www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
185.129.100.57301 Moved Permanently 568 B URL HTTP/1.1 www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
IP 185.129.100.57:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Hash 2761b98db33884ab29711096ab315edb
8cea6e53464aea178b72e06a906205d040f14ca5
9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee
GET /a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25 HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Mon, 20 Mar 2023 04:08:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
Content-Type: text/html; charset=utf8
Content-Length: 568
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15643
Expires: Mon, 20 Mar 2023 08:29:17 GMT
Date: Mon, 20 Mar 2023 04:08:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash eddc2a353d39e5ce5c30d7e90b3ed6a5
305e86e4b966344c135c50af9a6509ffd3a83e9e
bd775c38c2e11f1baedde5d92ab17ceaf4c2067f8ea996595a66801758a71813
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD775C38C2E11F1BAEDDE5D92AB17CEAF4C2067F8EA996595A66801758A71813"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11738
Expires: Mon, 20 Mar 2023 07:24:12 GMT
Date: Mon, 20 Mar 2023 04:08:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Mar 2023 03:14:52 GMT
content-type: application/json
age: 3222
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LR9lTtJKlv5hz6m+CCSA4gji0V2eQlNZuEQ9kzrh2whFhVJXMcK5z+QcAifwJi9NhpOlvvAYt4A=
x-amz-request-id: EZEWGA00KSJNEC1S
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Mar 2023 03:52:37 GMT
age: 957
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2857be6f18459c7a4a7f00f6cd6076f1
570609086d72a9be57cde7bfefd25663c1035fba
bd8abb8f420d1e31462fca1d6a7caadf1e2bba6fc7db05684b5811e00e84107f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9051
Expires: Mon, 20 Mar 2023 06:39:25 GMT
Date: Mon, 20 Mar 2023 04:08:34 GMT
Connection: keep-alive
ocsp.globalsign.com/gsrsaovsslca2018
151.101.66.133200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 151.101.66.133:0
Hash ba019063ca2aab430805eab17b3e0519
cb7a1c1d0fb23367143c4ba7809ec17245ef3f72
7fcd9dc6b4cdb672ed716d530777226ce7bd045cf19cc1668ab3b3cfbc314911
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Fri, 24 Mar 2023 01:05:52 GMT
ETag: "cb7a1c1d0fb23367143c4ba7809ec17245ef3f72"
Last-Modified: Mon, 20 Mar 2023 01:05:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 20 Mar 2023 04:08:34 GMT
Age: 3438
X-Served-By: cache-qpg1245-QPG, cache-bma1644-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 3, 0
X-Timer: S1679285315.521272,VS0,VE186
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:34 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
185.129.100.57200 OK 11 kB URL HTTP/2 www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
IP 185.129.100.57:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4136), with CRLF, LF line terminators
Hash 265106d6cc0c2960ceec0a70ed22d36b
fd4fd7f55085732ee6e33ca507711db529374aec
3f5e7b354c9342e6b872897790ff8497839e0af4d153e229ebc46baf3327ddb4
GET /a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25 HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: ddos-guard
date: Mon, 20 Mar 2023 04:08:34 GMT
content-type: text/html; charset=UTF-8
content-length: 11080
set-cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv; Domain=.fl.ru; HttpOnly; Path=/; Expires=Tue, 19-Mar-2024 04:08:34 GMT
PHPSESSID=6c39a3dd61c28a3b091cbe029565bf25; path=/; domain=www.fl.ru; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 7b9696c5a484fe48a260ec0ac6f4c2dc
5fa72a6aae12370de4d88d0aa205f293e5a85c5b
578156cb0f02ebb0d6472976aa7186f70b49dfad8623edd5595b740ff1559d2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Pragma, Content-Type, Content-Length, Cache-Control, Expires, Backoff, Alert, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Mar 2023 03:14:32 GMT
age: 3242
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash f1619e65eeac4c79d93deb418bb1b740
b1c592a47ab71569364b05c87362caef4dea7c67
7c83a70b21133bb49f5e0f8e9abd1fecb1a814b754d6d26e598e7e4589564c04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash f1619e65eeac4c79d93deb418bb1b740
b1c592a47ab71569364b05c87362caef4dea7c67
7c83a70b21133bb49f5e0f8e9abd1fecb1a814b754d6d26e598e7e4589564c04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11732
Expires: Mon, 20 Mar 2023 07:24:07 GMT
Date: Mon, 20 Mar 2023 04:08:35 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=G-RD9LL0K106
142.250.74.72200 OK 83 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RD9LL0K106
IP 142.250.74.72:0
File type ASCII text, with very long lines (28283)
Hash 0a05d8cbf98795c004253a970dbf1b42
5591a5079ea358b3549590c36cd05ad85f3f4f92
b47db2a3784a336836c75e27305f1f94280e212a1002fc625e188502cbfb70a8
GET /gtag/js?id=G-RD9LL0K106 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Mar 2023 04:08:35 GMT
expires: Mon, 20 Mar 2023 04:08:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83095
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-W8DQCVQ
142.250.74.72200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W8DQCVQ
IP 142.250.74.72:0
File type ASCII text, with very long lines (2206)
Hash 49c866b322f8060a36bcdf64fb04cecb
7d42dd479adb3074237a73fe6d37d26908078864
2ae130dc17d73438cedcedc06b205516fb97a94ffa796b74a5a1e7b89a36256c
GET /gtm.js?id=GTM-W8DQCVQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Mar 2023 04:08:35 GMT
expires: Mon, 20 Mar 2023 04:08:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 20 Mar 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext
172.217.21.170200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext
IP 172.217.21.170:0
Hash 794133a5fed9165fb0cf1735c7aaca77
20fa2127a5b9b2164c6e58e0843e5565b5ccad73
c9418f7b36390ca76542e91defa2d61e150bc953fa40f804a023e803c6d519fa
GET /css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 20 Mar 2023 04:08:35 GMT
date: Mon, 20 Mar 2023 04:08:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash f1619e65eeac4c79d93deb418bb1b740
b1c592a47ab71569364b05c87362caef4dea7c67
7c83a70b21133bb49f5e0f8e9abd1fecb1a814b754d6d26e598e7e4589564c04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash a00ea600f847b7ae36cc27b5e712c142
1d2fdee5ef10cad396135c7ab661ec15a5164db6
36e0bc77f4d2340831423edc1981e4883e337d4bacd4418238f2663c6034e3ff
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 20 Mar 2023 04:08:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 19 Mar 2023 21:04:27 GMT
Expires: Mon, 20 Mar 2023 21:04:27 GMT
ETag: "1d2fdee5ef10cad396135c7ab661ec15a5164db6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
