| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 18 Feb 2025 06:26:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 264977
expires: Sun, 08 Feb 2026 06:26:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3tE28YP2eefoVtwfuyidorgeFcBLKazOT81NnPpv47WI%2BQsN6kwjEMSa3AgYktoPZgAfj6vKu7s5gn3reYdocgTTUYQZ1DWcghfwiLwPilGAmRAqJIJFv8teHT95A9AABGqDrQ%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 913bf2df9a73b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback | 104.18.95.41 | 302 Found | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP 104.18.95.41:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 18 Feb 2025 06:26:59 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/0e3e6804b971/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 913bf2df9deb5687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.66.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.66.137:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 18 Feb 2025 06:26:59 GMT
age: 1101677
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 6050
x-timer: S1739860019.221651,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| developers.cloudflare.com/favicon.png | 104.16.5.189 | 200 OK | 937 B |
URL developers.cloudflare.com/favicon.png IP 104.16.5.189:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashfc3b7bbe7970f47579127561139060e2 3f7c5783fe1f4404cb16304a5a274778ea3abd25 85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe
GET /favicon.png HTTP/1.1
Host: developers.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 18 Feb 2025 06:26:59 GMT
content-type: image/png
content-length: 937
cache-control: public, max-age=0, must-revalidate
etag: "6be7ff94b6151f8cfbf08b53a17e2ac1"
set-cookie: __cf_bm=kxV.9997I_hc6ymDvo9LOO6LiOiP04.v424uGsKkIxA-1739860019-1.0.1.1-dlRUavADMIEeByEeecXFAmaREe0MzvZDtkU1628oCDdeDfYsTBeYSgA.gX36QZcbWpHj6U_BgPR3EQwqdE2EVQ; path=/; expires=Tue, 18-Feb-25 06:56:59 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
cf-ray: 913bf2e15cf21bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| q9pz.br-izeffs.ru/chai!10s72jno | 104.21.112.1 | 200 OK | 285 B |
URL q9pz.br-izeffs.ru/chai!10s72jno IP 104.21.112.1:0
File typevery short file (no magic) Hashcfcd208495d565ef66e7dff9f98764da b6589fc6ab0dc82cf12099d1c2d40ab994e8410c 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /chai!10s72jno HTTP/1.1
Host: q9pz.br-izeffs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/
Origin: https://bein-sharepoint.zonivarnoth.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 18 Feb 2025 06:27:05 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6GitlqOm%2Bp6L9UqZodptxQn%2FVjFqmit4Isn4xKtnjyMSkEeq50mtLFA2cNLVjO%2BctGqIId%2FER0qOHntzINVhWYJ0mEONiN3Gn4dt5SX%2ByRRp2x6pnkVWOqeYRiCiJLafIFxuKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 913bf3026fe2712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=516&min_rtt=379&rtt_var=164&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3198&recv_bytes=1114&delivery_rate=6277456&cwnd=254&unsent_bytes=0&cid=163ab362860509b0&ts=910&x=0"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 264984
expires: Sun, 08 Feb 2026 06:27:06 GMT
accept-ranges: bytes
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JgsFfAtMOnuE2YcBhgvuci8Xri5t7HyX%2Be804qT6K7CdB4vbZ8MLDElJkj4jv1KC9krneGKWrR6cLyXe94lRgA3ApIlXSONIi1eCMj5j1CLI3xLXBT2Y7hBeW3f6Db2pKiL%2BeAre"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 913bf30bffbb1c0a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bein-sharepoint.zonivarnoth.ru/ITb4aThU/ | 172.67.135.55 | 200 OK | 40 kB |
URL bein-sharepoint.zonivarnoth.ru/ITb4aThU/ IP 172.67.135.55:0
File typeHTML document, ASCII text, with very long lines (11129), with CRLF line terminators Hash9134c1c64cad37acd16ecf02394cc569 0fd405d6d7324024547527e4a81bda982c606034 2f2120b1cf8fb23f3d369dd6fe272eaecdd54ef3cc252038f7efa44a932d665d
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook |
GET /ITb4aThU/ HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Inh2ZHluZUVFR2pPWFE4WWd4UHNNNlE9PSIsInZhbHVlIjoiZ1hyQ1p6OFdwQ0FjK3J3S0N0R0NvN0J0V3haNFBSb05VNkg3ck9EUnVHc3l2TFIzY0doazlzR3RreUVWd0cvaWJNMjhSODcyMTlIWTA5eU03NXFsOWFRd1dFaWF3dFIvYW51NE1RcU5HMkRoZEthUmllVlNtbDZhTzYvRkpaVTMiLCJtYWMiOiIyNjViMDE3ZTYzYTliMDA3MDE4NGY5MjA4YmU2NGNmODVhZTFjMDljNTQxNzVjZmQxOGYwNzYzMjY1MDU0NTFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNib0lKODNadFhqYWEwb1UwNitUMFE9PSIsInZhbHVlIjoiUlJTNjJvbGFnT2JtVldvKys3ODhGRFl6MlNKVWxjdXM2VTVnZzFnMFoxVURiZk5BWUliaUZwRHhaOEMzV0g2THpYMmgyekJ6dTRQM1hjbmVRWDJpK3N5T2ZSdUZROXNkU1l1REsrd3RCSkk5VVJtWWloQzhkZTZaNm5PUXByUzkiLCJtYWMiOiJjYjk4NTFkZWY2MGQ5ZGFlZTE4YTc0YjI5ZmY0MTY4Y2NjYTYzZGIxN2Y4OTg2ZmE3NTM5ZjUxMGM5ZDRjYzE5IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:06 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=24nKf4y87pw8eHYfP1OKNjwjUh1TYBTzuLJ%2B%2Fy7FtGLF5Sov4zTY5OF0b6B%2Fvd9gCEnKesrB2JOxHvVwVpMyp8BacHzrGHQILuO%2BBYDecz1Yt6iNbcuZYmz94NoO8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Ilh6YlM3YXV0dDRSVUpKSnpkLzVFQlE9PSIsInZhbHVlIjoiTzhPWW5wZTVQUWZNdnIrdkpYWnFsckpWNHpBN29VVG9Mb0lxTFoyVTdkSXQzUmlPTG45QUZ5S3FnTkhUOXRNb0NGaE5UV3d5SldVUkE1ZEEwTHR3emF5aUVUS2ZWbmpTYWhIVzFQRVhiS2o2U3EyQllhbmIwajZkazYwb2YxQUoiLCJtYWMiOiJjMDNiMzY5ZWFkZDE3ZjM5ZDYxNmMwY2YyMjY3Mjk3OWI2NjdjZDZhNTY0MDkyNjNiYzUxMGU5ZTU4ZGY2YWJmIiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:06 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IlRJVzRQcWVKSlp6L1Z4ajhPUHEzV0E9PSIsInZhbHVlIjoiQUw5c0FPWHN0dmN2eUdMaXoyM1JBL25qUFlBQlBYQjRzdWxvaEFUdExBY2Rqcy80YU5sTEZOdE1HVUttY2FOQnlzWlZSRFJySnQ2bm84V3RTT0d3eE42Tk5SbVRiMVJMSVg0aU8rVkliUitaWEZvY1oyMlBhdFpEeW9rVzBXTUYiLCJtYWMiOiIwYTZkOGJhN2JkZWY2Njk3MGFkZDY0MjQ2ZmMwY2VkNWYwZWFjYmY5OWM1M2NjNzc2Njg4MjdmZTgyYzE4NTA2IiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:06 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=1,i=?0
server: cloudflare
cf-ray: 913bf30a298a56c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5083&min_rtt=4881&rtt_var=1514&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2165&delivery_rate=570741&cwnd=32&unsent_bytes=0&cid=66dc8b2b6eaf0cd3&ts=177&x=0", cfL4;desc="?proto=QUIC&rtt=4630&min_rtt=3794&rtt_var=1576&sent=16&recv=11&lost=0&retrans=0&sent_bytes=5765&recv_bytes=3833&delivery_rate=232&cwnd=12000&unsent_bytes=0&cid=290f2b1240acd13d&ts=7327&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 264985
expires: Sun, 08 Feb 2026 06:27:07 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KiNKI%2BcXp1D6rJtp%2BuT9BsbU4ajogQWhfsEFKFfmX5DobnFqzbjdhXjyhlGlo8AlHTwVFwF1ls4%2F5I7zbLE0D6bTV4xTS1dDQuWkjrTPFNyQoOScV8%2BndmvRcKvzPsagOhx7Rv2H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 913bf3114b521c0a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.66.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.66.137:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 18 Feb 2025 06:27:07 GMT
age: 1101685
x-served-by: cache-lga21931-LGA, cache-hel1410021-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 6053
x-timer: S1739860027.086798,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-bold.woff | 172.67.135.55 | 200 OK | 36 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-bold.woff IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format, TrueType, length 35970, version 1.0 Hash496b7bbde91c7dc7cf9bbabbb3921da8 2bd3c406a715ab52dad84c803c55bf4a6e66a924 ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798
GET /GDSherpa-bold.woff HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff
content-length: 35970
content-disposition: inline; filename="GDSherpa-bold.woff"
cache-control: max-age=14400
