9e9fc74291980fcd7fb1230079f6cbed6c24","sha512":"0b06e0aea6d7a7f36efdac4aeb977631cc6e7a4efad3b21798872db16abec13bae4264fbbd553eb258f6a7300f3ebeb3f596f3de09b5c736c0e1f8bd20d1b52e","ssdeep":"","tlshash":"5b51c0d6b07164bd6c5dbbad979ee8d0363f3ec8c011a2403c0c0c99b355a55c3a6eb8","size":2186,"data":"","first_seen":"2025-02-14T16:50:21.161062Z","last_seen":"2025-02-14T16:50:21.161062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a797495d6f9e298fdca1024e96389e","sha1":"66b2ea3a01242a39ca098f8f83fd7f287a9d22ca","sha256":"5a65ba012b62ea9d0ef64683fd2b7976b955982e075c3daec1b3adc815ae99bf","sha512":"64bc29777dc8541326bee6a9a4f11a7ddfa67b353fe5e8a042ed13f275c9e23f11438a6f8373cc1c531925e8786cdc563dc5941da4770711d3398495a6a54f28","ssdeep":"192:oCqTBji6KbgqdrL7/NnWgRpktYINYZhzPmKApOunosYu/zuHkkAxnzMGDZ+xw+nx:lbZ0FKkAhMV/MGDZAL/qllLLCoYjyeD","tlshash":"b292fa4ed6ca0c10d7022cf859a4c2372d478315e15ec9da74db6c8fa719e3e3aa52dd","size":19877,"data":"","first_seen":"2025-02-14T16:50:21.162461Z","last_seen":"2025-02-14T16:50:21.162461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/34OYl47Jrh4EI1rIlTatklWou7ZJkCGHAj89101","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fcbe4aacbe30b67606277e365405928","sha1":"68443d074aeff59a5940e48a91c82268b2c3e30f","sha256":"89feb7dcb6afb24066a555b39d94bbc817a16a597db8a0ca3bbba9eb3ced1f5b","sha512":"c97719c743b0b897549d0190d9b5519663403ac9f6ed13f9a4a96ebe702ad9edd75f95f396b7be13ffff77e5b953494629a4698a3eb5324bb34bf1418d53ebc8","ssdeep":"6144:byhjM/9KIpSIiDhDoZghdXRKDBhIXhLHpDMp+ov3IIshsfD0IdHVgXIIfgCofLH+:i","tlshash":"2d26007314f165807625a5413d1fbf1fd5144bea91c780746cd8fe8cda7d92c800eb54","size":4752044,"data":"","first_seen":"2025-02-12T21:51:37.483324Z","last_seen":"2025-02-28T23:51:26.450098Z","times_seen":4941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"e9ce3aa8ed1847c1d2e608dcd8445713","sha1":"c9cfe3514bad81fa8149990266572b73e14e2cd1","sha256":"b51043dd7aaa1bc4205fc0f00653c26b8d92f836198668cc92b7902493ba2bf5","sha512":"356622565f8ef4f424d79834c748cd82fa26da42311e837aa0ddd4c158d9d54e4a8d55ae827ad0137629d427feb4e5b1dabf4d4ade69d55710a4e2552d38d890","ssdeep":"3072:/pykJcRR8cr7yRXjc7El8c6odqz+N4wNb6htHOQYGUsnNymSibsmSiTO0S:BykJcRR8cr7yRXjc7El8c6oUgws","tlshash":"51e385411ea08d4e27861a7f3136b0e4f9650b5d3942e995f19cbc9c23e2713f9f28b2","size":148618,"data":"","first_seen":"2025-02-12T21:51:37.489451Z","last_seen":"2025-03-02T04:44:16.586821Z","times_seen":4685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"86f9b1217302624bf96d64d3b120ef83","sha1":"5cc5d4fbd4e91a9e1e151ac8c24d50be8ff79056","sha256":"0f6660f53759bc36c40846519eb27e5b0791050e4acaca1d2b4efb90dc3fd844","sha512":"1c96e6aa5b4db93a7844179a1502bcd7d9eff4fc220d2e01b80c3b7e787c8a66e3489e1f34188fdf32f02177764a87d7b281ecded2f0831cf564693949e0e2be","ssdeep":"384:AMb5Q637SNcl1aHgc8iIieMi4ic18GnxiEIB/W:AsQJxlQVc18G4ED","tlshash":"bf42519a342514708af736f7b1b74284b83161376e80d522f4bcc95d2f729c1a2b7ee9","size":13098,"data":"","first_seen":"2025-02-14T16:50:21.166389Z","last_seen":"2025-02-14T16:50:21.166389Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_j3kdy1s9x2iokjd","sensor_type":"yara","title":"","description":"Private YARA rules","scan_date":"2025-02-14","alert":"Tycoon_AitM_API_Callback","trigger":"javascript.eval.md5:86f9b1217302624bf96d64d3b120ef83","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"author":"Mike","date":"2025-01-29","description":"Detects API callbacks from Tycoon AitM after successfully completing the Cloudflare Turnstile challenge","rule":"Tycoon_AitM_API_Callback"}}],"urlquery":null}},{"md5":"e02c5cea485ebc4c57548fb383b0fe08","sha1":"46ca89bcbd64f2c27cb2147b23ff976c7d93ebeb","sha256":"944a843f8023cf4d833b53d7714e30bdb2aa2625248becc7c38e4de9ebf47071","sha512":"8de123f4ef7a5c0c8f13cbfc3f998a89c3af3b99a9a1206eba2e2201078e0ec2380a4de176a70da4fdc2fa88557048c0c9f5f4612843549df09442b3f967d068","ssdeep":"1536:D18pha1bOB6uru7Z6/tJd21r58VoJPVqZy3ajla+NUdmWb7CAFy1xdpks5wd61T8:DOP5k4D6giKLPGKM0z27+HEQ1gQr8F/","tlshash":"7214a372479c3fc5cd59e900fbb9c62a830514336422e497cb2e3d9c7e9c99ad481e9b","size":198175,"data":"","first_seen":"2025-02-12T21:51:37.491852Z","last_seen":"2025-03-05T21:26:41.946028Z","times_seen":5350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"65b32e09cdcbf16f6ec016d77fa31da2","sha1":"be168254709178614efd76765d59b36ca12eb66a","sha256":"7e41cbe9f592af18a4dd2c7c044821b6968bdf0c46b9899904a67c308cc3d2c7","sha512":"8f12f597b8a3fbaeb78dd62c5ad6c425287acf63a28d036e7c089458e86d940d9db7ef82fb601ae483777dd17b9f222238fbec7375e71602c4eac834938efba0","ssdeep":"96:X9EQ3glMIw78LGBD4li4odoMHCrpirsia1OsidiQiOiC6MiColkZw0J3yFLOiD:SQ3glMIw7asD4li4odoMirpiIi0idiQQ","tlshash":"8aa194976e8f1c21472ba52b15dd83c23c2c434aacc6c14c7e5eba904f18e6e64e53dc","size":5051,"data":"","first_seen":"2025-02-14T16:50:21.168264Z","last_seen":"2025-02-14T16:50:21.168264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"9a4c80f7d41229e74ae1f6fd49fdedf4","sha1":"b0c2eb7e2dafe795141599fca6eb6bd91b9f4ad8","sha256":"5459b427ec08b019d2f1f2c3d69a73fa93aece43c2a5f594510bd478f079d2e5","sha512":"43645fd964513180e64409bf65ea667caf95256f75bcdb3d3f9c96971b0d43f9a87070ec3b9765a5eb60de702358ac9ff14386427811ff23057f47d21c9778b1","ssdeep":"768:9wYyWRoPgF7pZt6YPbwh14lOMI10iQo1ld7mTamalKew:OYyWRoIF7NFy1uzWdbgh","tlshash":"e9a3587ff212237fa2d2dea7769b6d1d20213c16c20f9745a46bbb23774237d0a69484","size":106571,"data":"","first_seen":"2025-02-14T16:50:21.169515Z","last_seen":"2025-02-14T16:50:21.169515Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"21c08132c004d020418a0d5a544dce10","sha1":"e1f01f50975b4fb203eb2968fa90dde8a5593acd","sha256":"a41ebd4a3e0a62b15456dce8253e94064f187d006025f18ef68c487a75b9d0b0","sha512":"01e8d0229ac097e7ce6c9e6adb95860021c09bff9d6641a08d506e337a138057003cfcb4fcc0142326c416d535eb9e53d6f0921a1954477baca16de3ce220fad","ssdeep":"192:/6atsjcCalka7meFtFoi49oy1fGRskoWHth:/XijcCalka7mehC5+skoWHth","tlshash":"88e1c69e6c1a3c4243b1b61a5fdea1e8bc3e47cb5481428a794c9c487f7016f52d6fe8","size":7447,"data":"","first_seen":"2025-02-14T16:50:21.170515Z","last_seen":"2025-02-14T16:50:21.170515Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d207abfd56fab18204d45ee53331b48a","sha1":"0531ad6f4f54c1bbffe4acf5257d10cb1a7d5523","sha256":"88a3829a99cce33f0a9ebb15301467f53e1da1d02f0ac5740ff58e5bdaad7775","sha512":"19bcc052a38e8e56cd6fe064da957f736d5d37f88a9e6aec9caed69196becc22c33a3c53e57d04c2a2eb84ca632917c6dc84cf3f1a234a02bbcc706dfc058def","ssdeep":"1536:4Z+VRz1GPDIIaGrhf14v+TxfVAovkcPqgv:Xj1GPDIkV9Pqgv","tlshash":"c7a3b31a11c6083a41a380f26d784b9aff66c64bc30a825476fc97d76ff6c06dd639d8","size":103478,"data":"","first_seen":"2025-02-14T16:50:21.171649Z","last_seen":"2025-02-14T16:50:21.171649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T16:49:46.368757955Z","timestamp":1739551786368,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 14 Feb 2025 16:49:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/324d0dcf743c/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 911e8da8b8355699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T14:13:34.225927Z","times_seen":13863465,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.650Z","timestamp":1739551792650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 156257\r\nexpires: Wed, 04 Feb 2026 16:49:46 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k3%2FZe4phx2ldmIkDQoX%2Fvmk2hkGB%2B%2FOKaXGGlyxBihCgbnuTKJ1QxdCODyzMzFKwz2LOm4vNfRFfZLlGhLIxb3Ar1WK4OkTznLPgLER6rq53%2FBBV5EKk3z0sDp0yghVJK2EH1a%2FV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 911e8da8ca01b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-17T14:14:01.92252Z","times_seen":150943,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.625Z","timestamp":1739551792625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Jun 2024 00:00:00 GMT","end":"Wed, 25 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5","sha256":"AB:77:AE:8B:01:C3:97:E7:80:17:A2:C0:A0:8D:8A:BE:C9:8A:77:1C:06:8C:B9:64:E1:7B:E5:9F:3B:E7:EC:FA"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 14 Feb 2025 16:49:46 GMT\r\nage: 3305321\r\nx-served-by: cache-lga21931-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 181500\r\nx-timer: S1739551786.409464,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30875,"size_decoded":89501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-17T14:14:14.701409Z","times_seen":451104,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"developers.cloudflare.com/favicon.png","fqdn":"developers.