api.mindbox.ru/scripts/v1/tracker.js
84.252.130.113200 OK 16 kB URL HTTP/1.1 api.mindbox.ru/scripts/v1/tracker.js
IP 84.252.130.113:0
ASN #200350 Yandex.Cloud LLC
File type ASCII text, with very long lines (30749)
Hash 026deb8af639d1a7577e61b531062131
096261890462d5bdd6e73c2a8160bbe0b188ca2b
c15b0eead361f981d5c46519ec59bda189e59a776469f9b3aaa1af04b4e1569f
GET /scripts/v1/tracker.js HTTP/1.1
Host: api.mindbox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
cache-control: public,max-age=604800
content-encoding: gzip
content-security-policy: default-src 'self' 'unsafe-inline'
content-type: application/javascript
date: Mon, 20 Mar 2023 04:08:35 GMT
etag: W/"384c3403cb2180679b030330f48c50f4"
feature-policy: vibrate 'self'
last-modified: Fri, 17 Mar 2023 09:06:56 GMT
referrer-policy: same-origin
server: nginx
strict-transport-security: max-age=315360000; includeSubDomains; preload
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 3644bb14447a2b03
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
transfer-encoding: chunked
push.services.mozilla.com/
54.203.40.189101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.203.40.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: guUxXfshyg95YYFaZD3+/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 12YRu4cSZMG0+PhOE++qNcNhPAw=
cdn.fl.ru/assets/legacy/vendors.49c7f63945ceef072d8257ebead491d4.css
5.101.71.73200 OK 388 kB URL HTTP/2 cdn.fl.ru/assets/legacy/vendors.49c7f63945ceef072d8257ebead491d4.css
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
Size 388 kB (387498 bytes)
Hash 56f64c4e9481c7a3ccdfe96c30fb16ac
2658f9402302c72f4b09c7556fd3348cf8f40de1
63c9796b8fca1e49b6e28b2131c089a5db0a39f1c49f9b8bc1a23a9ea4b2fd70
GET /assets/legacy/vendors.49c7f63945ceef072d8257ebead491d4.css HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"49c7f63945ceef072d8257ebead491d4"
last-modified: Fri, 17 Mar 2023 08:46:27 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042786.86810
x-trans-id: 174d2884c9e6174f
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-17T08:46:52+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/fonts/FiraSans-Regular.woff2
5.101.71.73200 OK 146 kB URL HTTP/2 cdn.fl.ru/fonts/FiraSans-Regular.woff2
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
File type Web Open Font Format (Version 2), TrueType, length 145720, version 1.0\012- data
Size 146 kB (145720 bytes)
Hash cfa5be9e756ebdef4ba6996c6a70c696
ab9f4b623d19e8eb4af2d1458f6b80753a48c1c8
4f5cf570037be6c36dfa12bd31e4cce13897e9fc56268213ebba235f2980d456
GET /fonts/FiraSans-Regular.woff2 HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: application/octet-stream
content-length: 145720
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "cfa5be9e756ebdef4ba6996c6a70c696"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.77107
x-trans-id: 16806cea252d00d6
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.fl.ru/fonts/FiraSans-SemiBold.woff2
5.101.71.73200 OK 155 kB URL HTTP/2 cdn.fl.ru/fonts/FiraSans-SemiBold.woff2
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
File type Web Open Font Format (Version 2), TrueType, length 154908, version 1.0\012- data
Size 155 kB (154908 bytes)
Hash 94061f2f769c77e515d64ed97be7dbdd
d0373e7c46d6c5a2008c2c1bab2a78a901118d4b
dd042f85d2b46b2ed60c63e94ec02cfce4df22b3326772917da27f8a5aa1981a
GET /fonts/FiraSans-SemiBold.woff2 HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: application/octet-stream
content-length: 154908
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "94061f2f769c77e515d64ed97be7dbdd"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.81318
x-trans-id: 16806cea27c0746d
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ee50d0c126ee5a7a3aa4e17d698da557
40adf925a8a008f1aab83a19c8e10c478a082c0b
5e7e475b4493a4bf4059665a984b997d75106ef5e7568166e2a689e9d2666cc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E7E475B4493A4BF4059665A984B997D75106EF5E7568166E2A689E9D2666CC1"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11338
Expires: Mon, 20 Mar 2023 07:17:34 GMT
Date: Mon, 20 Mar 2023 04:08:36 GMT
Connection: keep-alive
api.mindbox.ru/v1.1/customer/track-visit?version=1.0.425&transport=XmlHttpRequest
84.252.130.113200 OK 134 B URL HTTP/1.1 api.mindbox.ru/v1.1/customer/track-visit?version=1.0.425&transport=XmlHttpRequest
IP 84.252.130.113:0
ASN #200350 Yandex.Cloud LLC
File type JSON data\012- , ASCII text, with no line terminators
Hash 068c23cc69b887919435192870643401
0ae2d419c217a5120dafff2240a999848178354f
169f8406c2ea1ae1040dabad0ec21a6fcb58261a397cbaa7fc958ab521907f3c
POST /v1.1/customer/track-visit?version=1.0.425&transport=XmlHttpRequest HTTP/1.1
Host: api.mindbox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 373
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.fl.ru
cache-control: no-cache, no-store, must-revalidate
content-length: 134
content-security-policy: default-src 'self' 'unsafe-inline'
content-type: application/json; charset=utf-8
date: Mon, 20 Mar 2023 04:08:35 GMT
expires: -1
feature-policy: vibrate 'self'
pragma: no-cache
referrer-policy: same-origin
server: Kestrel
set-cookie: deviceUUID=7c92ddc7-2573-41c4-9833-c5d643750b0f; expires=Tue, 19 Jan 2038 00:00:00 GMT; path=/; secure; samesite=none; httponly
strict-transport-security: max-age=315360000; includeSubDomains; preload
vary: Origin
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
api.mindbox.ru/js/byendpoint/fl.ru.js?_=466468
84.252.130.113200 OK 95 B URL HTTP/1.1 api.mindbox.ru/js/byendpoint/fl.ru.js?_=466468
IP 84.252.130.113:0
ASN #200350 Yandex.Cloud LLC
File type ASCII text, with no line terminators
Hash 9eb65b49f72bca182fcedd6061fdeed5
f8a7d7ffd4901560827a2dc79c0917821aea6fbe
bb4401bf9ba618dbcfb81c2b859198d087d5fa7424a4671e7948f9af1a29a5b2
GET /js/byendpoint/fl.ru.js?_=466468 HTTP/1.1
Host: api.mindbox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Origin: https://www.fl.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
access-control-expose-headers: ETag
access-control-max-age: 3000
content-encoding: gzip
content-security-policy: default-src 'self' 'unsafe-inline'
content-type: application/javascript
date: Mon, 20 Mar 2023 04:08:36 GMT
etag: W/"7935f8503fb7c167fec39f5140eefd87"
feature-policy: vibrate 'self'
last-modified: Sun, 19 Mar 2023 08:06:12 GMT
referrer-policy: same-origin
server: nginx
strict-transport-security: max-age=315360000; includeSubDomains; preload
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method,Origin
x-amz-request-id: 1175ef3f0537463c
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