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3lch6dmeSIP1XRGtSPrPU40xcCO4VtZ%2Fx%2FeZlPvTKkAbxkfILQ12V2ku5lMgSLNmaJ0iD39GMZKRr%2FPgyacnu3pJQidFLxVmH0NF9uCTqN0Jc5mNxDom48tek4rbUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 521
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31159b256c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=7858&min_rtt=6811&rtt_var=4649&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2183&delivery_rate=187479&cwnd=132&unsent_bytes=0&cid=4808c38fe2998720&ts=219&x=0", cfL4;desc="?proto=QUIC&rtt=889&min_rtt=608&rtt_var=225&sent=152&recv=59&lost=0&retrans=0&sent_bytes=122798&recv_bytes=18805&delivery_rate=2408421&cwnd=24000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8242&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-regular.woff2 | 172.67.135.55 | 200 OK | 29 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-regular.woff2 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28584, version 1.66 Hash17081510f3a6f2f619ec8c6f244523c7 87f34b2a1532c50f2a424c345d03fe028db35635 2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956
GET /GDSherpa-regular.woff2 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff2
content-length: 28584
content-disposition: inline; filename="GDSherpa-regular.woff2"
cache-control: max-age=14400
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=To%2B%2FJ21siA7u%2F3GoZZYBkm47JuHfkZXdUptX%2FhQ7IC5QAHKEVK%2F8wzmJVcysu2Q%2F38EQMHEI9DsKTVLnQT5WUb5t4sY1j9Wp7pGrQra3%2FZSyFYKn8qYfVfqkGSkxaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 521
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31159b556c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=10248&min_rtt=8023&rtt_var=5528&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2187&delivery_rate=177489&cwnd=220&unsent_bytes=0&cid=adb06554931387c5&ts=217&x=0", cfL4;desc="?proto=QUIC&rtt=889&min_rtt=608&rtt_var=225&sent=152&recv=59&lost=0&retrans=0&sent_bytes=122798&recv_bytes=18805&delivery_rate=2408421&cwnd=24000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8245&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-regular.woff | 172.67.135.55 | 200 OK | 37 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-regular.woff IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format, TrueType, length 36696, version 1.0 Hasha69e9ab8afdd7486ec0749c551051ff2 c34e6aa327b536fb48d1fe03577a47c7ee2231b8 fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf
GET /GDSherpa-regular.woff HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff
content-length: 36696
content-disposition: inline; filename="GDSherpa-regular.woff"
cache-control: max-age=14400
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAHCZmipgyIjVZ8p8oY1Mmlgli0Jx7R18GFxPTVxEUFAOr7cy1Q2K%2BYHxSze%2B%2BjoIGTnfe5f7r2qBWMYak43r5T9ZYtJRDlYDoHuR9g%2BxZb%2Be58wh8tgN188xCbuGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 521
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31159b756c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=12752&min_rtt=5220&rtt_var=6966&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2187&delivery_rate=545593&cwnd=250&unsent_bytes=0&cid=758e46548acbe64e&ts=204&x=0", cfL4;desc="?proto=QUIC&rtt=889&min_rtt=608&rtt_var=225&sent=152&recv=59&lost=0&retrans=0&sent_bytes=122798&recv_bytes=18805&delivery_rate=2408421&cwnd=24000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8244&x=1", cfExtPri, cfHdrFlush;dur=10
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-bold.woff2 | 172.67.135.55 | 200 OK | 28 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-bold.woff2 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28000, version 1.66 Hasha4bca6c95fed0d0c5cc46cf07710dcec 73b56e33b82b42921db8702a33efd0f2b2ec9794 5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f
GET /GDSherpa-bold.woff2 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff2
content-length: 28000
content-disposition: inline; filename="GDSherpa-bold.woff2"
cache-control: max-age=14400
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZaQr4fQFsknyzWEMtyIvVOTCKal%2FZHxQQ8Aps4OHFkZFjAizf1BDv417q9cfv5NERuAiCeD8ElCiS1T1yX19LAQAyM4EqibZLvz1knund1GqySed6IAnqGNAqW4S%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 521
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31149af56c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5828&min_rtt=5488&rtt_var=2173&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2185&delivery_rate=379682&cwnd=100&unsent_bytes=0&cid=78888ad26808eae8&ts=151&x=0", cfL4;desc="?proto=QUIC&rtt=889&min_rtt=608&rtt_var=225&sent=131&recv=57&lost=0&retrans=0&sent_bytes=98772&recv_bytes=16866&delivery_rate=2408421&cwnd=24000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8240&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-vf.woff2 | 172.67.135.55 | 200 OK | 44 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-vf.woff2 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 43596, version 1.0 Hash2a05e9e5572abc320b2b7ea38a70dcc1 d5fa2a856d5632c2469e42436159375117ef3c35 3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec
GET /GDSherpa-vf.woff2 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff2
content-length: 43596
content-disposition: inline; filename="GDSherpa-vf.woff2"
cache-control: max-age=14400
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4eYmSh5mg8VURp0DrlnJn5zqsj8kjV4QUW5lv%2FqrGCE834K7qZFH33Wff8s11Mp0GC%2FhCrqLbqz2rkC2zkys9VsbBSzDJNEKJzsqHphh%2BY8p1%2FE8KRIPBg4xz3T%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 521
accept-ranges: bytes
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31159b956c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=9863&min_rtt=6531&rtt_var=4829&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2183&delivery_rate=436074&cwnd=220&unsent_bytes=0&cid=15c2437a7c06e417&ts=309&x=0", cfL4;desc="?proto=QUIC&rtt=889&min_rtt=608&rtt_var=225&sent=152&recv=59&lost=0&retrans=0&sent_bytes=122798&recv_bytes=18805&delivery_rate=2408421&cwnd=24000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8245&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| bein-sharepoint.zonivarnoth.ru/GDSherpa-vf2.woff2 | 172.67.135.55 | 200 OK | 93 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/GDSherpa-vf2.woff2 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 93276, version 1.0 Hashbcd7983ea5aa57c55f6758b4977983cb ef3a009e205229e07fb0ec8569e669b11c378ef1 6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c
GET /GDSherpa-vf2.woff2 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: font/woff2
content-length: 93276
content-disposition: inline; filename="GDSherpa-vf2.woff2"
cache-control: max-age=14400
cf-cache-status: HIT
last-modified: Tue, 18 Feb 2025 06:18:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hWg2RQbnogrf%2FQRGyMQK8QvCEsP%2BQEX2Q%2FOEmZ15A1ultknbufk7swkhVZvcVl%2BuaO7P%2FG7HOk84fNJmyalsDdsIYGl9MFwwwRWGwQdI%2B%2FUyHTxeHoD1dFeZHhvAow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
age: 520
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf31159bc56c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=11250&min_rtt=4959&rtt_var=6402&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2182&delivery_rate=472070&cwnd=153&unsent_bytes=0&cid=0ac30ab4548d806b&ts=198&x=0", cfL4;desc="?proto=QUIC&rtt=1063&min_rtt=608&rtt_var=518&sent=194&recv=60&lost=0&retrans=0&sent_bytes=170798&recv_bytes=18851&delivery_rate=1479069&cwnd=48000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8249&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 | 143.204.55.47 | 200 OK | 11 kB |