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.3.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T16:49:46.764101979Z","timestamp":1739551786764,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: developers.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 937\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6be7ff94b6151f8cfbf08b53a17e2ac1\"\r\nset-cookie: __cf_bm=X2aI_KA_PSE0dqL0rFYBtqc9dhekVDb8HRrvPqwnzyk-1739551786-1.0.1.1-uu8GhH7bSH0M_063aCXLO0e3SL4HBAiKzmurw6uJv6lYLkPc_Aj.s5cG92yOmcHimO4v5t_jyBECFMtJ0qnlZA; path=/; expires=Fri, 14-Feb-25 17:19:46 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 911e8daa7da9b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":937,"size_decoded":937,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"fc3b7bbe7970f47579127561139060e2","sha1":"3f7c5783fe1f4404cb16304a5a274778ea3abd25","sha256":"85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe","sha512":"49fa22de92bebede28bb72f7c7902c01d59e56723811629e40c8a887e34fd0b392a9df169a238bdd8e46d984e76312d75b2644b8611c66a71a559c1b6834de6c","ssdeep":"","tlshash":"2d11b7a7452d00b1d69933639306d88aa21ee848d74308ca38adf38713834d69bc976e","first_seen":"2024-11-14T16:12:41.503532Z","last_seen":"2026-04-17T02:03:52.323195Z","times_seen":18161,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.650Z","timestamp":1739551792650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 156262\r\nexpires: Wed, 04 Feb 2026 16:49:51 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u%2F12kWDgOzworBTyyDc8fCnlt42BTCz7jl9YIeT%2FPfZ4VOP3wdPsJimX1MUuS%2Bgv%2FOp7n7tHn7ZUW09O82p%2FELokgQTlhffFcjdNg9Nz2QAKonJQPRAVgVlkPvqBztbNQSNqDpTh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 911e8dcb4c307129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-17T14:14:01.92252Z","times_seen":150943,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/pax6lf1/","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T16:49:51.931398361Z","timestamp":1739551791931,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /pax6lf1/ HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRsbzVFQVNvR2IxWHh4NWduWXNtTGc9PSIsInZhbHVlIjoiOEM5RWlWaXh2R1hkNHpScWUyWndYVjF6QTFkdVJwNTROZ0pYbUZvWHB0bERnYmxZYUFNcHFDOUFoSGEwU3ZmQlpVQ0VuQkdsY1h4VVdWVzVqSnN1N2E1K3FKMTBoMUxHR21HcUpvaUVUWi9zSUdEWTVmUCtaTXlCajBXQ3g3dmQiLCJtYWMiOiJlYTM3NzEwMjAwY2Q4ZjI1Njg0M2MxYjQ3YzUxMzNmMjE3NzFjNzY4ZTEzNWQwZDFjMTYyMDljYzJkODZmYWNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlE3dUhSaXJkUmtvekZZMFFQQk5vRVE9PSIsInZhbHVlIjoiejRyNHp1dk1KNWl6Z1dXdFZEWWtCWWJRbnNLUlJJMC9ETHFMZnhpOGtuUm5DSTg1YVpzNmtaZTNYUUVNZy83aEEzYTcrZTVCeVpaT3JobHF4TVBuem95RE5PaE5SMzBDaWFtOU12Q1Q2WkhYeUtWRDUwdlJkZXdOdGt1Z2xKeW0iLCJtYWMiOiI4MzBlOGYxMTY5ZDEwNmFiZjZlNjEyNWYyNzM2NGJjMGI4MzMyZjZhOGMyNTJkZTE3Y2VjYjZmMGExNzFjMTY2IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aFjZOE5Nx07qRtkd2pFfPtxTq8EnSm7wuajEwNfvalQOmg8SacgmDH0cJC3Ri%2BLtvZwGE%2B5WCpqJ8cuxNnrWCtodbK%2BE1GCyHtH6wiTfpGJfJHjFVTaSMw5K8WqLoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImVkSSs4d3NXWlBoeE1adkNSbWVEYVE9PSIsInZhbHVlIjoiMjl1cnZ5aUV5dWx6TzFQOXVoNHhvcnpPeHNvcnRJY0VOTUxRbzhYdkV1d09jTHpWenQrQXErdWlLVlRmTmcvTFlNOHlQaFNHQ2t2cnpKcERVWmVDZ0xYdXU1c1lHUGZRZWFKZXZSZ25iTnMwOTk2SzVIcWJqb1ZsL00vQ0RYdFUiLCJtYWMiOiIyZDEwOWU0ZjgzOWQ3ZGMxOTQ1YTIyMjA0YzViMjQ5NjgxZWIyOTA3ZTY2NWQ4ZGU2MGI1ZWRiMTM5YmM0Y2FkIiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:51 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImFSZk9ndFBvWkRDNHdWZWN1b09LZWc9PSIsInZhbHVlIjoiREN5Uy9zQS9JSTUxa3FEaG5OUVNMaVAzRlFucDloN1I3bWFaL0JYd0FTY2RBeTJSMld6K2JxZnJ0YUVnVkd6bGhJWHJJWisrcW1uSVExWEhKMlN1ZXhwYWduYzZwbWgxTTMxRXEyOFRZV28yWS9YelJST1d4Wm9hL1FDN1pvVW8iLCJtYWMiOiI5NmU0OTI2ZDkyZjZiMTZjZDllY2UxZmE1Y2M2NzQ5NDlkYWJjZTNjNWNlYmE3ZDkzMzZiNWY0MmM4MzJkODFjIiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dca19cdb50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1159\u0026min_rtt=1087\u0026rtt_var=459\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2162\u0026delivery_rate=2664213\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=c1a601359579f9ac\u0026ts=105\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=4460\u0026min_rtt=2773\u0026rtt_var=1746\u0026sent=17\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=5830\u0026recv_bytes=3833\u0026delivery_rate=293\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=5792\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39133,"size_decoded":15215,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9977), with CRLF line terminators","md5":"c4379053202576ca4d2080cb9decc731","sha1":"c2e1072c9035e20779803c1313677c72464d02c4","sha256":"2f9837d4c216d2d901b984f26fca389a9cd9f1835e93af3dc60487599b03a244","sha512":"ebcd2336e387900de90936ba9f86fbfab6f5b8beb89030bc6be2531c67493c96e300ec50581c8a65e6a621a742ef967bee08b95d003b600e9a27290e057bb340","ssdeep":"384:PeQXAaQwXbdsQl+jHsfnYn2/lrolrdlrS:PeQKObdsQl3fnC2lrolrdlrS","tlshash":"d7628d85c200aa721634bd069c37598cf52a1eaf689313f1de5b4e8569b2ad70dc3b7c","first_seen":"2025-02-14T16:50:21.133719Z","last_seen":"2025-02-14T16:50:21.133719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-02-13","alert":"Generic/Spear Phishing","trigger":"eiku5vqro5.brightnexst.ru/pax6lf1/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.650Z","timestamp":1739551792650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 156263\r\nexpires: Wed, 04 Feb 2026 16:49:52 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aS3mEbFiAVLHb5zllnhjKycfj6ob7PQfeQdvvKAGpxZcVk4RGht8%2BLvDdrhjbVaKn7HHXV7tdv2lrtRSEOc6OK5ScFTbPNXV48k41SY78oSfe7XjcI7a4bRTLYJLs3mE9JEFTh5O\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 911e8dcffc8a7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-17T14:14:01.92252Z","times_seen":150943,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/favicon.ico","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:54.319Z","timestamp":1739551794319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/pax6lf1/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVkSSs4d3NXWlBoeE1adkNSbWVEYVE9PSIsInZhbHVlIjoiMjl1cnZ5aUV5dWx6TzFQOXVoNHhvcnpPeHNvcnRJY0VOTUxRbzhYdkV1d09jTHpWenQrQXErdWlLVlRmTmcvTFlNOHlQaFNHQ2t2cnpKcERVWmVDZ0xYdXU1c1lHUGZRZWFKZXZSZ25iTnMwOTk2SzVIcWJqb1ZsL00vQ0RYdFUiLCJtYWMiOiIyZDEwOWU0ZjgzOWQ3ZGMxOTQ1YTIyMjA0YzViMjQ5NjgxZWIyOTA3ZTY2NWQ4ZGU2MGI1ZWRiMTM5YmM0Y2FkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFSZk9ndFBvWkRDNHdWZWN1b09LZWc9PSIsInZhbHVlIjoiREN5Uy9zQS9JSTUxa3FEaG5OUVNMaVAzRlFucDloN1I3bWFaL0JYd0FTY2RBeTJSMld6K2JxZnJ0YUVnVkd6bGhJWHJJWisrcW1uSVExWEhKMlN1ZXhwYWduYzZwbWgxTTMxRXEyOFRZV28yWS9YelJST1d4Wm9hL1FDN1pvVW8iLCJtYWMiOiI5NmU0OTI2ZDkyZjZiMTZjZDllY2UxZmE1Y2M2NzQ5NDlkYWJjZTNjNWNlYmE3ZDkzMzZiNWY0MmM4MzJkODFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LHjObq0TNmpt7i8M1aWGrDoJoH%2FhnlvE6AclU645BX1cPw5TNKNW8LAvfo26flE8ZgDQryvjiEOnGTrixKmUDyvALh3EYABMuc96ahyANHJfxBOaOYSBdK7lw%2F%2BUow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dcc8e64b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1177\u0026min_rtt=1163\u0026rtt_var=353\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2120\u0026delivery_rate=2356387\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=8484fafdf551c458\u0026ts=98\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=3928\u0026min_rtt=2135\u0026rtt_var=1909\u0026sent=33\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=17766\u0026recv_bytes=5784\u0026delivery_rate=14216\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6228\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":30878,"size_decoded":30878,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"6e91fb3b5fb1269e98a4a1f1c597eaf6","sha1":"81fbd8f550ca53b28c2a4241e2968b0ed7579068","sha256":"482456e7ae1776a9eef640c0e5a46f874c1c5d05fdcf94660c6776897e5d24e4","sha512":"c0d90ebdd6f9636c8ca31979344775a325f2061a0d774e0bb08d463935847054093e6fe6ce7bb7a4c795993eeb9b83d26c9ea237ff95ea05fc01bb974b64eede","ssdeep":"768:ocTk8CBQtB21Xhcdn9rnKQlFCw4jiQAlMIOVh34HcD:JjCGmhcdn9rKkFxcnALHS","tlshash":"56d2f1819e540000a3e255a639cc5ef4f6929719b31f2edf523879f108e747ba6b6c8d","first_seen":"2023-11-02T22:11:56Z","last_seen":"2025-02-28T14:17:18.210719Z","times_seen":504,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.716Z","timestamp":1739551792716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 10796\r\nserver: nginx\r\nlast-modified: Tue, 23 Feb 2021 04:20:08 GMT\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jan 2025 00:59:17 GMT\r\nexpires: Thu, 