Overview

URL blogozdorovie.ru/yantarnay-kislota/
IP87.236.19.90
ASNAS25519 ZAO Maestro Telecom
Location Russian Federation
Report completed2017-07-24 18:30:08 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-07-24 18:29:41 CEST 1 Client IP  88.99.100.197 ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 7 reports on IP: 87.236.19.90

Date UQ / IDS / BL URL IP
2018-12-06 16:35:46 +0100
0 - 0 - 0 omontazhe.ru 87.236.19.90
2018-11-30 14:46:42 +0100
0 - 0 - 0 www.forumesoterica.ru/dfuyiudfyf/ 87.236.19.90
2018-09-26 21:54:03 +0200
0 - 1 - 0 lkzenfze.beget.tech/ameli.comptreameli.com/d2 (...) 87.236.19.90
2018-07-12 14:46:52 +0200
0 - 1 - 1 il2-sturmovik.ru/content/files/joytester2.exe 87.236.19.90
2017-10-28 00:47:04 +0200
0 - 0 - 1 kofe-remont39.ru/ 87.236.19.90
2017-10-12 01:13:06 +0200
0 - 1 - 0 multipurpose.pro/hwid.exe 87.236.19.90
2017-07-02 00:35:21 +0200
0 - 0 - 1 wf-team.ru/radar/name.txt 87.236.19.90

Last 10 reports on ASN: AS25519 ZAO Maestro Telecom

Date UQ / IDS / BL URL IP
2018-12-12 21:59:36 +0100
0 - 0 - 150 www.almarina.ru/ 87.236.16.226
2018-12-12 21:28:48 +0100
0 - 0 - 1 stidigital.ru/ 87.236.16.56
2018-12-12 20:53:46 +0100
0 - 0 - 2 motor.b-tuning.ru/includes/dhytd/adminsecure.htm 87.236.16.219
2018-12-12 17:44:19 +0100
0 - 0 - 1 www.bpz31.ru/798907647502-35I83491682693695383.zip 87.236.19.172
2018-12-12 17:44:04 +0100
0 - 2 - 2 www.balkonnyy.ru/pbTcGIYfgxdDv2V/SEP/Service- (...) 87.236.19.206
2018-12-12 17:22:16 +0100
0 - 0 - 0 stidigital.ru/INVOICE/FILE/En/5-Past-Due-Invoices 87.236.16.56
2018-12-12 16:56:01 +0100
0 - 1 - 2 web-bots.ml/config.exe 87.236.19.64
2018-12-12 16:46:57 +0100
0 - 0 - 7 360vision.ru/ 87.236.19.214
2018-12-12 16:16:00 +0100
2 - 0 - 2 anapameteora.ru/zuahsaj/Ourtime/ourtime.php 87.236.16.215
2018-12-12 15:44:25 +0100
0 - 0 - 1 www.bpz31.ru/798907647502-35I83491682693695383.zip 87.236.19.172

No other reports on domain: .



JavaScript

Executed Scripts (47)


Executed Evals (0)


Executed Writes (6)

#1 JavaScript::Write (size: 313, repeated: 1) - SHA256: 6041f6217a17e79d9760ef5f91bc44a7cbfd95431a426b191d17e3100ab9da2f

                                        < a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t14.2;r;s1176*885*24;uhttp%3A//blogozdorovie.ru/yantarnay-kislota/;0.5493458956480307'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'
border = '0'
width = '88'
height = '31' > < /a>
                                    

#2 JavaScript::Write (size: 104, repeated: 1) - SHA256: b3b60135af7ebc2e1fa1986e69684af8ae3f2435baf92f1035bbab7cd16b22f8

                                        < script language = "javascript"
type = "text/javascript"
src = "http://ad.leader.su/output/index/39" > < /script>
                                    

#3 JavaScript::Write (size: 104, repeated: 1) - SHA256: 9d75520763490a5d0ea9d89c4ae1f7acef0388b2825df931b689ec2f254890c5

                                        < script language = "javascript"
type = "text/javascript"
src = "http://ad.leader.su/output/index/40" > < /script>
                                    

#4 JavaScript::Write (size: 104, repeated: 1) - SHA256: 043242a0ff92396267c984331722ccadea71fcafcd354b6c2028d46c7a7fc8b1

                                        < script language = "javascript"
type = "text/javascript"
src = "http://ad.leader.su/output/index/41" > < /script>
                                    

#5 JavaScript::Write (size: 104, repeated: 1) - SHA256: 0d330a001f88f982aa9800eec3b8e9fc4ee050ef9719d6a3bdc80067e06be45e

                                        < script language = "javascript"
type = "text/javascript"
src = "http://ad.leader.su/output/index/42" > < /script>
                                    

#6 JavaScript::Write (size: 104, repeated: 1) - SHA256: f105e8bdf9ae3be56a93f376a5a268d6dcedc1493c652fa7075a5c0847ff1792

                                        < script language = "javascript"
type = "text/javascript"
src = "http://ad.leader.su/output/index/43" > < /script>
                                    


HTTP Transactions (89)


Request Response
                                        
                                            GET /yantarnay-kislota/ HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.5
X-Hyper-Cache: continue - no file
X-Pingback: http://blogozdorovie.ru/xmlrpc.php
Link: <http://blogozdorovie.ru/wp-json/>; rel="https://api.w.org/", <http://blogozdorovie.ru/?p=2083>; rel=shortlink
Cache-Control: max-age=43200
Expires: Tue, 25 Jul 2017 04:29:32 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14730
Md5:    9a8015dd3f727d791333623951d5bf02
Sha1:   6aae5263559f30067f2a1675226fef24daf74bb2
Sha256: ae4628bba93494e8a4e4b0ce1e62c05860ee5658979519911891b9713b56772f
                                        
                                            GET /wp-content/themes/thehealth-codebase/style.css HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Fri, 09 Jun 2017 13:03:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"593a9cbd-c40c"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10723
Md5:    5da17903a3a5ffc1241554d3fb0ed5cd
Sha1:   e8f54a12ab6aa1cf411f62d60edf023984aa5002
Sha256: 3b22542c02d5352cb4d8b82cc7c2e9143ec000f48aeec199a166814372d2ab19
                                        
                                            GET /css?family=Source+Sans+Pro:400,600,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Mon, 24 Jul 2017 16:29:33 GMT
Date: Mon, 24 Jul 2017 16:29:33 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   323
Md5:    af61a5f1829eb20f66eb8e5e2e75bc03
Sha1:   20ceeede5efbcb3cdc3835e7bcbce73257a9e651
Sha256: 01cedf482c0bcfcfa4cc8f2ffd9256e0b7227eada7fe84eea64a9eb04562b48e
                                        
                                            GET /wp-content/themes/thehealth-codebase/responsive.css HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Wed, 07 Jun 2017 07:39:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"5937ad9e-efe"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1142
Md5:    9cc19f37f03170e4c88f9a00211b2c08
Sha1:   24274c1f35654cf4872a1dac9737046f32b7a451
Sha256: c82f8aec773aae6b5a50bf570703ab5bb0973792998fed5588f3d5c1752b2ac1
                                        
                                            GET /wp-content/themes/thehealth-codebase/js/comment-reply.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba44-3bd"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   401
Md5:    202394e46ce07de00ecb6577f43b504f
Sha1:   b2a65fb48fb152e0f99d2e01033c2369c0469c8f
Sha256: 611d761a91cb012891714b2da9ef9ecf48b88306c9077ff59875e1fbbcab470f
                                        