transfer-encoding: chunked
cdn.fl.ru/assets/legacy/entry-client-manifest.267b5a81fe9842433cfe9c8fda1e48a6.js
5.101.71.73200 OK 10 kB URL HTTP/2 cdn.fl.ru/assets/legacy/entry-client-manifest.267b5a81fe9842433cfe9c8fda1e48a6.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
Hash b71138725f5c228d7b18dbe9724c6985
5f7715433ed8d8273fb0fa9349047c4971d18280
22e62d26bb68eef4162e386663438db07b43d51eb74ffa8a4750decb33ba1527
GET /assets/legacy/entry-client-manifest.267b5a81fe9842433cfe9c8fda1e48a6.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"5d19391380e8a2ca2187592eb386f196"
last-modified: Mon, 06 Mar 2023 13:14:45 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108484.20988
x-trans-id: 1749d6c67fd379be
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:31:58+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/entry-client.e75b2f7404cccaba22904a26def8a4a7.js
5.101.71.73200 OK 415 kB URL HTTP/2 cdn.fl.ru/assets/legacy/entry-client.e75b2f7404cccaba22904a26def8a4a7.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
File type Unicode text, UTF-8 text, with very long lines (65497), with no line terminators
Size 415 kB (415079 bytes)
Hash 14b50c69ad9a36c87ee1dbe91aef996a
9c2ae96615c9c12d4d62710b807db44330dd039b
5b2735a491a33a8c4937484df927014a4b902d79172c774144215b28c59fbe4c
GET /assets/legacy/entry-client.e75b2f7404cccaba22904a26def8a4a7.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"81844f971f8ece436da7ee05fe69f86c"
last-modified: Fri, 17 Mar 2023 07:21:37 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679037696.48754
x-trans-id: 174d23e39795693f
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-17T07:22:08+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6a3fcfdbe8eba2bdeb6196fa27c13b7
4b7ab7ea81d1c4fdda7ced192379aa1dd6fef39c
19a0f428cd06c00b4e753ff742a9f693860e5b6296b983131cedb579251405eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19A0F428CD06C00B4E753FF742A9F693860E5B6296B983131CEDB579251405EB"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12401
Expires: Mon, 20 Mar 2023 07:35:17 GMT
Date: Mon, 20 Mar 2023 04:08:36 GMT
Connection: keep-alive
x.cnt.my/px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525
138.201.230.88301 Moved Permanently 405 B URL HTTP/2 x.cnt.my/px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525
IP 138.201.230.88:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (405), with no line terminators
Hash 657e6cd0f899d08d3a2a2ff3c9771045
9f0f60b0f426bafcd0cf821bcaf7732ce2714fad
ceea050441ed572b91c92a4931a0dd3d94a33c9990b6a6a9640b2e987011d13f
GET /px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525 HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: text/plain; charset=utf-8
content-length: 405
cache-control: no-cache
set-cookie: xcntUt=x2112210f47de98115; Expires=Tue, 21 Mar 2023 04:08:36 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
location: /px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rand=0.6250401197550172&xtmp=1
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/entry-client-vendor.a5ce7ef636afb1a9fdc1270459f1833e.js
5.101.71.73200 OK 310 kB URL HTTP/2 cdn.fl.ru/assets/legacy/entry-client-vendor.a5ce7ef636afb1a9fdc1270459f1833e.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
File type ASCII text, with very long lines (65536), with no line terminators
Size 310 kB (310302 bytes)
Hash 9df692cc474a6e9fcf19a9735f597f8d
7a7195e717afc836243d4c73b993e375b828190c
f4d3c2fe04ce5427ad298ebf98f2ed783e844887fb203695a93ecde30f4fd188
GET /assets/legacy/entry-client-vendor.a5ce7ef636afb1a9fdc1270459f1833e.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"3a61a89467aa539767175c3781624c91"
last-modified: Mon, 06 Mar 2023 13:14:48 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108487.09508
x-trans-id: 1749d6c72bcdac56
x-xss-protection: 1; mode=block
age: 2
cache: HIT
x-cached-since: 2023-03-06T19:31:59+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
x.cnt.my/px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rand=0.6250401197550172&xtmp=1
138.201.230.88200 OK 35 B URL HTTP/2 x.cnt.my/px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rand=0.6250401197550172&xtmp=1
IP 138.201.230.88:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /px/?r=0.12414109962685793&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1152&oh=921&iw=1152&ih=836&scd=24&ifr=1&url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rand=0.6250401197550172&xtmp=1 HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Connection: keep-alive
Cookie: xcntUt=x2112210f47de98115
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: image/gif; charset=utf-8
content-length: 35
cache-control: no-cache,max-age=0,must-revalidate, no-cache
access-control-allow-origin: *
set-cookie: xcntIDR=y26dfc7a6ffe0fe53c; Expires=Tue, 19 Mar 2024 04:08:36 GMT; Path=/; Domain=fl.ru; Secure; SameSite=None
xcntID=y26dfc7a6ffe0fe53c; Expires=Tue, 19 Mar 2024 04:08:36 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
xcntUt=x2112210f47de98115; Expires=Mon, 20 Mar 2023 04:08:36 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
pragma: no-cache
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/vendors.354b1334eb3411ea83aa584c24f9f769.js
5.101.71.73200 OK 563 kB URL HTTP/2 cdn.fl.ru/assets/legacy/vendors.354b1334eb3411ea83aa584c24f9f769.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
Size 563 kB (563278 bytes)
Hash 702fec6e6182b460eb358683ff1ed907
495bec38aee8c74142d0998b8970c0c58a3d6ea2
37543e4a584aa6c35e52cfdc307ad65b890892895ed81096f187d13950644fd8
GET /assets/legacy/vendors.354b1334eb3411ea83aa584c24f9f769.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"f5c979439c8ef6a438e3ee32a6de393b"
last-modified: Mon, 06 Mar 2023 13:14:48 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108487.27899
x-trans-id: 1749d6c736c279d7
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:31:59+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
www.fl.ru/scripts/mindbox/mindbox-services-worker.js?messagingSenderId=1049598945361&version=1.19.0
185.129.100.57200 OK 67 B URL HTTP/2 www.fl.ru/scripts/mindbox/mindbox-services-worker.js?messagingSenderId=1049598945361&version=1.19.0
IP 185.129.100.57:0
Hash de73dd54a4154c16e731f99d6dd0d826
3ea4134618a486741e2f66b8c50c4831110fb585
dd6699e6520d4ce7094b2ff50786f0b7775082703eefc494afa60ee2d7e66942