29 Jan 2026 00:59:17 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: \"12bdacc832185d0367ecc23fd24c86ce\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: s_HjN7_VhpaBAi8VQzXvoVlBeVUyT4TFhaWeo8Sq9Khoi4MjL24HAw==\r\nage: 1439435\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10796,"size_decoded":10796,"mime_type":"image/png","magic":"PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced","md5":"12bdacc832185d0367ecc23fd24c86ce","sha1":"4422f316eb4d8c8d160312bb695fd1d944cbff12","sha256":"877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0","sha512":"36c319ac7f75202190e7a59f3f3c92892a71d5f17663e672319a745b6574bcfde7c89b35f480cb15a193924dacb9d67f8ca1e1bc2bf33fc5ccbfa152cc7ba2d0","ssdeep":"192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0","tlshash":"7122af89d5a7d9387f3ff18c00be1fcb46f8a1f9760608b93989875d0641d9c188c499","first_seen":"2023-05-04T21:28:17Z","last_seen":"2026-04-10T13:26:22.651449Z","times_seen":38427,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/uvAqsZ1NVZ1omysM7uQAw6Ayx2stslAxQc1nTLTojF34130","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.696Z","timestamp":1739551792696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /uvAqsZ1NVZ1omysM7uQAw6Ayx2stslAxQc1nTLTojF34130 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 644\r\ncontent-disposition: inline; filename=\"uvAqsZ1NVZ1omysM7uQAw6Ayx2stslAxQc1nTLTojF34130\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XVVK9%2FRsirDh%2BePQOk6EVhmUZebvL0%2Bk%2FsB61SEp%2BNsWN%2ByAoPestZ%2FMlCdi%2FAIoZhTeFQduI0iHWQGjgtOBm8fr2vxoULZa27CvVobCuC%2F%2BJQlSwyYRJitYu0Z%2BDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd02ce0b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1353\u0026min_rtt=1336\u0026rtt_var=387\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2190\u0026delivery_rate=2123167\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=4df6d71a538cd8b5\u0026ts=107\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1601\u0026min_rtt=906\u0026rtt_var=827\u0026sent=122\u0026recv=50\u0026lost=0\u0026retrans=0\u0026sent_bytes=99219\u0026recv_bytes=24313\u0026delivery_rate=2380283\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6796\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":644,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"541b83c2195088043337e4353b6fd60d","sha1":"f09630596b6713217984785a64f6ea83e91b49c5","sha256":"2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f","sha512":"b2ae42ba9d3a63d3acb179051b005f2589f147d94f044616ae5dc5705e873f16057c56934262841191263b4c35804ef188bd38cf69cce0f4b2cf76c05f17b8ad","ssdeep":"","tlshash":"f4f00e3613a40b4ce5643ff860d10f03f37c7e22cb17aa66c10082221f049c86c9c2ca","first_seen":"2025-01-27T17:47:42.408787Z","last_seen":"2025-09-19T23:18:03.500571Z","times_seen":37683,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/qr2tGdzF1gN6s80v0ePTKO1lysmnvI1Dj7zglCQBUTrfgPN45137","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.699Z","timestamp":1739551792699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /qr2tGdzF1gN6s80v0ePTKO1lysmnvI1Dj7zglCQBUTrfgPN45137 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 892\r\ncontent-disposition: inline; filename=\"qr2tGdzF1gN6s80v0ePTKO1lysmnvI1Dj7zglCQBUTrfgPN45137\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6TTcXFAh%2FtEp6VF%2BE6tnUh1nhnKoXtRfnAQGJhPaJAL8yg0%2FxqJqnP17X%2BRJeaF6yBGKwMvPq1B%2BY8A25wCPYBfcbnFQTZ9StOXgS76jzV%2F3VmXFuXjImIkHsHebnw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd02ce1b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1102\u0026min_rtt=1088\u0026rtt_var=315\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2195\u0026delivery_rate=2611361\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=49b13c36f4210108\u0026ts=110\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1601\u0026min_rtt=906\u0026rtt_var=827\u0026sent=124\u0026recv=50\u0026lost=0\u0026retrans=0\u0026sent_bytes=100758\u0026recv_bytes=24313\u0026delivery_rate=2380283\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6798\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":892,"size_decoded":892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41d62ca205d54a78e4298367482b4e2b","sha1":"839aae21ed8ecfc238fdc68b93ccb27431cd5393","sha256":"20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40","sha512":"82b9806490a0db493da16466738437b9bb54b979075db58c89ca0d192d780ddb5ed888e10ce76a53d48d30d5013791cac7ab468d85b61d32766140dd53dc9044","ssdeep":"","tlshash":"a41120296b6053c8e7156bbc60c11f92ebbdb9124712627782c093366b489c6255c2d2","first_seen":"2025-01-27T17:47:42.408008Z","last_seen":"2025-09-19T23:18:03.480147Z","times_seen":36702,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.121.3","port":443,"asn":36459,"as":"GITHUB","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.647Z","timestamp":1739551792647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 05 Feb 2025 00:00:00 GMT","end":"Thu, 05 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:33:71:DD:D6:91:4A:75:B6:1F:9E:4F:74:6D:9B:F0:DD:26:FC:3A","sha256":"B8:BB:81:87:68:33:87:39:42:04:5A:8D:F8:F0:62:19:E0:06:02:EB:CB:43:84:C7:AB:C2:4F:18:37:9C:87:F5"}}},"request":{"raw":"GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Fri, 14 Feb 2025 16:48:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250214%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250214T164829Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=cc8c0f248f554872ad6570c0cbc70f592b7aea666d1966b7f5c26ca52b3ca744\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: EA4F:196D25:29B2E51:2AAAE2B:67AF7430\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T14:13:34.225927Z","times_seen":13863465,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":191,"dns":2,"connect":19,"send":0,"wait":19,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-regular.woff","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.678Z","timestamp":1739551792678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-regular.woff HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V3q1iW9YZCfGWEdKv1cHb8Pkt9XE%2F47wxP27YUTuEerHYKguGclMZu%2Fvpw2XI%2FRcpLKb%2Fa74z%2FPV72Z9fukV3yuE63ybQKjSv%2BX%2BveO8aQ0ZnH%2F87ppKQV1zfnH%2Blw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd01ccbb50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1395\u0026min_rtt=1372\u0026rtt_var=561\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2236\u0026delivery_rate=1855221\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=0b8d23bf7c114e04\u0026ts=139\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1527\u0026min_rtt=906\u0026rtt_var=386\u0026sent=147\u0026recv=56\u0026lost=0\u0026retrans=0\u0026sent_bytes=124855\u0026recv_bytes=24585\u0026delivery_rate=316523\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6820\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":36696,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-16T23:39:53.881511Z","times_seen":90393,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/qrxhEBv59hrvWqFujrF9SLxSbePPkyKOu6YXK5A1m6GIpY1uviDKf5nNJ7OyhprZKSw9rcd240","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.720Z","timestamp":1739551792720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /qrxhEBv59hrvWqFujrF9SLxSbePPkyKOu6YXK5A1m6GIpY1uviDKf5nNJ7OyhprZKSw9rcd240 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9648\r\ncontent-disposition: inline; filename=\"qrxhEBv59hrvWqFujrF9SLxSbePPkyKOu6YXK5A1m6GIpY1uviDKf5nNJ7OyhprZKSw9rcd240\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Njl4TgbuTjGuWJvLOIXmnXD%2Fb12uesQ1FL9EjOyXEvCo8FVTBaOvA7zA1m51jNAZvx4PiTDZrKrxSqPYpZDFpwVb45SxOgn1hExrOTQYMaWCEyXYJjEUtGfcTiYq6g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd05d47b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1289\u0026min_rtt=1280\u0026rtt_var=499\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2217\u0026delivery_rate=2132547\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=47f8a9f6497b822c\u0026ts=98\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1527\u0026min_rtt=906\u0026rtt_var=386\u0026sent=157\u0026recv=56\u0026lost=0\u0026retrans=0\u0026sent_bytes=136855\u0026recv_bytes=24585\u0026delivery_rate=316523\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6821\u0026x=1\", cfExtPri, cfHdrFlush;dur=4\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9648,"size_decoded":9648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4946eb373b18d178c93d473489673bb6","sha1":"16477acb73b63ca251d37401249e7e4515febd24","sha256":"666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92","sha512":"f684b90b748dc8399f76c5d8f94af6c4e6869143f18d19ce435b25eaa14e9647b120467bdd0795895676dc0cccdeabf82beb2f46ce2c5bf4c58ed9c134f30c48","ssdeep":"192:gwTgBYruFELhYmwd93mjW0l9OsENOLWcXdN4CLrHZfTtjOZgYM5cWjAaP6:gwTgBxaYmo5mS0l9OsuOL3NNVLlfTtjE","tlshash":"4a12af6f53b87b4cece19e3e4c48d73398fde91606176ac54a81a0c8d3988573a5228e","first_seen":"2025-01-27T17:47:42.409718Z","last_seen":"2025-09-19T23:18:03.495565Z","times_seen":37083,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-bold.woff","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.666Z","timestamp":1739551792666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-bold.woff HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QF%2BEiDzIVSxvFMz6h4mbApZl8LJ1VPp%2BAa5ISpU0AAbqk23SHTxME%2FhGjlg4cYquE7r3gfmtvuZ6ZvTo9ocDXpiI6bY%2B2%2Fxquh92Kx%2BAhGHvgcCqx0pI6Rz%2B7swrGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd00cb8b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1048\u0026min_rtt=1039\u0026rtt_var=309\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2233\u0026delivery_rate=2669124\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=fd94d10ca70db7a7\u0026ts=132\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1557\u0026min_rtt=906\u0026rtt_var=340\u0026sent=201\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=187767\u0026recv_bytes=24677\u0026delivery_rate=7197880\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6835\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":35970,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-16T23:39:53.870215Z","times_seen":90463,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T16:49:52.314Z","timestamp":1739551792314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/pax6lf1/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxqVlVuTkp4aWFzaWwzaXBFZ3pjelE9PSIsInZhbHVlIjoidndGV1VrSkRsQzRHdDFDZVZHM1NZc25RVldPdzVORjViUnRyTXJsZ1JHbUdXbjdUcExHUy9XRUNUL24zSENXSnhicTZydkVDenhUQ3N5RmRUam4ydUI0R2k2RlVvZ2hVS3hpdUZPUlQ1TGhMNjI2Qm9hNE5tcDVDbCtkMThaWWEiLCJtYWMiOiJmYzY1NmRkYjI5YWUyZGQxYzE5NzEwZmJkZWNmZjMyZTNmM2NlYWY2MmJkM2RlNjZmNDFjYTQ2YmVmOWY0OTE3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFLdGdmMzFleHVKdCt2ZFJlYjFkUnc9PSIsInZhbHVlIjoieXNJdnY3S210cHBTT1Nua2FjOUhIdGl1ZzlmanhWTDg5cHQ5bW8vWEpHM0VvbzhxMm1EQXpuK2kzdGIvTVpLSXBXU0JGUnJaelJPbVp5SlNqV3hzeXd2cU1NWGNRd05CSHdjSGMxRHFSb0k1ZWI1TGpmOGZBNzl4ZE9PWTlHSjEiLCJtYWMiOiI4ZGFhMjcxMTUwZmE0YjI0YmE2MTk4YmQyYTBlMGU3ODc1YjIzYTY4MmNiYzczM2ZlOTg5NmVlOTc3YjJhNzcwIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pPsgI1uaC5%2FwIx2uxSVAYmcc3yNrKdLsuoPi2b7OXoAUOizEHmO4M1mRhOn%2B1nODJL%2FOED6miKw4qN32LdVQ0DlXcKk5z5sCWFT0PDdMXx0Mr%2Fk7zHiikxJ%2BoW3TJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:52 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:52 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dcdf8f6b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1282\u0026min_rtt=1218\u0026rtt_var=503\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2245\u0026delivery_rate=2377668\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=106e3f829284287e\u0026ts=144\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=4189\u0026min_rtt=2135\u0026rtt_var=1953\u0026sent=35\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=18632\u0026recv_bytes=6788\u0026delivery_rate=32250\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6452\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93899,"size_decoded":151206,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (52495), with CRLF line terminators","md5":"cd21361c1a11a587272b8fd561dc6b3f","sha1":"71e9f7cba57b270e668e5615706cf9760614a435","sha256":"f13b73b87029b299d2c166142e03e4453df92c24d9940347700b1d2025128c50","sha512":"152b3463968a58f36c101c6837fdea8ffb128a8ca3c2ee95c0daed385aa28960c76aadf05c9fa2cf755dd167e95a2d0ebf07f4676046614b41705cff88fa5ea8","ssdeep":"1536:SdZiycM8KWzxLNHwYyrkxabE2g8/RIGzGbJfM5px7/eVu4yoaRBu19KOD9Ou/nHl:kcMRQxHwYy9bdgdfgeSUnoufHaCytO1R","tlshash":"2ae35cd24b134e1dc6ad536c5174aaafbca42b8c1ec225a337ca775fabd25183c73508","first_seen":"2025-02-14T16:50:21.140696Z","last_seen":"2025-02-14T16:50:21.140696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/ghjIB03zkv9xWoYBf07hIbOU4tVMxyCfUmEMsnAkVSlcVhLdkkC00JlJef210","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.718Z","timestamp":1739551792718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /ghjIB03zkv9xWoYBf07hIbOU4tVMxyCfUmEMsnAkVSlcVhLdkkC00JlJef210 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25216\r\ncontent-disposition: inline; filename=\"ghjIB03zkv9xWoYBf07hIbOU4tVMxyCfUmEMsnAkVSlcVhLdkkC00JlJef210\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Z86wn9kOxg5UE%2FZiheBRjV4zdVwYd55RMqKdmaKW7R5M%2FneQBbT2rt5V29%2FBqvhV6eZLxFoURKR2lNh%2BjF9MZhsm9faXB7hhRMmQ46%2BQqEQDVh3f7xXmuqg2eayZQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd05d45b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1541\u0026min_rtt=1418\u0026rtt_var=498\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2204\u0026delivery_rate=2000000\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=d5f382a36c712590\u0026ts=89\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1449\u0026min_rtt=906\u0026rtt_var=450\u0026sent=132\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=108641\u0026recv_bytes=24494\u0026delivery_rate=1669122\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6810\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25216,"size_decoded":25216,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9a795e2270664a7a169c73b6d84a575","sha1":"0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8","sha256":"d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740","sha512":"e17c8d922f52c8ab36d9c0a7dc41d32735cf1680ea653056308c6d23255fdbe40b96c68f0e7f8b3b521b6acb080cd825f94320364b0a70141606a4449d980517","ssdeep":"768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs","tlshash":"35b2afbf1ad14f30c51a6435a2ef6d51f7cde3186f900ae895b046519b2e9bacf2d80c","first_seen":"2025-01-27T17:47:42.413017Z","last_seen":"2025-09-19T23:18:03.462271Z","times_seen":37027,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/uvqrswgO3d3cvoz1KlQfNR6ujixK67DwGWAmre0kvtpmm3jaS8FbSTT46PPIUtgh260","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.722Z","timestamp":1739551792722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /uvqrswgO3d3cvoz1KlQfNR6ujixK67DwGWAmre0kvtpmm3jaS8FbSTT46PPIUtgh260 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17842\r\ncontent-disposition: inline; filename=\"uvqrswgO3d3cvoz1KlQfNR6ujixK67DwGWAmre0kvtpmm3jaS8FbSTT46PPIUtgh260\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wIQyYQHhguxQa5ea7GEI34LuAMZ%2FsfBdQQILCGdfeJqCTogff8ho3I40QvsVS%2F5Ubmo81TyUqS27WLq81xRkKn4OWST3VzR2rCcrwWOKwqc45LSGeJZl0WCj5rhbpg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd05d4ab50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1133\u0026min_rtt=1116\u0026rtt_var=431\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2210\u0026delivery_rate=2594982\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=91b6ce04e5dbb01c\u0026ts=95\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1527\u0026min_rtt=906\u0026rtt_var=386\u0026sent=157\u0026recv=56\u0026lost=0\u0026retrans=0\u0026sent_bytes=136855\u0026recv_bytes=24585\u0026delivery_rate=316523\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6821\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17842,"size_decoded":17842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b52ecdc33382c9dca874f551990e704","sha1":"8f3bf8e41cd4cdddb17836b261e73f827b84341b","sha256":"cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342","sha512":"ac3d3c82bad9147ae5f083ed49c81a744f672ddfbb262135aa3f2c6601f8dffea11d8e323cef025c36d76c6f2515aa6814b622cf504ca01d13346e9ea989048f","ssdeep":"384:EwTZQ74B48VtrMvbt0sAvPTMaf+j5s8OYbqarRbjy5Qg1AR/kf63z/:hTa4B4mtYztAvPTMFhOYb3Rbu571AJa6","tlshash":"6c8218ba77256ca7e25c2bb77afd731b8062d78480681d92740f038aaf3913693901f5","first_seen":"2025-01-27T17:47:42.411749Z","last_seen":"2025-09-19T23:18:03.455649Z","times_seen":36919,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-regular.woff2","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.673Z","timestamp":1739551792673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-regular.woff2 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4icinvFPn1aw%2Fglrwzmqf0mlvXzmesJxdozttemb4AqoKEPnu40fM6IOE4D9pw%2B4pnj%2F%2BX3akIyBtOK%2FNHGU%2Fp4WfXTFaENaNqNKKF5oI9ZwCbwi%2B6LpZHCFfJ8DnA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd01cc7b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1251\u0026min_rtt=1251\u0026rtt_var=470\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2238\u0026delivery_rate=2303898\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=1064ba32e3b91238\u0026ts=156\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=2829\u0026min_rtt=906\u0026rtt_var=2606\u0026sent=280\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=277855\u0026recv_bytes=24860\u0026delivery_rate=251938\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6872\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":28584,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-04-17T13:19:53.293168Z","times_seen":101969,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-vf.woff2","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.686Z","timestamp":1739551792686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-vf.woff2 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\ncontent-disposition: inline; filename=\"GDSherpa-vf.