                                            GET /wp-content/uploads/2014/11/yantarnay-kislota.jpg HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Content-Length: 7923
Last-Modified: Sun, 28 May 2017 11:53:41 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba45-1ef3"
Expires: Wed, 23 Aug 2017 16:29:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7923
Md5:    8efd73178c7fdd988629914b0390734a
Sha1:   6fef9c9d44f07bd8471c8cd46a977e374ddd991d
Sha256: acf114a4df4117ada31ae66f045189748480cbef716763e6ddccf060efe872b7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Content-Length: 4286
Last-Modified: Sun, 28 May 2017 11:53:35 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba3f-10be"
Expires: Wed, 23 Aug 2017 16:29:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   4286
Md5:    bf6dbc7a0c5cb1d2de338ae3d0cfc770
Sha1:   418c2f4966f684ed5fb5891f2d7cb0d4ee437821
Sha256: 12e091308d78f3a01b54346779dda0f14ba3d0065bda10b4d6271acd8b2514d1
                                        
                                            GET /yantarnay-kislota/ HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: redirect_to_cookie_reload=; redirect_to_cookie_width=1176; redirect_to_cookie_date=24.7.2017; redirect_to_cookie_time=18:29
Cache-Control: max-age=0

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.5
X-Hyper-Cache: continue - no file
X-Pingback: http://blogozdorovie.ru/xmlrpc.php
Link: <http://blogozdorovie.ru/wp-json/>; rel="https://api.w.org/", <http://blogozdorovie.ru/?p=2083>; rel=shortlink
Cache-Control: max-age=43200
Expires: Tue, 25 Jul 2017 04:29:33 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14522
Md5:    21562272266a0ffa6fe5aaeea524b48c
Sha1:   a0d0d64131f68f4a06bda0d53fae1419072885b5
Sha256: 36ef69089730fa80a1ee5a3adcff34098793dd5a7ef2eeaf10e6e417acfc0801
                                        
                                            GET /wp-content/themes/thehealth-codebase/style.css HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Fri, 09 Jun 2017 13:03:57 GMT
If-None-Match: W/"593a9cbd-c40c"
Cache-Control: max-age=0

                                         
                                         87.236.19.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Fri, 09 Jun 2017 13:03:57 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "593a9cbd-c40c"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800


--- Additional Info ---
                                        
                                            GET /wp-content/themes/thehealth-codebase/responsive.css HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Wed, 07 Jun 2017 07:39:10 GMT
If-None-Match: W/"5937ad9e-efe"
Cache-Control: max-age=0

                                         
                                         87.236.19.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Wed, 07 Jun 2017 07:39:10 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "5937ad9e-efe"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800


--- Additional Info ---
                                        
                                            GET /css?family=Source+Sans+Pro:400,600,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cache-Control: max-age=0

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Mon, 24 Jul 2017 16:29:33 GMT
Date: Mon, 24 Jul 2017 16:29:33 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   323
Md5:    af61a5f1829eb20f66eb8e5e2e75bc03
Sha1:   20ceeede5efbcb3cdc3835e7bcbce73257a9e651
Sha256: 01cedf482c0bcfcfa4cc8f2ffd9256e0b7227eada7fe84eea64a9eb04562b48e
                                        
                                            GET /wp-content/themes/thehealth-codebase/js/comment-reply.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba44-3bd"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   401
Md5:    202394e46ce07de00ecb6577f43b504f
Sha1:   b2a65fb48fb152e0f99d2e01033c2369c0469c8f
Sha256: 611d761a91cb012891714b2da9ef9ecf48b88306c9077ff59875e1fbbcab470f
                                        
                                            GET /wp-content/themes/thehealth-codebase/js/superfish.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Wed, 31 May 2017 11:39:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592eab7f-ad0"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1145
Md5:    d1ba1a38da0b340fe69f1ebb7a970112
Sha1:   68b210811e03a57a9fe56915aac1a5a6d7a1cec6
Sha256: ebd0c779a5c080387355412d0031ee85b1e93f10bc85062294ff4e292cc4902f
                                        
                                            GET /wp-content/themes/thehealth-codebase/js/js.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Wed, 31 May 2017 11:39:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592eab57-738"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   720
Md5:    3c0c9f725842d671d3e04336f13b0014
Sha1:   c63c716ed64b26123309119cfd0f5ab66e3fbacb
Sha256: 1d75652b740807300f63a831ea65c25070870cb8bcb6d39eaa84fe4f4450f392
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba46-576"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    7542039ce963ffd18ad4fb7be13bd2be
Sha1:   8385e433e8e65739fc27b6bd16b1a7ae71b11084
Sha256: a70bca1336a4ac7592ce631cbb22c9ebb01d60461d221ac7a46f91a4ccfd1255
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba46-2748"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
                                        
                                            GET /wp-content/themes/thehealth-codebase/js/jquery.flexslider-min.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba44-3ffd"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5091
Md5:    c8e3cc89d7863babed6cc6799147370e
Sha1:   49018f6cf973ace86789416b2f3c1692047fe60a
Sha256: b8fd1ae59c61b2b015e786a1d029b679d0b23a0370c4cc845efad886a012852a
                                        
                                            GET /es5-shims/0.0.2/es5-shims.min.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         178.154.131.217
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Fri, 06 Nov 2015 18:07:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"563cec71-a8f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1143
Md5:    65e4aaf1b9260978cc53a3274c14372d
Sha1:   1fd79c59587fecfeade23d58bac297249c9161e2
Sha256: 577aebfb0c09b2f076da8005cedaaeabecd31e6c9ab510b58eac639c9981bf83
                                        
                                            GET /share2/share.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         178.154.131.217
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Mon, 05 Jun 2017 13:53:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5935626c-15ae7"
Expires: Thu, 27 Jul 2017 16:29:33 GMT
Cache-Control: max-age=259200, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28278
Md5:    1869fc51efba127625321a773d41fa26
Sha1:   ea2944172a16cc3f281354bf48b687210805a3c2
Sha256: 4d410b8023a82543a2329da5d4ece2b30000a3f753b007e58661855b19b37684
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba46-17ba0"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33799
Md5:    252047cc64c4b1980fafe6abca669f06
Sha1:   912b757d6d268e5e94f09581c5dec4d72c64b219
Sha256: 1045d98023671ce42bbcb900f609fe49c335479963cdfab1f1824f1db18892dc
                                        
                                            GET /wp-content/uploads/2016/06/polza-i-vred-kalmarov.jpg HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:34 GMT
Content-Length: 12721
Last-Modified: Sun, 28 May 2017 11:53:41 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba45-31b1"
Expires: Wed, 23 Aug 2017 16:29:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   12721
Md5:    65fba43c1df4347bb318aa59c19dd626
Sha1:   cbbd1410cc4d0d851d907a38a1a1c12cedd97608
Sha256: 2fbdfa3cd7fa60ff878962752ccffa521fdc6016d180da496b38b720927a3864
                                        
                                            GET /wp-content/uploads/2016/04/arahisovaya-pasta-polza-i-vred.jpg HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:34 GMT
Content-Length: 10057
Last-Modified: Sun, 28 May 2017 11:53:41 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba45-2749"
Expires: Wed, 23 Aug 2017 16:29:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10057
Md5:    eeac8c486c2c792d4d6ae6b41e8e9c1d
Sha1:   de0fac363430ebb6de6692d246a46c83733aa2a9
Sha256: e96bdc827e524bc58c61d1d694a16b2b93418475090f3f3e872989bd412d8492
                                        
                                            GET /wp-content/uploads/2016/04/kak-pravilno-pitatsya-za-1000-rubley-v-mesyats.jpg HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:34 GMT
Content-Length: 9749
Last-Modified: Sun, 28 May 2017 11:53:41 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba45-2615"
Expires: Wed, 23 Aug 2017 16:29:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9749
Md5:    655dc280520cc7e9ac54d809cabbee26
Sha1:   7d9d207a7132a4dd6c606e63f1ed3ef19767111e
Sha256: 7537e53c740ae21b8b5d2b9843e8167cad2c30a975e633e2da3d79d3913de0bb
                                        
