| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback | 104.18.95.41 | 302 Found | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.18.95.41:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 13 Feb 2025 09:47:49 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/324d0dcf743c/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 9113e6336ef3b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:47:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 44540
expires: Tue, 03 Feb 2026 09:47:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UUkRUBf9Af3U39WOJbkch7auFI1qzsEjXtaAeWRRVIXK6MNcKLfqGw%2BltytqFhxn%2B7VObskyNchKFy62C1hFGdjDHYIutM1AxwHkyMBhdQOImE5120qC1hQpbQC5pAKUy7hQF6%2Bn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9113e6336e6656bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/ | 104.21.17.177 | 200 OK | 57 kB |
URL wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/ IP 104.21.17.177:0
File typeHTML document, ASCII text, with very long lines (65402) Hash21895738e35280e3365423cfd9ff3b63 9618f4e2828c4f3708bb119eb8b325b493b01d92 4b332c47f76406bbf5fac2cb76b9b46e390d4620766c353a323fc5f381de2ca5
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /vXsP8/ HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://link.shoppermeet.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:47:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XakLi3xAOllnv1VMR7JU2csxfTO%2BfNtpPnLIK47D2PlC2j9iMbd2ZMKH7%2FXJT4vAyBwNJXkWxCffeCjXQ5o5KsMV3jQ6zePJy%2FrjmfmG7FVSPMKUZWL2xA8tsPhHgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6InRNa1hHdlNSakVmdDN4cnFEOUdiWUE9PSIsInZhbHVlIjoiN0pSWXJDR3JUV09QaUt3bnMvRmo4aEVXaGZLOU5BeVB5ZmtMZmFxOVF4c1F6Z2RLckdvRjI2YTlqeWdvUk5pVWFtQUg0TzBiSEdyNkdQcTRRRDRpb0VtQmhHYUExa0xzSjNnajFlNmFsdzhva0RiM0ZtN29Ud2xxbmdDWFVLOVEiLCJtYWMiOiI3MDg2NTJiOGE4OTdjMTcyYjliNzUyNzliMjdiMjIyZmQ3Y2FkOGMzMzRkMjYxZGFiNzM4NzZmNTljNTVjZGVmIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:49 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImVIbHNZNWdWcStib3NBZmZKOTNYVlE9PSIsInZhbHVlIjoiZzBxMStuV3VFK1VNb1hqVEh6VGRWbHpmZDF5QWJ1ak5KeHE0M21FSFdlN2piQjh5YTdBS1F2bjJNQ20yUzZaNDNuTXIzRUFQVHdUem9qWWJ3dlRTM2FvZDQ4VlFRdjl2bWRtek9GYUU0aDU3V2VqZ0ZHZ2plTmJKVUhOMHZ2RUIiLCJtYWMiOiI5OWIwZTg3YzFkMjM0MTZkOTcyOWMyMGU2ZjBlNGY5MTk0MjI0NmFkOGQ3ZmEwMTg5NzIzZDA3NzdhZjcxNDI2IiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 9113e6308de3b4f3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1058&min_rtt=1042&rtt_var=321&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1450&delivery_rate=2597309&cwnd=251&unsent_bytes=0&cid=29f179212c09f2d1&ts=127&x=0", cfL4;desc="?proto=TCP&rtt=5854&min_rtt=462&rtt_var=10806&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3267&recv_bytes=1308&delivery_rate=7985294&cwnd=254&unsent_bytes=0&cid=a53049f3fb3940d0&ts=221&x=0"
X-Firefox-Spdy: h2
|
|
| developers.cloudflare.com/favicon.png | 104.16.4.189 | 200 OK | 937 B |
URL developers.cloudflare.com/favicon.png IP 104.16.4.189:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashfc3b7bbe7970f47579127561139060e2 3f7c5783fe1f4404cb16304a5a274778ea3abd25 85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe
GET /favicon.png HTTP/1.1
Host: developers.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:47:50 GMT
content-type: image/png
content-length: 937
cache-control: public, max-age=0, must-revalidate
etag: "6be7ff94b6151f8cfbf08b53a17e2ac1"
set-cookie: __cf_bm=.TLYjcMvuW6pc6okV6KqCP6IaTclMFh8dw414vOGjx8-1739440070-1.0.1.1-d7s1VM1s1kKDvuxpq5sSGEmueVe7pBQyHKjMpSQ.rqSKciDFFeSjkdZeQ2r_WjyCD4AxRPDNU5GrbZMSkp7g2A; path=/; expires=Thu, 13-Feb-25 10:17:50 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
cf-ray: 9113e6355f3156c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/b/324d0dcf743c/api.js | 104.18.95.41 | 200 OK | 24 kB |
URL challenges.cloudflare.com/turnstile/v0/b/324d0dcf743c/api.js IP 104.18.95.41:0
File typeJavaScript source, ASCII text, with very long lines (48138) Hash59306e15eb43de76a56231e5e426ec80 7606b8e4aeace12b393ad6dcebdf6d64bc7240e9 69865fe9be4f6cdced3ca8c047a486db063f1179846f5edff395c39a7494fa34
GET /turnstile/v0/b/324d0dcf743c/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:47:49 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 11 Feb 2025 23:52:12 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9113e6337f11b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 44547
expires: Tue, 03 Feb 2026 09:47:56 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQGNzV%2FLy%2BWkJ7KbrSl9eA7vI70o6rPs%2BN1tN3gYhEPI%2BtZvRqXeTaiNBOpjjbOGe39usjCkLbbOe8h5UtBEj2SZy%2Fieq88zF9WytizN47qPY6d05BeXaR4LUdfmqexKX6NN2ZMh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9113e660be475689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/ | 104.21.17.177 | 200 OK | 39 kB |
URL wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/ IP 104.21.17.177:0
File typeHTML document, ASCII text, with very long lines (9925), with CRLF line terminators Hashaa646c78c797d1d6c5e41d62ad005f92 655b6287fb72a99235ac5872963bdf72e3939e29 86103b76d60f46cc0a36399b4834e38af77467616acbf1bc6537214e6a54ea62
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /vXsP8/ HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://link.shoppermeet.net/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjZsMm9CdUFrWnh0VlFYOWFqejRWcHc9PSIsInZhbHVlIjoiampCM3NPM3c1Um1vNXZBQytwaXozUGlrb3hmQkhmMmdWM2lrSHM5aTl2eDF2NVhpUGEwdUZhb2hrbVNrYXVrU2U0a1BQKzhlZVo2VWN4WkVML2o4dk1ETExhMUZlc3Bkbk5TaVkrTENlaU9wWVZTL3I1MEZYK3NYS0hsd3VVQlIiLCJtYWMiOiI4M2E3NjBjNDI4Yjc2MTViODlhM2E4OThjMjdiYTc1MTE3NDNlMDhmN2Q5OGFiNWY4MjA5ZTIyOTZiNWJkM2U3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpLTVRHQUs4WG04Y0R5ZEYzc1hxb3c9PSIsInZhbHVlIjoiZCtiMnNabEE1MSttajV6SnMwRjdUUXF1d0czekEzbG9XYWVyOU5hMlhzWnJubG5MZHRPM0ROSVIvcjlOQzhjNkVaQTczcS9TQTNFNFRXVEtJSVdvOWxnUUpWWUlxamFiOVI5aTdqNlZtaVBCd0JRSWJlaFpST3crY2lHSVk0RGwiLCJtYWMiOiJlODNmOTU0YTNjYWY0MDQ0MGQzOTE0ZjhmOWI5YzA5NzFjZjlkMzNjYzVlNTBhMzA3OGI1NTBmOWMxYzA3Y2EzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:56 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=99AI21GppokQ5NfDODobiOKdvsW%2BlC6EAZYKHJx3NLUlqC0qsLitIL0rKEWGJv%2Ba0%2BcMDoMSwmcVrCeEjI4oc56DrX%2F%2FDnBx50UmOGdVajlXZSxure6FSHKuwpqDpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImN6S1hsSjBJUkkrUFVaSDJzUXd6Unc9PSIsInZhbHVlIjoidzZJZkk1RU5GTFFYaXR2QmpnNVI0MUJvZFFyZEV6eTZGUWpSbWZxZXE5MUNnbExMbkl0UnREOTZZWWV4UHlxeXQrMjJYYXhBZ2RIS3dEVExERHUwbGd2OUNQOGwrbEFsSzgxTXNFSXlQeE5jbmFtMUhTcDVXcGpzNFErLzBwelgiLCJtYWMiOiI0OGExMTgwZjUyY2IwNzlkMzNmY2RlZWNmYjg5ZTE2MWUxYWUzOWE2OTNjMzFmNWFlMjBkMjAwZjg1MzgxZjNmIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:56 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImtBaU9oVUhqWWdkT29OU1NHeXZmQXc9PSIsInZhbHVlIjoiejE2VUpsOHBMcHRVamFvR25QNk4xcHVHTDZaSmlJYzFZSUpvckdyaWQvRGhEQ2JDbDI4enFBVWp6dlBIVi9pRVh3RDB2aUFWOS80YzJXTTc4OTQ0ekNoQnJsVlo3SzA1N0dLaWpJMSsza0RFTmdkR2RKVUFUSGI3ejlxRGp4UFoiLCJtYWMiOiJiMDY0NTIwNjdjZjFlMmU1MTU2NzcwZDMzNTk5M2RlNGIwYjhjYzM4NDQwNzExMThmYmEwY2QyOWQzNTkyYTM2IiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:56 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=1,i=?0