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xLc257vki9uvY3oGheYEd79L5Ho5DQAe0OsP9Jn4ffn3X7nOh0NF4xrBMH7pvS%2B%2FYaXQ37ssdlEjbiJyiKAT0kmFXbIvk%2FadgvwqpTemdxZL3SMx0jbrAx40RAW3vg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd01cd7b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1047\u0026min_rtt=1014\u0026rtt_var=346\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2232\u0026delivery_rate=2419381\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=5a4739ae521b9cfe\u0026ts=192\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=4394\u0026min_rtt=906\u0026rtt_var=5056\u0026sent=310\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=310968\u0026recv_bytes=24952\u0026delivery_rate=75930\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6944\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":43596,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-04-16T23:39:53.864127Z","times_seen":91857,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-vf2.woff2","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.690Z","timestamp":1739551792690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\ncontent-disposition: inline; filename=\"GDSherpa-vf2.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=poRu7JpgwirjbulbSfEj%2F5vvmHefyoddUP7Jgyb2cV4zgdhLvbP4Ihe9ZTjjVYNi5KgIPv9AFQfsexKtTDEqORg6FE%2FQif8WO3%2FBa%2BF6GIQnvIrRl6TDHIUoEnKd4w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd01cdcb50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1157\u0026min_rtt=1154\u0026rtt_var=440\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2234\u0026delivery_rate=2443881\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=69140e285e3678c9\u0026ts=208\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=4167\u0026min_rtt=906\u0026rtt_var=4247\u0026sent=354\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=362422\u0026recv_bytes=24998\u0026delivery_rate=7293741\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6959\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":93276,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-04-16T23:39:53.888317Z","times_seen":91690,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250214%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250214T164829Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=cc8c0f248f554872ad6570c0cbc70f592b7aea666d1966b7f5c26ca52b3ca744\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.900Z","timestamp":1739551792900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":"GitHub, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Mar 2024 00:00:00 GMT","end":"Fri, 14 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28","sha256":"09:01:0C:CE:9B:72:21:55:C7:E6:86:B0:77:39:D3:D2:DC:06:05:DE:A1:A4:98:4A:0B:96:5E:18:77:77:26:B5"}}},"request":{"raw":"GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250214%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250214T164829Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=cc8c0f248f554872ad6570c0cbc70f592b7aea666d1966b7f5c26ca52b3ca744\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Tue, 07 Dec 2021 16:38:45 GMT\r\netag: \"0x8D9B9A009499A1E\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000\r\nx-ms-version: 2023-11-03\r\nx-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT\r\nx-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=randexp.min.js\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\nage: 4134\r\ndate: Fri, 14 Feb 2025 16:49:53 GMT\r\nx-served-by: cache-iad-kiad7000045-IAD, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 11369, 0\r\nx-timer: S1739551793.027455,VS0,VE1\r\ncontent-length: 10245\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10245,"size_decoded":10245,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (10017)","md5":"6c20a2be8ba900bc0a7118893a2b1072","sha1":"ff7766fde1f33882c6e1c481ceed6f6588ea764c","sha256":"b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500","sha512":"8f80ad8adc44845d24e13d56738a2ca2a73ee6fcdc187542ba4aaebbf8817935d053a2acfb0d425b9cc0c582b5091e1c9fe16b90b3aa682187645067c267fc41","ssdeep":"192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj","tlshash":"ce22a58932933026af5391b440bf140af2f69589d45cade8ab29d1e27d7290d46f7f38","first_seen":"2024-05-30T22:56:13Z","last_seen":"2026-04-17T13:31:36.220544Z","times_seen":52271,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":109,"dns":3,"connect":50,"send":0,"wait":426,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:53.718Z","timestamp":1739551793718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eiku5vqro5.brightnexst.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ok4static.oktacdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 20416\r\ndate: Mon, 27 Jan 2025 07:42:18 GMT\r\nserver: nginx\r\nlast-modified: Tue, 07 Nov 2023 18:56:28 GMT\r\netag: \"d99a7377dabb55772ca9f986b0a04b57\"\r\nx-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc\r\nexpires: Tue, 27 Jan 2026 07:42:18 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: wOVo4HMUFK30oGMcXFF-QolS9JjqdZU1SjCZo_BeZiUt9xnrzymIDw==\r\nage: 1588055\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20416,"size_decoded":20416,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20416, version 2.197","md5":"d99a7377dabb55772ca9f986b0a04b57","sha1":"2b5fcd8431953c44e410d0489899e74f6d2cfecc","sha256":"affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149","sha512":"cb80ebc6424029c45e86ddf6c18eb43284605678ede88119301cc6493c21e282cace48fd849fc14e5d73c6aecf83645cc3a58051d5d8e22197e09912a41e3130","ssdeep":"384:e/Apz8weEie675kzn2XOvHNE18xEZJymoDyV+5uxfv3CBi3n9SDonvPsp:eFvhQL2XgE1mBDg+E/CBi39SDoHsp","tlshash":"d592d00d9a200f9581271db08a0b434edbb8e0575e4dedddf083312bde81259d25aafb","first_seen":"2023-04-17T18:58:51Z","last_seen":"2026-04-04T10:25:19.934287Z","times_seen":36471,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/ij45mX0k0SWmxAZBPgWVA7PMqrQcRbUfgtmHH62ZiLcvgKFJuBNJPab230","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:53.716Z","timestamp":1739551793716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /ij45mX0k0SWmxAZBPgWVA7PMqrQcRbUfgtmHH62ZiLcvgKFJuBNJPab230 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1298\r\ncontent-disposition: inline; filename=\"ij45mX0k0SWmxAZBPgWVA7PMqrQcRbUfgtmHH62ZiLcvgKFJuBNJPab230\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f%2FOxd44a%2BzXVVQNuIzcT0ZMc8%2Bhul5OZthj8n4IGAaVn%2BVzGUF4kB7bTeiJy%2Bp43zNyWn8vrXPxsfON8O0FVoRySxlTOfWKMUjAwTYpOP2Rv9pZUD4URUMJkXgW%2Bhw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd6b8e1b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1180\u0026min_rtt=1171\u0026rtt_var=346\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2201\u0026delivery_rate=2373770\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=a3a13b5183475598\u0026ts=97\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1522\u0026min_rtt=757\u0026rtt_var=709\u0026sent=849\u0026recv=101\u0026lost=0\u0026retrans=0\u0026sent_bytes=930377\u0026recv_bytes=29447\u0026delivery_rate=1826680\u0026cwnd=192000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=7816\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1298,"size_decoded":1298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32ca2081553e969f9fdd4374134521ad","sha1":"7b09924c4c3d8b6e41fe38363e342da098be4173","sha256":"216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587","sha512":"f75749c6344fcd7bf06872a3678bb2eb4cae2ddc31cc5d1ee73efba843705577841667733a83163af4336ec8a32df93e7a36155bd6282d7bb86159644975948c","ssdeep":"","tlshash":"53210aba23a84b4df0121e3016c04b92b7b5b9329ad693938106cf330f964cd7c6c08e","first_seen":"2025-01-27T17:47:42.419846Z","last_seen":"2025-09-19T23:18:03.501321Z","times_seen":33195,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/kl8VdVJAWt9cQdyYoiqx5kJMJQiI9ijnxbXHUQORdmFcE6o8wFpzuRfr4uv220","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:53.712Z","timestamp":1739551793712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /kl8VdVJAWt9cQdyYoiqx5kJMJQiI9ijnxbXHUQORdmFcE6o8wFpzuRfr4uv220 