GET /scripts/mindbox/mindbox-services-worker.js?messagingSenderId=1049598945361&version=1.19.0 HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv; PHPSESSID=6c39a3dd61c28a3b091cbe029565bf25; _ga_RD9LL0K106=GS1.1.1679285316.1.0.1679285316.0.0.0; _ga=GA1.1.1266220880.1679285316; mindboxDeviceUUID=7c92ddc7-2573-41c4-9833-c5d643750b0f; directCrm-session=%7B%22deviceGuid%22%3A%227c92ddc7-2573-41c4-9833-c5d643750b0f%22%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: application/javascript
content-length: 67
last-modified: Fri, 11 Feb 2022 14:51:41 GMT
etag: "43-5d7bf346eb1d1"
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
service-worker-allowed: /
X-Firefox-Spdy: h2
cdn.userecho.com/js/widget-script.gz.js?v=2.5.6
138.201.250.173200 OK 8.9 kB URL HTTP/2 cdn.userecho.com/js/widget-script.gz.js?v=2.5.6
IP 138.201.250.173:0
ASN #24940 Hetzner Online GmbH
File type HTML document, Unicode text, UTF-8 text, with very long lines (30665), with no line terminators
Hash f1727b9f2ab3fe9478365448ff0bb097
8056563221f0369a02be47f8dcd0d4d2a77561dc
355de013364d8efbc67e443b73950aba9f43ae52945a47d228b002b20253cc9b
GET /js/widget-script.gz.js?v=2.5.6 HTTP/1.1
Host: cdn.userecho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: application/javascript
content-length: 8872
last-modified: Mon, 17 Oct 2022 19:26:38 GMT
etag: "634dac6e-22a8"
content-encoding: gzip
expires: Tue, 19 Mar 2024 04:08:36 GMT
cache-control: max-age=31536000, public
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 20 Mar 2023 03:53:25 GMT
expires: Mon, 20 Mar 2023 05:53:25 GMT
cache-control: public, max-age=7200
age: 911
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.fl.ru/favicon.ico
185.129.100.57200 OK 4.5 kB IP 185.129.100.57:0
File type MS Windows icon resource - 1 icon, 33x32, 32 bits/pixel\012- data
Hash 2170bd32702d0f420e0f96220e16eb78
6c287f0dcdbf2259710cf6e3409705be4da89a11
2d193279addc3106f20379e618d628f24908c43eff7a502885f3ad45ddc55160
GET /favicon.ico HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/a.php?href=https://rusimm.com/redirect?url=https://acadomia.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=https://www.diigo.com/sign-up?plan%25
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv; PHPSESSID=6c39a3dd61c28a3b091cbe029565bf25; _ga_RD9LL0K106=GS1.1.1679285316.1.0.1679285316.0.0.0; _ga=GA1.1.1266220880.1679285316; mindboxDeviceUUID=7c92ddc7-2573-41c4-9833-c5d643750b0f; directCrm-session=%7B%22deviceGuid%22%3A%227c92ddc7-2573-41c4-9833-c5d643750b0f%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: image/x-icon
content-length: 4542
last-modified: Fri, 02 Oct 2020 14:04:51 GMT
etag: "5f773383-11be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
151.101.66.133200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.66.133:0
Hash 2831249eb01bc83d862b719cab87e11c
d1fd14c085ab54371e8c844941ce47664aff059f
42cdc24a1bfaac1c84f7dbed72c41d1d616d26949e70b61f3fad02c1460d3b0d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Fri, 24 Mar 2023 03:42:46 GMT
ETag: "d1fd14c085ab54371e8c844941ce47664aff059f"
Last-Modified: Mon, 20 Mar 2023 03:42:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 20 Mar 2023 04:08:36 GMT
Age: 1085
X-Served-By: cache-qpg1244-QPG, cache-bma1644-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 21
X-Timer: S1679285316.456412,VS0,VE0
ocsp.globalsign.com/gsgccr3dvtlsca2020
151.101.66.133200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 151.101.66.133:0
Hash ce39f32caa0bbedae6f27ca6fbb9b08a
a41547f65f3e4cb7282f893bf5f2ea6a4c161090
868f9a44da97e0458125fc7cdf735ec7047c635f7fa28d0864d167a7ceea9399
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1414
Server: nginx
Content-Type: application/ocsp-response
Expires: Fri, 24 Mar 2023 01:36:22 GMT
ETag: "a41547f65f3e4cb7282f893bf5f2ea6a4c161090"
Last-Modified: Mon, 20 Mar 2023 01:36:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 20 Mar 2023 04:08:36 GMT
Age: 1932
X-Served-By: cache-qpg1268-QPG, cache-bma1644-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 6, 14
X-Timer: S1679285316.481034,VS0,VE0
ocsp2.globalsign.com/gsorganizationvalsha2g2
151.101.130.133200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 151.101.130.133:0
Hash aa65e60bd43974fa47e553b498924dd6
95401c4ff68511b49b31d21012bd2f2e3e782c6a
2f81888317108231d4409aa5aceef0a13773d79c68c58cf0db7c4a7efb1186c3
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1459
Server: nginx
Content-Type: application/ocsp-response
Expires: Fri, 24 Mar 2023 03:20:51 GMT
ETag: "95401c4ff68511b49b31d21012bd2f2e3e782c6a"
Last-Modified: Mon, 20 Mar 2023 03:20:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 20 Mar 2023 04:08:36 GMT
Age: 2863
X-Served-By: cache-qpg1229-QPG, cache-bma1661-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 71
X-Timer: S1679285316.481386,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
151.101.66.133200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.66.133:0
Hash edd97fd4a7d3f491884ffa5777a822cb
035a8eb9771ef39a3bb8191480b7a5fed8802ac7
d53092eab770e46daa02ae18f0bcee28500b96aafa2c8b3be3a22a23e374045d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 940
Server: nginx
Content-Type: application/ocsp-response
Expires: Fri, 24 Mar 2023 03:52:22 GMT
ETag: "035a8eb9771ef39a3bb8191480b7a5fed8802ac7"
Last-Modified: Mon, 20 Mar 2023 03:52:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 20 Mar 2023 04:08:36 GMT
Age: 973
X-Served-By: cache-qpg1272-QPG, cache-bma1644-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 5, 16
X-Timer: S1679285316.490519,VS0,VE0
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 2e64fc6f9ae4228dd2fc48d61e1d8841
ae781abd01bae215d2ccc65fe308aaa4e3df6706
f8f424b8de4cb7cea5608432bbad1786f02cbc7e3c111f5d395288065f134fa0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.fl.ru/assets/icons.svg
5.101.71.73200 OK 208 kB URL HTTP/2 cdn.fl.ru/assets/icons.svg
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
Size 208 kB (208337 bytes)
Hash 7649d1b9e1a61a01e860e3f6d0eb5f43
6bd990016c5fbd0b82363cee543d72025501acbf
2568021124f092b913a976d6143d9fe1451ff553196841a5519e32514e9fa8d0
GET /assets/icons.svg HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: image/svg+xml
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"091efb656b35df3f2167ec22328d67ca"
last-modified: Fri, 17 Mar 2023 08:46:32 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042791.51439
x-trans-id: 174d2885de62718f
x-xss-protection: 1; mode=block
age: 70
cache: HIT
x-cached-since: 2023-03-17T09:34:24+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&gjid=1569162340&_gid=1340686223.1679285316&_u=aCDAgEABAAAAAEAAI~&z=449135892
108.177.14.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&gjid=1569162340&_gid=1340686223.1679285316&_u=aCDAgEABAAAAAEAAI~&z=449135892
