504 B IP
ASN #20940 Akamai International B.V.
Hash 50a89b39234eb6cc4eda70d7e27be17f
306340eb26b6817fd8851a085563a88eed7e2b6b
eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21416
Expires: Wed, 21 Aug 2024 17:56:34 GMT
Date: Wed, 21 Aug 2024 11:59:38 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 133a8ab4e8c45f320352685e01db9625
a24555e329796c47c106c0f55d1d8807f652b257
9e748e8be620ce31ed3909b9574b05b4f49bd396482d89699218408c95294d97
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9E748E8BE620CE31ED3909B9574B05B4F49BD396482D89699218408C95294D97"
Last-Modified: Wed, 21 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11701
Expires: Wed, 21 Aug 2024 15:14:39 GMT
Date: Wed, 21 Aug 2024 11:59:38 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 5d0dd93e6a07253100201a9c8a3e15a5
30adbd52887825ae2779d7fb12276bed8b1d8178
07bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11053
Expires: Wed, 21 Aug 2024 15:03:52 GMT
Date: Wed, 21 Aug 2024 11:59:39 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash ee2777b7a615b89ac7ef48b5a2cf08bd
e3248b2f18ded6806967a9cf1291aa66d248e33b
1b8cea684efb43f3c5c85fd52d5d16e23e703edc3853258f45c857d3afbbc740
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1B8CEA684EFB43F3C5C85FD52D5D16E23E703EDC3853258F45C857D3AFBBC740"
Last-Modified: Mon, 19 Aug 2024 05:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10766
Expires: Wed, 21 Aug 2024 14:59:05 GMT
Date: Wed, 21 Aug 2024 11:59:39 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash fa24406b28144f03c66e0892b293241b
64ec25a3e583dcd2ea13558272ac7badebbfc3d6
8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7706
Expires: Wed, 21 Aug 2024 14:08:05 GMT
Date: Wed, 21 Aug 2024 11:59:39 GMT
Connection: keep-alive
GET illiweb.com/fa/empty.gif
200 OK 42 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /fa/empty.gif HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: image/gif
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 13 Jun 2025 11:49:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5962213
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0ONVSqpVQyr1Ne4df7HLH2oBphnV396iNp%2BfRXIaOwh4oaRWZI3heYs8UzLvm1jR00CGUsuy%2BgDkQaey%2Ft4HSeu%2BW9g7Z4OUwu%2BuaeQILhNkgtfFEVl%2BU1nJkAYLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bdf1b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/empty.gif
200 OK 43 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /empty.gif HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 05 Jul 2025 09:16:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4070598
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yZmYCG1b%2BYN7V%2BmBTMnjkhlOj5uO3kcGNwmi85yrN0qpTahoUWlqKwgHOMmT29o6wfaer77seB3DViPgKZjMpKQiRZiEaSvPB4Qe1nIpEsx3m0dd3vOLXOOemVdZbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bdeeb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET rusbrig.forum2x2.ru/6-ltr.css
200 OK 64 kB URL GET HTTP/2 rusbrig.forum2x2.ru/6-ltr.css
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectm91.maxns.net
Fingerprint6F:AC:0A:41:63:3E:F2:8C:26:37:A7:4F:D8:03:10:A6:4F:BC:DF:F1
ValiditySun, 04 Aug 2024 04:09:39 GMT - Sat, 02 Nov 2024 04:09:38 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ef861b59ac642f9f4b5683e3131f9b03
b0f70ce3a2da850a8d4895378e6ca27854ff7f82
97691032b883140651b6167e2a84c3260e84fc8824091e100cbebc110ec90235
GET /6-ltr.css HTTP/1.1
Host: rusbrig.forum2x2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: text/css
content-length: 64533
last-modified: Wed, 21 Aug 2024 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: HIT
X-Firefox-Spdy: h2
GET ac.audiencerun.com/j/tag.js
200 OK 10 kB URL GET HTTP/2 ac.audiencerun.com/j/tag.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.audiencerun.com
Fingerprint2E:61:46:B3:BD:A4:1E:07:EC:74:D1:D3:A6:82:FF:16:C1:26:04:89
ValidityTue, 28 May 2024 00:00:00 GMT - Thu, 26 Jun 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (10304), with no line terminators
Hash da32bb172acaa998f0911b712784b017
a4672de1c484a7f59be9916fdde600980e49fbdb
10f514527677dbd58eddf18a998e25a9b2c6944287cdcb86a13a44ff7907456b
GET /j/tag.js HTTP/1.1
Host: ac.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 10305
date: Wed, 21 Aug 2024 07:11:33 GMT
last-modified: Wed, 21 Aug 2024 07:08:37 GMT
etag: "da32bb172acaa998f0911b712784b017"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000,public
x-amz-version-id: Gpqhz7kFMk_imaxrGjrM73dQSU0pYIZF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: bn2Lv5TRunAXkpocLYcyrglGIRiWqGmv61IvbsoaLH7SJewPl9XUZA==
age: 17287
X-Firefox-Spdy: h2
472 B IP
Hash 4054c6ec5fd285b687e13c905d7b28f7
ba59414a7e1d1933013a551e6a12fc56686ebed6
617d082fe4c82a4f1c21b97fc9ed29239efd64d85fbf944d2a31faa161f9da43
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash a2d9e147592032885d34790c5a3ea642
5ad6d2ef1386e59e39862fad94c488beb29e6619
c39fc4ac235871a619ee0f014f331797855cdbac1bfda86ab9c1c547d191e002
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash a2d9e147592032885d34790c5a3ea642
5ad6d2ef1386e59e39862fad94c488beb29e6619
c39fc4ac235871a619ee0f014f331797855cdbac1bfda86ab9c1c547d191e002
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
Hash b8d64d0bc142b3f670cc0611b0aebcae
abcd2ba13348f178b17141b445bc99f1917d47af
47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 20:06:42 GMT
expires: Wed, 20 Aug 2025 20:06:42 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 57178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=
200 OK 50 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (1858)
Hash fac15c844eddd40776f31fa86ea31f7c
9d53ee1a247ab21d59a4ee5417e0d78aa0c47a69
b08afd6bfdaba6ee1c7be4ae700bbb352b980e2bc72bc3bd42f6b75c70f3a2d4
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Aug 2024 11:59:40 GMT
expires: Wed, 21 Aug 2024 11:59:40 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Aug 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 49744
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 77 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash a26a76e6405617b5a37e79c3fb89b9c8
9f65c0ff54bd7580e4018f027d550acb02c724e6
5d73452d7a30a53d38b12309c5163122a808d4098d7632015f797463379574aa
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Aug 2024 11:59:40 GMT
expires: Wed, 21 Aug 2024 11:59:40 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Aug 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77165
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP
Hash 4054c6ec5fd285b687e13c905d7b28f7
ba59414a7e1d1933013a551e6a12fc56686ebed6
617d082fe4c82a4f1c21b97fc9ed29239efd64d85fbf944d2a31faa161f9da43
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash a2d9e147592032885d34790c5a3ea642
5ad6d2ef1386e59e39862fad94c488beb29e6619
c39fc4ac235871a619ee0f014f331797855cdbac1bfda86ab9c1c547d191e002
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.googletagmanager.com/gtag/js?id=G-VKHBPXN046&l=dataLayer&cx=c
200 OK 94 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-VKHBPXN046&l=dataLayer&cx=c
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Hash a4dc3912f6e44166f91545009669593d
6331e3f77360336125b121390fbeecd24f58e5f5
419c587df779d643c1d2e6e96f9b3c2a3d4174ebeb2746e3fdb0fabfb27c7b20
GET /gtag/js?id=G-VKHBPXN046&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Aug 2024 11:59:40 GMT
expires: Wed, 21 Aug 2024 11:59:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94441
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET i.servimg.com/u/f37/17/37/83/89/logo_b10.gif
200 OK 636 B URL GET HTTP/2 i.servimg.com/u/f37/17/37/83/89/logo_b10.gif
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectservimg.com
Fingerprint9A:6C:A8:8F:8D:B2:86:DB:5F:CE:1E:38:7D:6C:F9:4D:EA:63:FE:23
ValiditySun, 11 Aug 2024 21:48:31 GMT - Sat, 09 Nov 2024 21:48:30 GMT
File type GIF image data, version 87a, 20 x 88
Hash 0b2bf688f85db5c0c92488ec00996df0
30860b96b513d95b4d4cb1bd20664b934fa78bb5
dfae0c82cd31d66810a89094437a6cfddd3955f64139d650733064c7b5e32ddb
GET /u/f37/17/37/83/89/logo_b10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 636
last-modified: Wed, 08 Aug 2012 15:01:27 GMT
etag: "50227f47-27c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sun, 13 Jul 2025 10:49:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3107860
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2F7LUhoB8NO7eFQziaSbd0oEENHvd4Em5942bCkft6c%2FhuZL2c3dhD5C1pnBXD%2BgmYsjpMDASAluP%2FeFhR47BQOV17nKJHOQkZ5pBQ9wChetkBWBgZ6%2FogFYUO8tMMdZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a75564f5b569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.servimg.com/u/f37/17/37/83/89/button10.gif
200 OK 460 B URL GET HTTP/2 i.servimg.com/u/f37/17/37/83/89/button10.gif