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"kl8VdVJAWt9cQdyYoiqx5kJMJQiI9ijnxbXHUQORdmFcE6o8wFpzuRfr4uv220\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cWqUcytF397AkAhWdQzILhfvnPXPlDTlt92WvjPYfQIREGitGuD0MNPQAIUUf3BIN5aJcRGxCzHodisxUHx2%2BH63bi%2Fdde5FWZGYwHynGi7AjmOpRsgZeAatdl1ZlQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd6b8d6b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1214\u0026min_rtt=1184\u0026rtt_var=505\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2205\u0026delivery_rate=2025174\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=5b1ba20a9ad40bf0\u0026ts=98\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1678\u0026min_rtt=757\u0026rtt_var=764\u0026sent=843\u0026recv=99\u0026lost=0\u0026retrans=0\u0026sent_bytes=925884\u0026recv_bytes=29356\u0026delivery_rate=13582247\u0026cwnd=192000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=7805\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10899,"size_decoded":1864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-04-17T14:11:45.028016Z","times_seen":102600,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/34OYl47Jrh4EI1rIlTatklWou7ZJkCGHAj89101","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.725Z","timestamp":1739551792725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /34OYl47Jrh4EI1rIlTatklWou7ZJkCGHAj89101 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline; filename=\"34OYl47Jrh4EI1rIlTatklWou7ZJkCGHAj89101\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zDtTULauisZHo5uj0r8zaRcCPlFDbUzjgOii2CU7KxPgCBWQ25u1GpFuKH3GJWgyctjUwVQ2zO5lV6rTWIu33PLilh8a6FmwfR6zvcauwaoi3yFjH6zQpVvc6mLAVg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd05d4db50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1182\u0026min_rtt=1174\u0026rtt_var=456\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2146\u0026delivery_rate=2337368\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=759156d2499e282e\u0026ts=133\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=3272\u0026min_rtt=906\u0026rtt_var=3306\u0026sent=277\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=275331\u0026recv_bytes=24769\u0026delivery_rate=3941260\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6861\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":471119,"size_decoded":4756466,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (21756), with CRLF line terminators","md5":"e0b5e689ac9d07752e1f4a5ea58e08a7","sha1":"60435dbd95ba89d1079ddc9dbea80c9ca45762e5","sha256":"70cb6b8c9ce50c3edc5e6439a370aab6d3382c92a7719700059b454a9e5e0939","sha512":"f2738531e7fe17789b4a4e76006e3c94706bda703af9e3b9aba21ad2bbe571ecbccdbdcd26ac5773bd08ef7191572dd0e2fd448e68d99416f411b2fad45e3bd5","ssdeep":"6144:byhjM/9KIpSIiDhDoZghdXRKDBhIXhLHpDMp+ov3IIshsfD0IdHVgXIIfgCofLHb:/","tlshash":"2b26007314f165807625a5413d1fbf1fd5144bea91c780746cd8fe8cda7d92c800eb54","first_seen":"2025-02-13T02:05:42.19022Z","last_seen":"2025-02-28T20:26:31.511634Z","times_seen":195,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/favicon.ico","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:54.319Z","timestamp":1739551794319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6ImIwaVRtSU55bkJWaVpRNHZyV0E5dFE9PSIsInZhbHVlIjoiZStSb3RvWGhrT0pTTnZ4WldsUkZ6TEcvdHVGWG4rdTBEVHNTWmJxYk9ucjlCNWhLUUdjcVlxY2o3OFhVejB3OUpUUnZnWTZHV1BqSTBSZDkvYnlzN1ZHd2gwOCtDWXdETmRrdFpCTnZJOG9IU244VGpnMUZhdnZKQU5Za1RsV0wiLCJtYWMiOiJhMjYzMjNlYWM1MTcwOWMyOWU5MDc2NjUyZjVjOTNmYmE2OGNkYzMzNWVjZmU1MDA4YzExMjZhOWU1OTE4Yjg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjVxNjlycS85Qzd0cVMzUHExcW9CZFE9PSIsInZhbHVlIjoiU0NzL0pObXRuWFdZY2lJUldWMGJjSDMyazhXbXd1SS8vVVJRdHBNNVB0QkJyZzlpeVpUeU4yOVlsajVEUG5WblJWVnE4WDR5TjhyWDgwL2FYOWNqaGdqeUQxQnAyd281MGViMTNxYW9pNnJXOGNLQ2pjWWdaZ3QwbjZLa09RSG8iLCJtYWMiOiI3Y2ExOGVjODU0ZTk2NGQ4MGU3ZTYzMDc0NjhkNDc5NTY5NzM1OWM5NTJkMDI4MWFmYjA1YjA4ZGM1MDkzMjBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 14 Feb 2025 16:49:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LHjObq0TNmpt7i8M1aWGrDoJoH%2FhnlvE6AclU645BX1cPw5TNKNW8LAvfo26flE8ZgDQryvjiEOnGTrixKmUDyvALh3EYABMuc96ahyANHJfxBOaOYSBdK7lw%2F%2BUow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dda780bb50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1177\u0026min_rtt=1163\u0026rtt_var=353\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2120\u0026delivery_rate=2356387\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=8484fafdf551c458\u0026ts=98\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1461\u0026min_rtt=757\u0026rtt_var=655\u0026sent=852\u0026recv=103\u0026lost=0\u0026retrans=0\u0026sent_bytes=932606\u0026recv_bytes=30409\u0026delivery_rate=1514978\u0026cwnd=192000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=8278\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":6237,"size_decoded":6237,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"e57fafab2d05c65831d703d59c6c1284","sha1":"93e5d6345616ec48b9f126afa0dec3d5bb46dc3e","sha256":"55763b4cd3a1d05ac3fce969a54a2a623e4a9758a4df6b25f376597c0fc19362","sha512":"8b4e73ae944487851de26feb4923969856d253f9568d89455c1b06e943b5402e5f12b463e25412e9810db919dc74faeca5eba8cf6b413c82aa14d279f95e293e","ssdeep":"192:AEc/n1rVkhRIigwd86fs/4mRhp+8eVscot9cBiYr:AEc/XkhRZgJ6fqdeKPCBiYr","tlshash":"b8d18da1e188c761e10f91b14376d7a9b23e6807d710d6c305293ee0a55e5eac32c88b","first_seen":"2025-02-14T16:50:21.148989Z","last_seen":"2025-02-14T16:50:21.148989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/56YYNIh9xPxycato8919","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.659Z","timestamp":1739551792659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /56YYNIh9xPxycato8919 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-disposition: inline; filename=\"56YYNIh9xPxycato8919\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NL45Uc7s8sOHxwsbzB%2FV%2BWxvP7WUN36flujui1ZOQZZiR7mrPc%2FHX3oQYBPyRdoA2QY3Wtqyb%2BAzo5AhLrFUCLyKL11Zp1TsppGZNanuLfYrSXlLMEQnLTh4iIjNCQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd00ca6b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1338\u0026min_rtt=1248\u0026rtt_var=532\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2156\u0026delivery_rate=2320512\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=92df026190a933d5\u0026ts=90\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1655\u0026min_rtt=906\u0026rtt_var=958\u0026sent=118\u0026recv=49\u0026lost=0\u0026retrans=0\u0026sent_bytes=94866\u0026recv_bytes=24267\u0026delivery_rate=2122481\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6765\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26765,"size_decoded":26765,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (26765), with no line terminators","md5":"1a862a89d5633fac83d763886726740d","sha1":"e5ce3aa454c992a13fd406a9647d7afbf831051f","sha256":"5c22fd904edb792331a7307ddf4a790e0d1318924f6d8e7362fa6b55d5ab6fbb","sha512":"3bfab627dc0ebfae1176098c870b4d2747518e7ea91646303276191a4a846d47b2e80bb1ee2fa67271130eccbc8b1152778c99917fc6c63ea45a184bd673bf0d","ssdeep":"768:wC8nBSz2omXX44PL5K9kdY8xbXoEYW+8SX:whnBSz2omXo4PL5K9kdY8xb+Ww","tlshash":"19c2976072003369f127c237b1d26a8e21399592e5b75b7df836b5a8cfe60421b3365f","first_seen":"2025-02-05T01:42:00.41842Z","last_seen":"2025-05-03T07:23:57.60526Z","times_seen":14904,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/mnOurAFOXo4JEW92fuqilC1n5EqLzQprs5qijGiWapYEuRUM544Fzky878150","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.703Z","timestamp":1739551792703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /mnOurAFOXo4JEW92fuqilC1n5EqLzQprs5qijGiWapYEuRUM544Fzky878150 