URL GET HTTP/2ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 IP 143.204.55.47:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typePNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced Hash12bdacc832185d0367ecc23fd24c86ce 4422f316eb4d8c8d160312bb695fd1d944cbff12 877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0
GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10796
date: Thu, 30 Jan 2025 19:53:14 GMT
server: nginx
last-modified: Tue, 23 Feb 2021 04:20:08 GMT
etag: "12bdacc832185d0367ecc23fd24c86ce"
expires: Fri, 30 Jan 2026 19:53:14 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: asvPysu75x2auHBADbzzJFPo8DJYCyL7rtsTnT6E5ZK5GgwH3jMn2A==
age: 1593233
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/qrX5bJjmGXkBMrbGa5WdAmn7eMeFYHhz9YhJMu4T45139 | 172.67.135.55 | 200 OK | 892 B |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/qrX5bJjmGXkBMrbGa5WdAmn7eMeFYHhz9YhJMu4T45139 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hash41d62ca205d54a78e4298367482b4e2b 839aae21ed8ecfc238fdc68b93ccb27431cd5393 20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40
GET /qrX5bJjmGXkBMrbGa5WdAmn7eMeFYHhz9YhJMu4T45139 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/webp
content-length: 892
content-disposition: inline; filename="qrX5bJjmGXkBMrbGa5WdAmn7eMeFYHhz9YhJMu4T45139"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YhdpUkwO0W8QRoRAjq6Q3eTp1FA%2FCvHZ1c27D7uhH2yV%2BDVskeS2XYl%2BxrB1RywUqzoiFmf0IP0tFNj8VKCXhHvMszZOaZmgqxTg77Lj2HWWDHcC32ql1sViukjXow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf31159c956c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6279&min_rtt=5535&rtt_var=2887&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2221&delivery_rate=307161&cwnd=137&unsent_bytes=0&cid=4a078d0bfcec72f7&ts=110&x=0", cfL4;desc="?proto=QUIC&rtt=2151&min_rtt=608&rtt_var=1881&sent=379&recv=70&lost=0&retrans=1&sent_bytes=382629&recv_bytes=25856&delivery_rate=32362&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8450&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/wxMFAP1hZyWVFU8sy5dnzOIVqrPHvb73stfAz2f12130 | 172.67.135.55 | 200 OK | 644 B |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/wxMFAP1hZyWVFU8sy5dnzOIVqrPHvb73stfAz2f12130 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hash541b83c2195088043337e4353b6fd60d f09630596b6713217984785a64f6ea83e91b49c5 2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f
GET /wxMFAP1hZyWVFU8sy5dnzOIVqrPHvb73stfAz2f12130 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/webp
content-length: 644
content-disposition: inline; filename="wxMFAP1hZyWVFU8sy5dnzOIVqrPHvb73stfAz2f12130"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PV4BcVS6DE2%2FYyZKYzza2thEnqwf35hI2iep5v03Mu6FO5oaDdQRGGjlrcpNrs%2FOr9kvMUs%2BPfyUaTO%2FQo0DW9cesvxr0aGFl3GceLttPiwBB3CTvT%2F6SswDdBeIkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf31159bd56c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5056&min_rtt=4913&rtt_var=1667&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2220&delivery_rate=471992&cwnd=193&unsent_bytes=0&cid=9cc9a54b622fe8a2&ts=158&x=0", cfL4;desc="?proto=QUIC&rtt=1369&min_rtt=608&rtt_var=937&sent=397&recv=77&lost=0&retrans=1&sent_bytes=395843&recv_bytes=26171&delivery_rate=2649285&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8507&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/qrud71iJ6qWIlFBr5xD1InE6PBnsFUS6IMN7HLm2euvRqeHnuOlljU9KQyj4EiFCcd240 | 172.67.135.55 | 200 OK | 9.6 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/qrud71iJ6qWIlFBr5xD1InE6PBnsFUS6IMN7HLm2euvRqeHnuOlljU9KQyj4EiFCcd240 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hash4946eb373b18d178c93d473489673bb6 16477acb73b63ca251d37401249e7e4515febd24 666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92
GET /qrud71iJ6qWIlFBr5xD1InE6PBnsFUS6IMN7HLm2euvRqeHnuOlljU9KQyj4EiFCcd240 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/webp
content-length: 9648
content-disposition: inline; filename="qrud71iJ6qWIlFBr5xD1InE6PBnsFUS6IMN7HLm2euvRqeHnuOlljU9KQyj4EiFCcd240"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MjARjEMRmmaKRg7zvBUUL8c%2BCMDelMTV3PxNCy16aEwaXTf%2FvEiNwyVmQqgUF5wrKQvsqKmvtWtE6G%2BCw0hv%2FFFRbcM7b6Lm4wj21WziuKXNsIVELdgRjM1sve2Cpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf311ca6a56c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6512&min_rtt=5452&rtt_var=3411&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2245&delivery_rate=270439&cwnd=32&unsent_bytes=0&cid=086cf42a01c53c5e&ts=105&x=0", cfL4;desc="?proto=QUIC&rtt=1247&min_rtt=608&rtt_var=736&sent=401&recv=79&lost=0&retrans=1&sent_bytes=399440&recv_bytes=26261&delivery_rate=1597642&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8524&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/stVZCL4y8BLp0COeMJmBO2t8zmJK445m8mouFpoCiOlRZCqrbDK9nts130NCBAIgh254 | 172.67.135.55 | 200 OK | 18 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/stVZCL4y8BLp0COeMJmBO2t8zmJK445m8mouFpoCiOlRZCqrbDK9nts130NCBAIgh254 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hash4b52ecdc33382c9dca874f551990e704 8f3bf8e41cd4cdddb17836b261e73f827b84341b cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342
GET /stVZCL4y8BLp0COeMJmBO2t8zmJK445m8mouFpoCiOlRZCqrbDK9nts130NCBAIgh254 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/webp
content-length: 17842
content-disposition: inline; filename="stVZCL4y8BLp0COeMJmBO2t8zmJK445m8mouFpoCiOlRZCqrbDK9nts130NCBAIgh254"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KMbr6NZZhJNji5Qtfh6XG8YfMf3QltgpxI2gfQRt4%2FAUnCfULi7KhR136hW7zGjntJmSVTNUut9h2F%2BhICiiP62ZrobeAHCUDBSaGYiDizd4gFBrIOkKqfODnTYtLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf311ca6b56c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4254&min_rtt=4245&rtt_var=1213&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2244&delivery_rate=659870&cwnd=139&unsent_bytes=0&cid=e7e96520ec43b2dd&ts=153&x=0", cfL4;desc="?proto=QUIC&rtt=996&min_rtt=608&rtt_var=330&sent=429&recv=86&lost=0&retrans=1&sent_bytes=423895&recv_bytes=26578&delivery_rate=4554265&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8567&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/ijvllpyoS0qGydbjVGQhIOgHQB4jmno6QWJUiuxfuZMmJQDxzgcef210 | 172.67.135.55 | 200 OK | 25 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/ijvllpyoS0qGydbjVGQhIOgHQB4jmno6QWJUiuxfuZMmJQDxzgcef210 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hashf9a795e2270664a7a169c73b6d84a575 0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8 d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740
GET /ijvllpyoS0qGydbjVGQhIOgHQB4jmno6QWJUiuxfuZMmJQDxzgcef210 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/webp
content-length: 25216
content-disposition: inline; filename="ijvllpyoS0qGydbjVGQhIOgHQB4jmno6QWJUiuxfuZMmJQDxzgcef210"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q7aQ0C2hoXlV%2FuoOlMJhTfj5Y1bL%2FK0Uwm13iL4cUwF6tGU43dx6cENRwUyjuC936%2BnAuzx8JJz8TKUgxYrqOdBf%2BDXqkwA250j5tUg6PVVAz%2F2W6BQK0vITvpUSVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf311ca6956c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3945&min_rtt=3935&rtt_var=1496&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2232&delivery_rate=708810&cwnd=134&unsent_bytes=0&cid=b8e6ed9929a05fd8&ts=142&x=0", cfL4;desc="?proto=QUIC&rtt=1039&min_rtt=608&rtt_var=450&sent=418&recv=84&lost=0&retrans=1&sent_bytes=414028&recv_bytes=26486&delivery_rate=91407&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8561&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js | 140.82.121.3 | 302 Found | 0 B |