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectservimg.com
Fingerprint9A:6C:A8:8F:8D:B2:86:DB:5F:CE:1E:38:7D:6C:F9:4D:EA:63:FE:23
ValiditySun, 11 Aug 2024 21:48:31 GMT - Sat, 09 Nov 2024 21:48:30 GMT
File type GIF image data, version 87a, 20 x 40
Hash f2e9a34d8bfa6c64973d5aa8390ebdd1
80a23877007922508ee4699c24f3231b995a9c93
5402bd946963c9e4e1c47a754058c57729c97dc4790caace4b6f93747c9f3ab9
GET /u/f37/17/37/83/89/button10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 460
last-modified: Wed, 08 Aug 2012 14:37:35 GMT
etag: "502279af-1cc"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 04 Apr 2025 12:02:14 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3107860
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hKHw5%2BoC3QS8dtLCce7knjugPWq6wMiislDlAN5VUdruOuWt5qWgul0DgbYqyoYQ42D6OxVqXfgaxfzuGHcX2DM1CQb2UobaDv47RlysGfwAgC6AGdfwcb%2BK75ALXT2b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a75567f93569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.servimg.com/u/f37/17/37/83/89/cell10.gif
200 OK 198 B URL GET HTTP/2 i.servimg.com/u/f37/17/37/83/89/cell10.gif
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectservimg.com
Fingerprint9A:6C:A8:8F:8D:B2:86:DB:5F:CE:1E:38:7D:6C:F9:4D:EA:63:FE:23
ValiditySun, 11 Aug 2024 21:48:31 GMT - Sat, 09 Nov 2024 21:48:30 GMT
File type GIF image data, version 87a, 20 x 47
Hash 2190a3a8da0dd1aa068ad6702bc1068c
75d5d75912ba61ca43f02565cfb6872125df5c75
f9423ee91badc4ca610a9b2993f5bcedb464ef255355ece463b403d5f6b0b28b
GET /u/f37/17/37/83/89/cell10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 198
last-modified: Wed, 08 Aug 2012 14:25:38 GMT
etag: "502276e2-c6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 04 Apr 2025 12:02:14 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1614258
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L4aaBCRtQ%2B5ZnOFHBB8PvKp5b59945M61LTuz%2ByY2rHLmNOOyY3faA17%2FhTZA1TWfmrruzwl63NkT%2BeFO%2FHVTekfJQgA95bTl8WOaclH3PkDQds%2BDiCrgRxL0%2BT6%2BGqw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a75567f9d569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 2img.net/h/www.qrf-gaming.org/styles/fragzone/xenforo/sources/bgtf.jpg
301 Moved Permanently 178 B URL GET HTTP/2 2img.net/h/www.qrf-gaming.org/styles/fragzone/xenforo/sources/bgtf.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject2img.net
Fingerprint5E:D4:86:47:9C:66:9A:C0:08:FA:78:7B:0F:D4:1C:2B:E1:D5:6B:0A
ValidityMon, 01 Jul 2024 01:43:54 GMT - Sun, 29 Sep 2024 01:43:53 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /h/www.qrf-gaming.org/styles/fragzone/xenforo/sources/bgtf.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 21 Aug 2024 11:59:40 GMT
content-length: 178
location: https://2img.net/i/default.png
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 126
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUVRTHoiiCKRwe2apbL1uB4vRQovm8kCuVEZWf4gecoBIHPDSc3jQ%2BjSVek%2BDTTiwo%2FDEtMVC5LgvllVm7nEcXmbcP2rKB18iAXfBdDJnu2VIWjISU%2BcorMokQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75567cb66402-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 2img.net/i/fa/sprite_prosilver_navbar.png
200 OK 3.0 kB URL GET HTTP/2 2img.net/i/fa/sprite_prosilver_navbar.png
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject2img.net
Fingerprint5E:D4:86:47:9C:66:9A:C0:08:FA:78:7B:0F:D4:1C:2B:E1:D5:6B:0A
ValidityMon, 01 Jul 2024 01:43:54 GMT - Sun, 29 Sep 2024 01:43:53 GMT
File type PNG image data, 16 x 779, 8-bit/color RGBA, non-interlaced
Hash 93450cce29154be85a4f8850ca1df074
b9a8f0c716a00fced50b47a8c5738fbd594f7eef
913bbda58746d2834fa514a1960eddd741c0dad41288fdcca43afb0203fde631
GET /i/fa/sprite_prosilver_navbar.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/png
content-length: 2994
last-modified: Mon, 16 May 2016 11:01:50 GMT
etag: "5739a89e-bb2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 22993994
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IlGtD9ngdIPZpSTilGxUT%2BOkByJtLA8ucvkvDTW3j6BrvXP2x6W2xRHyez4nL9kBiL30PiOe1i%2FAAmLpOXAWCQSJfRFJTBnfMKmDTsbIO0dqE%2FnxgjgBaakA1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75572d8f6402-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/mentions/init.js
200 OK 975 B URL GET HTTP/2 illiweb.com/rs3/87/frm/mentions/init.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, ASCII text, with very long lines (2163), with no line terminators
Hash 75a9486eced1745452021503d6cfc82e
d68c198ebcdda1613ec61bb44a0585a8d94b3f6a
9cce595b201da3285768c8375124b2976eafacaa8002781d478ee1f9d69dc8c4
GET /rs3/87/frm/mentions/init.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:32:55 GMT
last-modified: Wed, 22 Mar 2023 14:29:57 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYJDHWdmTE5wyoT6%2FaFmGXEql8KeNIXcMP6xUL8nrppPoBlDEkp%2BcbhvTuoPUDKIjfkm2ZNlOlwNdtdc0l4MbRt85PE4ibiLz%2FWdHRLUXf7j3S%2BBWE0BA2W86hFjbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551ee3cb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.servimg.com/u/f37/17/37/83/89/cell11.gif
200 OK 198 B URL GET HTTP/2 i.servimg.com/u/f37/17/37/83/89/cell11.gif
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectservimg.com
Fingerprint9A:6C:A8:8F:8D:B2:86:DB:5F:CE:1E:38:7D:6C:F9:4D:EA:63:FE:23
ValiditySun, 11 Aug 2024 21:48:31 GMT - Sat, 09 Nov 2024 21:48:30 GMT
File type GIF image data, version 87a, 20 x 47
Hash 2190a3a8da0dd1aa068ad6702bc1068c
75d5d75912ba61ca43f02565cfb6872125df5c75
f9423ee91badc4ca610a9b2993f5bcedb464ef255355ece463b403d5f6b0b28b
GET /u/f37/17/37/83/89/cell11.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 198
last-modified: Mon, 20 Aug 2012 16:09:50 GMT
etag: "5032614e-c6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 11 Jul 2025 00:26:37 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3107860
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8e6uKL2k82Th1bd0R%2FNYV8R8ue1OqHSy0XbHIXKYa15ROp5XZA9fi02v5ay9gpcPcTYFYgLMaB7bCsguWh9ZoRVuWTLROHLo2cwGP1ixmS3TpScfERDOB5TF9BGV5F5q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755778ec569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/image10.jpg
200 OK 5.7 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/image10.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 99x66, components 3
Hash ffd5f58b1759c40904ac66d9b37418c7
2fcf6d985e2fcff891a9be28ec05f4e82e3051aa
fbaef4aa1a67f68cacb6ab73dd8a7914af7a22cb2cbd26f162d8b638703a87e3
GET /users/1316/20/94/38/album/th/image10.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5723
last-modified: Wed, 27 Aug 2014 12:43:14 GMT
etag: "53fdd262-165b"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MC9uPu3g8BWN5%2B%2B0GhxQY3Aw%2FVeBpbTiIiVWrmu8MSqBulTQhC1dyspaKOKO3ULjx1C%2BGu085%2BfiboHs2XXQL44qV3fE7CPpPYbpApgNSXFbP9bQoS4R%2FgAlDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755798d256b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/eoqkt210.jpg
200 OK 4.2 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/eoqkt210.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 99x66, components 3
Hash a48eb3b98cfb77afff2d76ac899f89bb
0165e6cdfae59e2bb4f026a52f3d8efa589bee9e
fdfdd069507e469317c0073426165dbfc7e9b46b5bcb1cabc4f4d6ee2756228e
GET /users/1316/20/94/38/album/th/eoqkt210.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 4150
last-modified: Wed, 27 Aug 2014 12:45:09 GMT
etag: "53fdd2d5-1036"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aHcVvdcdxhXkiUAN9%2Bs%2BSvWHM8ZIsZX8TOYzJ3DI11xx%2FkBUZ48KOEwkRuGk8RRKL8tVtu%2FfyiFIWozHHcHgNisCDKEoF46pLZCN1P6k3i3e4xhAnh2zRvsU1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755798db56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/twemoji/twemoji.min.js
200 OK 8.6 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/twemoji/twemoji.min.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (16921), with no line terminators
Hash 460f4064ab40d107eb42b6e5f6698996
89282bdf0182463944478d9181b7cb39f83360a4
4cafa97c620f0e83a82d4068ef5164f36687061a1045a3d5a1f721cfb8ca0b4d
GET /rs3/87/frm/twemoji/twemoji.min.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
last-modified: Tue, 10 Jan 2023 08:34:14 GMT
expires: Tue, 12 Aug 2025 13:32:55 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: HIT
x-cache-pr: HIT
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lPGpXHSQp6eE4TYue63QTYgIF9i9FBFjU%2BRZCtD4dT%2FMd9rHhMHKNK3uBOoAkp2hQML%2Bl%2FSZeO5IrfW7eD%2BdsyIVxYuj%2FJWueYnqgPq9lWWOp%2FTy%2Fqb73EBSj%2BixKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bdeab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/jquery/cookie/jquery.cookie.js
200 OK 6.2 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/jquery/cookie/jquery.cookie.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, ASCII text, with very long lines (1011), with no line terminators