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"mnOurAFOXo4JEW92fuqilC1n5EqLzQprs5qijGiWapYEuRUM544Fzky878150\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CCxwxIGHXRFpKxoW21pzHlx880Mu3t8e3Jzs%2Fh2DK7dYtt1wg9n9KqL8bFzzf6ezhuPFMCCEHmFirvu3Gq%2FzdjDqbkSdCWVxU19adxvR2%2FBEw1zI%2BnyOKIdmqxfcjQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd03cf9b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1155\u0026min_rtt=1129\u0026rtt_var=367\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2204\u0026delivery_rate=2244961\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=81ea9c90e76a1632\u0026ts=115\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1449\u0026min_rtt=906\u0026rtt_var=450\u0026sent=145\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=122743\u0026recv_bytes=24494\u0026delivery_rate=1669122\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6811\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":270,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c09c5ea7c28d6feb4d124957dde0a0d","sha1":"1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e","sha256":"b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a","sha512":"01161867b3ca0386b132618e04fa09bd0dea1e14a8445001e0683f7a2689deb555bed1c31ec69813d0542284e281cc629c323cb8f56899de0b027e46f651a5ca","ssdeep":"","tlshash":"f0d02bb56358bd4d812ca1d20bd031612147b08cb6ef6038dbcd04243404c7bbda8f38","first_seen":"2023-05-12T00:56:48Z","last_seen":"2025-04-06T09:35:55.879922Z","times_seen":19857,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/ijbQr2NlfF1pwTzx8bRbbLuByz4tUhJePvx2DxA78170","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.704Z","timestamp":1739551792704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /ijbQr2NlfF1pwTzx8bRbbLuByz4tUhJePvx2DxA78170 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"ijbQr2NlfF1pwTzx8bRbbLuByz4tUhJePvx2DxA78170\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Jx8%2BoVaI6sfnIWHr5nDcDllXYn%2Bwi%2BrZHkuG%2B7zERhhN6hBcHKtxNDDFUXDrpHUFymU9l8jf%2BdojAyGmpmlgGNMNQCVHF%2BkFgE24qCaWxmzksTVyPXkm0FucI%2BK%2FXQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd03cfdb50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1027\u0026min_rtt=990\u0026rtt_var=348\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2187\u0026delivery_rate=2367947\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=9d96a8acd83e4de5\u0026ts=102\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1546\u0026min_rtt=906\u0026rtt_var=730\u0026sent=126\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=102543\u0026recv_bytes=24359\u0026delivery_rate=909638\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6798\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7390,"size_decoded":7390,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bca9b46fee32162356ba5b4783e614dc","sha1":"cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5","sha256":"fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec","sha512":"ae7f8bc5b83d440a727e230138a3a633b7d5a73c123ae0db661081a7f4f13fb4155bc55aaac65ca7dfb0d76c619cf21e99e1a56e876253d67fe8a59c2d0a15ec","ssdeep":"192:8dEMK4RwdEdEMK4RwIwm6xiD7x9m9t6EQ3FabrItDWOO6Dcy:8dEMVwudEMVwIwtxiDHmP6lFeItDWOOe","tlshash":"dbe187d532f9e1e85482bbfd6681f17c3e1339fa7a32d99083d65c18dc8a00c45adca2","first_seen":"2023-05-10T21:54:10Z","last_seen":"2025-04-06T10:50:06.515793Z","times_seen":21752,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.714Z","timestamp":1739551792714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Thu, 14 Mar 2024 00:03:58 GMT\r\nx-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Fri, 31 Jan 2025 02:19:39 GMT\r\nexpires: Sat, 31 Jan 2026 02:19:39 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: W/\"e0d37a504604ef874bad26435d62011f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: UhETpeTXXJqhr3ggU9nVuGfEERfZVfievHEh8Y1SR9eCZBJvpDY_kg==\r\nage: 1261813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10498,"size_decoded":10498,"mime_type":"text/css","magic":"ASCII text, with very long lines (10450)","md5":"e0d37a504604ef874bad26435d62011f","sha1":"4301f0d2b729ae22adece657d79eccaa25f429b1","sha256":"c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179","sha512":"ef838fd58e0d12596726894ab9418c1fbe31833c187c3323ebfd432970eb1593363513f12114e78e008012cdef15b504d603afe4bb10ae5c47674045acc5221e","ssdeep":"192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON","tlshash":"0a22724186196412409b6f13f0dabac27f0a221df52292bffb3d496cddea8561730f39","first_seen":"2024-03-14T18:17:02Z","last_seen":"2026-04-16T23:39:53.878465Z","times_seen":48204,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":8,"dns":4,"connect":1,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/qxkmXjI0gqKOiFK0EKlEACzm9kc0BY71DlvmY3eudNw9mhx","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:53.689Z","timestamp":1739551793689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"POST /qxkmXjI0gqKOiFK0EKlEACzm9kc0BY71DlvmY3eudNw9mhx HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 55\r\nOrigin: https://eiku5vqro5.brightnexst.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:53 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GFOKJR8qPz3pdNWX5JA6rVowVNqjWeHcIfnIXKA2cnZgcTBDWD9mRs%2Bydn%2FlsJw%2BeA1ixJTdgDq9Vk0vg7i7ppjLj8MFOgXvTxpR0h5riEe%2BQAiFn0PXI8IXKknd8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImIwaVRtSU55bkJWaVpRNHZyV0E5dFE9PSIsInZhbHVlIjoiZStSb3RvWGhrT0pTTnZ4WldsUkZ6TEcvdHVGWG4rdTBEVHNTWmJxYk9ucjlCNWhLUUdjcVlxY2o3OFhVejB3OUpUUnZnWTZHV1BqSTBSZDkvYnlzN1ZHd2gwOCtDWXdETmRrdFpCTnZJOG9IU244VGpnMUZhdnZKQU5Za1RsV0wiLCJtYWMiOiJhMjYzMjNlYWM1MTcwOWMyOWU5MDc2NjUyZjVjOTNmYmE2OGNkYzMzNWVjZmU1MDA4YzExMjZhOWU1OTE4Yjg5IiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:53 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjVxNjlycS85Qzd0cVMzUHExcW9CZFE9PSIsInZhbHVlIjoiU0NzL0pObXRuWFdZY2lJUldWMGJjSDMyazhXbXd1SS8vVVJRdHBNNVB0QkJyZzlpeVpUeU4yOVlsajVEUG5WblJWVnE4WDR5TjhyWDgwL2FYOWNqaGdqeUQxQnAyd281MGViMTNxYW9pNnJXOGNLQ2pjWWdaZ3QwbjZLa09RSG8iLCJtYWMiOiI3Y2ExOGVjODU0ZTk2NGQ4MGU3ZTYzMDc0NjhkNDc5NTY5NzM1OWM5NTJkMDI4MWFmYjA1YjA4ZGM1MDkzMjBkIiwidGFnIjoiIn0%3D; expires=Fri, 14-Feb-2025 18:49:53 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd6887ab50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1041\u0026min_rtt=1027\u0026rtt_var=414\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2367\u0026delivery_rate=2529257\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=598d486325bc3079\u0026ts=131\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1615\u0026min_rtt=757\u0026rtt_var=699\u0026sent=845\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=927461\u0026recv_bytes=29402\u0026delivery_rate=9279\u0026cwnd=192000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=7812\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2836,"size_decoded":2836,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2849), with no line terminators","md5":"15de793ee8df02ff2f2e1cc883b8326b","sha1":"4fa973ad2b9083398df143d1792a348f32cfd828","sha256":"7033ee1f03a3b1aba7a96be408de95809c4cbe63ba14d2a80e1805c6b5771857","sha512":"d9a68b4abdab90344f89686471561542eaf8053a279de3cae1792d88ce289707c114ae2412722df31bf58c81a165d31425662fcbcb9796949c221157ef0e7f33","ssdeep":"","tlshash":"4c5142264e0b3d038b109d476edd59c51c2c238e7c9701ee845ffa888aad52b68d56fc","first_seen":"2025-02-10T17:02:02.70916Z","last_seen":"2025-02-24T17:08:34.346822Z","times_seen":210,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/wxMnwd6tKZDr6ncBghLlSqMi33KGmnZgcuJNTgnQV5DAbbJTp90173","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.706Z","timestamp":1739551792706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /wxMnwd6tKZDr6ncBghLlSqMi33KGmnZgcuJNTgnQV5DAbbJTp90173 