URL GET HTTP/2github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js IP 140.82.121.3:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerSectigo Limited Subjectgithub.com FingerprintE4:33:71:DD:D6:91:4A:75:B6:1F:9E:4F:74:6D:9B:F0:DD:26:FC:3A ValidityWed, 05 Feb 2025 00:00:00 GMT - Thu, 05 Feb 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250218T062707Z&X-Amz-Expires=300&X-Amz-Signature=f6c294d1ae881ea8c5d932823cf454bb916fc5798fca26f7de7965c5595fe4d4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: EB5A:71D3A:7A209FF:7E2DC34:67B4283B
X-Firefox-Spdy: h2
|
|
| objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250218T062707Z&X-Amz-Expires=300&X-Amz-Signature=f6c294d1ae881ea8c5d932823cf454bb916fc5798fca26f7de7965c5595fe4d4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream | 185.199.111.133 | 200 OK | 10 kB |
URL GET HTTP/2objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250218T062707Z&X-Amz-Expires=300&X-Amz-Signature=f6c294d1ae881ea8c5d932823cf454bb916fc5798fca26f7de7965c5595fe4d4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream IP 185.199.111.133:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10017) Hash6c20a2be8ba900bc0a7118893a2b1072 ff7766fde1f33882c6e1c481ceed6f6588ea764c b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500
GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250218T062707Z&X-Amz-Expires=300&X-Amz-Signature=f6c294d1ae881ea8c5d932823cf454bb916fc5798fca26f7de7965c5595fe4d4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 07 Dec 2021 16:38:45 GMT
etag: "0x8D9B9A009499A1E"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000
x-ms-version: 2023-11-03
x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT
x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=randexp.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 3563
date: Tue, 18 Feb 2025 06:27:08 GMT
x-served-by: cache-iad-kiad7000045-IAD, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 11369, 0
x-timer: S1739860028.820048,VS0,VE1
content-length: 10245
X-Firefox-Spdy: h2
|
|
| ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 | 143.204.55.47 | 200 OK | 20 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 IP 143.204.55.47:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20416, version 2.197 Hashd99a7377dabb55772ca9f986b0a04b57 2b5fcd8431953c44e410d0489899e74f6d2cfecc affdba1620552b12a1a8a04467136aeb408c03fa337d20e9c38374d682d4d149
GET /assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2 HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bein-sharepoint.zonivarnoth.ru
DNT: 1
Connection: keep-alive
Referer: https://ok4static.oktacdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 20416
date: Mon, 10 Feb 2025 01:49:35 GMT
server: nginx
last-modified: Tue, 07 Nov 2023 18:56:28 GMT
etag: "d99a7377dabb55772ca9f986b0a04b57"
x-amz-meta-sha1sum: 2b5fcd8431953c44e410d0489899e74f6d2cfecc
expires: Tue, 10 Feb 2026 01:49:35 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yyU7QcwIhkax8ixkaKhr83UrWfbgPdDjLCFBf7cq1MOnQdurG-zC8g==
age: 707853
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/ijkjBE2N8vADWD3hmQmpURQDzvSJ48na6dL5dTSud89YfG8pWWTqmc9ttRIhmYdvq3bnGk1ab230 | 172.67.135.55 | 200 OK | 1.3 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/ijkjBE2N8vADWD3hmQmpURQDzvSJ48na6dL5dTSud89YfG8pWWTqmc9ttRIhmYdvq3bnGk1ab230 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeRIFF (little-endian) data, Web/P image Hash32ca2081553e969f9fdd4374134521ad 7b09924c4c3d8b6e41fe38363e342da098be4173 216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587
GET /ijkjBE2N8vADWD3hmQmpURQDzvSJ48na6dL5dTSud89YfG8pWWTqmc9ttRIhmYdvq3bnGk1ab230 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:08 GMT
content-type: image/webp
content-length: 1298
content-disposition: inline; filename="ijkjBE2N8vADWD3hmQmpURQDzvSJ48na6dL5dTSud89YfG8pWWTqmc9ttRIhmYdvq3bnGk1ab230"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=af1gFP1H2Cv%2F4iqEqBgQwQf0M8h11dadCqUMb2DfnTpCBfoT5t2skMTM6QnApmoiPP24x%2FNOk8rLnceKMkHIF02zNJaW5qU19EHj8BXPngt9u98lBdCrBuM4uPBnaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf319fb9656c5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4927&min_rtt=4908&rtt_var=1878&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2252&delivery_rate=562734&cwnd=44&unsent_bytes=0&cid=bd90ccc474f2135e&ts=107&x=0", cfL4;desc="?proto=QUIC&rtt=745&min_rtt=605&rtt_var=88&sent=957&recv=244&lost=0&retrans=1&sent_bytes=946091&recv_bytes=36640&delivery_rate=3840136&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=9786&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/mnok8ucdSaCoDkNqD0qPwePyD1vK5knPqk3A6ucoPEFklTDaioVFkQ0qABU6M3gK9Tuv220 | 172.67.135.55 | 200 OK | 7.9 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/mnok8ucdSaCoDkNqD0qPwePyD1vK5knPqk3A6ucoPEFklTDaioVFkQ0qABU6M3gK9Tuv220 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeSVG Scalable Vector Graphics image Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /mnok8ucdSaCoDkNqD0qPwePyD1vK5knPqk3A6ucoPEFklTDaioVFkQ0qABU6M3gK9Tuv220 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:08 GMT
content-type: image/svg+xml
content-disposition: inline; filename="mnok8ucdSaCoDkNqD0qPwePyD1vK5knPqk3A6ucoPEFklTDaioVFkQ0qABU6M3gK9Tuv220"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K0uB8pKuBl%2BkQ1nJiLG4V%2BD2Zqlu0JExKfYc4kRm9%2FSB86NFPM3nS4O3bvfkdoJcalvbIfPEYv8ho9kGUUEZef9fbZlBzmuCVFaHAPhtzsBcY2e3E2WDdsjI4GdEMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf319fb9556c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5349&min_rtt=4908&rtt_var=2147&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2247&delivery_rate=417656&cwnd=112&unsent_bytes=0&cid=4498a650e6dc6a01&ts=158&x=0", cfL4;desc="?proto=QUIC&rtt=821&min_rtt=605&rtt_var=171&sent=964&recv=246&lost=0&retrans=1&sent_bytes=951315&recv_bytes=36731&delivery_rate=1819011&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=9839&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| get.geojs.io/v1/ip/geo.json | 172.67.70.233 | 200 OK | 2.3 kB |
URL GET HTTP/2get.geojs.io/v1/ip/geo.json IP 172.67.70.233:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectgeojs.io Fingerprint55:74:AA:F3:7A:AF:02:8B:48:DB:6E:73:EB:A1:95:20:EC:13:2D:8E ValidityTue, 31 Dec 2024 05:30:37 GMT - Mon, 31 Mar 2025 06:30:13 GMT
Hash225230426f2d002a49ac56bd670fa497 02b813c21b5e39995b928f72f9aa5113103b5a45 212162ec7bca6c1bb353dde77a5d8db2e65564d56f11f5070f878d72cd68ac50
GET /v1/ip/geo.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bein-sharepoint.zonivarnoth.ru
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 18 Feb 2025 06:27:10 GMT
content-type: application/json
x-request-id: e6b23dcd966e79a3db9cf5381f787dae-ASH
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
geojs-backend: ash-01
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kaxd%2FZg3kTw1WSsrhzsrDDV0GRAKlS7l1t9TwklVtLwbXJ1cYjsjdbGEA%2FWV2HKEssQpKZGGFZuhdCe95dpoarTBEjxLA7HtrEVqtw7FLmFEg7MIs306ol9pQL%2BYuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 913bf3267bfab4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=632&min_rtt=526&rtt_var=207&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3189&recv_bytes=1141&delivery_rate=6188034&cwnd=251&unsent_bytes=0&cid=a697dc2ed18fbc4c&ts=127&x=0"
X-Firefox-Spdy: h2
|
|
| aadcdn.msauthimages.net/c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/illustration?ts=637108791396990847 | 23.36.77.249 | 200 OK | 457 B |
URL GET HTTP/2aadcdn.msauthimages.net/c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/illustration?ts=637108791396990847 IP 23.36.77.249:443
ASN#20940 Akamai International B.V.