                                            GET /wp-content/themes/thehealth-codebase/images/bg-submit.png HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/wp-content/themes/thehealth-codebase/style.css

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:34 GMT
Content-Length: 224
Last-Modified: Tue, 30 May 2017 15:11:27 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592d8b9f-e0"
Expires: Wed, 23 Aug 2017 16:29:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 30 x 21, 8-bit colormap, non-interlaced
Size:   224
Md5:    f90c605193526839882dddf6d153bbce
Sha1:   ff352deffc426fbbe742e1d49f65861531ee6183
Sha256: c584b35cf5aa2be87ad9403bd768eb9d3a3b62b5eadcb5227a44a171db558df8
                                        
                                            GET /system/context.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:41:03 GMT
Etag: W/"5975f8ef-1be5"
Expires: Mon, 24 Jul 2017 17:29:34 GMT
Cache-Control: max-age=3600, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2554
Md5:    ad8a0e4b234c75c544352e437c5240e7
Sha1:   c5345d25dd3327495577d6a42bbcb0f96ffd3cd7
Sha256: c39b0a15074d287ec1f5ab3e202cc2d4644a6e9b4b19cbe3f7c55b626cf30ae9
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.7.5 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:34 GMT
Last-Modified: Sun, 28 May 2017 11:53:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba46-2c96"
Expires: Mon, 31 Jul 2017 16:29:34 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4230
Md5:    57124a0ca8620881a851e1796606c856
Sha1:   258d1c2ce66baec5b927edc91c4fc2f587406b4c
Sha256: a44cfc903daf41f88c0b6c034d7b99b0978ce4e8a38611984d99f9e58ed65458
                                        
                                            GET /system/context.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Mon, 24 Jul 2017 13:41:03 GMT
If-None-Match: W/"5975f8ef-1be5"
Cache-Control: max-age=0

                                         
                                         213.180.193.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:34 GMT
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:41:03 GMT
Etag: "5975f8ef-1be5"
Expires: Mon, 24 Jul 2017 17:29:34 GMT
Cache-Control: max-age=3600, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2014/11/yantarnay-kislota.jpg HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Content-Length: 7923
Last-Modified: Sun, 28 May 2017 11:53:41 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592aba45-1ef3"
Expires: Wed, 23 Aug 2017 16:29:33 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7923
Md5:    8efd73178c7fdd988629914b0390734a
Sha1:   6fef9c9d44f07bd8471c8cd46a977e374ddd991d
Sha256: acf114a4df4117ada31ae66f045189748480cbef716763e6ddccf060efe872b7
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.16.28.216
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 24 Jul 2017 16:29:34 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d088351d9e0e8afec9dd59cd2e0a0f3021500913774; expires=Tue, 24-Jul-18 16:29:34 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Mon, 24 Jul 2017 13:56:37 GMT
Expires: Fri, 28 Jul 2017 13:56:37 GMT
Etag: "0ba2cc9089e5c72c7899adcb4feb378010c32063"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3838425423a086a3-ARN


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    5f5acae9bd46cc1e47f0a5fd2bba58bb
Sha1:   0ba2cc9089e5c72c7899adcb4feb378010c32063
Sha256: e588fae8a5d4b7c56608bb71b6cc261b1732c0f1fd440d98fd7db0a096459cfb
                                        
                                            GET /resource/context_static_r_2385.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:20:51 GMT
Etag: W/"5975f433-8cc87"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   127828
Md5:    24cba7a00aa5d66bcd2811a29b990399
Sha1:   80f953b86e42b456d67bb9b03c14be3de8aabded
Sha256: f6dfc5fd575d7764108d537f5a43e0235b27c57688c6a90a10114600cb8bd63a
                                        
                                            GET /resource/context_static_r_2385.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Mon, 24 Jul 2017 13:20:51 GMT
If-None-Match: W/"5975f433-8cc87"
Cache-Control: max-age=0

                                         
                                         213.180.193.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:35 GMT
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:20:51 GMT
Etag: "5975f433-8cc87"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /output/index/39 HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.16
Set-Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7D998c15396299def8b3a9ca14ed3dd8f2de56d841; expires=Mon, 24-Jul-2017 18:29:35 GMT; Max-Age=7200; path=/ ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b; expires=Mon, 24-Jul-2017 18:29:35 GMT; Max-Age=7200; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   646
Md5:    394bc0d2bf8db338096c3ce6e66ef49c
Sha1:   ac3ab81c67efae3cb98d6d7f9b107fb398d0e93a
Sha256: 1244d2c5bcd19241119bd550122814f7f1f5a63bcbfece12f3537fb8e5dfc997
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 24 Jul 2017 16:29:37 GMT
Expires: Fri, 28 Jul 2017 16:29:37 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    8daf058b38ed35e7ea1b5b7ad1174be8
Sha1:   2e8104485a922ff029c64e9ab4a01d37a491b937
Sha256: 7258f5e326835387ed5341c5f68aceffcfd9ab2afa5e7e0dd44b4cc7116e7db8
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=320201, public, no-transform, must-revalidate
Last-Modified: Fri, 21 Jul 2017 09:21:52 GMT
Expires: Fri, 28 Jul 2017 09:21:52 GMT
Date: Mon, 24 Jul 2017 16:29:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    5bbc0859ab02b7bfa1c1304b5f19ac42
Sha1:   0931a6572ac8d020eeb75317d25351ee1535a292
Sha256: 016cd5bcba05382e3de685f946b4eb1c45dd8ac1ba8710c1cd229a178c7c3e2d
                                        
                                            GET /ajax/libs/jquery/1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         172.217.18.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33434
Date: Fri, 14 Jul 2017 00:07:28 GMT
Expires: Sat, 14 Jul 2018 00:07:28 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 922929
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,36,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33434
Md5:    e4bb941e9945e6b8fc2c91584e0545e2
Sha1:   8ac8f5fbba79ab93ff34041cf41ed30b0487354d
Sha256: d5aef23e26c649450ee31e6d65fe05937d337e1e91efdc884893e9f2b1e89971
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=12&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=984&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAK&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A984%2C%22height%22%3A0%2C%22left%22%3A96%2C%22top%22%3A166%2C%22visible%22%3A1%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&callback=Ya[1500913779804] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.193.90
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:37 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:37 GMT
Expires: Mon, 24 Jul 2017 16:29:37 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: https://an.yandex.ru/meta/232063?redir-setuniq=1&target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=12&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=984&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAK&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A984%2C%22height%22%3A0%2C%22left%22%3A96%2C%22top%22%3A166%2C%22visible%22%3A1%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&callback=Ya[1500913779804]
Set-Cookie: yandexuid=5660887981500913777; domain=.yandex.ru; path=/; expires=Thu, 22-Jul-2027 16:29:37 GMT
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:37 GMT
Content-Length: 27993
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Fri, 21 Jul 2017 11:55:51 GMT
Content-Encoding: gzip
Expires: Mon, 24 Jul 2017 17:29:37 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Wed Jul 19 11:09:29 2017, max compression
Size:   27993
Md5:    b143f7d6251ab6ec9b8602d3f207cce9
Sha1:   0b004fd99381b6917c33e72a830d03573a9c9851
Sha256: 926a300501770f39246bd61810e22c5057ef88812e897b01c292238e0b86e21a
                                        
                                            GET /meta/232063?redir-setuniq=1&target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=12&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=984&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAK&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A984%2C%22height%22%3A0%2C%22left%22%3A96%2C%22top%22%3A166%2C%22visible%22%3A1%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&callback=Ya[1500913779804] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:37 GMT
Expires: Mon, 24 Jul 2017 16:29:37 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4194
Md5:    a0c32b7cf3de3fffb80a7fbb4bc75a8f
Sha1:   506c6e0a654b095576c5f83cb927c0f3a1f550b9
Sha256: 33a454704c0b74c4dd5b572637c85f65c6d630f0ef8f3e0c7d99f564059bd91a
                                        