Hash 12a485a250e60806fbe4ab8bd03dfbf8
ea48bc03bfb90a966f28d302992ec02fe55da978
6cf7880d67c712bb6f85f1dfa1d26ea5e0a7195130a3e42c8b441cdd1de77a90
GET /rs3/87/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:32:55 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5I1UpztLeAZkifS%2FspjaB%2FziG8qEXoN4uNj6p9sglsV2QNYTl5DvnBao1lHai0yM9GJNOSMvzSi130JJcg53eqVfuAshls3mcSTfQQ3Zng7MY1hEtqhPt8yQKNaFZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551fe5fb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/54082910.jpg
200 OK 5.8 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/54082910.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 86x99, components 3
Hash 38446e232237c05ac66421db3450b69a
74dd15198dec7ad6038f7d7a8e95c273cc73bd4d
5207f28577023de6f378b2f509bf52a09333b5ab87ab6cd34632facdc4ef3926
GET /users/1316/20/94/38/album/th/54082910.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5814
last-modified: Thu, 29 Mar 2012 06:25:36 GMT
etag: "4f740060-16b6"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZJuZAopPNQKxhXMU3lLB1zyYTWRwlyAb%2Bzm3xdORjB%2Fbi4glRwmB4NbiPf7WRZZyc%2F5qctelrzWDij2Z%2FUPAkiRGyzM2UDOxlHj0YCK8YVLiAsaIA6KKkmJxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7557a8ec56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/avazun10.jpg
200 OK 3.5 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/avazun10.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x71, components 3
Hash bf6635dda585a394032b196a3519c42c
18401f849627f4547e40d2a00d2c83c3ec1a7094
82a68312d659c11038853eb117e79838db82cfd91358c3c330b86cefbcb10c97
GET /users/1316/20/94/38/album/th/avazun10.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 3494
last-modified: Mon, 27 Aug 2012 09:50:02 GMT
etag: "503b42ca-da6"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vdCwRUv8EO3ExOwelvn8I2MjPN8OEJHfAhK9Uq8NzpM1Yl%2FuGvh8jMYQT9tZs%2F31kEVJz1%2BFm2c2syTwFPnyDpqqZa8%2BK8bfNyNWVY1BOadTBqXUmI%2FXRHYDpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7557b8fa56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/jquery/ticker/ticker.css
200 OK 6.1 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/jquery/ticker/ticker.css
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type ASCII text, with very long lines (388), with no line terminators
Hash ee8ffe728ee39c0d5a385b6c2d5fcf24
47d762132f9c7c1c7f5665fe1f2007cb6dc194aa
0915a998c8a41f69e82331eca861ccb6635aac2eeb5639348f370e6e189c663c
GET /rs3/87/frm/jquery/ticker/ticker.css HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: text/css;charset=UTF-8
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=390
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:33:15 GMT
last-modified: Tue, 27 Aug 2019 14:00:13 GMT
vary: Accept-Encoding
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 771984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BvRiXXhokJR8rMT%2FUcOuOCPsNN9h%2BSTcBQBaKJtLe23kUMWKh1MPUvNs7LMfbi0plnhpICaQ8pQuseOdV3Rs8AduBIppH9EGimNmfNtppbftCHvedbzzxKVh8b6jsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551ee33b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/image_10.jpg
200 OK 5.5 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/image_10.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 75x100, components 3
Hash 4f4c0c06125e4f372282f05390885b34
bb14257af319cf67aa9e4218b8ece812f7aeaa55
2c0a6083ca6f112f24d8942c845e48c1dfbf505d40d300098ec6e7428fd53849
GET /users/1316/20/94/38/album/th/image_10.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5464
last-modified: Wed, 27 Aug 2014 12:41:07 GMT
etag: "53fdd1e3-1558"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvgrobaoXv2Byrs6RMdpiaBLkLi5P6nXx0YHc5ctVaZIOGULApFW63aRUxKNsd8ORyw5B1u3PH2GGJqz68XU8zALqSVTNt6rD%2FX8m2SgFae07He2fOnru08gIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7557d92356b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/crop_910.jpg
200 OK 2.2 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/crop_910.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 22x97, components 3
Hash bdce9689f9dcc1d16be22cbebf9071d0
ebfee4b057eb79e4ce1f0d285d1af26820e378b6
01201d45cd3b4b65ec95e1ca3aab0b6c8975797a90f940c14b862b5a89b501d4
GET /users/1316/20/94/38/album/th/crop_910.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 2241
last-modified: Wed, 27 Aug 2014 12:41:46 GMT
etag: "53fdd20a-8c1"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lbtLtfWyDaq%2FdCWmm4p2tcLOdmVDqxnJ4MmDOrR95QfNTSHtoJxEbU0LRG%2Fr3iPeJnYoSWB2nr%2Butoh29Q%2FFbr9GlMXCSFR3h5FJ0fR4atBhYZccRxXKskeE0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7557d92a56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/mentions/tooltipster.css
200 OK 6.8 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/mentions/tooltipster.css
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type ASCII text, with very long lines (6584), with no line terminators
Hash f3601bc25ac378cab49e80650323640a
302535c34033bebe00f521da5bd4248178fe6ef2
4d2393ec9a6d20fc58d60f8d9140fd7ccdd709ec1ab00036dce2847901c2ba92
GET /rs3/87/frm/mentions/tooltipster.css HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: text/css;charset=UTF-8
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=6667
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:32:55 GMT
last-modified: Tue, 27 Aug 2019 14:00:10 GMT
vary: Accept-Encoding
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lOm1SpO07fPVKysanfXf4zCTCesv7J3g%2B249tq9SDcnPRozlTqvN8Gn1SWY%2BgjDchUKaqlSF0bmApv2u%2F0%2BFSBYQgrypndZ4lZM76CrvlGYKhCOuM45alNXPqpZjnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bde9b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
471 B IP
Hash 1366a5db2121fa491cee58cb595f1526
13eb9046c59285ea81b8a4bcba97ac537f7c29e6
90c64566784300e2bb5a6225dd6ccccfa361c37eec9e04bbba4358c0d198907e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ads.sportslocalmedia.com/slm.prebid.forumactif.js
200 OK 183 kB URL GET HTTP/2 ads.sportslocalmedia.com/slm.prebid.forumactif.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectsportslocalmedia.com
Fingerprint44:DA:44:FF:C9:45:C8:B8:42:30:EB:68:2B:2A:5F:EF:3B:66:3B:51
ValidityThu, 04 Jul 2024 16:12:25 GMT - Wed, 02 Oct 2024 16:12:24 GMT
File type JavaScript source, ASCII text, with very long lines (57986)
Size 183 kB (183268 bytes)
Hash 2fdeeb88fba9e671c41ee9aae11630e5
930c5809a8f5c3d63dcd0640076ad363e91750d8
84b6849514b81e5e618ab0deeb007a65ab33e200821152dd479f1f13d84d5630
GET /slm.prebid.forumactif.js HTTP/1.1
Host: ads.sportslocalmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: application/javascript
cache-control: max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75558d3bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
471 B IP
Hash 1366a5db2121fa491cee58cb595f1526
13eb9046c59285ea81b8a4bcba97ac537f7c29e6
90c64566784300e2bb5a6225dd6ccccfa361c37eec9e04bbba4358c0d198907e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET illiweb.com/fa/prosilver/icon_calendar2.gif
200 OK 217 B URL GET HTTP/3 illiweb.com/fa/prosilver/icon_calendar2.gif
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type GIF image data, version 89a, 15 x 17
Hash de42363ade46a620655593b0308ceec3
45d69ba7e5638bf26ac5cfc0fda459b66198396c
a0bc2119344b188db1c3b9f0454d74c467efc33e522a697be46d5851bdd362a0
GET /fa/prosilver/icon_calendar2.gif HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 217
last-modified: Mon, 16 May 2016 11:00:36 GMT
etag: "5739a854-d9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 18 Aug 2025 16:40:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 242344
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7H7afbuCULloS4FWP9djQsJA95jUjEF3Fgm2xJR%2Bo0a05T5AalYbH7yS6wSpM4io0CrKV23h7S7AGNO9M04CNlcA%2BBg3EEfVK97mIgeUv2D%2BzDUTO8ZnwHjme8%2BU5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755838311c06-OSL
alt-svc: h3=":443"; ma=86400
GET 2img.net/i/default.png
200 OK 977 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject2img.net
Fingerprint5E:D4:86:47:9C:66:9A:C0:08:FA:78:7B:0F:D4:1C:2B:E1:D5:6B:0A
ValidityMon, 01 Jul 2024 01:43:54 GMT - Sun, 29 Sep 2024 01:43:53 GMT
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Hash 68740394c6718e3d6587d038d20d51a9
149fff376f6ed06d10c19b41ac3ce8dd97256d48
d28f3347aa8d5ef1cff4e57c589a8ce825b4350e1667d9808a29fa8c89d8e96b
GET /i/default.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: image/png
content-length: 977
last-modified: Sun, 10 Jun 2018 21:44:20 GMT
etag: "5b1d9bb4-3d1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 13095052