server: cloudflare
cf-ray: 9113e65f7d92b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1156&min_rtt=1083&rtt_var=367&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2208&delivery_rate=2652014&cwnd=250&unsent_bytes=0&cid=97c817af7c66e341&ts=110&x=0", cfL4;desc="?proto=QUIC&rtt=3964&min_rtt=1929&rtt_var=2022&sent=16&recv=11&lost=0&retrans=0&sent_bytes=5744&recv_bytes=3888&delivery_rate=224&cwnd=12000&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=7449&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| vugcr.adlijari.ru/tarboz$0ce93dpo | 172.67.169.185 | 200 OK | 10 kB |
URL vugcr.adlijari.ru/tarboz$0ce93dpo IP 172.67.169.185:0
File typevery short file (no magic) Hashcfcd208495d565ef66e7dff9f98764da b6589fc6ab0dc82cf12099d1c2d40ab994e8410c 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /tarboz$0ce93dpo HTTP/1.1
Host: vugcr.adlijari.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:47:56 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BGpZow9nQcK9gCkMQ0gD6lDY5JA6SgphBEEDG9VU6SHjh8jTcK0b2wNJeXF3dpkJ67uV8hDYORx8t775elXFpnORWttwvDo%2FZAxSFMxXXStmcr%2Bl0gFzbtCm7qf3j5vt3zRvTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9113e65bbac01bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5951&min_rtt=537&rtt_var=10866&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1249&delivery_rate=7017770&cwnd=254&unsent_bytes=0&cid=10634ed73f2e3714&ts=401&x=0"
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.130.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.130.137:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 13 Feb 2025 09:47:57 GMT
age: 3193612
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 1158198
x-timer: S1739440078.648592,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 44548
expires: Tue, 03 Feb 2026 09:47:57 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQ0IQSA5xjIbwmBIMY6TzU8Hkspwf%2BGSWpDfJ7W7I2LEu4BSWfD7ay2JRD45p1OTmMcz3AjrBPee9tnLobHq5zFV4RcgV%2FyjJyghsjLB7HnPGHp2c9QjYfvrgiPB%2FH%2F9zXemLpTr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9113e6655a195689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/favicon.ico | 104.21.17.177 | 404 Not Found | 285 B |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/favicon.ico IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
Hash39d6349d12ae617d25910bb3f266554a 9d5760cd5cc563c6351874e279e8a6a0c49bbdea c2ce93ad08822b5eb0ab3aae41f04bec811d3643e6c5a0699b40f1d1b735ae43
GET /favicon.ico HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/
Cookie: XSRF-TOKEN=eyJpdiI6ImN6S1hsSjBJUkkrUFVaSDJzUXd6Unc9PSIsInZhbHVlIjoidzZJZkk1RU5GTFFYaXR2QmpnNVI0MUJvZFFyZEV6eTZGUWpSbWZxZXE5MUNnbExMbkl0UnREOTZZWWV4UHlxeXQrMjJYYXhBZ2RIS3dEVExERHUwbGd2OUNQOGwrbEFsSzgxTXNFSXlQeE5jbmFtMUhTcDVXcGpzNFErLzBwelgiLCJtYWMiOiI0OGExMTgwZjUyY2IwNzlkMzNmY2RlZWNmYjg5ZTE2MWUxYWUzOWE2OTNjMzFmNWFlMjBkMjAwZjg1MzgxZjNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtBaU9oVUhqWWdkT29OU1NHeXZmQXc9PSIsInZhbHVlIjoiejE2VUpsOHBMcHRVamFvR25QNk4xcHVHTDZaSmlJYzFZSUpvckdyaWQvRGhEQ2JDbDI4enFBVWp6dlBIVi9pRVh3RDB2aUFWOS80YzJXTTc4OTQ0ekNoQnJsVlo3SzA1N0dLaWpJMSsza0RFTmdkR2RKVUFUSGI3ejlxRGp4UFoiLCJtYWMiOiJiMDY0NTIwNjdjZjFlMmU1MTU2NzcwZDMzNTk5M2RlNGIwYjhjYzM4NDQwNzExMThmYmEwY2QyOWQzNTkyYTM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HR6Bq3Mh7BZ4GxeCg6EFOLXlN0BpCMfY9o4F2FBOKftC63ZD%2BiiTAXvqJj2MupWqD7M6zKU481QgmoNPoae0XxqZsxtIdZemyMjBTadjrROTYGyObWy3l9Q8CxIJHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
priority: u=6,i=?0
server: cloudflare
cf-ray: 9113e661f860b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=991&min_rtt=982&rtt_var=292&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2122&delivery_rate=2822612&cwnd=251&unsent_bytes=0&cid=4211b39ce8c302cf&ts=79&x=0", cfL4;desc="?proto=QUIC&rtt=3193&min_rtt=1292&rtt_var=1971&sent=32&recv=16&lost=0&retrans=0&sent_bytes=17839&recv_bytes=5941&delivery_rate=12825&cwnd=12000&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=7854&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/kfJenyZ6uIhAXRlJQEi7FA4QYCL80sullPiiJBpBc1xKHOtPu4fw | 104.21.17.177 | 200 OK | 252 B |
URL wnyo4cmywpf7e7iadgde.lumpnk.ru/kfJenyZ6uIhAXRlJQEi7FA4QYCL80sullPiiJBpBc1xKHOtPu4fw IP 104.21.17.177:0
Hash08282cd2ab089c7c0dc3bdf427d3636e 4615c890d5ad499079855b3623f0d82db8045109 69d45e60a82792ee1b395e015ee5d9d14ae3573a5874ccd56d3b3ad4d476b851
POST /kfJenyZ6uIhAXRlJQEi7FA4QYCL80sullPiiJBpBc1xKHOtPu4fw HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 30
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/
Cookie: XSRF-TOKEN=eyJpdiI6ImN6S1hsSjBJUkkrUFVaSDJzUXd6Unc9PSIsInZhbHVlIjoidzZJZkk1RU5GTFFYaXR2QmpnNVI0MUJvZFFyZEV6eTZGUWpSbWZxZXE5MUNnbExMbkl0UnREOTZZWWV4UHlxeXQrMjJYYXhBZ2RIS3dEVExERHUwbGd2OUNQOGwrbEFsSzgxTXNFSXlQeE5jbmFtMUhTcDVXcGpzNFErLzBwelgiLCJtYWMiOiI0OGExMTgwZjUyY2IwNzlkMzNmY2RlZWNmYjg5ZTE2MWUxYWUzOWE2OTNjMzFmNWFlMjBkMjAwZjg1MzgxZjNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtBaU9oVUhqWWdkT29OU1NHeXZmQXc9PSIsInZhbHVlIjoiejE2VUpsOHBMcHRVamFvR25QNk4xcHVHTDZaSmlJYzFZSUpvckdyaWQvRGhEQ2JDbDI4enFBVWp6dlBIVi9pRVh3RDB2aUFWOS80YzJXTTc4OTQ0ekNoQnJsVlo3SzA1N0dLaWpJMSsza0RFTmdkR2RKVUFUSGI3ejlxRGp4UFoiLCJtYWMiOiJiMDY0NTIwNjdjZjFlMmU1MTU2NzcwZDMzNTk5M2RlNGIwYjhjYzM4NDQwNzExMThmYmEwY2QyOWQzNTkyYTM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PDBwQp8Bymy3x7tJzbVSadRZOLlLbfV%2BFrMJ7ic1mGrfe%2B8fNe4JpHTrTEZ6XtcRaSzfnV%2FL3eUhLjExC399D5GVg2Z6sp%2BNeovnnAUGFYQFeMaDL0f8wg3xr28ZQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IlNtOWtEM1dFdENzN3phaE1iRTYyQ2c9PSIsInZhbHVlIjoiSDQ1MFAyanNSOS9LSXpyL3YrUzR4NW13U1ZRU21oMWV1bWtEQkdQRHByTGNlUDQvK3R4RDZ6aDNrWExpQTdWbzVFMlp3cm5DN3VOQm16RTYyQURRVkdGZk52SDFnMHh0elZSUnB6aFQ4WG9ZOHRKZ09UNjVoTzhwN0pXeDRzVW8iLCJtYWMiOiIwMGZlNDdmMDM0MmM3ZmYwZWRlM2VjMjUwNmMxMzk5YWE1ZDkwYTIwNDFkZGRmZTI5OTkyNDg4ZGQxZDVmNmEzIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:57 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IjJucGZlTnpwSFo3bkxqeDVMKzNoYXc9PSIsInZhbHVlIjoiYlFVNGlHTUEyeXVyZUhUNlM5a1hlRHBtcVdnL1pBYUVkMWRXUndKR1VHS1R2OWpubUc2ZVFJSFdyck1WbFZ3d3N4dUFNeVhSK1I3WGoyVUQxOGdnNHU5SUwwU25zUXgvdkFYNjZ4aDk2NXlRNk9CaXRmbTlpdnFtc2Njdy93ZzciLCJtYWMiOiI0MTQxZTg2ZDllZTVkOWY0YThmMGE4YTYyNmE3MjEyNTQ0OTc2NDFhZDY4NTBjYTNkMGRlMzAzOTAzYTdhNTE3IiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:57 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6612f9bb4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1340&min_rtt=1133&rtt_var=443&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2321&delivery_rate=2222563&cwnd=251&unsent_bytes=0&cid=91e61bdb0c9d9bde&ts=98&x=0", cfL4;desc="?proto=QUIC&rtt=3368&min_rtt=1292&rtt_var=2162&sent=29&recv=15&lost=0&retrans=0&sent_bytes=15985&recv_bytes=5897&delivery_rate=65280&cwnd=12000&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=7709&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 | 3.164.240.85 | 200 OK | 11 kB |