                                            GET /get-direct/364710/TAF9u7FkdRsuvCXnQJx5SQ/y300 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 13215
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Fri, 12 May 2017 08:08:44 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13215
Md5:    9bf7a9570ff370c4968926a2f8bef020
Sha1:   3d52dcaa0fbb63ce569f6868b2c577d30cd85fbd
Sha256: 6f1dc4cc554f6ade237e2d1329655f6955ebdb04997e5c438173dee6906b7713
                                        
                                            GET /get-direct/250709/xUpuJlMyO6_Vc-E8zAJWJg/y300 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 15273
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Wed, 12 Jul 2017 13:21:20 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15273
Md5:    133ac899f2988be90994e3cee00e3780
Sha1:   fe28a4e62980b64152c15f874729f415abcd1847
Sha256: 9cb94df14e7f132b08414921158be337b2937a86b761cc8585d0ee67909e9835
                                        
                                            GET /output/index/41 HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.16
Set-Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b; expires=Mon, 24-Jul-2017 18:29:38 GMT; Max-Age=7200; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   763
Md5:    4bbee2543acf8e355dc423f7c33b5b89
Sha1:   339b3ea6e3b4c4dffc8a889b1b237d93c1b280ab
Sha256: af7e78db0e96e54b51846c1404f292907bc73859ab60a4a7895e1bb61f0b5f66
                                        
                                            GET /get-direct/205005/E8qqRwvUXlq2UWt61STr6Q/y300 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 16084
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Fri, 09 Jun 2017 04:59:42 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   16084
Md5:    ce8aae9e75a992e165fa43f4f7cc2a3a
Sha1:   f561462568fe0bc6c6f3b469ccce506d8d15d64d
Sha256: f9f55e99108a5f9c113b970507bb24dbfc47153ad5dc4a6e530a58083ed6032b
                                        
                                            POST / HTTP/1.1 
Host: yandex.ocsp-responder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         5.45.205.234
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 1552
Connection: keep-alive
Keep-Alive: timeout=5
Content-Transfer-Encoding: binary
X-Cached: MISS
X-Cache: EXPIRED


--- Additional Info ---
Magic:  data
Size:   1552
Md5:    eee2ba555f02af8169c6f80c5c22f1ea
Sha1:   01f487cf298045b5dc0152c60801567bd609190b
Sha256: b28ff94f34b01102519fa157caff84ec6a3818bae623e81cf47052a0ab3257d3
                                        
                                            GET /favicon/hudeem77.ru HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   524
Md5:    d27135c1ca3a3508714a827786294c84
Sha1:   0c5a84bb39ec0187a0e59aff5548fc3e54ca2b04
Sha256: 2122937f1be5a0a10c152515626e7051993d3651e30c947ba2702103714b58de
                                        
                                            GET /favicon/yurkovskaya.com HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   70
Md5:    5047fd356fc4802e4fe471ae09f9efe5
Sha1:   086b07df148df70aac37ead9868b2df44ab91576
Sha256: 9681c0a0a13d8581f202bfaf62e53563ea6d0d6bd8e542b35b6d7c09b0e7b41b
                                        
                                            GET /favicon/glamurnenko.ru HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   609
Md5:    4c952afdcf2889ab2aad7a5bc57a5d33
Sha1:   a6626a8d98f547f9ead0aa2db88f6d9b740f3961
Sha256: b9ba1959075bb7c4113477ffc64fd94b3f9aa76fec02a3d8b277032248597ae7
                                        
                                            OPTIONS /watch/232063?cnt-class=1&page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182937%3Aet%3A1500913778%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Apv%3A1%3Als%3A302017309268%3Arqn%3A1%3Arn%3A828455432%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913778%3Au%3A%3At%3A%D0%AF%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D0%B0%20-%20%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%B0%20%D0%B8%20%D0%B2%D1%80%D0%B5%D0%B4%20%D1%8F%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D1%8B HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://blogozdorovie.ru
Access-Control-Request-Method: POST

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /watch/232063?cnt-class=1&page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182937%3Aet%3A1500913778%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Apv%3A1%3Als%3A302017309268%3Arqn%3A1%3Arn%3A828455432%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913778%3Au%3A%3At%3A%D0%AF%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D0%B0%20-%20%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%B0%20%D0%B8%20%D0%B2%D1%80%D0%B5%D0%B4%20%D1%8F%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D1%8B HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         93.158.134.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:38 GMT
Expires: Mon, 24 Jul 2017 16:29:38 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yabs-sid=2597893951500913778; path=/
Location: https://mc.yandex.ru/watch/232063/1?cnt-class=1&page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182937%3Aet%3A1500913778%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Apv%3A1%3Als%3A302017309268%3Arqn%3A1%3Arn%3A828455432%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913778%3Au%3A%3At%3A%D0%AF%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D0%B0%20-%20%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%B0%20%D0%B8%20%D0%B2%D1%80%D0%B5%D0%B4%20%D1%8F%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D1%8B
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /watch/232063/1?cnt-class=1&page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182937%3Aet%3A1500913778%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Apv%3A1%3Als%3A302017309268%3Arqn%3A1%3Arn%3A828455432%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913778%3Au%3A%3At%3A%D0%AF%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D0%B0%20-%20%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%B0%20%D0%B8%20%D0%B2%D1%80%D0%B5%D0%B4%20%D1%8F%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D1%8B HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777; yabs-sid=2597893951500913778

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:38 GMT
Expires: Mon, 24 Jul 2017 16:29:38 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=11&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=666&skip-token=yabs.NDUxNDY3NDQxMwozNDYyNTkwMjkwCjQyNzY4MDIwMTI%3D&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAK&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A666%2C%22height%22%3A0%2C%22left%22%3A96%2C%22top%22%3A217%2C%22visible%22%3A1%2C%22ad_no%22%3A0%2C%22req_no%22%3A1%7D&callback=Ya[1500913778675] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:38 GMT
Expires: Mon, 24 Jul 2017 16:29:38 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3898
Md5:    ebbc5ae18eedf62a8eafa1b7793491e4
Sha1:   933e12779783944c7aaec5f6a139efca79407ea7
Sha256: 9e3f5cafd1a9cd9059daff568fe7552beedb059ccfe716ce120388ef84647824
                                        
                                            GET //assets/css/pure.css HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:38 GMT
Last-Modified: Mon, 22 Aug 2016 09:31:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"57bac65c-2646"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1892
Md5:    fa7cbb8f34bd8f8b3369229b37775bb5
Sha1:   d2dc4b8b1a7873437d2f7ba223c071902d1203ab
Sha256: d8a357831ff89b091ecf82d1071d75943ccee584b8eb4b4ad250b139b84060e8
                                        
                                            POST /jserr/1 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: text/plain;charset=UTF-8
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Content-Length: 11504
Origin: http://blogozdorovie.ru
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:38 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:39 GMT
Expires: Mon, 24 Jul 2017 16:29:39 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: http://blogozdorovie.ru
Access-Control-Allow-Credentials: true
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /output/index/40 HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.16
Set-Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b; expires=Mon, 24-Jul-2017 18:29:40 GMT; Max-Age=7200; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   645
Md5:    46244bb9ce3a53a645680765da484d0b
Sha1:   5d21af232eff07538e009dc610dfa306f60b2c4c
Sha256: a1bd404f704303f9cc1bfd59d80cb2ac0f284e3251865438e353a443819a0840
                                        
                                            GET /es5-shims/0.0.2/es5-shims.min.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Fri, 06 Nov 2015 18:07:45 GMT
If-None-Match: W/"563cec71-a8f"
Cache-Control: max-age=0