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerMicrosoft Corporation Subjectidnaakamaicdn.msftauth.net FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File typePNG image data, 169 x 151, 8-bit/color RGB, non-interlaced Hash814dcb7a2b7019743a99914b505d1496 9c4c1883d38baaee3abf6ed0af911600a47ec9f6 3516b551cd306705e1586d95788cf24ef7904b94546a8c830e2b47ae8af6f700
GET /c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/illustration?ts=637108791396990847 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 457
content-type: image/*
content-md5: gU3LeitwGXQ6mZFLUF0Ulg==
last-modified: Mon, 02 Dec 2019 10:25:40 GMT
etag: 0x8D77711FACBD506
x-ms-request-id: 664674f4-701e-0044-5c37-6bf05e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=86354
date: Tue, 18 Feb 2025 06:27:11 GMT
x-content-type-options: nosniff
akamai-grn: 0.f54d2417.1739860031.c86abeb
X-Firefox-Spdy: h2
|
|
| aadcdn.msauthimages.net/c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/bannerlogo?ts=637108791408466259 | 23.36.77.249 | 200 OK | 5.7 kB |
URL GET HTTP/2aadcdn.msauthimages.net/c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/bannerlogo?ts=637108791408466259 IP 23.36.77.249:443
ASN#20940 Akamai International B.V.
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerMicrosoft Corporation Subjectidnaakamaicdn.msftauth.net FingerprintDC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC ValidityFri, 27 Dec 2024 18:21:36 GMT - Mon, 22 Dec 2025 18:21:36 GMT
File typePNG image data, 148 x 60, 8-bit/color RGB, non-interlaced Hash120575e24e114932bbad4c183f6fbd44 53235b738c50fdf78f00a4fb332b41b511e68f68 12d0d91b654a85c9f4275348aaabdbe041e20ce5029acf3caf883fdbf674ce0a
GET /c1c6b6c8-prrqda3cvr0qwmsbbsu6pvhj7kekgqff3i53ehz43uw/logintenantbranding/0/bannerlogo?ts=637108791408466259 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 5713
content-type: image/*
content-md5: EgV14k4RSTK7rUwYP2+9RA==
last-modified: Mon, 02 Dec 2019 10:25:41 GMT
etag: 0x8D77711FB60BED0
x-ms-request-id: 0bb4112b-301e-006a-7037-6b7099000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: public, max-age=86331
date: Tue, 18 Feb 2025 06:27:11 GMT
x-content-type-options: nosniff
akamai-grn: 0.f54d2417.1739860031.c86abed
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/34ah24M80I9waNjxyZl4kD8920 | 172.67.135.55 | 200 OK | 27 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/34ah24M80I9waNjxyZl4kD8920 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeASCII text, with very long lines (26765), with no line terminators Hash1a862a89d5633fac83d763886726740d e5ce3aa454c992a13fd406a9647d7afbf831051f 5c22fd904edb792331a7307ddf4a790e0d1318924f6d8e7362fa6b55d5ab6fbb
GET /34ah24M80I9waNjxyZl4kD8920 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="34ah24M80I9waNjxyZl4kD8920"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTRjfp%2F3WFavR0pvK0uAHL5Wyen7HwEav7HivE4vbZundon49Laap3oeqal%2FZTdsBSXQoblUVOHh10m3wI%2BiCKRT%2Bvdo2WoVDojDqWvxUj7cH0vOs3d6iadNjK%2BdcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 913bf31149a656c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4272&min_rtt=4245&rtt_var=1216&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2195&delivery_rate=660788&cwnd=122&unsent_bytes=0&cid=c40f8fa3e061a5a6&ts=146&x=0", cfL4;desc="?proto=QUIC&rtt=2298&min_rtt=608&rtt_var=2117&sent=373&recv=69&lost=0&retrans=1&sent_bytes=378136&recv_bytes=25811&delivery_rate=3545835&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8439&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/klBZ2fdO5fdk2jPW1vMqWOVTA85Y3rXSLzdMyzfOO0qqraFLSDX78170 | 172.67.135.55 | 200 OK | 7.4 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/klBZ2fdO5fdk2jPW1vMqWOVTA85Y3rXSLzdMyzfOO0qqraFLSDX78170 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeSVG Scalable Vector Graphics image Hashbca9b46fee32162356ba5b4783e614dc cc09ee862df9bf86e545f9dfdf2fbd4facfa71f5 fb48e7087def752683bc9a9fe4035acf2419cebbe8b17a16e5c81699a06f6fec
GET /klBZ2fdO5fdk2jPW1vMqWOVTA85Y3rXSLzdMyzfOO0qqraFLSDX78170 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/svg+xml
content-disposition: inline; filename="klBZ2fdO5fdk2jPW1vMqWOVTA85Y3rXSLzdMyzfOO0qqraFLSDX78170"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s1EhBcl00Y8UPzi%2FyuLf1gZhyb%2BnD2qSLVJZxQ2q%2FOx5ryRsxBMEPS6nPZcZuFpFaMYT6a%2BrokDgH%2Brz1Rf%2BsfvaaqgTuy6DbcD26muGd9tqzkhiHM5KGb7mkaDgFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf31179e456c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=7423&min_rtt=4886&rtt_var=3644&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2232&delivery_rate=582889&cwnd=194&unsent_bytes=0&cid=c3c5907adc7a056e&ts=146&x=0", cfL4;desc="?proto=QUIC&rtt=1459&min_rtt=608&rtt_var=1012&sent=394&recv=76&lost=0&retrans=1&sent_bytes=392493&recv_bytes=26126&delivery_rate=978322&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8503&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/abb4lnUhhopqzzef21 | 172.67.135.55 | 200 OK | 36 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/abb4lnUhhopqzzef21 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeASCII text, with CRLF line terminators Hash38501e3fbbbd89b56aa5ba35de1a32fe d9b31981b6f834e8480ba28fbc1cff1be772f589 a1ca6b381cb01968851c98512c6e7f6c5309a49f7a16b864813135cbff82a85b
GET /abb4lnUhhopqzzef21 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: text/css;charset=UTF-8
content-disposition: inline; filename="abb4lnUhhopqzzef21"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smBUcW%2FAGQJWqdTDMeSdVPZ%2BtOS2et8ZFViQFEksYrO7iCkCWiefKnDrr3Nx84Z%2B%2BPxLVFtxBZ%2BYsw1TMnL7H4fidv9rq8jgcyEblt1f0b7FO5XbmsdRlPuKpJlitQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=2,i=?0