IP 108.177.14.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&gjid=1569162340&_gid=1340686223.1679285316&_u=aCDAgEABAAAAAEAAI~&z=449135892 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.fl.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 20 Mar 2023 04:08:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883
95.163.52.67302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883
set-cookie: FTID=1RMYgQ0tkIIG:1679285316:2730876:::; path=/; expires=Wed, 20-Mar-24 04:08:36 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?168
93.186.225.194200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?168
IP 93.186.225.194:0
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js?168 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Fri, 24 Mar 2023 04:08:36 GMT
cache-control: max-age=345600
x-frontend: front605110
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
87.250.251.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 6a599c9bd605553d6e8ea26b240017e5
ce6de2eaa815569841f1b16de3de7aa841ac7e88
8ee4a7bf51b198d826a7320c21965e73d95fd1642d9071a1a840e566ee9303de
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73790
date: Mon, 20 Mar 2023 04:08:36 GMT
access-control-allow-origin: *
etag: "6412d54e-1203e"
expires: Mon, 20 Mar 2023 05:08:36 GMT
last-modified: Thu, 16 Mar 2023 11:37:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
api.mindbox.ru/scripts/service-worker.js
84.252.130.113200 OK 32 kB URL HTTP/1.1 api.mindbox.ru/scripts/service-worker.js
IP 84.252.130.113:0
ASN #200350 Yandex.Cloud LLC
File type ASCII text, with very long lines (6364)
Hash 7e9d9ac322c4bf622ba5db12c76752ce
70be2424ce62fe0a084fbe224bc623b106a7d32a
11e1cb7eafafdf603a34c89b81852ff86f3b3424ffbd6ac848b0aa5665def001
GET /scripts/service-worker.js HTTP/1.1
Host: api.mindbox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
cache-control: public,max-age=604800
content-encoding: gzip
content-security-policy: default-src 'self' 'unsafe-inline'
content-type: application/javascript
date: Mon, 20 Mar 2023 04:08:36 GMT
etag: W/"219534039f3b7a5fc63368e8df4c3902"
feature-policy: vibrate 'self'
last-modified: Fri, 17 Mar 2023 09:06:56 GMT
referrer-policy: same-origin
server: nginx
strict-transport-security: max-age=315360000; includeSubDomains; preload
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 5fdddfdf0877b97c
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
transfer-encoding: chunked
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 2e64fc6f9ae4228dd2fc48d61e1d8841
ae781abd01bae215d2ccc65fe308aaa4e3df6706
f8f424b8de4cb7cea5608432bbad1786f02cbc7e3c111f5d395288065f134fa0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vk.com/rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&metatag_title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru
93.186.225.194200 OK 65 B URL HTTP/2 vk.com/rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&metatag_title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru
IP 93.186.225.194:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ec4341fe3a8b2c4880fbfe0ef9cde34f
a0947414eb426b2939ca1a05fc870763f6bfc63f
01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&metatag_title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.113525
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Mon, 25 Mar 2024 01:04:07 GMT; path=/; domain=.vk.com
remixstlid=9089767257032966403_H9Z2jcOKnG0UERP6QpF230SsrRjchGWYDSgFuMBZtLP; expires=Tue, 19 Mar 2024 04:08:36 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front605110
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;title=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;_=0.03322613355039883 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679285316:2730876:::; path=/; expires=Wed, 20-Mar-24 04:08:36 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11573
Expires: Mon, 20 Mar 2023 07:21:29 GMT
Date: Mon, 20 Mar 2023 04:08:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11573
Expires: Mon, 20 Mar 2023 07:21:29 GMT
Date: Mon, 20 Mar 2023 04:08:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11573
Expires: Mon, 20 Mar 2023 07:21:29 GMT
Date: Mon, 20 Mar 2023 04:08:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash e8fc65c8ed6ea66df6d6f044d7636fe2
da5b32e7c3fb8dddbd1466e4733cab6e35a66f8c
733e51b02cac5aca153e462118e12f623b0be034bb5488eb021c09a4b41744dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: K19FG80YIBs-7NnPFJQEodETe4DpifB_BA2FpyYtB0W-sXXjNlLKxw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 21618d080c6bfbcd465fc55a167a8c1a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 07:04:47 GMT
age: 75829
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F074a4e20-c43f-4c99-8ce9-d5a9c6cec458.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F074a4e20-c43f-4c99-8ce9-d5a9c6cec458.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fd780a25511e0b884ca63b9f101e3043
5c9847347c321e27c861c3db5c07f8f447961220
58e76646f3c0867de8dd47ba2f6e3f934c9de33e950d5eeda25febf2638079c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F074a4e20-c43f-4c99-8ce9-d5a9c6cec458.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6861
x-amzn-requestid: a01ef211-7414-4bef-adb4-9778e34747c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDEG0G6NIAMFUpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64178091-173e51f01625d8ff270b2d0a;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: LpLQ6jxJB-mbXduNqlVb81QRw9uPaHzX5YWfdCXiSzzqB1RuT-5Crg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:37:49 GMT
age: 23447
etag: "5c9847347c321e27c861c3db5c07f8f447961220"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 2eb57e50cf85e854f2979aae08edfbbd
c1d8f0aa625a907989b1eedd64dfaa8b59f73d14
e36ae9f68c31c5d9f1eb6a96b26f97b94b8d61f8a47aa1c576bc0f816e3a2e14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59eb1d88-9afd-445f-bf6b-f7edc71a4aff.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59eb1d88-9afd-445f-bf6b-f7edc71a4aff.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 20e0cf109126f01b80e30c2d40549641
db5eb3144ed0ac478abdf10d270f43d9cc391bc8
7f6eed19068600b6276764a56214b719bf5ed441515dec178cb692f401d1fc46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59eb1d88-9afd-445f-bf6b-f7edc71a4aff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9492
x-amzn-requestid: 296aee48-493a-4ba5-9af8-52f8d670ecd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDED-FpLIAMF8gQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417807f-53a2b69421e6086f75a010eb;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: A_msbmDK7yDsLci6N5voskxrgEqcTXYXNYtccHHjPipABoK4VZMZzA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:37:03 GMT