URL GET HTTP/2ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 IP 3.164.240.85:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typePNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced Hash12bdacc832185d0367ecc23fd24c86ce 4422f316eb4d8c8d160312bb695fd1d944cbff12 877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0
GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10796
server: nginx
last-modified: Tue, 23 Feb 2021 04:20:08 GMT
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
date: Wed, 29 Jan 2025 00:59:17 GMT
expires: Thu, 29 Jan 2026 00:59:17 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: "12bdacc832185d0367ecc23fd24c86ce"
x-cache: Hit from cloudfront
via: 1.1 ec47ad650ce8b90cf8852923bd4f4320.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: xszJL5bdafz_iNnLXwUchCZeyVKJLCuO0aoxXIoO5dxp9d1KZhMrKw==
age: 1327720
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/qry6PFDNZIsuqzS4QBmCwIrmCL9qh73qqpgh3is7nou94fx0p67140 | 104.21.17.177 | 200 OK | 892 B |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/qry6PFDNZIsuqzS4QBmCwIrmCL9qh73qqpgh3is7nou94fx0p67140 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hash41d62ca205d54a78e4298367482b4e2b 839aae21ed8ecfc238fdc68b93ccb27431cd5393 20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40
GET /qry6PFDNZIsuqzS4QBmCwIrmCL9qh73qqpgh3is7nou94fx0p67140 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/webp
content-length: 892
content-disposition: inline; filename="qry6PFDNZIsuqzS4QBmCwIrmCL9qh73qqpgh3is7nou94fx0p67140"
cf-cache-status: DYNAMIC
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5YXdQJ%2FUr3AoXO%2FcFM9fnRLJsNuUE0e5Cer9OxsWqj6EVFzSBhdKp4a%2FD9%2F1cJmnOBXSPnrpQwajPdNeaORGh1GVNY8l1nhmRicEc3HdaTy1m9Ds%2BshG8KhMJX%2Bfp9%2BGgk3%2BtDi6cvl52WATFcpvcGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9113e6658c46b4eb-OSL
server-timing: cfL4;desc="?proto=QUIC&rtt=1877&min_rtt=814&rtt_var=1084&sent=126&recv=52&lost=0&retrans=0&sent_bytes=97634&recv_bytes=25173&delivery_rate=3207733&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8417&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/opylaQeH8t79O0wulXjNABCsVzGvZkav1zJjPIDhO125LWpI0f11wOlgPtujngfB3W6jsdcd240 | 104.21.17.177 | 200 OK | 9.6 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/opylaQeH8t79O0wulXjNABCsVzGvZkav1zJjPIDhO125LWpI0f11wOlgPtujngfB3W6jsdcd240 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hash4946eb373b18d178c93d473489673bb6 16477acb73b63ca251d37401249e7e4515febd24 666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92
GET /opylaQeH8t79O0wulXjNABCsVzGvZkav1zJjPIDhO125LWpI0f11wOlgPtujngfB3W6jsdcd240 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/webp
content-length: 9648
content-disposition: inline; filename="opylaQeH8t79O0wulXjNABCsVzGvZkav1zJjPIDhO125LWpI0f11wOlgPtujngfB3W6jsdcd240"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T4qMnVu9QX8tAUKQiiUlG8WK5AEpmm0sGDrpd3q118GlGIbc%2FQopDTzE0yjVKCFqw8ZVsmFv0axs0n6UOSkv0Ta6wvmdu08SiITjTEVDjJb%2FBbn%2BAZTSjmQ2KCXXSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e665ac6eb4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1203&min_rtt=1191&rtt_var=358&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2247&delivery_rate=2274941&cwnd=251&unsent_bytes=0&cid=90ce0f987e946cdd&ts=77&x=0", cfL4;desc="?proto=QUIC&rtt=1434&min_rtt=814&rtt_var=649&sent=142&recv=58&lost=0&retrans=0&sent_bytes=112291&recv_bytes=25444&delivery_rate=2618662&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8438&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/wxHNFjpv3q8Y5kUABmj1zuJ6ADB8qroFBnE5kpZUoNQcGNuC12127 | 104.21.17.177 | 200 OK | 644 B |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/wxHNFjpv3q8Y5kUABmj1zuJ6ADB8qroFBnE5kpZUoNQcGNuC12127 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hash541b83c2195088043337e4353b6fd60d f09630596b6713217984785a64f6ea83e91b49c5 2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f
GET /wxHNFjpv3q8Y5kUABmj1zuJ6ADB8qroFBnE5kpZUoNQcGNuC12127 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/webp
content-length: 644
content-disposition: inline; filename="wxHNFjpv3q8Y5kUABmj1zuJ6ADB8qroFBnE5kpZUoNQcGNuC12127"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=79C9zsAjuM7u75Jn%2FSrxkKJw44kWsdq7pCdEXyOBKbTxdWA1fh16uExktqNVhdJB2sGxvNlovllB2ub5osAkoMVYGG4UlgDZDpqKIthMaDNyKqJbDSI%2FzlrgvgntMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e6658c37b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1142&min_rtt=1128&rtt_var=329&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2225&delivery_rate=2494401&cwnd=251&unsent_bytes=0&cid=0b983e4e56b0da9c&ts=125&x=0", cfL4;desc="?proto=QUIC&rtt=1298&min_rtt=814&rtt_var=385&sent=178&recv=62&lost=0&retrans=0&sent_bytes=154053&recv_bytes=25625&delivery_rate=9325231&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8463&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/uvPhbkdVMq4BCgCh5jfG6SEvNAT5IwooS45gEqrB8lhXKrGlcK4a5vwcX3qbuP0ef257 | 104.21.17.177 | 200 OK | 18 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/uvPhbkdVMq4BCgCh5jfG6SEvNAT5IwooS45gEqrB8lhXKrGlcK4a5vwcX3qbuP0ef257 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hash4b52ecdc33382c9dca874f551990e704 8f3bf8e41cd4cdddb17836b261e73f827b84341b cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342
GET /uvPhbkdVMq4BCgCh5jfG6SEvNAT5IwooS45gEqrB8lhXKrGlcK4a5vwcX3qbuP0ef257 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/webp
content-length: 17842
content-disposition: inline; filename="uvPhbkdVMq4BCgCh5jfG6SEvNAT5IwooS45gEqrB8lhXKrGlcK4a5vwcX3qbuP0ef257"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=inPNVI0tQRrXoCEWx9L30GBr3FTa6VdqE%2FJIKIfONf3wb8XPZJnw4i0BcKAXe%2FP8yeXQ6%2B0SymVu0I6QOFMWwK9A9rzSRHKTGGVyra22PkovyW7JOM9kTonCRxKnMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e665ac75b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1444&min_rtt=1410&rtt_var=457&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2240&delivery_rate=1836398&cwnd=251&unsent_bytes=0&cid=6f9b41544948723d&ts=82&x=0", cfL4;desc="?proto=QUIC&rtt=1391&min_rtt=814&rtt_var=573&sent=151&recv=59&lost=0&retrans=0&sent_bytes=123044&recv_bytes=25490&delivery_rate=3677273&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8445&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/ghpKMP5UaDBn97NQ9kNNWAusmnncx8mabCHFGuub17L12209 | 104.21.17.177 | 200 OK | 25 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/ghpKMP5UaDBn97NQ9kNNWAusmnncx8mabCHFGuub17L12209 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hashf9a795e2270664a7a169c73b6d84a575 0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8 d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740