server: cloudflare
cf-ray: 913bf31149ab56c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5360&min_rtt=5187&rtt_var=1802&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2187&delivery_rate=436274&cwnd=134&unsent_bytes=0&cid=611a05290d7c34c5&ts=150&x=0", cfL4;desc="?proto=QUIC&rtt=1726&min_rtt=608&rtt_var=1456&sent=386&recv=73&lost=0&retrans=1&sent_bytes=387314&recv_bytes=25991&delivery_rate=1947848&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8493&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css | 143.204.55.47 | 200 OK | 223 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css IP 143.204.55.47:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
Size223 kB (222931 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 14 May 2024 21:48:24 GMT
x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Wed, 29 Jan 2025 17:13:28 GMT
expires: Thu, 29 Jan 2026 17:13:28 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"0329c939fca7c78756b94fbcd95e322b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g8w8RX3uFesbG_vD6xfjwKzx7lq31S--4U-fxrruMVf03J_MWep9yw==
age: 1689219
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/rfUvwDiXCqRqwudeN0aaOl3fkf1L7eKQLgmSrHTWfv0t | 172.67.135.55 | 200 OK | 3.0 kB |
URL POST HTTP/3bein-sharepoint.zonivarnoth.ru/rfUvwDiXCqRqwudeN0aaOl3fkf1L7eKQLgmSrHTWfv0t IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3003), with no line terminators Hash5dda5db434121a6b11c0223359b361eb 81dab784ab46b141d414310d1ae139cac6338785 23f355631f3c954254969818bf6dfdad573e8f724f0181caee088c7020164019
POST /rfUvwDiXCqRqwudeN0aaOl3fkf1L7eKQLgmSrHTWfv0t HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 57
Origin: https://bein-sharepoint.zonivarnoth.ru
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:08 GMT
content-type: application/json
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jNLkPv1Sz9J7fLxWnPmV%2BKR21FX5LtEr4G7dkxt5m148WUIf9e2DXxpNL8N8iIE6CjtJQBKcPksBbT6RTr9iK0zwDxh%2FuXZYVjQQ77nalBJ8MT4bGbeQ%2F45SRuZCEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6Im12dFMvRjgzQjQvd24zVDFDeW5zcVE9PSIsInZhbHVlIjoiNE15Q2VHV2p4Q1dGMXVic1VRNmVOcGM3UEJTUldqdUZON280Zndkak1ZcmJFNTZUWVFZYjhkdHkxbWZSSEZBYzZrcFFFZ0RHWWNCa0xJNko3ZlU1NnJzTDVFelFYUS96YVZQZUFYemFDWmNSWlJnaUxqckxnM3dXWTR2Rkl6S3MiLCJtYWMiOiJiYTRiOWI5NTU1NzQ4MGE3ZDcyMTFkOTM5YjQwNzBhYWEyMTE5NDA1YTA0N2M2YzFjY2M4YjhmNjhjNmIyMTY5IiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:08 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IkhRcFBpNlJNYkFRanUxK215RDF2WVE9PSIsInZhbHVlIjoieXc3clVrUEZuRmlSUHVUZXVxbzFCNHJMNUovWmdJdlVoSXVkWXpXTWcrNVU3Z0h2RHZmbndxK3hqZUQvQXJHWGY5RTd2SmgvTStZMXBFajRGZEhzbWIrNGt6eEQ2N2NnL05zYkc4YTJ4RXo1NWg1Umt1dUh6cjVTWEVGRkZ3VDMiLCJtYWMiOiIzODRmZTVhNjVmOTNkZTdhMWFmM2JjZWMyOTZlMGI0ZDBhOWY4ZTY4NGM1NzAwNTRkYWEwOWMwOThiN2E1MTUxIiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf319bb5056c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4951&min_rtt=4908&rtt_var=1407&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2404&delivery_rate=573268&cwnd=135&unsent_bytes=0&cid=49c082eccdc9cceb&ts=152&x=0", cfL4;desc="?proto=QUIC&rtt=805&min_rtt=605&rtt_var=186&sent=959&recv=245&lost=0&retrans=1&sent_bytes=948294&recv_bytes=36686&delivery_rate=10408&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=9790&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/yzjWe9xX9EuBLgbg1CM8oXcbZdcjE1lUnVTZrsz1sw5EGO9ZyJjLHRU6qywo0URyEV90173 | 172.67.135.55 | 200 OK | 2.9 kB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/yzjWe9xX9EuBLgbg1CM8oXcbZdcjE1lUnVTZrsz1sw5EGO9ZyJjLHRU6qywo0URyEV90173 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeSVG Scalable Vector Graphics image Hashe924de0d471df54b6280f3dc8b187cb8 857f03226070b502a9e06b4249710ec10be4c9e9 24ce135a31ce83ac3d62471fcc0e1a82ce6f1533c993ee59ca4e110d5f2fae33
GET /yzjWe9xX9EuBLgbg1CM8oXcbZdcjE1lUnVTZrsz1sw5EGO9ZyJjLHRU6qywo0URyEV90173 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/svg+xml
content-disposition: inline; filename="yzjWe9xX9EuBLgbg1CM8oXcbZdcjE1lUnVTZrsz1sw5EGO9ZyJjLHRU6qywo0URyEV90173"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ldfzzSD3jI87Fzz0IvasZEZcsXEfFHAYXy1MM2PnUutXorJieqVajVpA9PVfeekzTpYIoIclXXQkA94k6mILtzDNqVB1URnhMCP%2BSyU%2FebA7VONQd5MWlXq%2BGDDndQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf31179e756c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4871&min_rtt=4868&rtt_var=1832&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2247&delivery_rate=581937&cwnd=32&unsent_bytes=0&cid=fa4308009c9a260e&ts=148&x=0", cfL4;desc="?proto=QUIC&rtt=1297&min_rtt=608&rtt_var=847&sent=399&recv=78&lost=0&retrans=1&sent_bytes=397371&recv_bytes=26216&delivery_rate=1375315&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8516&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css | 143.204.55.47 | 200 OK | 10 kB |
URL GET HTTP/2ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css IP 143.204.55.47:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerDigiCert Inc Subject*.oktacdn.com Fingerprint3E:D7:C7:A6:35:70:74:E4:BF:45:2E:A1:D5:A3:25:88:24:76:B3:B5 ValidityMon, 02 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT
File typeASCII text, with very long lines (10450) Hashe0d37a504604ef874bad26435d62011f 4301f0d2b729ae22adece657d79eccaa25f429b1 c39ff65e2a102e644eb0bf2e31d2bad3d18f7afb25b3b9ba7a4d46263a711179
GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1
Host: ok4static.oktacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Thu, 14 Mar 2024 00:03:58 GMT
x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1
strict-transport-security: max-age=315360000; includeSubDomains
access-control-allow-origin: *
content-encoding: gzip