                                         
                                         178.154.131.217
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Last-Modified: Fri, 06 Nov 2015 18:07:45 GMT
Connection: keep-alive
Etag: "563cec71-a8f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /system/context.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777
If-Modified-Since: Mon, 24 Jul 2017 13:41:03 GMT
If-None-Match: W/"5975f8ef-1be5"
Cache-Control: max-age=0

                                         
                                         213.180.193.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:41:03 GMT
Etag: "5975f8ef-1be5"
Expires: Mon, 24 Jul 2017 17:29:40 GMT
Cache-Control: max-age=3600, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /share2/share.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
If-Modified-Since: Mon, 05 Jun 2017 13:53:48 GMT
If-None-Match: W/"5935626c-15ae7"
Cache-Control: max-age=0

                                         
                                         178.154.131.217
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Last-Modified: Mon, 05 Jun 2017 13:53:48 GMT
Connection: keep-alive
Etag: "5935626c-15ae7"
Expires: Thu, 27 Jul 2017 16:29:40 GMT
Cache-Control: max-age=259200, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /rtbcount/12msXpY1dwSu8Jm1XF5R0HcwyzYb0r69yLl18P7psAK3Yl5RmI6HyzYb0ukn1sAN1OsUSm6EbRS1ZuQdby00000J0P2IwDEHXgULTvPtcF67FIe6ElZe19q1deeydueFeF77bfqDElZe1AB__________m-ctgZykn5R0QVTDf28Ar5Lg0If1MiG?test-tag=185267709280258&rnd=1500913785223 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:40 GMT
Expires: Mon, 24 Jul 2017 16:29:40 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /count/O7rJ2G10isy40000gQ0000AEiGTYbmM5dwSudWowyWrU76sCQy05aRoOr487atUam00001C1hl5R0HcwyzYb0x82-WJy2hlnXpqg1Zhuw0J1__________yFxW7l2TlnnvQT3Jhuw0Jg3FNQ86s36bi1zjjjceWhKLNta1WL-A2WJW9_3W00=mEsWavK1cm5kGxS2YR-DoEC6cF__________3ugy7Qtk3xsq9of62gMgCHeFYBKiBA82lASKv0wcAPskZMuMtG7Ua2Jq-V5R0HcwyzYb0u-gQGj_dxWsjneAcGQWb-Syivvx3w-RD1EqaE84sP1XFzgG7H2KbGW9fuxogALWkcP1iG6oobC00a08kQwDRXRDlXsjxW_EiRpSQ13I__________yFq___________3y80ttVk0Us3AF6OCWBxcpGJ_QMYmxvv6000=O-Sz7fK1cm5kGxS2Cec-LNIG0fZ__________m-AilKkvWozlFu21GcbefOZ3OY-pIyo0xockB45fZATaXORtG7Ua2Jq-V5R0HcwyzYb0u-gQGj_dxWsjneAcGQWcFamivXp3A-RVIIqa4S9sPZvCDgOSmodX3AekEQv7m51iG6oobC00a08kP8M6yMF3yspzIxc3Cwvi23J3TB__________m_J__________yFmW3VT-u1vP3oA-s3AF6SB0Jxctqa_QxDlBvy6000=de0TifK1cm5kGxS2CucSAm-O__________yFYhrkXz4GlRq0mPeAfQqPhW-8k9ikaWEyeokw2gOudQo-iXNT0TwG9FJvyLi16RhpsAK3Zxxkybe1dxeE2Ji9cGQWa9uviv2c3g-TIYcqc7yAsP2UETgGfWwdZ1oegVLEqa6n0RBAKm02G0YvhBwo5SMF3ysyReVH4CwnTTqJ4TB__________m_J__________yFmW3VT-u1vP3oA-s3AF6LkGJxdKef_Q4ulBvy6000?test-tag=185343248717889&stat-id=12&wmode=0 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:40 GMT
Expires: Mon, 24 Jul 2017 16:29:40 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=10&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&skip-token=yabs.MzkwMjU4MDUxMgo0Mjc2ODAyMDEyCjM0NjI1OTAyOTAKNDUxNDY3NDQxMw%3D%3D&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAKMtCf0L7Qu9GM0LfQsCDRj9C90YLQsNGA0L3QvtC5INC60LjRgdC70L7RgtGLIAoy0JLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiyAK&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A0%2C%22height%22%3A0%2C%22left%22%3A590%2C%22top%22%3A2351%2C%22visible%22%3A0%2C%22ad_no%22%3A3%2C%22req_no%22%3A2%7D&callback=Ya[1500913790286] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:40 GMT
Expires: Mon, 24 Jul 2017 16:29:40 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3308
Md5:    a14ad9bf988b2547a1e23053891f9a73
Sha1:   9cb0d107d0f430317dab26f5fd97f48c6b4eb17f
Sha256: 7d0342b60ed02848536f0f22ac915a7ceb98788003139a8cb0723329080e8186
                                        
                                            GET /favicon/magia-slim.ru HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   70
Md5:    5047fd356fc4802e4fe471ae09f9efe5
Sha1:   086b07df148df70aac37ead9868b2df44ab91576
Sha256: 9681c0a0a13d8581f202bfaf62e53563ea6d0d6bd8e542b35b6d7c09b0e7b41b
                                        
                                            GET /favicon/kormaprom.ru HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   529
Md5:    dce4b3984925add7ab71b4853e66393e
Sha1:   4b41162cd2cd7201d58debf4c0904200fa64efad
Sha256: 469f16720fd8ba02737f4b602cc7f59d7eb8b75c23a2f39328b22323e777fffa
                                        
                                            GET /output/index/42 HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.16
Set-Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b; expires=Mon, 24-Jul-2017 18:29:41 GMT; Max-Age=7200; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   760
Md5:    fc24ed52572db19ceb6a445a03fb47b6
Sha1:   b947fdb6091308610f7774d4add5970222f4f068
Sha256: 8ee08ab5d18b1ac08c945ef96a02af50d0aab690163001953973fdb0b2c6958e

Alerts:
  IDS:
    - ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
                                        
                                            GET /get-direct/199765/Ljru-mySKj_ViJymIIIXwQ/y300 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:41 GMT
Content-Length: 16632
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Wed, 24 May 2017 20:49:58 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   16632
Md5:    5b931381684a9edb433d67d834cae6da
Sha1:   5bd1c0c9ab1caae891430effada30951b0f91863
Sha256: 43f515995c9e5ce540d59fa5f9cb648854279661c49e513091f38e86df74c4e8
                                        
                                            GET /output/index/43 HTTP/1.1 
Host: ad.leader.su
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b

                                         
                                         88.99.100.197
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx/1.10.2
Date: Mon, 24 Jul 2017 16:29:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.16
Set-Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%225fc7ce526f939a97b42ac1d399c83e6b%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2277.40.129.123%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A90%3A%22Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+en-US%3B+rv%3A1.9.2.13%29+Gecko%2F20101203+Firefox%2F3.6.13%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1500913775%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A10%3A%22click_page%22%3Bs%3A42%3A%22http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F%22%3B%7D3f0f3111ec462b48e1aeae51d69ea7319a2ff23b; expires=Mon, 24-Jul-2017 18:29:41 GMT; Max-Age=7200; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   761
Md5:    6f36cd1642308b99d0e1b51d25f0d9d6
Sha1:   43988ea54fddeab7774bb5f6b7e7a0fc3aba29c7
Sha256: eb66b7ef26f652040e14f8415e90ebec5ee513ce9de4726b6df8a459fa266a82
                                        
                                            GET /wp-content/themes/thehealth-codebase/images/comment-arrow.png HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/wp-content/themes/thehealth-codebase/style.css