GET /ghpKMP5UaDBn97NQ9kNNWAusmnncx8mabCHFGuub17L12209 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/webp
content-length: 25216
content-disposition: inline; filename="ghpKMP5UaDBn97NQ9kNNWAusmnncx8mabCHFGuub17L12209"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nGkIR32AZyyO7ZPlOj87cCna%2Bj6PjYgkcmFH7CW7ZEaVUQEV6gVkREqUWMyDw2D65uRQwTYxtSve0k02ZBJNzqU01C8U1IYZIyA1n1QlgPPmFLsIn7S79iRKtyBG6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e665ac6db4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1268&min_rtt=1242&rtt_var=396&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2220&delivery_rate=2129411&cwnd=251&unsent_bytes=0&cid=dda3e52ac0553fae&ts=92&x=0", cfL4;desc="?proto=QUIC&rtt=1328&min_rtt=814&rtt_var=432&sent=166&recv=61&lost=0&retrans=0&sent_bytes=139893&recv_bytes=25580&delivery_rate=1707714&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8452&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-bold.woff2 | 104.21.17.177 | 200 OK | 28 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-bold.woff2 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28000, version 1.66 Hasha4bca6c95fed0d0c5cc46cf07710dcec 73b56e33b82b42921db8702a33efd0f2b2ec9794 5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
GET /GDSherpa-bold.woff2 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: font/woff2
content-length: 28000
content-disposition: inline; filename="GDSherpa-bold.woff2"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=34q0bYNaq3vgqy4tCV4nl7Sb%2BtqVjsNzoVyj15HRtu4FH1uKyO8dodNsBS8b6dKHeE6g0KfhgNy%2BCJSih6%2F1O9N%2BDh8bgyyxhT%2BpI3qfD5uJq8yuXoD5XTM9di0WYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6656c19b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1194&min_rtt=1124&rtt_var=371&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2213&delivery_rate=2527050&cwnd=251&unsent_bytes=0&cid=f2ca833f938f110e&ts=170&x=0", cfL4;desc="?proto=QUIC&rtt=1232&min_rtt=814&rtt_var=309&sent=200&recv=66&lost=0&retrans=0&sent_bytes=175985&recv_bytes=25808&delivery_rate=12605522&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8522&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-regular.woff | 104.21.17.177 | 200 OK | 37 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-regular.woff IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format, TrueType, length 36696, version 1.0 Hasha69e9ab8afdd7486ec0749c551051ff2 c34e6aa327b536fb48d1fe03577a47c7ee2231b8 fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
GET /GDSherpa-regular.woff HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: font/woff
content-length: 36696
content-disposition: inline; filename="GDSherpa-regular.woff"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nIZDM3cQ9C5sQLB9daA6l9McQMlx7NkZP%2BJNYgT%2FQqirXkY7BCjVSX46rS7YU5eLWthq6JBiDJ5Rgcmm1dgXV8f8XOaMKAWGkRUzZWYzbDgItvtZZjOgATy3QYB0Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6657c2ab4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1053&min_rtt=1044&rtt_var=409&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2214&delivery_rate=2592658&cwnd=250&unsent_bytes=0&cid=68a5a0bab2015f6f&ts=163&x=0", cfL4;desc="?proto=QUIC&rtt=1207&min_rtt=814&rtt_var=320&sent=228&recv=68&lost=0&retrans=0&sent_bytes=208862&recv_bytes=25900&delivery_rate=2042286&cwnd=52800&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8528&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-regular.woff2 | 104.21.17.177 | 200 OK | 29 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-regular.woff2 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28584, version 1.66 Hash17081510f3a6f2f619ec8c6f244523c7 87f34b2a1532c50f2a424c345d03fe028db35635 2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
GET /GDSherpa-regular.woff2 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: font/woff2
content-length: 28584
content-disposition: inline; filename="GDSherpa-regular.woff2"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fMPkbcL0atfGo0q9i%2BL2aXCHBCa5dNEr7%2FDzzvYapbOnDYrqk%2FyzGBP3b1C7tZsj69ur3KHePmoDDUL7dYk9NuSw19Py%2FBFb%2B1hWRHtC9sDCrjxXbyG4ELrVfpgy%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6657c27b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1311&min_rtt=1211&rtt_var=412&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2215&delivery_rate=2298412&cwnd=251&unsent_bytes=0&cid=76982354c8997916&ts=177&x=0", cfL4;desc="?proto=QUIC&rtt=1271&min_rtt=814&rtt_var=440&sent=264&recv=70&lost=0&retrans=0&sent_bytes=249978&recv_bytes=25991&delivery_rate=42715343&cwnd=52800&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8541&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-bold.woff | 104.21.17.177 | 200 OK | 36 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-bold.woff IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format, TrueType, length 35970, version 1.0 Hash496b7bbde91c7dc7cf9bbabbb3921da8 2bd3c406a715ab52dad84c803c55bf4a6e66a924 ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
GET /GDSherpa-bold.woff HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: font/woff
content-length: 35970
content-disposition: inline; filename="GDSherpa-bold.woff"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A3sU7Bc4hgQV%2B0DTj902CyM8VZegPWdLPHcFHtlHqzObD5Md15fufAeBIOkQFBuTblUyeLUexPvCzWF6gt%2B6sssns%2BCI831pCbHe9Y9uXyCcT85S06xoKh%2BpQ307Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6656c22b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1131&min_rtt=1121&rtt_var=440&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2211&delivery_rate=2411323&cwnd=251&unsent_bytes=0&cid=9709d4967af26498&ts=176&x=0", cfL4;desc="?proto=QUIC&rtt=1321&min_rtt=814&rtt_var=430&sent=290&recv=71&lost=0&retrans=0&sent_bytes=280157&recv_bytes=26037&delivery_rate=10938637&cwnd=52800&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8544&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-vf.woff2 | 104.21.17.177 | 200 OK | 44 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-vf.woff2 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 43596, version 1.0 Hash2a05e9e5572abc320b2b7ea38a70dcc1 d5fa2a856d5632c2469e42436159375117ef3c35 3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
GET /GDSherpa-vf.woff2 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:58 GMT
content-type: font/woff2
content-length: 43596