date: Fri, 31 Jan 2025 02:19:39 GMT
expires: Sat, 31 Jan 2026 02:19:39 GMT
cache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400
etag: W/"e0d37a504604ef874bad26435d62011f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WBLIcn1CCcn7Kgd3XRnOL0ph5Gld4Yu3ZAL26b935msO5m12C4YZ-w==
age: 1570048
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/mn7Ao6bCvW0eA8ZqgjFwAbvuvWTtaA0NnwhL590150 | 172.67.135.55 | 200 OK | 270 B |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/mn7Ao6bCvW0eA8ZqgjFwAbvuvWTtaA0NnwhL590150 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeSVG Scalable Vector Graphics image Hash0c09c5ea7c28d6feb4d124957dde0a0d 1b9efde2d8f0e2a3d9d5315117e597c2d622fc5e b3c39d2c15327b7ae68940502a2d7bf457fe521e075e6e671d0340edc58bcb3a
GET /mn7Ao6bCvW0eA8ZqgjFwAbvuvWTtaA0NnwhL590150 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/svg+xml
content-disposition: inline; filename="mn7Ao6bCvW0eA8ZqgjFwAbvuvWTtaA0NnwhL590150"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1OXAG2C2KuZ0UOxXhr2NS8JPLVW0oMZz%2BSpWBIlwp8bC4P4cFEoQbA3yfKe5ruJBj2u24jiCKEyxLNRLzGsF2xeG5cPquOLF40om4s0Yyw1RZCTLVv5GjvydcN4l6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf31159cc56c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6136&min_rtt=5889&rtt_var=2125&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2218&delivery_rate=379328&cwnd=150&unsent_bytes=0&cid=389169121a59e32d&ts=143&x=0", cfL4;desc="?proto=QUIC&rtt=1536&min_rtt=608&rtt_var=1141&sent=392&recv=75&lost=0&retrans=1&sent_bytes=391433&recv_bytes=26081&delivery_rate=1305896&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8495&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/34LZSq5SI8Sbl4pda4C7OdHAijgtU0bGUarb9aIhP67110 | 172.67.135.55 | 200 OK | 4.8 MB |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/34LZSq5SI8Sbl4pda4C7OdHAijgtU0bGUarb9aIhP67110 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
Size4.8 MB (4756466 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /34LZSq5SI8Sbl4pda4C7OdHAijgtU0bGUarb9aIhP67110 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: application/javascript
content-disposition: inline; filename="34LZSq5SI8Sbl4pda4C7OdHAijgtU0bGUarb9aIhP67110"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nN%2FHueDz9HA9C0Yna%2Fw1oyAY0%2BETfK%2Fpd3aIvY2eIvSBmAEQHAThoexSmEsIMtOLHQlMn%2F5GFUKF454NMNcT5B2rsgqoLV0L1kgMdyjuFLnthCPVYDiBrqoAkf2FYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=3,i=?0
server: cloudflare
cf-ray: 913bf311ca6c56c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4661&min_rtt=4463&rtt_var=2071&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2186&delivery_rate=470588&cwnd=54&unsent_bytes=0&cid=a499e59581bad4fb&ts=147&x=0", cfL4;desc="?proto=QUIC&rtt=956&min_rtt=608&rtt_var=328&sent=431&recv=87&lost=0&retrans=1&sent_bytes=425290&recv_bytes=26623&delivery_rate=352697&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8570&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sttjvmfhueslc7wsktodww7ifqjqok6pdzti61fhngxjy5ynqee71ktk91a.bbjcgw.ru/xsnphvuirwyczormhwrszSQBKgLfYVCEPMEIQHEOTOIYWISXCDLDBEHNAJINFLMSZBSFAFBCBGrshGkf24qtlSaiKThF12A37CfINuv40 | 188.114.96.1 | 200 OK | 832 B |
URL POST HTTP/2sttjvmfhueslc7wsktodww7ifqjqok6pdzti61fhngxjy5ynqee71ktk91a.bbjcgw.ru/xsnphvuirwyczormhwrszSQBKgLfYVCEPMEIQHEOTOIYWISXCDLDBEHNAJINFLMSZBSFAFBCBGrshGkf24qtlSaiKThF12A37CfINuv40 IP 188.114.96.1:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectbbjcgw.ru FingerprintF2:4F:BB:09:C1:D5:54:A2:D2:57:11:2B:C0:F6:A4:B7:51:46:48:F4 ValidityTue, 11 Feb 2025 18:23:51 GMT - Mon, 12 May 2025 19:21:35 GMT
File typeASCII text, with very long lines (832), with no line terminators Hashd7885991ddaa4f5a529ea934eac80889 aec17005b3c070c2fa6d8271f736832853c05677 fa19e70cbfd339c71142b2f7bba7e8f621364cd605a7e33caf1dbc4dd00111f8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /xsnphvuirwyczormhwrszSQBKgLfYVCEPMEIQHEOTOIYWISXCDLDBEHNAJINFLMSZBSFAFBCBGrshGkf24qtlSaiKThF12A37CfINuv40 HTTP/1.1
Host: sttjvmfhueslc7wsktodww7ifqjqok6pdzti61fhngxjy5ynqee71ktk91a.bbjcgw.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 101
Origin: https://bein-sharepoint.zonivarnoth.ru
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 18 Feb 2025 06:27:11 GMT
content-type: text/plain; charset=utf-8
vary: Origin
access-control-allow-origin: https://bein-sharepoint.zonivarnoth.ru
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FdgvHN4UoFb8yfSo%2BfMnghaKY5GEwu9H2YcTZcjhhpQA4eBq7NfRwoqA9zy9FM%2FE60XRG4RajC%2BLjq%2Bkqm0XZ6ZKLEwymgvW%2FjC7YVhTad%2Bcbpj%2FqQ913AC%2BphpVaJ%2Bt5eB%2BMcNmUjjAIMrhEaiZbjENFuBLpaFb1ZYmzQuquWt7iyQ95TMww7xRGGbSEvSrD1ed%2BkfF5rY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 913bf327f927b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=554&min_rtt=493&rtt_var=125&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3269&recv_bytes=1584&delivery_rate=6581818&cwnd=254&unsent_bytes=0&cid=da8d0305ff989b83&ts=1014&x=0"
X-Firefox-Spdy: h2
|
|
| bein-sharepoint.zonivarnoth.ru/favicon.ico | 172.67.135.55 | 404 Not Found | 0 B |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/favicon.ico IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6Im12dFMvRjgzQjQvd24zVDFDeW5zcVE9PSIsInZhbHVlIjoiNE15Q2VHV2p4Q1dGMXVic1VRNmVOcGM3UEJTUldqdUZON280Zndkak1ZcmJFNTZUWVFZYjhkdHkxbWZSSEZBYzZrcFFFZ0RHWWNCa0xJNko3ZlU1NnJzTDVFelFYUS96YVZQZUFYemFDWmNSWlJnaUxqckxnM3dXWTR2Rkl6S3MiLCJtYWMiOiJiYTRiOWI5NTU1NzQ4MGE3ZDcyMTFkOTM5YjQwNzBhYWEyMTE5NDA1YTA0N2M2YzFjY2M4YjhmNjhjNmIyMTY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhRcFBpNlJNYkFRanUxK215RDF2WVE9PSIsInZhbHVlIjoieXc3clVrUEZuRmlSUHVUZXVxbzFCNHJMNUovWmdJdlVoSXVkWXpXTWcrNVU3Z0h2RHZmbndxK3hqZUQvQXJHWGY5RTd2SmgvTStZMXBFajRGZEhzbWIrNGt6eEQ2N2NnL05zYkc4YTJ4RXo1NWg1Umt1dUh6cjVTWEVGRkZ3VDMiLCJtYWMiOiIzODRmZTVhNjVmOTNkZTdhMWFmM2JjZWMyOTZlMGI0ZDBhOWY4ZTY4NGM1NzAwNTRkYWEwOWMwOThiN2E1MTUxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 18 Feb 2025 06:27:08 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