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjF1w4qlAOee%2BGbh97I8UMfh%2BBCu%2F6xndwSuaDz7mDdyOYnSPyT4yB4sNTE0j9HIjqYhrxIe5ehOhU4amZtCoyJhzmDi8Xua4Jyw9zZotVSj2Q23IdhBLu0XCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a7559487d6402-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET btloader.com/tag?o=5094764668518400&upapi=true
200 OK 24 kB URL GET HTTP/2 btloader.com/tag?o=5094764668518400&upapi=true
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectbtloader.com
FingerprintA0:4D:88:12:72:B0:BC:09:DE:06:7F:27:7C:BC:97:EC:D6:DE:31:F0
ValiditySat, 10 Aug 2024 07:40:14 GMT - Fri, 08 Nov 2024 07:40:13 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7b0b764438aaf323da047f1333b00570
32f3c24320c2afb01b8f4263acbc95fdd20b0e7c
3a400d14bf9118bfb10faa2032387bd15a73c24298a5d55e4011b9f7ada80f5f
GET /tag?o=5094764668518400&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
content-length: 23839
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "538bb1eb7d27a34c52f7fc4ef899ef0f"
last-modified: Wed, 21 Aug 2024 11:38:57 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 1065
accept-ranges: bytes
server: cloudflare
cf-ray: 8b6a755a3ed08f57-CPH
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240821
200 OK 841 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240821
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Hash da32607297a972ef2a7b265117589c3a
78adafbdecee00630d50d53ca4bbeb72c0ab379f
65f7b3322fad3d7ba4d813eeb6be071f5a298a7699e34ca0d7349741c2666874
GET /gh/prebid/currency-file@1/latest.json?date=20240821 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.2154
x-jsd-version-type: version
etag: W/"63c-eK2vvezuAGMNUNU8pLvrcsCrN58"
content-encoding: br
accept-ranges: bytes
date: Wed, 21 Aug 2024 11:59:41 GMT
age: 28718
x-served-by: cache-fra-eddf8230103-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 841
X-Firefox-Spdy: h2
471 B IP
Hash 1366a5db2121fa491cee58cb595f1526
13eb9046c59285ea81b8a4bcba97ac537f7c29e6
90c64566784300e2bb5a6225dd6ccccfa361c37eec9e04bbba4358c0d198907e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.youtube.com/s/player/6db2bd17/www-player.css
200 OK 48 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/www-player.css
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f18c457e9084f86ef43c2efbdede8891
7449eae7060ca1246651a86d7c5b2f34c1205086
bce04b253bdde030d0b43e084a11f694604bd4528c5b81209df71b1a9daa450b
GET /s/player/6db2bd17/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48479
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 17:36:10 GMT
expires: Wed, 20 Aug 2025 17:36:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 66211
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 14c20135ef973132cc0009b46d9c8434
c207a29dfeabd128a63bb1936101f3a194f618b3
7ba2aeb288489dd3b4ea959ff4f809e5548627dd6e5e64479cff0227e905ac9c
GET /s/player/6db2bd17/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 20468
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Aug 2024 07:36:50 GMT
expires: Tue, 19 Aug 2025 07:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 188571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET d.audiencerun.com/c/5eyky1py1w?rid=2bb0ebb7-29df-4a78-ba33-267b8180c2a7&spu=30182cc0-18c1-4c88-acce-431fee4439ec&sui=a8a27c18-502c-422c-9e1d-3e319b708e01&s=null&a=1&msk=null&m=null&v=1.2.18&d=1724241580361&r=&vu=&dv=desktop&os=linux&br=firefox%2F96.0&ce=1&sr=1280x1024&o=portrait&tz=0%20GMT&ul=en&inf=0&ift=&=0&url=https%3A%2F%2Frusbrig.forum2x2.ru%2F&es5=0&gdpr=0&gdpr_consent=&wa=
200 OK 2.5 kB URL GET HTTP/2 d.audiencerun.com/c/5eyky1py1w?rid=2bb0ebb7-29df-4a78-ba33-267b8180c2a7&spu=30182cc0-18c1-4c88-acce-431fee4439ec&sui=a8a27c18-502c-422c-9e1d-3e319b708e01&s=null&a=1&msk=null&m=null&v=1.2.18&d=1724241580361&r=&vu=&dv=desktop&os=linux&br=firefox%2F96.0&ce=1&sr=1280x1024&o=portrait&tz=0%20GMT&ul=en&inf=0&ift=&=0&url=https%3A%2F%2Frusbrig.forum2x2.ru%2F&es5=0&gdpr=0&gdpr_consent=&wa=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.audiencerun.com
Fingerprint5A:C8:CB:27:EE:22:97:36:83:0F:FB:B2:11:4A:87:46:2A:64:78:73
ValidityWed, 11 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (11449), with no line terminators
Hash 1fdc6f0fa7cdd2322ccd8330d51bb1bb
77def8501e07e418357691c99d16f4cf0b79c4d4
135be96cc55d425f15605dd919f4fb134cbbf8b733b7a0daa0600018b833fbe2
GET /c/5eyky1py1w?rid=2bb0ebb7-29df-4a78-ba33-267b8180c2a7&spu=30182cc0-18c1-4c88-acce-431fee4439ec&sui=a8a27c18-502c-422c-9e1d-3e319b708e01&s=null&a=1&msk=null&m=null&v=1.2.18&d=1724241580361&r=&vu=&dv=desktop&os=linux&br=firefox%2F96.0&ce=1&sr=1280x1024&o=portrait&tz=0%20GMT&ul=en&inf=0&ift=&=0&url=https%3A%2F%2Frusbrig.forum2x2.ru%2F&es5=0&gdpr=0&gdpr_consent=&wa= HTTP/1.1
Host: d.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
set-cookie: AWSALBTG=k+DznK31SZd0MJmbWYV1RbBrdTPbE6NsjDu2iFqgKOiaUckr8rc9yjWu/vQmQovzGvJHBPRwuAtCMoY05CLw79uQaCNh91hTu06g8G5SzJbThL6myImXfhtMJG9DEZ1dNn2FmDllP6ysOGjsdM8MiI9q9PIYzMeOOnwp9DmjQXwO; Expires=Wed, 28 Aug 2024 11:59:41 GMT; Path=/
AWSALBTGCORS=k+DznK31SZd0MJmbWYV1RbBrdTPbE6NsjDu2iFqgKOiaUckr8rc9yjWu/vQmQovzGvJHBPRwuAtCMoY05CLw79uQaCNh91hTu06g8G5SzJbThL6myImXfhtMJG9DEZ1dNn2FmDllP6ysOGjsdM8MiI9q9PIYzMeOOnwp9DmjQXwO; Expires=Wed, 28 Aug 2024 11:59:41 GMT; Path=/; SameSite=None; Secure
AWSALB=ne8RSvW2DXuAHoYyNHi8wEO2dpq9dMby5iSLJtYg1H9z8rb0oKP4SQXdsCEoPuPJgX+rkSiMetLv/DxAML+inoT0JwO7/uwFqBCRGnVe8VwomM4Eftpv4UkVRozy; Expires=Wed, 28 Aug 2024 11:59:41 GMT; Path=/
AWSALBCORS=ne8RSvW2DXuAHoYyNHi8wEO2dpq9dMby5iSLJtYg1H9z8rb0oKP4SQXdsCEoPuPJgX+rkSiMetLv/DxAML+inoT0JwO7/uwFqBCRGnVe8VwomM4Eftpv4UkVRozy; Expires=Wed, 28 Aug 2024 11:59:41 GMT; Path=/; SameSite=None; Secure
ui=166c5d6ad1685d813010637; expires=Sat, 20-Sep-2025 11:59:41 GMT; path=/; domain=.audiencerun.com; SameSite=None; Secure
server: nginx
vary: Accept-Encoding
p3p: policyref="https://www.audiencerun.com/p3p.xml", CP="NOI DEVa TAIa OUR BUS UNI"
timing-allow-origin: *
report-to: { "url": "https://d.audiencerun.com/reports", "max_age": 10886400, "include_subdomains":true }
content-encoding: br
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 14c20135ef973132cc0009b46d9c8434
c207a29dfeabd128a63bb1936101f3a194f618b3
7ba2aeb288489dd3b4ea959ff4f809e5548627dd6e5e64479cff0227e905ac9c
GET /s/player/6db2bd17/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 20468
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Aug 2024 07:36:50 GMT
expires: Tue, 19 Aug 2025 07:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 188571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ad-delivery.net/px.gif?ch=1&e=0.4806032053120811
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.4806032053120811
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectad-delivery.net
FingerprintD3:6C:33:E0:88:AC:63:91:E5:B1:DC:FF:5F:46:EC:DE:3D:00:C4:B5
ValidityMon, 15 Jul 2024 10:29:29 GMT - Sun, 13 Oct 2024 10:29:28 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.4806032053120811 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: image/gif
content-length: 43
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
x-guploader-uploadid: ABPtcPqbKSdoxbAA410mrggZiKfDXsJhP9ixcj5r_g42RwC-BpGRQV1l4taKqygKMi5bdZIZlA
expires: Wed, 14 Aug 2024 07:47:09 GMT
cache-control: public, max-age=86400
age: 621581
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lM18i28pquZbGN8A%2BHTyEARulsGfz0eYpME%2F3v6kD2nqngGG6CioFeciNLzxhk8efxs2b1peSVR3eSpovnzluPLYfwxr%2FA6TCjjiD5mjVpBFMAF%2FZDh%2F7Q8ynKgYHNCSRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a755d2a3a1c12-OSL
X-Firefox-Spdy: h2
GET www.youtube.com/embed/3nJY7n8KaOY
200 OK 139 kB URL GET HTTP/2 www.youtube.com/embed/3nJY7n8KaOY
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (58088)
Size 139 kB (139303 bytes)
Hash ccddc0214730d4ce303ae14c97b75378
f3a1db8916e3b659fe219f3d8422f8f4f4ae77d3
addc0e82981c79e80b6c22e595a046c85be1d776296fe673f796c95b63ab239a
GET /embed/3nJY7n8KaOY HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 21 Aug 2024 11:59:41 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=HGvBBICZ8QM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=rFAOQ1DDNq4; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgFg%3D%3D; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
200 OK 20 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (3391)
Hash 14c20135ef973132cc0009b46d9c8434
c207a29dfeabd128a63bb1936101f3a194f618b3
7ba2aeb288489dd3b4ea959ff4f809e5548627dd6e5e64479cff0227e905ac9c
GET /s/player/6db2bd17/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 20468
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Aug 2024 07:36:50 GMT
expires: Tue, 19 Aug 2025 07:36:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 188571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/6db2bd17/www-embed-player.vflset/www-embed-player.js