content-disposition: inline; filename="GDSherpa-vf.woff2"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bb1KVe%2B24lYWi4qr5Mnv%2FX3cZQEk6EGGEOpAWeOfdx16%2BGYxXI4j%2BEyxs1yAl5lGIMNKAmCwIZYd3bl65BNUJqm6ZYJZJMmQVH%2BaBuqTLl69yYk0hRKx1JINoSzPuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6657c2eb4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1185&min_rtt=1178&rtt_var=457&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2210&delivery_rate=2333601&cwnd=251&unsent_bytes=0&cid=b2a38afc63c5f4f7&ts=209&x=0", cfL4;desc="?proto=QUIC&rtt=1107&min_rtt=708&rtt_var=438&sent=334&recv=76&lost=0&retrans=0&sent_bytes=329791&recv_bytes=26263&delivery_rate=2646671&cwnd=52800&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8603&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-vf2.woff2 | 104.21.17.177 | 200 OK | 93 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/GDSherpa-vf2.woff2 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 93276, version 1.0 Hashbcd7983ea5aa57c55f6758b4977983cb ef3a009e205229e07fb0ec8569e669b11c378ef1 6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
GET /GDSherpa-vf2.woff2 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:58 GMT
content-type: font/woff2
content-length: 93276
content-disposition: inline; filename="GDSherpa-vf2.woff2"
cache-control: max-age=14400
last-modified: Thu, 13 Feb 2025 09:47:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPIhrug42SPoLL0K5y7K0js%2FHulRJw2UF1gBVLq%2BKHh3xaiG2F%2FrrArROvC56VL5DqO54PQcza5Szs1%2FTUxlmAGXnUQPP2b0FEtoVv0bvu5vkqybo%2FTxJUEEuL3Nhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e6657c33b4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1448&min_rtt=1421&rtt_var=448&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2212&delivery_rate=1872010&cwnd=250&unsent_bytes=0&cid=22dc0d4384993856&ts=214&x=0", cfL4;desc="?proto=QUIC&rtt=1227&min_rtt=708&rtt_var=568&sent=372&recv=77&lost=0&retrans=0&sent_bytes=375331&recv_bytes=26309&delivery_rate=10640743&cwnd=52800&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8614&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250213T094636Z&X-Amz-Expires=300&X-Amz-Signature=d1c26b680bcd47165d9c76b12bed3ae5fde1ff597eb3a51b7d9ec01e6c5263d1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream | 185.199.108.133 | 200 OK | 10 kB |
URL GET HTTP/2objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250213T094636Z&X-Amz-Expires=300&X-Amz-Signature=d1c26b680bcd47165d9c76b12bed3ae5fde1ff597eb3a51b7d9ec01e6c5263d1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream IP 185.199.108.133:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10017) Hash6c20a2be8ba900bc0a7118893a2b1072 ff7766fde1f33882c6e1c481ceed6f6588ea764c b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500
GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250213T094636Z&X-Amz-Expires=300&X-Amz-Signature=d1c26b680bcd47165d9c76b12bed3ae5fde1ff597eb3a51b7d9ec01e6c5263d1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 07 Dec 2021 16:38:45 GMT
etag: "0x8D9B9A009499A1E"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000
x-ms-version: 2023-11-03
x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT
x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=randexp.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 4885
date: Thu, 13 Feb 2025 09:47:58 GMT
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 11369, 0
x-timer: S1739440078.829124,VS0,VE1
content-length: 10245
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ | 104.21.17.177 | 200 OK | 70 kB |
URL User Request GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ IP 104.21.17.177:443
CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeHTML document, ASCII text, with very long lines (52489), with CRLF line terminators Hash60c1f052b84691eeb8ca91d0a29bff47 9e3f067fa131654c3d1102ff574f99237d0c4c60 9421dd0d0de1395208c0f205af4b75b204a223d21661608aa0ad7dd0479557ea
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Anti-debugging code |
GET /PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/vXsP8/
Cookie: XSRF-TOKEN=eyJpdiI6IlNtOWtEM1dFdENzN3phaE1iRTYyQ2c9PSIsInZhbHVlIjoiSDQ1MFAyanNSOS9LSXpyL3YrUzR4NW13U1ZRU21oMWV1bWtEQkdQRHByTGNlUDQvK3R4RDZ6aDNrWExpQTdWbzVFMlp3cm5DN3VOQm16RTYyQURRVkdGZk52SDFnMHh0elZSUnB6aFQ4WG9ZOHRKZ09UNjVoTzhwN0pXeDRzVW8iLCJtYWMiOiIwMGZlNDdmMDM0MmM3ZmYwZWRlM2VjMjUwNmMxMzk5YWE1ZDkwYTIwNDFkZGRmZTI5OTkyNDg4ZGQxZDVmNmEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJucGZlTnpwSFo3bkxqeDVMKzNoYXc9PSIsInZhbHVlIjoiYlFVNGlHTUEyeXVyZUhUNlM5a1hlRHBtcVdnL1pBYUVkMWRXUndKR1VHS1R2OWpubUc2ZVFJSFdyck1WbFZ3d3N4dUFNeVhSK1I3WGoyVUQxOGdnNHU5SUwwU25zUXgvdkFYNjZ4aDk2NXlRNk9CaXRmbTlpdnFtc2Njdy93ZzciLCJtYWMiOiI0MTQxZTg2ZDllZTVkOWY0YThmMGE4YTYyNmE3MjEyNTQ0OTc2NDFhZDY4NTBjYTNkMGRlMzAzOTAzYTdhNTE3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bMkifU1ikhmELTkpj9h0H0hfdSSKl3TCJcWAJU3nt9Z58PnfDNNMBYSVUomsDCe44zvdoP18jwEX24ihkdQvSFw740iCE%2FH55cuNHDZetUB4ariXwYcPvjgXQc6FqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:57 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:57 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=1,i=?0
server: cloudflare
cf-ray: 9113e66359ebb4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1403&min_rtt=1388&rtt_var=551&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2272&delivery_rate=1916611&cwnd=251&unsent_bytes=0&cid=d6bfc49ee4d0921d&ts=139&x=0", cfL4;desc="?proto=QUIC&rtt=5440&min_rtt=1292&rtt_var=5972&sent=34&recv=18&lost=0&retrans=0&sent_bytes=18700&recv_bytes=6978&delivery_rate=39396&cwnd=12000&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8105&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 | 3.164.240.85 | 200 OK | 20 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 IP 3.164.240.85:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20416, version 2.197 Hashd99a7377dabb55772ca9f986b0a04b57 2b5fcd8431953c44e410d0489899e74f6d2cfecc affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149
GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Referer: https://ok4static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
date: Mon, 27 Jan 2025 07:42:18 GMT
server: nginx
last-modified: Tue, 07 Nov 2023 18:56:28 GMT
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
expires: Tue, 27 Jan 2026 07:42:18 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ec47ad650ce8b90cf8852923bd4f4320.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: SPENfIxbEqY7vj2GmF9DHKRtDfyKWNtOBG2QiShY3yYpbyUGyvj0ng==
age: 1476340
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/abt13qliGS9prsDYYcd29 | 104.21.17.177 | 200 OK | 7.0 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/abt13qliGS9prsDYYcd29 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeASCII text, with CRLF line terminators Hash38501e3fbbbd89b56aa5ba35de1a32fe d9b31981b6f834e8480ba28fbc1cff1be772f589 a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b