etag: "db5eb3144ed0ac478abdf10d270f43d9cc391bc8"
content-type: image/jpeg
age: 23493
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 302595cc68fe8cf12121d0f652b3194d
e5532a3fed552246e8a63ea2ba75e174273a7b9f
6ca3599a9af06f51d4dc205d4ebd8f7f8b38c54864b6b478eac8c0d1adbc97c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7695
x-amzn-requestid: 1009077b-14aa-42e5-86f1-de94b8b2aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDETIHf8oAMFxEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641780e0-07bbb0376f1c1941731e00ba;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 388_JExXl_vwNTUh_69QfjoGz-cNeQwwrp6kpAP1Hhv3VvtgeeXbrw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:55:31 GMT
age: 22385
etag: "e5532a3fed552246e8a63ea2ba75e174273a7b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1100f09022852609077bf427f7ce49cd
352e2e60702ca76d7308bbbee83ef7c1413c5b0c
d1cf4a7974bb384cf13448a6aecc5f6bbd387e0eeb60d696df35acfd5231a46b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11394
x-amzn-requestid: cda4fbe4-0b4e-4836-839a-54f4e40d61a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDVOEZ7oAMFZwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f54-17fbfda14a9a37e523ca5d54;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ZTTTWfKeikORTA2LNaw0Y53oUvqRI-WNFJ28Mu8NzVruBHPkB0VswA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 22:15:29 GMT
age: 21187
etag: "352e2e60702ca76d7308bbbee83ef7c1413c5b0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c02b9c1-0ea5-472c-95e9-5fcd5cf9d11d.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c02b9c1-0ea5-472c-95e9-5fcd5cf9d11d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 08f2d83ce4f0d9158f2414065924955d
76d9b0d87b9ad6f6b5ec225d46eb04154cf113c5
9d11c0726d38515d1f847423ccccbb7b06b14c65e6776741d30d5f4b5bd9cc39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c02b9c1-0ea5-472c-95e9-5fcd5cf9d11d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7714
x-amzn-requestid: 3c48be36-11d4-4e6d-a376-b73f5836ccaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDUuEcXIAMFbUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f51-15606b16594e67e74234c992;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: EZb5UlE1ggV28LSzY0AauVJaJ69-EuzM9aUSJA-unn2Ys3sQpTNTBg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 21:44:17 GMT
age: 23059
etag: "76d9b0d87b9ad6f6b5ec225d46eb04154cf113c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 20 Mar 2023 04:08:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659
216.58.207.227200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659
IP 216.58.207.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=1266220880.1679285316&jid=38531199&_u=aCDAgEABAAAAAEAAI~&z=1755543659 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 20 Mar 2023 04:08:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-RD9LL0K106>m=45je33f0&_p=68470818&cid=1266220880.1679285316&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1679285316&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&dt=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-RD9LL0K106>m=45je33f0&_p=68470818&cid=1266220880.1679285316&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1679285316&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&dt=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-RD9LL0K106>m=45je33f0&_p=68470818&cid=1266220880.1679285316&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1679285316&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&dt=%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.fl.ru
date: Mon, 20 Mar 2023 04:08:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash d2b91b87a3060a36d0002f6338924521
b216a0ae0e118f942207ae6c51a5309393fe79f4
835446923abce8bde27c74317de5388462f43f7cbf93293a15891a2a2554e406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 2eb57e50cf85e854f2979aae08edfbbd
c1d8f0aa625a907989b1eedd64dfaa8b59f73d14
e36ae9f68c31c5d9f1eb6a96b26f97b94b8d61f8a47aa1c576bc0f816e3a2e14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Mar 2023 04:08:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1909%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A808161408%3Arqn%3A1%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C303%2C102%2C6%2C275%2C0%2C%2C1111%2C41%2C%2C%2C%2C1870%3Aco%3A0%3Ans%3A1679285314036%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679285317%3At%3A%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1909%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A808161408%3Arqn%3A1%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C303%2C102%2C6%2C275%2C0%2C%2C1111%2C41%2C%2C%2C%2C1870%3Aco%3A0%3Ans%3A1679285314036%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679285317%3At%3A%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 56b8224122abc513f5ca0433fbb6bea3
e707da03d247ea059accd7c6c0660220554f58af
ca1879c9d386f20d3a5974c859cb2e1eed236b1cf56b3370d6719eead64639c9
GET /watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1909%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A808161408%3Arqn%3A1%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C303%2C102%2C6%2C275%2C0%2C%2C1111%2C41%2C%2C%2C%2C1870%3Aco%3A0%3Ans%3A1679285314036%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679285317%3At%3A%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20(%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81)%20%D0%BD%D0%B0%20FL.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/6051055/1?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1909%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A808161408%3Arqn%3A1%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C303%2C102%2C6%2C275%2C0%2C%2C1111%2C41%2C%2C%2C%2C1870%3Aco%3A0%3Ans%3A1679285314036%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679285317%3At%3A%D0%A3%D0%B4%D0%B0%D0%BB%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%20%28%D1%84%D1%80%D0%B8-%D0%BB%D0%B0%D0%BD%D1%81%29%20%D0%BD%D0%B0%20FL.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Mon, 20 Mar 2023 04:08:36 GMT
access-control-allow-origin: https://www.fl.ru
set-cookie: yabs-sid=593190641679285316; Path=/; SameSite=None; Secure
i=xFNWM+l24814XqUpiKThohcREp3D5kUXxfdPSdPHVdkOtYqF+D7GnTNdX+tg9uW8fy6M9AfbqZ+AHgqNhxAjF+nQBIw=; Expires=Thu, 17-Mar-2033 04:08:33 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9620166181679285316; Expires=Thu, 17-Mar-2033 04:08:33 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