200 OK 100 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (809)
Hash e96d1c3d83ab9f395f18d1c34aa92b05
d6a06e749f3da14a9a0c2e115eed787923b836b6
1b9feafa8229ad7eb31d895f7a5ef577249ef5cbf7f8440e662ac9c3a78aa309
GET /s/player/6db2bd17/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 07:04:09 GMT
expires: Thu, 21 Aug 2025 07:04:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 17732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET connect.topicit.net/images/connect-button/icon-white50x50.png
200 OK 824 B URL GET HTTP/3 connect.topicit.net/images/connect-button/icon-white50x50.png
IP
Requested by https://connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Frusbrig.forum2x2.ru%2F&lang=ru&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Frusbrig.forum2x2.ru%2Ftopicit%2Findex.php%2Fconnect&version=1
Certificate IssuerLet's Encrypt
Subjecttopicit.net
FingerprintDB:F2:D0:A6:48:0F:61:53:90:C5:55:0B:9C:F3:95:20:0C:D2:6D:75
ValidityMon, 01 Jul 2024 22:41:21 GMT - Sun, 29 Sep 2024 22:41:20 GMT
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Hash 4d5cd2b30ba508b7cba850dd915f98f0
de8953a5fea76b4c3e97a34e7897c47de27ac7b1
657f1a41d08d069639dd6313ea2f8c0cf7089e4c1967d3930c467864641149ca
GET /images/connect-button/icon-white50x50.png HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Frusbrig.forum2x2.ru%2F&lang=ru&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Frusbrig.forum2x2.ru%2Ftopicit%2Findex.php%2Fconnect&version=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: image/png
content-length: 824
last-modified: Fri, 06 Oct 2017 14:06:27 GMT
etag: "59d78de3-338"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=86400
cf-cache-status: HIT
age: 1735
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yZB2VLpKBU6QYxwgVBqgBjIULrhyGWD3zcP%2BjLxwYjsHHXAptmWXbc%2FtnxfqCiBUsCtnhgJE41SleAJDPF4yRCmvOw46YEi9TxDXy2vaOMEvNtj1usJT%2BvQEA7EVw6J4rKUMdl%2BQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a755deed856aa-OSL
alt-svc: h3=":443"; ma=86400
GET connect.topicit.net/scripts/connect.js
200 OK 102 kB URL GET HTTP/2 connect.topicit.net/scripts/connect.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjecttopicit.net
FingerprintDB:F2:D0:A6:48:0F:61:53:90:C5:55:0B:9C:F3:95:20:0C:D2:6D:75
ValidityMon, 01 Jul 2024 22:41:21 GMT - Sun, 29 Sep 2024 22:41:20 GMT
File type ASCII text, with very long lines (615)
Size 102 kB (102316 bytes)
Hash df06f0c81b83b4161d3a2c843e71de58
ac09970aca15ee03496cbe68c2a2f06914e19855
39ce845fc0203d4cb00559dff89d9448765e0ebd65ebbaf76623cc9850827542
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 3455
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KNXTGHlhpw4N6wWOY2gtfYuB3jUwgAgydAVvC1BqMUvbkE3K7t1is8gaI%2BLJ3dlNiKT2RyQXo9DvmWm%2BmbM0DAL7jUMmsyAvEJHOQuf1mbSSfqp05UQn8Cs7CrmRTk1PQ5p3FUji"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75583985568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
472 B IP
Hash 2131b0a009e8e1df4bfe1f606782c499
53978a2b72ae8ef818aa85617b30c6e6aba42292
523f8f46c79b40acc3f3ca645085d744386b0e1b5e54d7a75fd0122049d7c076
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 2131b0a009e8e1df4bfe1f606782c499
53978a2b72ae8ef818aa85617b30c6e6aba42292
523f8f46c79b40acc3f3ca645085d744386b0e1b5e54d7a75fd0122049d7c076
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 15:57:31 GMT
expires: Wed, 20 Aug 2025 15:57:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 72130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 00:57:49 GMT
expires: Fri, 15 Aug 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 558112
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 00:57:49 GMT
expires: Fri, 15 Aug 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 558112
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 15:57:31 GMT
expires: Wed, 20 Aug 2025 15:57:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 72130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 15:57:31 GMT
expires: Wed, 20 Aug 2025 15:57:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 72130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 00:57:49 GMT
expires: Fri, 15 Aug 2025 00:57:49 GMT
cache-control: public, max-age=31536000
age: 558112
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
200 OK 772 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (534)
Size 772 kB (771511 bytes)
Hash b82d8b9a6d931549d702330566275383
fcfb225598bc210b2802984a1bcc6481adfde406
82662c3f1c7dbad69feac86ec132d0f48cf89d4991d811149a4d99f47a41be21
GET /s/player/6db2bd17/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 771511
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 11:49:58 GMT
expires: Wed, 20 Aug 2025 11:49:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
200 OK 772 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (534)
Size 772 kB (771511 bytes)
Hash b82d8b9a6d931549d702330566275383
fcfb225598bc210b2802984a1bcc6481adfde406
82662c3f1c7dbad69feac86ec132d0f48cf89d4991d811149a4d99f47a41be21
GET /s/player/6db2bd17/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 771511
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 11:49:58 GMT
expires: Wed, 20 Aug 2025 11:49:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
200 OK 772 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (534)
Size 772 kB (771511 bytes)
Hash b82d8b9a6d931549d702330566275383
fcfb225598bc210b2802984a1bcc6481adfde406
82662c3f1c7dbad69feac86ec132d0f48cf89d4991d811149a4d99f47a41be21
GET /s/player/6db2bd17/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 771511
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 11:49:58 GMT
expires: Wed, 20 Aug 2025 11:49:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
472 B IP
Hash 2131b0a009e8e1df4bfe1f606782c499
53978a2b72ae8ef818aa85617b30c6e6aba42292
523f8f46c79b40acc3f3ca645085d744386b0e1b5e54d7a75fd0122049d7c076
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET rusbrig.forum2x2.ru/images/icons-180.png
200 OK 7.8 kB URL GET HTTP/2 rusbrig.forum2x2.ru/images/icons-180.png
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectm91.maxns.net
Fingerprint6F:AC:0A:41:63:3E:F2:8C:26:37:A7:4F:D8:03:10:A6:4F:BC:DF:F1
ValiditySun, 04 Aug 2024 04:09:39 GMT - Sat, 02 Nov 2024 04:09:38 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Hash 7a6117d6bae5f9d8101b969b10d15943
6d390af161a7fad93c4499fd82d9962b87f00fd3
efe9e2606e114f39fa9eca4e009beccae66e3a4d7d4cca0ff6a8bcc2cfcacb79
GET /images/icons-180.png HTTP/1.1
Host: rusbrig.forum2x2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Cookie: _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A1024%7D; _ga_VKHBPXN046=GS1.1.1724241580.1.0.1724241580.60.0.0; _ga=GA1.1.1705844765.1724241581
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:43 GMT
content-type: image/png
content-length: 7830
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 21 Aug 2024 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: HIT
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (543)
Hash 146f176379aac2bdde86c6b9e8490d76
db9a1c02947b5807f351232667b095a073121445
815681f1f446a65b9f4a841064fe9d5e9484caa663dd98b0da4752022fb2849d
GET /s/player/6db2bd17/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33633
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 01:39:12 GMT
expires: Thu, 21 Aug 2025 01:39:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 37231
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240821
200 OK 841 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240821
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Hash da32607297a972ef2a7b265117589c3a
78adafbdecee00630d50d53ca4bbeb72c0ab379f
65f7b3322fad3d7ba4d813eeb6be071f5a298a7699e34ca0d7349741c2666874
GET /gh/prebid/currency-file@1/latest.json?date=20240821 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.2154
x-jsd-version-type: version
etag: W/"63c-eK2vvezuAGMNUNU8pLvrcsCrN58"
content-encoding: br
accept-ranges: bytes
date: Wed, 21 Aug 2024 11:59:43 GMT
age: 28720
x-served-by: cache-fra-eddf8230103-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 841
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (543)
Hash 146f176379aac2bdde86c6b9e8490d76
db9a1c02947b5807f351232667b095a073121445
815681f1f446a65b9f4a841064fe9d5e9484caa663dd98b0da4752022fb2849d
GET /s/player/6db2bd17/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33633
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 01:39:12 GMT
expires: Thu, 21 Aug 2025 01:39:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 37232
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
504 B IP
ASN #20940 Akamai International B.V.