GET /abt13qliGS9prsDYYcd29 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="abt13qliGS9prsDYYcd29"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jvIZZexOyBwNn64LDE3LEEi30pzvv9Ze2orIheRcLSPMpwnnXjAMIo7NxQF%2B1D8b5DqPTxwC5qKhmywLZgvQPI1H8B80CimoWEaaY1BTxDMAbgiqujf9453MoE4MAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 9113e6656c18b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1169&min_rtt=1017&rtt_var=414&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2186&delivery_rate=2789980&cwnd=243&unsent_bytes=0&cid=aba931fc281190bb&ts=80&x=0", cfL4;desc="?proto=QUIC&rtt=2004&min_rtt=814&rtt_var=1105&sent=122&recv=51&lost=0&retrans=0&sent_bytes=93652&recv_bytes=25128&delivery_rate=30511&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8397&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/klYKZXq9bojYjTLxzaROE6vFHvcGJW0cvwx7XaTWZSy7RYAUo0I78170 | 104.21.17.177 | 200 OK | 7.4 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/klYKZXq9bojYjTLxzaROE6vFHvcGJW0cvwx7XaTWZSy7RYAUo0I78170 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeSVG Scalable Vector Graphics image Hashbca9b46fee32162356ba5b4783e614dc cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5 fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec
GET /klYKZXq9bojYjTLxzaROE6vFHvcGJW0cvwx7XaTWZSy7RYAUo0I78170 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/svg+xml
content-disposition: inline; filename="klYKZXq9bojYjTLxzaROE6vFHvcGJW0cvwx7XaTWZSy7RYAUo0I78170"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSWfMfthgSHc0eZEldThSD8OV5xhwF3ygxLf%2BbkzXMTlZYOTtcE3XdduJLD%2Ba%2FQwJibvL7VbDEkr6Q7zG%2Fh6rZzvsgT5VSTNKGvD85V3vpO9jdw2gBrYoi6YTX1lWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e6659c4db4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1231&min_rtt=1126&rtt_var=500&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2228&delivery_rate=1830594&cwnd=251&unsent_bytes=0&cid=d2671177727b752a&ts=86&x=0", cfL4;desc="?proto=QUIC&rtt=1692&min_rtt=814&rtt_var=935&sent=133&recv=54&lost=0&retrans=0&sent_bytes=104191&recv_bytes=25264&delivery_rate=2413508&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8432&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| get.geojs.io/v1/ip/geo.json | 104.26.0.100 | 200 OK | 336 B |
URL GET HTTP/2get.geojs.io/v1/ip/geo.json IP 104.26.0.100:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectgeojs.io Fingerprint55:74:AA:F3:7A:AF:02:8B:48:DB:6E:73:EB:A1:95:20:EC:13:2D:8E ValidityTue, 31 Dec 2024 05:30:37 GMT - Mon, 31 Mar 2025 06:30:13 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (394), with no line terminators Hash3e36bc51a4b7dc15a18022707b058c29 bcbe124ccf21a813a5dbabd8ed1a5d94e5815bbd 77ce03c82246a7b2a70f4d5b57f7cbdf70d57efecb2386d1de93887fe631181b
GET /v1/ip/geo.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:48:00 GMT
content-type: application/json
x-request-id: 5f4f303b34f31674d44f7fa0f8ee3998-ASH
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
geojs-backend: ash-01
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLEJcy4Xl1NYK%2Fe0Ln%2FIdr3I2uyCgBLwCoq3Kp8iD7YZQ2wt1GBESdhcTBAF2y11AotZr4KXfKFqq6Wr9hJ%2B33bVY3w5OI8ZvqCqg7qVcklOV4aPg0fBzcMVXvgUFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9113e6776e6b712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=632&min_rtt=541&rtt_var=185&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3265&recv_bytes=1269&delivery_rate=6552036&cwnd=254&unsent_bytes=0&cid=6d02ae615c6aac35&ts=131&x=0"
X-Firefox-Spdy: h2
|
|
| eowbpuseznulhsupyms6a6wwk69qisej3m6yhm5nufuuk57av6juqgdwuh.alphasphexre.ru/lWReDHoxxutDNIrXYitHFGsJJJILNQGDFERJUKPIJUQBVGOTQMVUYXJNJAOLLKWOGMFBrsgopa8jTS7io1yz8ixdwx40 | 172.67.177.15 | 200 OK | 408 B |
URL POST HTTP/2eowbpuseznulhsupyms6a6wwk69qisej3m6yhm5nufuuk57av6juqgdwuh.alphasphexre.ru/lWReDHoxxutDNIrXYitHFGsJJJILNQGDFERJUKPIJUQBVGOTQMVUYXJNJAOLLKWOGMFBrsgopa8jTS7io1yz8ixdwx40 IP 172.67.177.15:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectalphasphexre.ru Fingerprint51:0B:50:F9:26:19:11:28:1B:CE:49:F2:27:82:01:A0:E9:CD:B8:49 ValidityThu, 23 Jan 2025 22:23:35 GMT - Wed, 23 Apr 2025 23:22:15 GMT
File typeASCII text, with very long lines (408), with no line terminators Hashf7fcfa8bba13b9193a050e662d09f652 a54936a44d0fe54897317d728c9081e00dba2817 5f09e3b661e37632136ba10c06f0ca4bb0f9172196cbb0ee2725aad75831e946
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /lWReDHoxxutDNIrXYitHFGsJJJILNQGDFERJUKPIJUQBVGOTQMVUYXJNJAOLLKWOGMFBrsgopa8jTS7io1yz8ixdwx40 HTTP/1.1
Host: eowbpuseznulhsupyms6a6wwk69qisej3m6yhm5nufuuk57av6juqgdwuh.alphasphexre.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 103
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 13 Feb 2025 09:48:01 GMT
content-type: text/plain; charset=utf-8
vary: Origin
access-control-allow-origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8sbzsGxkoygZw8yizmKtlIxCCTRs9hKnN8AuNCHHB9rvvZPir98D%2FyLZJ5lJgiTYe%2FXV0ej14JnnDmSxmm7E0AgcT4CtENCSu7yTN0YyUG2VdxQ4VJslrSglN5StmX6pETnKRFhoX01F85e4xKuv3rwcZbl9lceM79I4Ku5ENkcARFkzJDEX7EhO0uj5DA%2BKN6eobhdVDmJgmBGzyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9113e678ec295699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6380&min_rtt=481&rtt_var=11775&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3209&recv_bytes=1401&delivery_rate=6873417&cwnd=254&unsent_bytes=0&cid=f3514783d5e9a096&ts=1164&x=0"
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/kllZe0JQgDwLxmPPrn3AcmPOKBS4FivickIYGe8gdgVayZklPMuooqiRdu9RVrzhg9Un8KZFHqrz06CuNUuv212 | 104.21.17.177 | 200 OK | 1.9 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/kllZe0JQgDwLxmPPrn3AcmPOKBS4FivickIYGe8gdgVayZklPMuooqiRdu9RVrzhg9Un8KZFHqrz06CuNUuv212 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeSVG Scalable Vector Graphics image Hash4b5c228b4faba433d06ec569ed855b2d a7d3882b93e332460e7c59510a6a811ef011983f eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
GET /kllZe0JQgDwLxmPPrn3AcmPOKBS4FivickIYGe8gdgVayZklPMuooqiRdu9RVrzhg9Un8KZFHqrz06CuNUuv212 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:58 GMT
content-type: image/svg+xml
server: cloudflare
content-disposition: inline; filename="kllZe0JQgDwLxmPPrn3AcmPOKBS4FivickIYGe8gdgVayZklPMuooqiRdu9RVrzhg9Un8KZFHqrz06CuNUuv212"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4XETdGOA%2FsVj3MfmdLDIvhELg02qTbHmeoq01GYznZBAd8MxENByoK4qp1mQUeV7YRXMGIoBhBGec%2Bm%2BxwpSYpk9YV4L1A%2FWXpqkFvfXArg6Kr%2FY9rQP8IRJDVeTiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
content-encoding: br
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
vary: accept-encoding
cf-ray: 9113e66b1a9cb4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1110&min_rtt=1103&rtt_var=419&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2258&delivery_rate=2625566&cwnd=251&unsent_bytes=0&cid=733a490c8952ab8e&ts=94&x=0", cfExtPri
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/34x2oKPyuY4ExycJFZ6712 | 104.21.17.177 | 200 OK | 27 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/34x2oKPyuY4ExycJFZ6712 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeASCII text, with very long lines (26765), with no line terminators Hash1a862a89d5633fac83d763886726740d e5ce3aa454c992a13fd406a9647d7afbf831051f 5c22fd904edb792331a7307ddf4a790e0d1318924f6d8e7362fa6b55d5ab6fbb