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:41 GMT
Content-Length: 109
Last-Modified: Tue, 30 May 2017 15:11:28 GMT
Connection: keep-alive
Keep-Alive: timeout=30
Etag: "592d8ba0-6d"
Expires: Wed, 23 Aug 2017 16:29:41 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 8 x 15, 1-bit colormap, non-interlaced
Size:   109
Md5:    6626e286b0187692201428024c7e6e10
Sha1:   7751965342436ff4dea84eb943cc489552e3ee0e
Sha256: 38d1edbccfc72cd47d8b5727352569dd81860d055eb796846b5d8e8813387471
                                        
                                            GET /system/context.js HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777
If-Modified-Since: Mon, 24 Jul 2017 13:41:03 GMT
If-None-Match: W/"5975f8ef-1be5"
Cache-Control: max-age=0

                                         
                                         213.180.193.90
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:41 GMT
Connection: keep-alive
Last-Modified: Mon, 24 Jul 2017 13:41:03 GMT
Etag: "5975f8ef-1be5"
Expires: Mon, 24 Jul 2017 17:29:41 GMT
Cache-Control: max-age=3600, public
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777; yabs-sid=2597893951500913778
If-Modified-Since: Fri, 21 Jul 2017 11:55:51 GMT
Cache-Control: max-age=0

                                         
                                         93.158.134.119
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:41 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Expires: Mon, 24 Jul 2017 17:29:41 GMT
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /hit?t14.2;r;s1176*885*24;uhttp%3A//blogozdorovie.ru/yantarnay-kislota/;0.5493458956480307 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         88.212.196.66
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Mon, 24 Jul 2017 16:29:41 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t14.2;r;s1176*885*24;uhttp%3A//blogozdorovie.ru/yantarnay-kislota/;0.5493458956480307
Content-Length: 32
Expires: Sat, 23 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1PTY1r3n0Nfb1PTY1r0057xv; path=/; expires=Mon, 23 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit?q;t14.2;r;s1176*885*24;uhttp%3A//blogozdorovie.ru/yantarnay-kislota/;0.5493458956480307 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: FTID=1PTY1r3n0Nfb1PTY1r0057xv

                                         
                                         88.212.196.66
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 24 Jul 2017 16:29:42 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 245
Expires: Sat, 23 Jul 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=3Lq2es1tSBvb1PTY1s0057-F; path=/; expires=Mon, 23 Jul 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   245
Md5:    d97a7b1d3394ac0b9f875e9710e5b26b
Sha1:   767aec31700845c0cbc93e3c6f5193bb66e1627e
Sha256: e466c902541b978efc0f51163913426e5a4cd0b58357cd29f3c67b0a3822691a
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777; yabs-sid=2597893951500913778

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:42 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Mon, 17 Jun 2047 16:29:42 GMT
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/15352495?wmode=5&callback=_ymjsp121827643&page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A2%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182942%3Aet%3A1500913782%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A31866275528%3Arqn%3A1%3Arn%3A361380844%3Ahid%3A1052152652%3Awn%3A49262%3Ahl%3A1%3Arqnl%3A1%3Ast%3A1500913782%3Au%3A1500913782575539139%3At%3A%D0%AF%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%B0%D1%8F%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D0%B0%20-%20%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%B0%20%D0%B8%20%D0%B2%D1%80%D0%B5%D0%B4%20%D1%8F%D0%BD%D1%82%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%BA%D0%B8%D1%81%D0%BB%D0%BE%D1%82%D1%8B HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777; yabs-sid=2597893951500913778

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:42 GMT
Content-Length: 95
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:42 GMT
Expires: Mon, 24 Jul 2017 16:29:42 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   95
Md5:    1a91dbaaf718aceb54b47685a033e620
Sha1:   22b248d8182b0af92778ba4cb441d7d67825c99d
Sha256: 820e4b5ceff1bf4a42641f2eba019713f68880a79d522a3b56b2c60edce9b9fb
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=1&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=300&skip-token=yabs.MzkwMjU4MDUxMgo0Mjc2ODAyMDEyCjM0NjI1OTAyOTAKMTYwNDg5NTU4MQo0MTcwNzU5MjAzCjQ1MTQ2NzQ0MTM%3D&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAKMtCf0L7Qu9GM0LfQsCDRj9C90YLQsNGA0L3QvtC5INC60LjRgdC70L7RgtGLIAoy0JLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiyAKM9CU0LjQtdGC0Ysg0Lgg0L_QvtGF0YPQtNC10L3QuNC1IAoz0JHQvtC70LXQt9C90Lgg0Lgg0LjRhSDQu9C10YfQtdC90LjQtSAKM9CX0LTQvtGA0L7QstGL0Lkg0L7QsdGA0LDQtyDQttC40LfQvdC4IAoz0J_RgNCw0LLQuNC70YzQvdC-0LUg0L_QuNGC0LDQvdC40LUgCjPQn9C-0YXQvtC20LjQtSDRgdGC0LDRgtGM0LggCjPQmtCw0LvRjNC80LDRgNGLLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LrQsNC70YzQvNCw0YDQvtCyIAoz0JrQsNC6INC_0YDQsNCy0LjQu9GM0L3QviDQv9C40YLQsNGC0YzRgdGPINC30LAgMTAwMCDRgNGD0LHQu9C10Lkg0LIg0LzQtdGB0Y_RhiDQuCDQv9GA0Lgg0Y3RgtC-0Lwg0L_QvtGF0YPQtNC10YLRjCAKM9CQ0YDQsNGF0LjRgdC-0LLQsNGPINC_0LDRgdGC0LAgKNCw0YDQsNGF0LjRgdC-0LLQvtC1INC80LDRgdC70L4pLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LDRgNCw0YXQuNGB0L7QstC-0Lkg0L_QsNGB0YLRiyAKMzQg0LrQvtC80LzQtdC90YLQsNGA0LjRjyDQndCw0YfQvdC40YLQtSDQvtCx0YHRg9C20LTQtdC90LjQtS4gCjPQndCw0L_QuNGB0LDRgtGMINC-0YLQstC10YIgCg==&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A300%2C%22height%22%3A0%2C%22left%22%3A772%2C%22top%22%3A584%2C%22visible%22%3A1%2C%22ad_no%22%3A5%2C%22req_no%22%3A3%7D&callback=Ya[1500913783900] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:42 GMT
Expires: Mon, 24 Jul 2017 16:29:42 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3694
Md5:    464e704bcc97468575b48fdfd5b9cefa
Sha1:   5a5caedb992db7c7783931ddbc117b63482958d9
Sha256: 867fef876d85e9feecce659b8d7c73d45bb43fdb55b19e70d8f49cb4e003a025
                                        
                                            GET /get-direct/56785/QpOYGbKMsFXMTzxON8IwyA/x90 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:42 GMT
Content-Length: 3920
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Thu, 20 Jul 2017 10:12:37 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3920
Md5:    9ad06d206afacf7377610b5aa39500da
Sha1:   dd00e2e417626637c2df21279dfe2fb609c0ec2d
Sha256: f6b8e53bff97fbcf49dca8042586101e9889e25deb272fecf41ca7c40d7e1f4d
                                        