Hash 663683cf83257c4867434f1b98db8939
f0ca9dbee82d2d4031edbf65bc9aa36d25264687
42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10665
Expires: Wed, 21 Aug 2024 14:57:29 GMT
Date: Wed, 21 Aug 2024 11:59:44 GMT
Connection: keep-alive
GET script.4dex.io/a/latest/adagio.js
200 OK 22 kB URL GET HTTP/1.1 script.4dex.io/a/latest/adagio.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
FingerprintAB:9B:A2:70:ED:27:23:EF:84:14:22:FF:67:9F:5D:50:06:2D:04:28
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65354)
Hash 5d2d2036b561962f40bb380b9e37a03c
aac3e8ceec561176577bfb108e644179fee2c62a
4021ac3b8dc8bfabb47c753df4e2d8850b084512a751375711da648e65ee2a5c
GET /a/latest/adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 21 Aug 2024 11:59:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"5d2d2036b561962f40bb380b9e37a03c"
Last-Modified: Wed, 24 Jul 2024 09:04:04 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 2429645
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=basZVu%2FfPSnQ25IQz%2BEG0ERUWMmCulP1xSeK2gQ2DKZ3B6Z3N6EbRy2IJZZuxeQopTvx%2BKnVG66V2F5JkfPb7m0GNybJDWl%2FQNy0szk5D2Pm%2Fz7W7CPj9lKYsiI5wLgJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b6a756dced856bf-OSL
Content-Encoding: br
POST mp.4dex.io/prebid
204 No Content 0 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectmp.4dex.io
Fingerprint9E:87:DD:BD:47:B6:39:9C:7F:64:FA:78:7E:00:E7:39:30:C9:11:46
ValidityMon, 01 Jul 2024 01:35:44 GMT - Sun, 29 Sep 2024 01:35:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 2266
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 21 Aug 2024 11:59:44 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://rusbrig.forum2x2.ru
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Parsing the Prebid Request. parseadrequest adrequest and manager domains do not match
x-version: 3.0.0-gcp-ams
x-warn: Parsing the Prebid Request. domain_invalid
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8b6a756dcf987129-OSL
X-Firefox-Spdy: h2
POST rtb.adpone.com/bid-request?pid=122611131932413
200 OK 476 B URL POST HTTP/2 rtb.adpone.com/bid-request?pid=122611131932413
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectadpone.com
FingerprintAA:14:92:9F:41:FC:A3:F3:F1:5A:FE:A8:1D:6E:4B:2A:30:33:73:3E
ValiditySun, 07 Jul 2024 01:15:10 GMT - Sat, 05 Oct 2024 01:15:09 GMT
Hash f333e58dcce45f967da69984d549ae66
5d3dc1058bc5a0f7ba54d3f25939179a60fb6734
cef2e00c05a6da8f03c4cb777d26becf1504975a02c8a06d8fa6f2f83316d1af
POST /bid-request?pid=122611131932413 HTTP/1.1
Host: rtb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 94
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:44 GMT
content-type: application/json
content-length: 476
access-control-allow-credentials: true
access-control-allow-origin: https://rusbrig.forum2x2.ru
content-encoding: gzip
vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RaA7co5kKqfRnLPZMQ6U7MmQHPBpgv3FaUKDq4GwQ9hqKRiF7Vl9Ak9uqL5jhRCbURNJ%2B9yyWXOEdvY2%2B5y376WDctJSFU0i%2BsTqscO0OLyjcKM3MOJC7kEvcz8jmKUN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a756dc88156a8-OSL
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 19fffc765f2cb493256b498ec97cf1c2
37188c7fb3fd3423f98dea4db8bb374be8ccceba
98ecff48249240f07e356fea61e198b5a3abfc33dca99e28a87134323ee20246
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "98ECFF48249240F07E356FEA61E198B5A3ABFC33DCA99E28A87134323EE20246"
Last-Modified: Wed, 21 Aug 2024 06:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8529
Expires: Wed, 21 Aug 2024 14:21:53 GMT
Date: Wed, 21 Aug 2024 11:59:44 GMT
Connection: keep-alive
POST inv-nets.admixer.net/adxprebid.1.2.aspx
204 No Content 0 B URL POST HTTP/2 inv-nets.admixer.net/adxprebid.1.2.aspx
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerSectigo Limited
Subject*.admixer.net
FingerprintCE:3A:91:EF:C5:C3:1B:59:7E:AA:04:8A:1A:D2:13:8B:79:07:B5:87
ValidityFri, 08 Dec 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adxprebid.1.2.aspx HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 2445
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Wed, 21 Aug 2024 11:59:44 GMT
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
x-xss-protection: 0
p3p: CP="NID DSP ALL COR"
set-cookie: am-uid=59cbeaad19cf44aa8c509a6323984eaf; expires=Tue, 19 Nov 2024 11:59:44 GMT; domain=.admixer.net; secure; SameSite=None
X-Firefox-Spdy: h2
GET www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/6db2bd17/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (543)
Hash 146f176379aac2bdde86c6b9e8490d76
db9a1c02947b5807f351232667b095a073121445
815681f1f446a65b9f4a841064fe9d5e9484caa663dd98b0da4752022fb2849d
GET /s/player/6db2bd17/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33633
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 01:39:12 GMT
expires: Thu, 21 Aug 2025 01:39:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Aug 2024 04:16:02 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 37232
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
471 B IP
Hash 7ad371d64053fec0ed901f12ef3050fc
7f72de4136bd3a06dd951f547f73cf260b39bfee
ef783788dee0dbb9196405da81919f7a10a9b32c0ae5a660d6603e91847c8be9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 85d224257861632f72966005cbe5c5ae
dd7e1df89b90379e526fa6d5666968da26a72aee
fc6d4d057099fbc8833b3cc20c0c4400d34a4292f3d934f08d8df09b19b68e6a
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST prebid.a-mo.net/a/c
204 No Content 0 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint68:43:4E:42:7A:BC:94:FF:CA:52:98:82:9C:A9:F1:B1:8D:7C:92:75
ValidityThu, 04 Jul 2024 09:55:47 GMT - Wed, 02 Oct 2024 09:55:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 2486
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://rusbrig.forum2x2.ru
cache-control: max-age=0, private, must-revalidate
date: Wed, 21 Aug 2024 11:59:43 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
POST onetag-sys.com/prebid-request
200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 2644
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
GET yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
200 OK 2.3 kB URL GET HTTP/2 yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash c2cb25d7e655bb90b0f9446398a1350c
617feb7c2d7d5b88cf4808df5374330ac8ab5d8e
49234538655262ac5a787447eba261974d573e284e1d517b713ea75338bd1524
GET /8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2308
x-xss-protection: 0
date: Wed, 21 Aug 2024 09:17:03 GMT
expires: Thu, 22 Aug 2024 09:17:03 GMT
cache-control: public, max-age=86400, no-transform
age: 9761
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash ab170efaca86fbbb73545a06fff5aca5
82702a0197bef80b863c1235889bcf86c8ba1fd0
218aee5647a2ada0801cf95275f0ea36a833773f22e0fa4491c82eaa8f7562fe
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.google.com/js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js
200 OK 21 kB URL GET HTTP/2 www.google.com/js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint78:90:10:00:62:E9:32:D2:E2:99:72:73:B5:44:27:CB:98:2E:AD:29
ValidityTue, 30 Jul 2024 12:50:13 GMT - Tue, 22 Oct 2024 12:50:12 GMT
File type JavaScript source, ASCII text, with very long lines (53286)
Hash 2a808da37a0dc8c0b3ce4732843cdaca
66404b91b97f55618fb51ff92503fa9949825b3e
2f6e2e3adaaf35f1513b94cec6220e560339d30a61e502a34fcd9ef69355802d
GET /js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20689
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 05:06:35 GMT
expires: Thu, 21 Aug 2025 05:06:35 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 10:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 24789
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 21 Aug 2024 11:59:44 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST rtb.adxpremium.services/openrtb2/auction
200 OK 1.8 kB URL POST HTTP/1.1 rtb.adxpremium.services/openrtb2/auction
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerSectigo Limited
Subject*.adxpremium.services
Fingerprint3A:50:63:23:2E:BB:6E:AA:49:FA:79:1A:46:45:4A:62:82:BA:A7:AD
ValidityTue, 30 Jul 2024 00:00:00 GMT - Tue, 05 Aug 2025 23:59:59 GMT
Hash 62a454fe172948d56944fd4c31feffaa
871397e7dd9c3a36430711953044f5f1be15d4e3
9bf934087ee89f435f93a777e7f7b05110b705c54e9a63ff1b631f0896d09c41
POST /openrtb2/auction HTTP/1.1
Host: rtb.adxpremium.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 765
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Aug 2024 11:59:44 GMT