GET /34x2oKPyuY4ExycJFZ6712 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="34x2oKPyuY4ExycJFZ6712"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GM%2BQGwSSr9UoV4uYxIKjE%2BnNDn8ajHabk3CS0iJuK6SOkqB%2Ba9yjRJ85UMw0vv86VSH27cDs7ToE7CCjbE6JDX8x8zoRpzYvg1PANBnBSxfatSp%2BHAebpOdgH%2FkXvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 9113e6655bfeb4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1161&min_rtt=1112&rtt_var=350&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2187&delivery_rate=2387469&cwnd=251&unsent_bytes=0&cid=ddffe59f0cbe3464&ts=99&x=0", cfL4;desc="?proto=QUIC&rtt=2050&min_rtt=814&rtt_var=1353&sent=118&recv=50&lost=0&retrans=0&sent_bytes=89293&recv_bytes=25083&delivery_rate=10876414&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8377&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/wxbPagUBrN9langKjdUo1EnhrsooKI368hWQkyyWBP2uoSHIyR90180 | 104.21.17.177 | 200 OK | 2.9 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/wxbPagUBrN9langKjdUo1EnhrsooKI368hWQkyyWBP2uoSHIyR90180 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeSVG Scalable Vector Graphics image Hashe924de0d471df54b6280f3dc8b187cb8 857f03226070b502a9e06b4249710ec10be4c9e9 24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33
GET /wxbPagUBrN9langKjdUo1EnhrsooKI368hWQkyyWBP2uoSHIyR90180 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/svg+xml
content-disposition: inline; filename="wxbPagUBrN9langKjdUo1EnhrsooKI368hWQkyyWBP2uoSHIyR90180"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mt3K7wn3WWUbqkLLErHgmBitDErGCKBL9sCH4C%2FkptAltJhhSlELGlFHp8Kbk%2Bqd%2BKPoO%2FTnCvCfpvXutZ00xcjvl7Ayw6gEIEjp7Cl9EPvy8KUHlgYXB%2BYcbitjOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e6659c5cb4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1116&min_rtt=1084&rtt_var=331&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2227&delivery_rate=2656880&cwnd=251&unsent_bytes=0&cid=7b1f7bfd31e73036&ts=86&x=0", cfL4;desc="?proto=QUIC&rtt=1574&min_rtt=814&rtt_var=724&sent=136&recv=56&lost=0&retrans=0&sent_bytes=107497&recv_bytes=25354&delivery_rate=2059407&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8435&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css | 3.164.240.85 | 200 OK | 10 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css IP 3.164.240.85:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeASCII text, with very long lines (10450) Hashe0d37a504604ef874bad26435d62011f 4301f0d2b729ae22adece657d79eccaa25f429b1 c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179
GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Thu, 14 Mar 2024 00:03:58 GMT
x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Fri, 31 Jan 2025 02:19:39 GMT
expires: Sat, 31 Jan 2026 02:19:39 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"e0d37a504604ef874bad26435d62011f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ec47ad650ce8b90cf8852923bd4f4320.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: HQjn0_7TXD4_YwBvvdfe8oqqJcdKc5p2s80hjaIsXbAlOwl3s-rYjA==
age: 1150098
X-Firefox-Spdy: h2
|
|
| github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js | 140.82.121.3 | 302 Found | 10 kB |
URL GET HTTP/2github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js IP 140.82.121.3:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerSectigo Limited Subjectgithub.com FingerprintE4:33:71:DD:D6:91:4A:75:B6:1F:9E:4F:74:6D:9B:F0:DD:26:FC:3A ValidityWed, 05 Feb 2025 00:00:00 GMT - Thu, 05 Feb 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Thu, 13 Feb 2025 09:46:36 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250213T094636Z&X-Amz-Expires=300&X-Amz-Signature=d1c26b680bcd47165d9c76b12bed3ae5fde1ff597eb3a51b7d9ec01e6c5263d1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: 5DA7:3D7CA2:143245C:14D4F22:67ADBFCD
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/efqdXNNe5IFWEaLLBmYOfxRxssAMklUOM4LYKipzAQb78150 | 104.21.17.177 | 200 OK | 270 B |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/efqdXNNe5IFWEaLLBmYOfxRxssAMklUOM4LYKipzAQb78150 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeSVG Scalable Vector Graphics image Hash0c09c5ea7c28d6feb4d124957dde0a0d 1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a
GET /efqdXNNe5IFWEaLLBmYOfxRxssAMklUOM4LYKipzAQb78150 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/svg+xml
content-disposition: inline; filename="efqdXNNe5IFWEaLLBmYOfxRxssAMklUOM4LYKipzAQb78150"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0DsgKtZIe2zZrpawWxJO3eh1m7lnANbfPnt1KvvgROkV2Up70y3OVQsnaqoJ82IiJqF8pX8tJL292i0A8hlocXIc%2FQAnf9mWCxoI99l%2BPTwJ1%2BROlWoVaBLW69HNJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e6659c49b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1118&min_rtt=1081&rtt_var=373&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2220&delivery_rate=2234567&cwnd=251&unsent_bytes=0&cid=7c1c334c3d6b3a84&ts=87&x=0", cfL4;desc="?proto=QUIC&rtt=1692&min_rtt=814&rtt_var=935&sent=131&recv=54&lost=0&retrans=0&sent_bytes=102079&recv_bytes=25264&delivery_rate=2413508&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8430&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css | 3.164.240.85 | 200 OK | 223 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css IP 3.164.240.85:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
Size223 kB (222931 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 14 May 2024 21:48:24 GMT
x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Wed, 29 Jan 2025 17:13:28 GMT
expires: Thu, 29 Jan 2026 17:13:28 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"0329c939fca7c78756b94fbcd95e322b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ec47ad650ce8b90cf8852923bd4f4320.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: 8Y9TA07ueXiHUE8wbkMkcNB3pCmxjiubZLpXJRHyBVrEBAIYFQXH0g==
age: 1269269
X-Firefox-Spdy: h2
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/rsPDopMiXujyycNC8GqqaawdITXhpqsxAOyIcIeMij73pk4QVFkidC5tj3uRzXASIUBcd197 | 104.21.17.177 | 200 OK | 268 B |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/rsPDopMiXujyycNC8GqqaawdITXhpqsxAOyIcIeMij73pk4QVFkidC5tj3uRzXASIUBcd197 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeSVG Scalable Vector Graphics image Hash1318aafc1fb9ded0c623e5b9a557e6df 0917cdd7633cd1642b02b2b785416ec7e5106dcc d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4
GET /rsPDopMiXujyycNC8GqqaawdITXhpqsxAOyIcIeMij73pk4QVFkidC5tj3uRzXASIUBcd197 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: image/svg+xml