yuidss=9620166181679285316; Expires=Tue, 19-Mar-2024 04:08:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1710821316.yc.1679285316#1710821316.yrts.1679285316#1710821316.yrtsi.1679285316; Expires=Tue, 19-Mar-2024 04:08:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 20-Mar-2023 04:08:36 GMT
last-modified: Mon, 20-Mar-2023 04:08:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&hittoken=1679285316_ddc06d0cfd2f014d1b78c72d1aea274115700bbb7f64268c9b953c32719b6472&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A615156722%3Arqn%3A2%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679285314036%3Ast%3A1679285317&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&hittoken=1679285316_ddc06d0cfd2f014d1b78c72d1aea274115700bbb7f64268c9b953c32719b6472&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A615156722%3Arqn%3A2%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679285314036%3Ast%3A1679285317&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&charset=utf-8&hittoken=1679285316_ddc06d0cfd2f014d1b78c72d1aea274115700bbb7f64268c9b953c32719b6472&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1635827667271%3Ahid%3A867525968%3Az%3A0%3Ai%3A20230320040836%3Aet%3A1679285317%3Ac%3A1%3Arn%3A615156722%3Arqn%3A2%3Au%3A1679285317314528294%3Aw%3A1140x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679285314036%3Ast%3A1679285317&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 52
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 20 Mar 2023 04:08:37 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 20-Mar-2023 04:08:37 GMT
last-modified: Mon, 20-Mar-2023 04:08:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d19c9ed5e1e5cb8d11b2119fe1dceec6
09a45d5f97452343092f0aee82d1db0ebcf035be
b3e1b11fbc460c9837cc77ad0fe25724844f4eb85aabce33bf3badb9a097083b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3E1B11FBC460C9837CC77AD0FE25724844F4EB85AABCE33BF3BADB9A097083B"
Last-Modified: Sun, 19 Mar 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14385
Expires: Mon, 20 Mar 2023 08:08:22 GMT
Date: Mon, 20 Mar 2023 04:08:37 GMT
Connection: keep-alive
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 20 Mar 2023 04:08:37 GMT
access-control-allow-origin: *
etag: "6412d54e-2b"
expires: Mon, 20 Mar 2023 05:08:37 GMT
accept-ranges: bytes
last-modified: Thu, 16 Mar 2023 11:37:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bf123e971b4ae66045f162ef6bb9509
a9967b1ecaa460e9beef94cff31f7c4fe004b281
595c86553032c8e50e71287db5e23057a587455920adee2ae770357b482b6bdd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "595C86553032C8E50E71287DB5E23057A587455920ADEE2AE770357B482B6BDD"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9455
Expires: Mon, 20 Mar 2023 06:46:12 GMT
Date: Mon, 20 Mar 2023 04:08:37 GMT
Connection: keep-alive
citydsp.com/dsp?h=www.fl.ru&r=0.4526787728609796
62.138.6.193200 OK 300 B URL HTTP/1.1 citydsp.com/dsp?h=www.fl.ru&r=0.4526787728609796
IP 62.138.6.193:0
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (540), with no line terminators
Hash e249bb83554c5077e442d453c091defe
23de50ad6cc57487e7cb4bd500d14be025b310ad
71a96e9ffae1b3c27a03b8a810f2703ab566b204d53dc95ae3d13691910cd4cf
GET /dsp?h=www.fl.ru&r=0.4526787728609796 HTTP/1.1
Host: citydsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 04:08:37 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: userId=9681325575; path=/; HttpOnly; Secure; SameSite=none; expires=Sat, 16 Sep 2023 04:08:37 GMT; httponly
Content-Encoding: gzip
top-fwz1.mail.ru/tracker?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;nt=0/0/1679285314036/////275/297/299/299/601/329/602/704/709/712/1820/1870/1911/3036/3036/;_=0.8669479832509501;e=RT/load;et=1679285317076
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;nt=0/0/1679285314036/////275/297/299/299/601/329/602/704/709/712/1820/1870/1911/3036/3036/;_=0.8669479832509501;e=RT/load;et=1679285317076
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2730876;u=https%3A//www.fl.ru/a.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525;st=1679285315855;s=1280*1024;vp=1140*836;touch=0;hds=1;flash=;sid=1e5c1e8613cbd031;ver=60;nt=0/0/1679285314036/////275/297/299/299/601/329/602/704/709/712/1820/1870/1911/3036/3036/;_=0.8669479832509501;e=RT/load;et=1679285317076 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:37 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679285317:2730876:::; path=/; expires=Wed, 20-Mar-24 04:08:37 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
client.getinchat.com/ue/agents/feedback.fl.ru?rnd=0.5639258688549762&uewv=2.5.6
147.135.44.9200 OK 2 B URL HTTP/2 client.getinchat.com/ue/agents/feedback.fl.ru?rnd=0.5639258688549762&uewv=2.5.6
IP 147.135.44.9:0
Hash 897316929176464ebc9ad085f31e7284
09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
GET /ue/agents/feedback.fl.ru?rnd=0.5639258688549762&uewv=2.5.6 HTTP/1.1
Host: client.getinchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.6
date: Mon, 20 Mar 2023 04:08:37 GMT
content-type: text/html
content-length: 2
last-modified: Thu, 19 Dec 2019 20:38:16 GMT
etag: "5dfbdfb8-2"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7b680316ecd1d25abc07a4a90f3573b7
1a89bb3c3b6dbac1d7173eb4549f2354767d84c0
5d4b6f9ef69b300b37dd7281caae4ed112404965e9f3a59ca94d791f8b9b4cb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4B6F9EF69B300B37DD7281CAAE4ED112404965E9F3A59CA94D791F8B9B4CB3"
Last-Modified: Fri, 17 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15455
Expires: Mon, 20 Mar 2023 08:26:12 GMT
Date: Mon, 20 Mar 2023 04:08:37 GMT
Connection: keep-alive
stikilo.com/start?r=0.5763176916034028
104.248.36.113200 OK 20 B URL HTTP/1.1 stikilo.com/start?r=0.5763176916034028
IP 104.248.36.113:0
ASN #14061 DIGITALOCEAN-ASN
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /start?r=0.5763176916034028 HTTP/1.1
Host: stikilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 04:08:37 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc206afe906edd01904fa57d3e6fcb96
50be27b79f54c87326e544b7a06259c6dfa034d3
2d355aa0c90b7ad85dfa4178ccf6893b4321aeed431edf4c98e4204d5d78f13c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D355AA0C90B7AD85DFA4178CCF6893B4321AEED431EDF4C98E4204D5D78F13C"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12231
Expires: Mon, 20 Mar 2023 07:32:28 GMT
Date: Mon, 20 Mar 2023 04:08:37 GMT
Connection: keep-alive
retagro.com/init?r=0.7076855468600405
85.25.203.29200 OK 911 B URL HTTP/1.1 retagro.com/init?r=0.7076855468600405
IP 85.25.203.29:0
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1734), with no line terminators