Content-Type: application/json
Content-Length: 1816
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rusbrig.forum2x2.ru
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Vary: Origin
X-Prebid: pbs-go/unknown
POST region1.analytics.google.com/g/collect?v=2&tid=G-VKHBPXN046>m=45je48j0v9134894722za200&_p=1724241580330&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=0&cid=1705844765.1724241581&ul=en-us&sr=1280x1024&_ng=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1724241580&sct=1&seg=0&dl=https%3A%2F%2Frusbrig.forum2x2.ru%2F&dt=RUSBRIGADA%20GAMING%20COMMUNITY%20-%20%D0%9F%D0%BE%D1%80%D1%82%D0%B0%D0%BB&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1567
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-VKHBPXN046>m=45je48j0v9134894722za200&_p=1724241580330&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=0&cid=1705844765.1724241581&ul=en-us&sr=1280x1024&_ng=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1724241580&sct=1&seg=0&dl=https%3A%2F%2Frusbrig.forum2x2.ru%2F&dt=RUSBRIGADA%20GAMING%20COMMUNITY%20-%20%D0%9F%D0%BE%D1%80%D1%82%D0%B0%D0%BB&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1567
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VKHBPXN046>m=45je48j0v9134894722za200&_p=1724241580330&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=0&cid=1705844765.1724241581&ul=en-us&sr=1280x1024&_ng=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1724241580&sct=1&seg=0&dl=https%3A%2F%2Frusbrig.forum2x2.ru%2F&dt=RUSBRIGADA%20GAMING%20COMMUNITY%20-%20%D0%9F%D0%BE%D1%80%D1%82%D0%B0%D0%BB&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1567 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://rusbrig.forum2x2.ru
date: Wed, 21 Aug 2024 11:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
200 OK 2.3 kB URL GET HTTP/2 yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash c2cb25d7e655bb90b0f9446398a1350c
617feb7c2d7d5b88cf4808df5374330ac8ab5d8e
49234538655262ac5a787447eba261974d573e284e1d517b713ea75338bd1524
GET /8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2308
x-xss-protection: 0
date: Wed, 21 Aug 2024 09:17:03 GMT
expires: Thu, 22 Aug 2024 09:17:03 GMT
cache-control: public, max-age=86400, no-transform
age: 9761
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ac.aruncdn.com/f/nat/fixedFooter.native.js?ver=270085
200 OK 168 kB URL GET HTTP/3 ac.aruncdn.com/f/nat/fixedFooter.native.js?ver=270085
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 168 kB (168357 bytes)
Hash 98d24c0d2902e0ef329b67b6c08ce5a3
207db97d0652c451bfc2dd6f13ef9e4ae0fb560f
fc9f32a1946454f908d99873fd2a64791714b769c5e2f1d8abbc873b3ec7ba84
GET /f/nat/fixedFooter.native.js?ver=270085 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
last-modified: Thu, 01 Aug 2024 18:36:54 GMT
etag: W/"0708733879d93c42a1e77a9f4e148139"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: dVpk.IHBrUNGXl700pe5aGvF2GAMD1UQ
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ff51bc3614c373d274030fe4ca1a34fc.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Ghet0TgeRFEbhxxd1mBBPWc3W9oIuQG8ANhQWlx5ghcVzDPfkl5RqQ==
age: 17347
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BazdFpZ7mYPyJ6L94Kj6It3V%2FPvNpkAm%2BbDmGpqJlwgGaTArgNeSck2P1LPo4HenQ%2FBf%2BKkYC7X0Y%2FEyuqnLq7BCzS6DcgfqHfmBz%2BKvmzFCtPu0J33Mphlo5V6%2FbJy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a755ebaf57128-OSL
alt-svc: h3=":443"; ma=86400
GET ac.aruncdn.com/i/f/arrow.svg
200 OK 21 kB URL GET HTTP/3 ac.aruncdn.com/i/f/arrow.svg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type SVG Scalable Vector Graphics image
Hash 85879df3481a1e2f40eb9782977fa7f9
7de72a83bf108ca762aea2de36d1c9bacedb3923
29646c2ba0f044af1ec8665ac8cb52fb38902c0b7baa75a005185dd009703ae2
GET /i/f/arrow.svg HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:43 GMT
content-type: image/svg+xml
last-modified: Thu, 06 Jun 2024 14:41:35 GMT
etag: W/"85879df3481a1e2f40eb9782977fa7f9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: 6d3DDSMtirKn2i8ffsn8H0_dFB9BufMc
x-cache: Hit from cloudfront
via: 1.1 a1883601a786b7317faec0d94ef154f2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: aQV0W8OdsPe8ImPy4eKxpxIky4Vro_Ef_Q-Lmxx-Pz9T2aKPIgyLDQ==
age: 4070511
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IopT9jUOvxymQndCk3ZiPBE%2BtNAm%2FHzEMu7bVVuaeOyq503W3Zlyzw1Y5Il2EROFjdZYoSf1734QqJGIrRSifeCcj6VnKsMdblwox9vGf6EVpqK6UNPDsd9h2HkcunEr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a7567e9e87128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET i.ytimg.com/vi/3nJY7n8KaOY/sddefault.jpg
200 OK 46 kB URL GET HTTP/2 i.ytimg.com/vi/3nJY7n8KaOY/sddefault.jpg
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subjectedgestatic.com
FingerprintE8:16:FA:0F:7A:6A:1E:FB:99:C7:B5:66:E0:1D:65:7D:77:C0:3B:FA
ValidityTue, 30 Jul 2024 12:32:43 GMT - Tue, 22 Oct 2024 12:32:42 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash c3bbbe83cd8734c11e167c16f07b391f
6ae86f30dc8f88454b9bf633885f02fff2bb87e8
3e5944583a5f5639e4d6f8c8d6dc792115a731dc12812f3c4b51a1d17d0b5968
GET /vi/3nJY7n8KaOY/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 46274
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 11:59:09 GMT
expires: Wed, 21 Aug 2024 13:59:09 GMT
cache-control: public, max-age=7200
age: 35
etag: "1370973990"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ac.aruncdn.com/i/f/close.svg
200 OK 381 B URL GET HTTP/3 ac.aruncdn.com/i/f/close.svg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type SVG Scalable Vector Graphics image
Hash 75b7a0f5d0964082b842670da4ef0ae8
a45efec6f7307a314d6d4a16b6f701a1c9b03afc
ae540d7788bb22cdd6753ff56107e0f405cbcdef8b0b9e6b73bc16eeb26acc48
GET /i/f/close.svg HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:43 GMT
content-type: image/svg+xml
last-modified: Thu, 06 Jun 2024 14:41:35 GMT
etag: W/"75b7a0f5d0964082b842670da4ef0ae8"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: y_IfJNFC5n3ifmyV8NtPn4F_9DDSbZcs
x-cache: Hit from cloudfront
via: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: XVSv2kNW59Vi7o6FNIiBwSMREyDq8lPtmAcHPTgctD6knwuEf9mayQ==
age: 5963925
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EwJgTdv%2FcYd7HQi0H45i%2BrtYNB4qBU9zM%2FSFfHr5SOMWTnKV3GSqEBj3evsKib1Z7fMF3QTKq9mqIiqZFJcxyd%2Bgh9mlaQ0En%2Bz%2FCO4INIAv0DVE9FHWJYbi%2BWvHvV6W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a7567e9eb7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 43 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 6ef7c3af2eb8f363a1cdc10b6b995c37
6a3e4a56e3a57f3771bcbdfc324b8d9c5487fa50
e5a76b6e55f20702f868bfa0f8c74fb249777126cb46b91da59870e18f135ba0
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:44 GMT
server: ESF
cache-control: private
content-length: 42596
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP
Hash 03bc5133184855561b45c8ff685c3e38
444bba387303d112072485fccfde035ba634c5f1
3c568990c9cd1b297a973d99789ed136a136bc0538c3f8f427351b844010d6e1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 5026dfaab5e80a531868a4fe9ed9dfda
55ff61f575aa8514f5d0270fdc3ab699a889083a
51f4c997a972c5faa3b9e27b93a658fa7109024ad81bfb0729d6d9cc3ec5caed
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 21 Aug 2024 11:59:44 GMT
Last-Modified: Wed, 21 Aug 2024 11:15:33 GMT
Server: ECAcc (ama/48A5)
X-Cache: Miss from cloudfront
Via: 1.1 b10069b378f22e10f0382c21d0a9578e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: KoO2hzUqlji4w7S22IH17dMGk5cphzJjU60bCjYs_3IJac1XKukrEg==
Age: 2651
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 0b70530ec01c2c3ea15d6c8db7072924
8f9d3a9d4a29bc42699b63b31e134c33b8cc5ec6
c4360fff5b9d9ce62fc29a356cbc626442481c22eed5e840b331143d121ec1ad
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 21 Aug 2024 11:59:44 GMT
Last-Modified: Wed, 21 Aug 2024 10:18:18 GMT
Server: ECAcc (amb/6B27)
X-Cache: Miss from cloudfront
Via: 1.1 e3d9ae12f22103dbc65c451ae520a012.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: YXLf0MJhOcYG7vgwQ7XqGKJkRVW0xSKR0cq82_G1OZM0Sw1y5gkMuA==
Age: 6086
471 B IP
Hash ab170efaca86fbbb73545a06fff5aca5
82702a0197bef80b863c1235889bcf86c8ba1fd0
218aee5647a2ada0801cf95275f0ea36a833773f22e0fa4491c82eaa8f7562fe
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 03bc5133184855561b45c8ff685c3e38
444bba387303d112072485fccfde035ba634c5f1
3c568990c9cd1b297a973d99789ed136a136bc0538c3f8f427351b844010d6e1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 43 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash db287204170f95d161f7108f62175a37