age: 523
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y26jt8uE5nl%2BpfL7KbmJlYkiSg4OY1lz1Q6SavOosKZTO7%2BQN5TFeMsodJhopyhsS1VD0MWfWZ5kFndfteLBcw0zsoQGo0Qh1s3jyy37kjT9jgYHBeggKtiLbpfT8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
priority: u=6,i=?0
server: cloudflare
cf-ray: 913bf31cdefa56c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5484&min_rtt=5427&rtt_var=1559&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2128&delivery_rate=518195&cwnd=139&unsent_bytes=0&cid=38002c4390a6a494&ts=19&x=0", cfL4;desc="?proto=QUIC&rtt=846&min_rtt=605&rtt_var=178&sent=968&recv=248&lost=0&retrans=1&sent_bytes=952955&recv_bytes=37721&delivery_rate=860468&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=10083&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT | 172.67.135.55 | 200 OK | 290 kB |
URL User Request GET HTTP/3bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT IP 172.67.135.55:443
CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
Size290 kB (289546 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/ITb4aThU/
Cookie: XSRF-TOKEN=eyJpdiI6InM4YStjZnZlT0YxQ1BnbVI2ZGUwY3c9PSIsInZhbHVlIjoiM1pIOFZFSGFUaU01QWdrTTRrMW5OM3AxcmQwUkZWT3poblMwNWF1TThqcU9MVURjME4yaWxBbWFzdklCT3hLNnUwUUdrWmE1ZGR1QU1yNDZXZElHSGU0SFJzcmp3KzRaMWFNQzJYRlFBeHdkUWVmc0MrM1RGdU1TQ2RKUmw1YXMiLCJtYWMiOiJkY2I3NzBhZTYyZTM1NzMwMmNlMDMzY2JiMjQ1YjA3ODI5OTdjN2U0NGU1ZmE3MzUxOWVhMjQ4NjFhZThkZDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImV6WHV0U09rY25VZ1lIdGw2RlEyT0E9PSIsInZhbHVlIjoicXNzdm1Gdldtc2NGZ1hURTgvQnhvV2syNGxwclJ5UXZJRlZINVRQSG1zTTZSVFVlRUxmRkRXRmVPSDdOV3J6dGZuMmRRSytQVitBZVV3RFFBVEwxdENDNXE0a1RuU3JTazdjZTRTYVBUMndHbzl5Z0RVMzVyOUhEUG9aNkJwRVIiLCJtYWMiOiI1NzU0ODIwYzQxZDNmODkwODExOWY1MWM4NmI3ZDJlMGFmMzA3YTU4ZjgxNmE3ZTliNzA3OThlZDk5NzFiZDZmIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:06 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzpP%2F9GObdrpg2RQyALgg3gjzmXHMb%2BMR4ARYwr8QmvRxwJfXgPniiblBlOnnKay7UXWUKmNJBEhGpmOufMqNJ1PD0FFnyWaDDkNHhVYlRAKxOAQLfCxrpVmKDpGRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:06 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 08:27:06 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
priority: u=1,i=?0
server: cloudflare
cf-ray: 913bf30e4e6356c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4962&min_rtt=4927&rtt_var=1423&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2279&delivery_rate=563625&cwnd=125&unsent_bytes=0&cid=146a42f536a1a270&ts=220&x=0", cfL4;desc="?proto=QUIC&rtt=2782&min_rtt=1138&rtt_var=1565&sent=38&recv=22&lost=0&retrans=0&sent_bytes=19770&recv_bytes=7073&delivery_rate=1165194&cwnd=12000&unsent_bytes=0&cid=290f2b1240acd13d&ts=8032&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bein-sharepoint.zonivarnoth.ru/rsfdMFHnZlaRn0iYTcRKzRwm5o0bzLctlIhngh1ke7xZbHWnZdRIxu7cd195 | 172.67.135.55 | 200 OK | 268 B |
URL GET HTTP/3bein-sharepoint.zonivarnoth.ru/rsfdMFHnZlaRn0iYTcRKzRwm5o0bzLctlIhngh1ke7xZbHWnZdRIxu7cd195 IP 172.67.135.55:443
Requested byhttps://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT CertificateIssuerGoogle Trust Services Subjectzonivarnoth.ru Fingerprint1C:AB:E6:4B:F3:AD:E9:23:E4:A4:81:62:B5:0C:A5:B6:90:1C:35:8B ValiditySun, 16 Feb 2025 23:04:35 GMT - Sun, 18 May 2025 00:01:57 GMT
File typeSVG Scalable Vector Graphics image Hash1318aafc1fb9ded0c623e5b9a557e6df 0917cdd7633cd1642b02b2b785416ec7e5106dcc d86660a84daa211b121ec9fe0df83d6b945f61b888384391eabc7d6b4e941dc4
GET /rsfdMFHnZlaRn0iYTcRKzRwm5o0bzLctlIhngh1ke7xZbHWnZdRIxu7cd195 HTTP/1.1
Host: bein-sharepoint.zonivarnoth.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bein-sharepoint.zonivarnoth.ru/jsmdxxjecxbvrjuccvtzkeeh6hffiwqzyrutg6anuss?WVJCKDZVHAZMGTAWOCDATJT
Cookie: XSRF-TOKEN=eyJpdiI6InVyWjQ1dTQ1ZzBWN3RnVmQvZFdGc2c9PSIsInZhbHVlIjoidnM1WTB5Q2poVXZaNGQrVURTWmk4RmVETVErUU1WYUVkSkhnajVMaVlIMnZCVHdoM0hHVDVCVXp2NGdMMWR1VUdSQ013ZDQvZWZMZ2JOeU9VdWQxMUtJUWpSZEZCY0I1bDBVM3p4RGE1NjJVYTBuSFdNSGw3MmNKRGpqZ01zVGMiLCJtYWMiOiI1Yjc3OTlkZWFjNzNkOWNlNTQyYTM2OWY0NDMzNjcwZGIwYTNiNjA0OWRhYThlNWJhMWJhZGIwZjEzOTVjMzA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlN3TWJXK3d6dnN2TU1EekZmWTdtWnc9PSIsInZhbHVlIjoidTh6bkwzRnc4VGsrODIyMVFGeTJ1YU9nVG0zVWZDYlQ0L3hCSjFHK2xIWGFJQjJrWDNwaHpjek1FTUZiemw3cFM5cEcvdDh6RWJTY3hGbDcxSjI3Uzc1Rk0zcHgrQ3NsOUNETXl0RWIvc1NJNG1TTEVaTVpFQXlUVHlUaFJ5T08iLCJtYWMiOiIwYWI2NmZlNmM0NDE2YzJiZDQwY2I4NjAwNzIxMTU0YjdkNzc1ODMyNjViNzQ4OTc5ZTNiOGRmMzQ2YzM4ZmZjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 18 Feb 2025 06:27:07 GMT
content-type: image/svg+xml
content-disposition: inline; filename="rsfdMFHnZlaRn0iYTcRKzRwm5o0bzLctlIhngh1ke7xZbHWnZdRIxu7cd195"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ineQPCaEM%2Bn%2F1Ba9igIqpFuWcbvcEuVNdcrShGRUmXrKU%2BEf5PnU3fDc%2FL9lhlV60gLsF1LnQtY4ejEhQwh52%2BSLNw2OxmYOI10jbRUmnEZCdcKRuzBGpOMhLZi2Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
priority: u=4,i=?0
server: cloudflare
cf-ray: 913bf311aa5256c5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4719&min_rtt=4554&rtt_var=1609&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2236&delivery_rate=487004&cwnd=83&unsent_bytes=0&cid=a02b4d7d71fcd1c7&ts=142&x=0", cfL4;desc="?proto=QUIC&rtt=1179&min_rtt=608&rtt_var=542&sent=412&recv=81&lost=0&retrans=1&sent_bytes=410252&recv_bytes=26351&delivery_rate=4210730&cwnd=126300&unsent_bytes=0&cid=290f2b1240acd13d&ts=8534&x=1", cfExtPri, cfHdrFlush;dur=0
|
|