                                            GET /get-direct/114553/N_OB3fBDZV4hg6xuCU7W7A/x90 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:42 GMT
Content-Length: 3891
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Sun, 16 Apr 2017 03:01:57 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3891
Md5:    5b4fcac2f3c450682f70b98bad041890
Sha1:   814013c8090463ac30115e1c97497c07e445ebb2
Sha256: f8783f4ae0e27ae10621388981367c25adaa7c3965b7d2b309b63b27229e69f7
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=2&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=300&skip-token=yabs.MzkwMjU4MDUxMgo0Mjc2ODAyMDEyCjM0NjI1OTAyOTAKMjM1MzIxOTgwOAoyMzY1OTA3NDE4CjE2MDQ4OTU1ODEKNDE3MDc1OTIwMwo0NTE0Njc0NDEz&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAKMtCf0L7Qu9GM0LfQsCDRj9C90YLQsNGA0L3QvtC5INC60LjRgdC70L7RgtGLIAoy0JLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiyAKM9CU0LjQtdGC0Ysg0Lgg0L_QvtGF0YPQtNC10L3QuNC1IAoz0JHQvtC70LXQt9C90Lgg0Lgg0LjRhSDQu9C10YfQtdC90LjQtSAKM9CX0LTQvtGA0L7QstGL0Lkg0L7QsdGA0LDQtyDQttC40LfQvdC4IAoz0J_RgNCw0LLQuNC70YzQvdC-0LUg0L_QuNGC0LDQvdC40LUgCjPQn9C-0YXQvtC20LjQtSDRgdGC0LDRgtGM0LggCjPQmtCw0LvRjNC80LDRgNGLLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LrQsNC70YzQvNCw0YDQvtCyIAoz0JrQsNC6INC_0YDQsNCy0LjQu9GM0L3QviDQv9C40YLQsNGC0YzRgdGPINC30LAgMTAwMCDRgNGD0LHQu9C10Lkg0LIg0LzQtdGB0Y_RhiDQuCDQv9GA0Lgg0Y3RgtC-0Lwg0L_QvtGF0YPQtNC10YLRjCAKM9CQ0YDQsNGF0LjRgdC-0LLQsNGPINC_0LDRgdGC0LAgKNCw0YDQsNGF0LjRgdC-0LLQvtC1INC80LDRgdC70L4pLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LDRgNCw0YXQuNGB0L7QstC-0Lkg0L_QsNGB0YLRiyAKMzQg0LrQvtC80LzQtdC90YLQsNGA0LjRjyDQndCw0YfQvdC40YLQtSDQvtCx0YHRg9C20LTQtdC90LjQtS4gCjPQndCw0L_QuNGB0LDRgtGMINC-0YLQstC10YIgCg==&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A300%2C%22height%22%3A0%2C%22left%22%3A772%2C%22top%22%3A989%2C%22visible%22%3A0%2C%22ad_no%22%3A5%2C%22req_no%22%3A4%7D&callback=Ya[1500913785380] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:43 GMT
Expires: Mon, 24 Jul 2017 16:29:43 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3898
Md5:    47b00161c60ed4ca7c3565a0074dc980
Sha1:   8db26fa26c1e342c1aec9e9986172b2ea9350d57
Sha256: 2e55b29b0f9f90d91f51e7563c51edc410e1ccf8891c470061c29543bf087e78
                                        
                                            GET /favicon/web.zone.ee HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   465
Md5:    fe102bce5fe114fb1858bcbf431c1eb1
Sha1:   75b7c9e72a2b2e568e5d22f3ea231f58b008067e
Sha256: 2ac2deb78ed8f13e447d32b3fe615481ec27718a2077311a40b7d42621113269
                                        
                                            GET /get-direct/168557/x7O-1F5LLCsb7CGPC9wkjA/x90 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:43 GMT
Content-Length: 2317
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Mon, 08 May 2017 10:18:43 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2317
Md5:    d7f5c898c410195852e34d2d1a2edc03
Sha1:   c2c88bfe1d8142f28771689caed62bae7b8ec256
Sha256: 59c2b75dd87560608a0940069badd3b5b67b7f1b2ca8046da55fde6937c8d95f
                                        
                                            GET /get-direct/230362/lgQlSUaJ3Qb5nsUWqVcdMA/wy150 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:43 GMT
Content-Length: 8676
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Tue, 18 Apr 2017 12:00:03 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8676
Md5:    994355268b8531b1c4936f2f6a145283
Sha1:   e42a30efe907ac95e5b74066c65b65f4b212548d
Sha256: 4e4b5e4f173fc84547959fdb02f8923eec2716ec995e873d7bf6bc8b3b568931
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=3&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=300&skip-token=yabs.MzkwMjU4MDUxMgo0Mjc2ODAyMDEyCjM0NjI1OTAyOTAKNDA2Mzk0MTI2NQo5MzkyODI3NwoyNTU0MjUzMzcwCjIzNTMyMTk4MDgKMjM2NTkwNzQxOAoxNjA0ODk1NTgxCjQxNzA3NTkyMDMKNDUxNDY3NDQxMw%3D%3D&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAKMtCf0L7Qu9GM0LfQsCDRj9C90YLQsNGA0L3QvtC5INC60LjRgdC70L7RgtGLIAoy0JLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiyAKM9CU0LjQtdGC0Ysg0Lgg0L_QvtGF0YPQtNC10L3QuNC1IAoz0JHQvtC70LXQt9C90Lgg0Lgg0LjRhSDQu9C10YfQtdC90LjQtSAKM9CX0LTQvtGA0L7QstGL0Lkg0L7QsdGA0LDQtyDQttC40LfQvdC4IAoz0J_RgNCw0LLQuNC70YzQvdC-0LUg0L_QuNGC0LDQvdC40LUgCjPQn9C-0YXQvtC20LjQtSDRgdGC0LDRgtGM0LggCjPQmtCw0LvRjNC80LDRgNGLLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LrQsNC70YzQvNCw0YDQvtCyIAoz0JrQsNC6INC_0YDQsNCy0LjQu9GM0L3QviDQv9C40YLQsNGC0YzRgdGPINC30LAgMTAwMCDRgNGD0LHQu9C10Lkg0LIg0LzQtdGB0Y_RhiDQuCDQv9GA0Lgg0Y3RgtC-0Lwg0L_QvtGF0YPQtNC10YLRjCAKM9CQ0YDQsNGF0LjRgdC-0LLQsNGPINC_0LDRgdGC0LAgKNCw0YDQsNGF0LjRgdC-0LLQvtC1INC80LDRgdC70L4pLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LDRgNCw0YXQuNGB0L7QstC-0Lkg0L_QsNGB0YLRiyAKMzQg0LrQvtC80LzQtdC90YLQsNGA0LjRjyDQndCw0YfQvdC40YLQtSDQvtCx0YHRg9C20LTQtdC90LjQtS4gCjPQndCw0L_QuNGB0LDRgtGMINC-0YLQstC10YIgCg==&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A300%2C%22height%22%3A0%2C%22left%22%3A772%2C%22top%22%3A1204%2C%22visible%22%3A0%2C%22ad_no%22%3A5%2C%22req_no%22%3A5%7D&callback=Ya[1500913792377] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:43 GMT
Expires: Mon, 24 Jul 2017 16:29:43 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2729
Md5:    57804a884c55b92cb9eb696aedd59449
Sha1:   c012716489179870e0068f38019aec6290db5dbf
Sha256: 42883285ed52d4030ad4f4e2e3a74e98265f1ab63dd590e912b652249556eda6
                                        