content-disposition: inline; filename="rsPDopMiXujyycNC8GqqaawdITXhpqsxAOyIcIeMij73pk4QVFkidC5tj3uRzXASIUBcd197"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTSGJ7w3bw8nCkmysB%2BSmbcHpzU86Vt%2FFpVIDGH8GaAXD0BoGmZsCW7CHKclcEpec4Wl5dzNYR4WSt%2BIkMB7audhdygXprugVkZ2GqY%2B6JQyPzBvXOAIqvUQxNi%2FRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e6659c5fb4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1034&min_rtt=1020&rtt_var=412&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2244&delivery_rate=2544815&cwnd=251&unsent_bytes=0&cid=0c0969efe0bd3532&ts=77&x=0", cfL4;desc="?proto=QUIC&rtt=1692&min_rtt=814&rtt_var=935&sent=132&recv=54&lost=0&retrans=0&sent_bytes=103117&recv_bytes=25264&delivery_rate=2413508&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8431&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/rfGkctRONN8gt0C2yaBrFUwriPjVd1jK2mMHo6ihPwKswpe | 104.21.17.177 | 200 OK | 2.8 kB |
URL POST HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/rfGkctRONN8gt0C2yaBrFUwriPjVd1jK2mMHo6ihPwKswpe IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2796), with no line terminators Hashb0a6c9a0f7c5c2aac45793057082fb14 9bc39f2e02298c0504410d77c12b34094bdd4640 97aedae97cb84ee61a679e098604e0ebfa948aea5e0ea5cf018682b4bb71cae1
POST /rfGkctRONN8gt0C2yaBrFUwriPjVd1jK2mMHo6ihPwKswpe HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 53
Origin: https://wnyo4cmywpf7e7iadgde.lumpnk.ru
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:58 GMT
content-type: application/json
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL%2BmpuRa2iQZQy%2Fo3RNr6lCV7bnhrahJtUhFImzCbhFtD%2FxOo7Dmzg4fb8HOXWZ3EHxXLkI8eQOId%2FctFo0OjHaBpR%2B7jZc03rlZrvhoLQ2Z9GAackgp3pGp%2FogHoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IncxMGR3c3ZBWElnNnlFcmN0MXpKRHc9PSIsInZhbHVlIjoidzNTc1lnTnZVQVkzUU1GMW14NExIdmFBb05POEVWQVRRc0tXWFlTanhvb3Q0bWU4V1JkaGZFTnd4amxqUUROOFZBdGRTY1NRYUdCNWdqRDVXVUF3U01XUTNvbU96ZEdaMVU0Z0RJcnYvN1F1Z1QySHdaRGJQS0NBN203eGxNZEYiLCJtYWMiOiI0NDI5ODdhNDA2OGIzNGIyOWNkY2Y3NGE3YTcyN2ZmMWYwZDk1NjQ0N2ZlOTMyZmMzNDhlZDlhNjMxMTQ4M2Y3IiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:58 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkJoWUZrQ1hSTWpmRThvYTVUQkU5Z0E9PSIsInZhbHVlIjoiMjl4WEcrTFR4SHRCWVh2QUNDcjl0ckxqWXpXeWtyR1pSOHQ4VWNhTDFncldITGloTmwvaDBidDlYRCttK3ZNYm10NjVBVzlyQkZCNmc1WUhnaENUS05LRTZvN0RuT1V4bTRwNmkwWTlQNzFGelE0Y2tyWTl0eUpNZTRmelRDdTIiLCJtYWMiOiIxM2ExNTQ3M2U1ZDQ1NzRlYmM0ODQ4MWQ3NmY2YmRhZGQ2NWY2YTYzZjhhNTNmZDhlYzM2MDI5YmYwOGVjZmEyIiwidGFnIjoiIn0%3D; expires=Thu, 13-Feb-2025 11:47:58 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e66aba29b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1159&min_rtt=1089&rtt_var=458&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2399&delivery_rate=2659320&cwnd=251&unsent_bytes=0&cid=00f475ae80f35b43&ts=77&x=0", cfL4;desc="?proto=QUIC&rtt=940&min_rtt=646&rtt_var=284&sent=864&recv=143&lost=0&retrans=0&sent_bytes=928621&recv_bytes=32239&delivery_rate=7033079&cwnd=105600&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=9211&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/34Ard5qlVhHnEHE2b34Q0M0UAg4kl68ss0zE3eZ89103 | 104.21.17.177 | 200 OK | 4.8 MB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/34Ard5qlVhHnEHE2b34Q0M0UAg4kl68ss0zE3eZ89103 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
Size4.8 MB (4756466 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /34Ard5qlVhHnEHE2b34Q0M0UAg4kl68ss0zE3eZ89103 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:57 GMT
content-type: application/javascript
content-disposition: inline; filename="34Ard5qlVhHnEHE2b34Q0M0UAg4kl68ss0zE3eZ89103"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wB5JaKqfI3t5AAmHXu6tjh%2BM9DiN80pHdUIcEz7zGiwEa3%2B1EFEPr2m%2FmrSIDLNNn9DGbU61xjXEwzFmfdYLyLJEeesIsJFRcxDjDpxMWPtRD5G4LvyhVjLnQsTKeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 9113e665ac79b4eb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1482&min_rtt=1470&rtt_var=576&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2180&delivery_rate=1842239&cwnd=251&unsent_bytes=0&cid=8f38a6a0b75ade90&ts=85&x=0", cfL4;desc="?proto=QUIC&rtt=1359&min_rtt=814&rtt_var=493&sent=163&recv=60&lost=0&retrans=0&sent_bytes=137358&recv_bytes=25535&delivery_rate=9161188&cwnd=26400&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=8449&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| wnyo4cmywpf7e7iadgde.lumpnk.ru/kliF0gyFUcvcqdVEZbjQVUMzs9uopz8I8bINwdcpbDFc9O9ms3w49dzBMq5yz229 | 104.21.17.177 | 200 OK | 1.3 kB |
URL GET HTTP/3wnyo4cmywpf7e7iadgde.lumpnk.ru/kliF0gyFUcvcqdVEZbjQVUMzs9uopz8I8bINwdcpbDFc9O9ms3w49dzBMq5yz229 IP 104.21.17.177:443
Requested byhttps://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ CertificateIssuerGoogle Trust Services Subjectlumpnk.ru Fingerprint8A:5D:29:76:89:6D:FB:90:14:A3:2F:87:70:15:30:DE:66:1F:44:FB ValidityFri, 17 Jan 2025 17:08:07 GMT - Thu, 17 Apr 2025 18:06:38 GMT
File typeRIFF (little-endian) data, Web/P image Hash32ca2081553e969f9fdd4374134521ad 7b09924c4c3d8b6e41fe38363e342da098be4173 216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587
GET /kliF0gyFUcvcqdVEZbjQVUMzs9uopz8I8bINwdcpbDFc9O9ms3w49dzBMq5yz229 HTTP/1.1
Host: wnyo4cmywpf7e7iadgde.lumpnk.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wnyo4cmywpf7e7iadgde.lumpnk.ru/PTPZDGARSGPIUXEFMZru8r2dm2yr9zy6setx1xt3y?RKKJGPILDLUZIQNTMKFHIPCZ
Cookie: XSRF-TOKEN=eyJpdiI6ImxKbCtCelBPb3ZMUGVkWHdXR21PVlE9PSIsInZhbHVlIjoiMGxLa0Z5enhmK0hIRjFDQkd0WGJLRDVhZXZ5UjZJQVQyNnBJS1N5a2s5VzRqbU44VjNBMVV0QWhGUU1ObFdiYWkycEJFdHUxKzVZU3JNcHVtQ3lXRGwxNVgxVG5kQ3poZVJZRm9Xd0JJanYwYTV0a0t3OHhKdDVvTDVkTWs1enEiLCJtYWMiOiJmYzVkZjZiZGU0YTM4Y2MxZWFmNmQ4M2I4M2Y4ODNlNjI2ODFhMmUxZjk2YWI3MzM5ZWFlODU3ODE4NTMzMWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllmaFc1OG1XdlJXMkR0UGx2YXd2c1E9PSIsInZhbHVlIjoiUlRaWHM0VThZbWdTR0hQTG1lVmxaMnBOSjgxZlJ4REVyU0hWSi9XdjlYMjh4YTF2bGlHOXVSZHBqeW0rUWFRRFU0S0tBS0xtZEdQZWxOYU04MEhkUGJiVWdFcWNDNTI0T05YK0F1VmM2NU5VUENmS1NBVmZYVEJJeld2b2FzQjUiLCJtYWMiOiJiZDkyN2FhNzk5NzI3YzExMDc2N2ExZTExN2E1YmVmOWE5MmQ3NGJmNzg1ODg1N2NkNWQ3NjNhMWVjNDg2MGNjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 13 Feb 2025 09:47:58 GMT
content-type: image/webp
content-length: 1298
content-disposition: inline; filename="kliF0gyFUcvcqdVEZbjQVUMzs9uopz8I8bINwdcpbDFc9O9ms3w49dzBMq5yz229"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ob7PJrcsZRFN%2B2cyU6G7BPm2Iz13PSeTyUK4jrOYa0lw7xwEKvKCuXYt5n9n1TUXWycxyFU2vhjnNFJ%2FEmU34Sh05du7dsiux%2BEgJFWsbTva5xdpTfJWrh9z%2BRO%2FKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 9113e66b1aaeb4eb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1219&min_rtt=1136&rtt_var=373&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2236&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=034cbeff80a6a82f&ts=93&x=0", cfL4;desc="?proto=QUIC&rtt=926&min_rtt=646&rtt_var=241&sent=869&recv=144&lost=0&retrans=0&sent_bytes=931526&recv_bytes=32285&delivery_rate=24246&cwnd=105600&unsent_bytes=0&cid=d6c8e6856e4af5ac&ts=9303&x=1", cfExtPri, cfHdrFlush;dur=0
|
|