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"wxMnwd6tKZDr6ncBghLlSqMi33KGmnZgcuJNTgnQV5DAbbJTp90173\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aLJJVmVm%2Bfio%2BOq9ybvAF%2BKeGu4fXQeXXZlxaJa7Nwp8uW%2F9aPmRImigSSxBwVcKqdkyfw8jvDH4okjUrQdKLX67kcqUFIEtfYBixammcwjpMRKcKdZgb6QttDCuiQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd03cffb50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1121\u0026min_rtt=1109\u0026rtt_var=441\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2197\u0026delivery_rate=2395368\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=4874bd7da67c2fa7\u0026ts=139\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1557\u0026min_rtt=906\u0026rtt_var=340\u0026sent=258\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=255079\u0026recv_bytes=24677\u0026delivery_rate=7197880\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6840\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2905,"size_decoded":2905,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e924de0d471df54b6280f3dc8b187cb8","sha1":"857f03226070b502a9e06b4249710ec10be4c9e9","sha256":"24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33","sha512":"cd4e7a7bd510fc76aaa8efe77f8d78db1b4051b7a27ad9d9e23e620d0c51c7f2e2c0446610340040c75b0c82442f92c099d091788a1b783d65e429b141dcb3ee","ssdeep":"","tlshash":"5d51ec770368eede9190e3881b21b21eb3a4896474fb81d08f879d46ec066b7927cd60","first_seen":"2023-05-07T13:54:23Z","last_seen":"2025-04-06T10:50:06.516306Z","times_seen":22460,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/xyOOZIYrpqFYcd30","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.663Z","timestamp":1739551792663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /xyOOZIYrpqFYcd30 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-disposition: inline; filename=\"xyOOZIYrpqFYcd30\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BSvXjXBg7IQdDicGF5DMBA4Ah%2BUoRBkc2SRxcZ8iCp%2BAsUGse4O8cHnGfxMg00rMoyQ7cQDUG6VPJjI%2FI8zTT%2FY5%2BJ%2F6lf2ItB2qx6sUHLxfQPqWiZasS9LOcT99BQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd00cb0b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1075\u0026min_rtt=1025\u0026rtt_var=377\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2152\u0026delivery_rate=2326104\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=3825fb140493cfd8\u0026ts=85\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1920\u0026min_rtt=906\u0026rtt_var=1274\u0026sent=110\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=88196\u0026recv_bytes=24131\u0026delivery_rate=3426012\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6722\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35786,"size_decoded":35786,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"38501e3fbbbd89b56aa5ba35de1a32fe","sha1":"d9b31981b6f834e8480ba28fbc1cff1be772f589","sha256":"a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b","sha512":"1547937aa9b366e76de44933ef48ef60e3d043245e8e3e01c97dfc2981f6b1f61463d9d30992fbcf2ca25fc1b7b32ff808b9789cfb965d74455522fc58e0c08c","ssdeep":"192:hToogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkf1WcrScuH9Ye3YdersR8Q5oqWjfuogF:h0DKAaZtJsOodwuhx5P6mqjDggJkLRn","tlshash":"07f2ac86255066385f3a277bf3ab00aceb6882b347961564b4bcb454cffc6e410d2d9f","first_seen":"2025-01-27T17:47:42.420764Z","last_seen":"2026-01-31T00:55:03.975062Z","times_seen":44016,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/oppnmLJDV0UqxdfJs2jUIiZn3ffvkcMgOWYOij7SeM7QGIkXMc6fVcd200","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.709Z","timestamp":1739551792709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /oppnmLJDV0UqxdfJs2jUIiZn3ffvkcMgOWYOij7SeM7QGIkXMc6fVcd200 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-disposition: inline; filename=\"oppnmLJDV0UqxdfJs2jUIiZn3ffvkcMgOWYOij7SeM7QGIkXMc6fVcd200\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=itIb0tyWz476wLRTzoDrLhpjnWFoUzLyzeAw8cgLk%2FEDD7MZTPxsHvnOmErs9RyGtGLWJuDO3eI18l122k74kr3f7OVUsHUn8BCVKQaiY0lz7Jib1jGG%2FmVDyD0%2Fig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd03d00b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1146\u0026min_rtt=1122\u0026rtt_var=343\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2824\u0026recv_bytes=2201\u0026delivery_rate=2385502\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=cc8deea2574b40ef\u0026ts=120\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1496\u0026min_rtt=906\u0026rtt_var=431\u0026sent=146\u0026recv=55\u0026lost=0\u0026retrans=0\u0026sent_bytes=123796\u0026recv_bytes=24539\u0026delivery_rate=6484891\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6816\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":268,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1318aafc1fb9ded0c623e5b9a557e6df","sha1":"0917cdd7633cd1642b02b2b785416ec7e5106dcc","sha256":"d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4","sha512":"a81f1cfdc923effa9e7afe6899bbe1114bbc25b197db0a282d366f409507714ecbf7c5ead82c86f62115953f11b80ea96da244e42bfb063b7e5c23e538395d2a","ssdeep":"","tlshash":"05d0c2f0a0a0f54d8308e25a16a4a4b025aa749801ee042ca4a2071a21084efb8e4638","first_seen":"2023-09-01T07:29:56Z","last_seen":"2025-04-05T02:13:18.209121Z","times_seen":19072,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.712Z","timestamp":1739551792712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oktacdn.com","organization":"Okta, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 02 Dec 2024 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5","sha256":"71:C0:94:09:81:5A:DD:BE:41:D4:27:16:CB:BB:73:BD:A1:E1:22:3A:D2:6C:C1:26:F0:EC:4B:ED:3D:64:26:3B"}}},"request":{"raw":"GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eiku5vqro5.brightnexst.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 14 May 2024 21:48:24 GMT\r\nx-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Wed, 29 Jan 2025 17:13:28 GMT\r\nexpires: Thu, 29 Jan 2026 17:13:28 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\netag: W/\"0329c939fca7c78756b94fbcd95e322b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: n19O1JR-uXAvFs7Kh6K_vQPYu2ofm-yxbabtPHGN3_hUgcbc38RyJQ==\r\nage: 1380984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222931,"size_decoded":222931,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T14:13:34.225927Z","times_seen":13863465,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":1,"send":0,"wait":2,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eiku5vqro5.brightnexst.ru/GDSherpa-bold.woff2","fqdn":"eiku5vqro5.brightnexst.ru","domain":"brightnexst.ru","tld":"ru"},"ip":{"addr":"172.67.146.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY","date":"2025-02-14T16:49:52.664Z","timestamp":1739551792664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brightnexst.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jan 2025 20:25:30 GMT","end":"Thu, 10 Apr 2025 21:24:18 GMT"},"fingerprint":{"sha1":"8A:38:FA:93:2C:16:E2:E3:FB:AA:BA:B4:10:91:92:39:E0:65:8F:89","sha256":"FC:0D:2B:82:84:19:A1:2E:8A:7E:37:9C:E2:B7:75:9A:3B:65:9B:90:4F:15:67:54:05:23:FF:E6:A2:0F:DC:43"}}},"request":{"raw":"GET /GDSherpa-bold.woff2 HTTP/1.1\r\nHost: eiku5vqro5.brightnexst.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eiku5vqro5.brightnexst.ru/zoiuckhdbjrwdebh0o14974puriap?MTUGDOABDVUY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5LenFCRTRQZ2Z2L3VVdVlOc3pQWHc9PSIsInZhbHVlIjoiS0Vhc1ozcU5HQXoxdHBoS1ExdHpuNDBlQ04veWZraWZFeDZtbU5XblU0dzV6L3VZMlpCbEVXVVMrS0lOdTV5YUFmdHBkbGN6YW5qMzhYaFBoK3NuR0F3Qi9kMFc1KzFDaGp3bE5WTVZONXJKTERMVXZiZndyTUhNQWpyRmRFZ0ciLCJtYWMiOiIyMTU2OGUyMGI4YmNjMzk0YTRhZmJhYmIwZTBlMmY1ZWIwNjNhYWY2N2Q4MzAwMGRiNGZmMWNiYWM0MjM2YzRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJZN29TV0Y2VjIwSEtvYmdLbHdQSEE9PSIsInZhbHVlIjoiNHAyMCtxM3ZweTZUbSt3RWlWdndHMk9PcEpWQ2p0U1JuTkFYai84S1BsYmdxWmtPS2x4L2FUV2NLd21xeHVTTUIvNHB1Yk9uTUV0N0g0MWc3czlyeWtySUtKM1VUeUgyWnEvdms0cmdCeDd1cnhsYk4xS1RxMlphVHE0Z0VwNEkiLCJtYWMiOiIxMTdkZjNhY2M4MTU1NjNiZjVjMTM0NzFkNzg2NDdhM2I3YTg2YWE2ODJjOWUyZTEzMjg4ZWU5ZDZiMmViZDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 16:49:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff2\"\r\ncache-control: max-age=14400\r\nlast-modified: Fri, 14 Feb 2025 16:49:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XfSxVY8YS3Moe7RyvIZz7TNJ1NJ%2BBvZG%2FUtbP1uOW%2Bw9n%2B7KL0HGGgz8rSRfspcakYzZ4v%2F6UB%2BtFFDqJ3L5suNQxuT2RU8bvBUWXFYywh%2FVUjhh4hu6glA%2FWsl76Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 911e8dd00cb3b50f-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1112\u0026min_rtt=1097\u0026rtt_var=443\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2823\u0026recv_bytes=2235\u0026delivery_rate=2367947\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=177b2e24a895e2be\u0026ts=129\u0026x=0\", cfL4;desc=\"?proto=QUIC\u0026rtt=1557\u0026min_rtt=906\u0026rtt_var=340\u0026sent=231\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=223767\u0026recv_bytes=24677\u0026delivery_rate=7197880\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=bd3d49ab878b99fe\u0026ts=6836\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":28000,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-04-17T09:34:17.828816Z","times_seen":94736,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}