Hash 875007814f62e720318816fd74c2820b
e41de0ee2de17e6400e292fed59a245f08224167
1659919bef4724f474a560ac359cc9be41b90e66991a1c806b35cad6fa1da36e
GET /init?r=0.7076855468600405 HTTP/1.1
Host: retagro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 04:08:37 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip
retagro.com/analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221679285317547851%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1152%2C%22height%22%3A836%2C%22outerWidth%22%3A1152%2C%22outerHeight%22%3A921%7D
85.25.203.29200 OK 20 B URL HTTP/1.1 retagro.com/analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221679285317547851%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1152%2C%22height%22%3A836%2C%22outerWidth%22%3A1152%2C%22outerHeight%22%3A921%7D
IP 85.25.203.29:0
ASN #8972 Host Europe GmbH
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221679285317547851%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1152%2C%22height%22%3A836%2C%22outerWidth%22%3A1152%2C%22outerHeight%22%3A921%7D HTTP/1.1
Host: retagro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Mar 2023 04:08:37 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: user_id=10576826439; path=/; HttpOnly; Secure; SameSite=none; expires=Sat, 16 Sep 2023 04:08:37 GMT; httponly
Content-Encoding: gzip
top-fwz1.mail.ru/tracker?js=13;id=2730876;e=RT/unload;sid=1e5c1e8613cbd031;ids=2730876;ver=60;_=0.8157117898236695
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=2730876;e=RT/unload;sid=1e5c1e8613cbd031;ids=2730876;ver=60;_=0.8157117898236695
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=2730876;e=RT/unload;sid=1e5c1e8613cbd031;ids=2730876;ver=60;_=0.8157117898236695 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:43 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679285323:2730876:::; path=/; expires=Wed, 20-Mar-24 04:08:43 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wv-check=51644&wv-type=0&wmode=0&wv-part=1&wv-hit=867525968&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rn=836523099&browser-info=we%3A1%3Aet%3A1679285323%3Aw%3A1140x836%3Av%3A970%3Az%3A0%3Ai%3A20230320040842%3Au%3A1679285317314528294%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679285323&t=gdpr(14)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wv-check=51644&wv-type=0&wmode=0&wv-part=1&wv-hit=867525968&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rn=836523099&browser-info=we%3A1%3Aet%3A1679285323%3Aw%3A1140x836%3Av%3A970%3Az%3A0%3Ai%3A20230320040842%3Au%3A1679285317314528294%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679285323&t=gdpr(14)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wv-check=51644&wv-type=0&wmode=0&wv-part=1&wv-hit=867525968&page-url=https%3A%2F%2Fwww.fl.ru%2Fa.php%3Fhref%3Dhttps%253A%252F%252Frusimm.com%252Fredirect%253Furl%253Dhttps%253A%252F%252Facadomia.ru%252Fbitrix%252Fredirect.php%253Fevent1%253D%26event2%3D%26event3%3D%26goto%3Dhttps%253A%252F%252Fwww.diigo.com%252Fsign-up%253Fplan%2525&rn=836523099&browser-info=we%3A1%3Aet%3A1679285323%3Aw%3A1140x836%3Av%3A970%3Az%3A0%3Ai%3A20230320040842%3Au%3A1679285317314528294%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679285323&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 20 Mar 2023 04:08:43 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 20-Mar-2023 04:08:43 GMT
last-modified: Mon, 20-Mar-2023 04:08:43 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/professions.7bd3ea255837b2014a9c338e26531623.js
5.101.71.73200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/legacy/professions.7bd3ea255837b2014a9c338e26531623.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
GET /assets/legacy/professions.7bd3ea255837b2014a9c338e26531623.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"e7320f3bb75368c656636a68d0acc369"
last-modified: Fri, 17 Mar 2023 07:21:36 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679037695.31086
x-trans-id: 174d23e35163a8da
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-17T07:22:08+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/vendors-frontend.11ab635ba5fb319834520d58c3c8e429.js
5.101.71.73200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/legacy/vendors-frontend.11ab635ba5fb319834520d58c3c8e429.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
GET /assets/legacy/vendors-frontend.11ab635ba5fb319834520d58c3c8e429.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"70b014e6626936cb9867041c3dbe0631"
last-modified: Mon, 06 Mar 2023 13:14:43 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108482.95875
x-trans-id: 1749d6c635412a95
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:31:59+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/kword.1f60aaddee3f4797107baf11ff04a50c.js
5.101.71.73200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/legacy/kword.1f60aaddee3f4797107baf11ff04a50c.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
GET /assets/legacy/kword.1f60aaddee3f4797107baf11ff04a50c.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"a9e01273d4873ad2ada6a178e46efb15"
last-modified: Fri, 17 Mar 2023 08:46:28 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042787.08380
x-trans-id: 174d2884d6c3c3a3
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-17T08:46:52+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/legacy/cities.0e2eb16fb291273bca8a32d619e9a3ad.js
5.101.71.73200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/legacy/cities.0e2eb16fb291273bca8a32d619e9a3ad.js
IP 5.101.71.73:0
ASN #34665 Petersburg Internet Network ltd.
GET /assets/legacy/cities.0e2eb16fb291273bca8a32d619e9a3ad.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=7v0GBlgjJe9zKlGKYWvv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"bc0f49049c3e30bbb86be186ab108260"
last-modified: Fri, 17 Mar 2023 08:46:31 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042790.21841
x-trans-id: 174d28859192c767
x-xss-protection: 1; mode=block
age: 4
cache: HIT
x-cached-since: 2023-03-17T08:46:52+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
x.cnt.my/async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru
138.201.230.88200 OK 0 B URL HTTP/2 x.cnt.my/async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru
IP 138.201.230.88:0
ASN #24940 Hetzner Online GmbH
GET /async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Mar 2023 04:08:36 GMT
content-type: application/javascript
last-modified: Tue, 14 Feb 2023 17:51:39 GMT
etag: W/"63ebca2b-1769"
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2