                                            GET /meta/232063?target-ref=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&charset=utf-8&imp-id=4&enable-flat-highlight=1&test-tag=185267709280258&ad-session-id=9127971500913776763&pcode-version=2385&flash-ver=10&available-width=300&skip-token=yabs.MzkwMjU4MDUxMgo0Mjc2ODAyMDEyCjM0NjI1OTAyOTAKMzkxNzgzNTI2NQo0MDYzOTQxMjY1CjkzOTI4Mjc3CjI1NTQyNTMzNzAKMjM1MzIxOTgwOAoyMzY1OTA3NDE4CjE2MDQ4OTU1ODEKNDE3MDc1OTIwMwo0NTE0Njc0NDEz&grab=dNCv0L3RgtCw0YDQvdCw0Y8g0LrQuNGB0LvQvtGC0LAgLSDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiwox0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J_QvtC70YzQt9CwINC4INCy0YDQtdC0IAoy0K_QvdGC0LDRgNC90LDRjyDQutC40YHQu9C-0YLQsC4g0J7QsdGJ0LDRjyDQuNC90YTQvtGA0LzQsNGG0LjRjyAKMtCf0L7Qu9GM0LfQsCDRj9C90YLQsNGA0L3QvtC5INC60LjRgdC70L7RgtGLIAoy0JLRgNC10LQg0Y_QvdGC0LDRgNC90L7QuSDQutC40YHQu9C-0YLRiyAKM9CU0LjQtdGC0Ysg0Lgg0L_QvtGF0YPQtNC10L3QuNC1IAoz0JHQvtC70LXQt9C90Lgg0Lgg0LjRhSDQu9C10YfQtdC90LjQtSAKM9CX0LTQvtGA0L7QstGL0Lkg0L7QsdGA0LDQtyDQttC40LfQvdC4IAoz0J_RgNCw0LLQuNC70YzQvdC-0LUg0L_QuNGC0LDQvdC40LUgCjPQn9C-0YXQvtC20LjQtSDRgdGC0LDRgtGM0LggCjPQmtCw0LvRjNC80LDRgNGLLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LrQsNC70YzQvNCw0YDQvtCyIAoz0JrQsNC6INC_0YDQsNCy0LjQu9GM0L3QviDQv9C40YLQsNGC0YzRgdGPINC30LAgMTAwMCDRgNGD0LHQu9C10Lkg0LIg0LzQtdGB0Y_RhiDQuCDQv9GA0Lgg0Y3RgtC-0Lwg0L_QvtGF0YPQtNC10YLRjCAKM9CQ0YDQsNGF0LjRgdC-0LLQsNGPINC_0LDRgdGC0LAgKNCw0YDQsNGF0LjRgdC-0LLQvtC1INC80LDRgdC70L4pLiDQn9C-0LvRjNC30LAg0Lgg0LLRgNC10LQg0LDRgNCw0YXQuNGB0L7QstC-0Lkg0L_QsNGB0YLRiyAKMzQg0LrQvtC80LzQtdC90YLQsNGA0LjRjyDQndCw0YfQvdC40YLQtSDQvtCx0YHRg9C20LTQtdC90LjQtS4gCjPQndCw0L_QuNGB0LDRgtGMINC-0YLQstC10YIgCg==&layout-config=%7B%22win_width%22%3A1176%2C%22win_height%22%3A754%2C%22width%22%3A300%2C%22height%22%3A0%2C%22left%22%3A772%2C%22top%22%3A1405%2C%22visible%22%3A0%2C%22ad_no%22%3A5%2C%22req_no%22%3A6%7D&callback=Ya[1500913788313] HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:43 GMT
Expires: Mon, 24 Jul 2017 16:29:43 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3298
Md5:    0c20b57b4da7caa122227b66799a3c53
Sha1:   5ea81abadbc14cb6466e0559c7e5ac9e7f70e34a
Sha256: 45bc556db45e9fb291eb4e6634be5165966b6d3fc7de8dc02ba859c3edcb0d02
                                        
                                            GET /favicon/master-recipes.com HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         213.180.204.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                        
X-Content-Type-Options: nosniff
Cache-Control: max-age=691200
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   735
Md5:    017b4aee058665f086c7c41bedb66cd6
Sha1:   b3d151a8b5c9fc014bffa3161ca19ef77f741501
Sha256: 3bac320219effbe80cb7329aa9cef7935e49feae8fe2f388fdc09a7953ac7f6a
                                        
                                            GET /get-direct/169443/qedBqXs3g-KGI0GA747QrA/x90 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.250.247.181
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 24 Jul 2017 16:29:44 GMT
Content-Length: 2252
Connection: keep-alive
Keep-Alive: timeout=60
Cache-Control: max-age=86400
Last-Modified: Sun, 14 May 2017 03:03:02 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2252
Md5:    e0734e4f88be63164fb862af13547355
Sha1:   c82c0713fecd63eb90eacd1c6f4ed4cd7164e185
Sha256: 4fefd827f2a163c6d3af8609b9520d4c0efde5aa75e092462485640256a1bf3c
                                        
                                            GET /rtbcount/16pRzbw1dwSu8J64yKy1Ei06sQK3KOYW0002YV5FGScr1jcb0uhnJq79jGRPfGEBjWTYbmMDbWC6ZfiO1u-Sj0ANm00001C1aAc1Fm6HdBG2bNUMTvZnXpqg1Zhuw0IT0Pw03v-89Q3nnvQT3Jhuw0IY__________yFfjQ1JbWVJm6drM1PZIjHLQW4gGLg4G00?test-tag=185267709280258&rnd=1500913792599 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:45 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:45 GMT
Expires: Mon, 24 Jul 2017 16:29:45 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /count/Q8WhVJ1foYm40000gQ0000AEjWTYbmM5dwSudW6wyWrU76sCQy05aRztskC4atUam00001C1hl5F0Jh01jcb0x82-WJy2hlnXpqg1Zhuw0J1__________yFxW7l0TlnnvQT3Jhuw0Jg0VNKHGk97qy1zj_wMuqhKLNta1WL-A2WJW9_3W00=ZzmISfK1cm5kGxS2YRXoHse3cF__________3ugw7KxG2BswqPxo1gMWZsaAYBJ13i41lA8LOGgc6vsdSZ0LtG7Ua2Jq-V5F0Jh01jcb0u-qCz4F0v-wvhiX19aCe9K7OBEGQXYlapfRj9Wn5zcL1s3Qa6eOfu6zgB10MNC7GR41iihJ00802BcdSZ0LnOyFpRaTJj08phCdC3CAql__________3zF__________m_20DztxW7baF8hxOCeyPvl2lkJEblzfRwylduO=eBg5qfK1cm5kGxS2CecQ-aUOhzQzlegmZZJ42Bs-MuNj1gMZicCAYBiEV381lAaE5mgc4fsbYDyLtG7Ua2Jq-V5F0Jh01jcb0u-_tf8Z29-nNh6339aCe9lIJBEGY1EldSGTj9YH1zcRqapQa8WJb9mB5wU4tQYpzxuF146n0RBAKm0200YvfOZV5SMF3ystZJJ42Cw-Igig2jB__________m_J__________yFmW3VT-u1vP3oA-s3AF6TPmFxdSGT_Q_MlRvy6000?test-tag=185343248719937&stat-id=1&wmode=0 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777

                                         
                                         213.180.193.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:45 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:45 GMT
Expires: Mon, 24 Jul 2017 16:29:45 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /share2/share.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: blogozdorovie.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/

                                         
                                         87.236.19.90
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx-reuseport/1.11.10
Date: Mon, 24 Jul 2017 16:29:33 GMT
Last-Modified: Sun, 28 May 2017 11:53:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Etag: W/"592aba46-17ba0"
Expires: Mon, 31 Jul 2017 16:29:33 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
                                        
                                            OPTIONS /watch/15352495?page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A2%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182957%3Aet%3A1500913798%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A168%3Als%3A31866275528%3Arqn%3A2%3Arn%3A187883788%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913798%3Au%3A1500913782575539139 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: http://blogozdorovie.ru
Access-Control-Request-Method: POST

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:57 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /watch/15352495?page-url=http%3A%2F%2Fblogozdorovie.ru%2Fyantarnay-kislota%2F&browser-info=j%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A2%3Aw%3A1159x754%3Az%3A120%3Ai%3A20170724182957%3Aet%3A1500913798%3Aen%3Autf-8%3Av%3A853%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A168%3Als%3A31866275528%3Arqn%3A2%3Arn%3A187883788%3Ahid%3A1052152652%3Arqnl%3A1%3Ast%3A1500913798%3Au%3A1500913782575539139 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://blogozdorovie.ru/yantarnay-kislota/
Cookie: yandexuid=5660887981500913777; yabs-sid=2597893951500913778

                                         
                                         93.158.134.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.8.1
Date: Mon, 24 Jul 2017 16:29:57 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Mon, 24 Jul 2017 16:29:57 GMT
Expires: Mon, 24 Jul 2017 16:29:57 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87