b29c715aa1d8e278e1f64ee99d917f2504561c2a
0895a4392a06381571eeb6a0e5150756f8145f0b01ecc580802938278c15b8fb
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:44 GMT
server: ESF
cache-control: private
content-length: 42820
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ng=1&tid=G-VKHBPXN046&cid=1705844765.1724241581>m=45je48j0v9134894722za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=0&tag_exp=0&z=1190620810
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ng=1&tid=G-VKHBPXN046&cid=1705844765.1724241581>m=45je48j0v9134894722za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=0&tag_exp=0&z=1190620810
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google.no
Fingerprint16:FD:33:89:BB:AE:5C:C4:9E:F2:7A:61:BB:1B:D6:32:29:FD:28:1B
ValidityTue, 30 Jul 2024 12:54:05 GMT - Tue, 22 Oct 2024 12:54:04 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ng=1&tid=G-VKHBPXN046&cid=1705844765.1724241581>m=45je48j0v9134894722za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=0&tag_exp=0&z=1190620810 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Aug 2024 11:59:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.ytimg.com/vi/IEZhbV9s1Ag/sddefault.jpg
200 OK 59 kB URL GET HTTP/2 i.ytimg.com/vi/IEZhbV9s1Ag/sddefault.jpg
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectedgestatic.com
FingerprintE8:16:FA:0F:7A:6A:1E:FB:99:C7:B5:66:E0:1D:65:7D:77:C0:3B:FA
ValidityTue, 30 Jul 2024 12:32:43 GMT - Tue, 22 Oct 2024 12:32:42 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash 4849881a9ca84179da865988ea461755
99af665a63357d7e8ef24566ef669ac804323947
18316bd13b8bfe2268f4fad2f019f43e62d47cd2bbe1750bc61e1e41110bd219
GET /vi/IEZhbV9s1Ag/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 58745
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 11:59:09 GMT
expires: Wed, 21 Aug 2024 13:59:09 GMT
cache-control: public, max-age=7200
etag: "1370974089"
content-type: image/jpeg
vary: Origin
age: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.ytimg.com/vi/dgZTeVnM5Sw/sddefault.jpg
200 OK 68 kB URL GET HTTP/2 i.ytimg.com/vi/dgZTeVnM5Sw/sddefault.jpg
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectedgestatic.com
FingerprintE8:16:FA:0F:7A:6A:1E:FB:99:C7:B5:66:E0:1D:65:7D:77:C0:3B:FA
ValidityTue, 30 Jul 2024 12:32:43 GMT - Tue, 22 Oct 2024 12:32:42 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Hash 353ac9c4e6330cd4fa04673cfb59a850
b25dbc5c8073bbaf083a27edfb5375c108dece63
f5881aad3535993aaf499fe3f922525562ca14581507222076600b8014611d2a
GET /vi/dgZTeVnM5Sw/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 67812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 11:59:09 GMT
expires: Wed, 21 Aug 2024 13:59:09 GMT
cache-control: public, max-age=7200
etag: "1370974062"
content-type: image/jpeg
vary: Origin
age: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 21 Aug 2024 11:59:44 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.youtube.com/generate_204?du73BQ
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?du73BQ
IP
Requested by https://www.youtube.com/embed/3nJY7n8KaOY
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?du73BQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 21 Aug 2024 11:59:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST pbs.prd.audiencerun.com/cookie_sync
200 OK 659 B URL POST HTTP/1.1 pbs.prd.audiencerun.com/cookie_sync
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.prd.audiencerun.com
Fingerprint60:A3:12:F9:CF:AC:27:7F:FD:32:CB:49:E7:16:E7:3A:64:40:5E:8C
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 27 Feb 2025 23:59:59 GMT
Hash 639272c9bb6eda28e857f24de3dadd4e
d5656e40189fb3d9cadb68b764ac4c6e3dc47830
20b66addf3af81a7030884568d9c4af80fbd93af6c28519d8b2953d723851dc6
POST /cookie_sync HTTP/1.1
Host: pbs.prd.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 295
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Cookie: ui=166c5d6ad1685d813010637
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rusbrig.forum2x2.ru
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Content-Type: application/json; charset=utf-8
Date: Wed, 21 Aug 2024 11:59:44 GMT
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding, Origin
Content-Length: 659
Connection: keep-alive
GET yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
200 OK 2.3 kB URL GET HTTP/2 yt3.ggpht.com/8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Hash c2cb25d7e655bb90b0f9446398a1350c
617feb7c2d7d5b88cf4808df5374330ac8ab5d8e
49234538655262ac5a787447eba261974d573e284e1d517b713ea75338bd1524
GET /8YqbV3VEUuwlcUmyH1UOdUJYkZf_gvecWiC7TwHEKIndagjDUtmL_6t4ShjPc7pLPOo6n2trTkc=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2308
x-xss-protection: 0
date: Wed, 21 Aug 2024 09:17:03 GMT
expires: Thu, 22 Aug 2024 09:17:03 GMT
cache-control: public, max-age=86400, no-transform
age: 9762
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash 7ad371d64053fec0ed901f12ef3050fc
7f72de4136bd3a06dd951f547f73cf260b39bfee
ef783788dee0dbb9196405da81919f7a10a9b32c0ae5a660d6603e91847c8be9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET cadmus.script.ac/dahhc4ozyvjm6/script.js
200 OK 3 B URL GET HTTP/2 cadmus.script.ac/dahhc4ozyvjm6/script.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectscript.ac
FingerprintB6:5F:77:59:C0:50:0A:F7:93:BD:18:33:E9:22:2A:1F:E5:8C:12:67
ValiditySun, 23 Jun 2024 16:14:10 GMT - Sat, 21 Sep 2024 16:14:09 GMT
Hash b519d08ef66fd54910edbedba6181ec2
8d06436c33a3086259f2f1ccaf03425707eeff17
101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860
GET /dahhc4ozyvjm6/script.js HTTP/1.1
Host: cadmus.script.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:45 GMT
content-type: application/javascript
content-length: 3
age: 0
cache-control: public,max-age=259200,stale-while-revalidate=86400,stale-if-error=259200
etag: W/"601055f6a0c6408859f97b5f0a84bdb88441a80e"
last-modified: Mon, 01 Jan 2018 00:00:00 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75726a4e0b3d-OSL
X-Firefox-Spdy: h2
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 43 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 0caed96ace699b8398b583292b0e38a8
636991ea5451f3355831a872361b0e6c2ba079d8
426740360ba89dd606edadda20dad2cf13457d69144bd1dfd9447979c84b619a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: ESF
cache-control: private
content-length: 42642
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js
200 OK 21 kB URL GET HTTP/2 www.google.com/js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint78:90:10:00:62:E9:32:D2:E2:99:72:73:B5:44:27:CB:98:2E:AD:29
ValidityTue, 30 Jul 2024 12:50:13 GMT - Tue, 22 Oct 2024 12:50:12 GMT
File type JavaScript source, ASCII text, with very long lines (53286)
Hash 2a808da37a0dc8c0b3ce4732843cdaca
66404b91b97f55618fb51ff92503fa9949825b3e
2f6e2e3adaaf35f1513b94cec6220e560339d30a61e502a34fcd9ef69355802d
GET /js/th/L24uOtqvNfFRO5TOxiIOVgM50wph5QKjT82e9pNVgC0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20689
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 05:06:35 GMT
expires: Thu, 21 Aug 2025 05:06:35 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Aug 2024 10:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 24790
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST pbs.prd.audiencerun.com/openrtb2/auction
200 OK 288 B URL POST HTTP/1.1 pbs.prd.audiencerun.com/openrtb2/auction
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.prd.audiencerun.com
Fingerprint60:A3:12:F9:CF:AC:27:7F:FD:32:CB:49:E7:16:E7:3A:64:40:5E:8C
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 27 Feb 2025 23:59:59 GMT
Hash 89826355eada58bee1910a9e470b2ebc
35db75333701d2179775a1fc90e647dbe7b896bd
b27dab46bc1a903a138cc3e1daf2368f258e2a6c1dd6cfaa81d5d02cf14c45c7
POST /openrtb2/auction HTTP/1.1
Host: pbs.prd.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Content-Length: 3101
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Cookie: ui=166c5d6ad1685d813010637
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rusbrig.forum2x2.ru
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: br
Content-Type: application/json
Date: Wed, 21 Aug 2024 11:59:45 GMT
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding, Origin
X-Prebid: pbs-go/1.14.0-audiencerun
Content-Length: 288
Connection: keep-alive
471 B IP
Hash ab170efaca86fbbb73545a06fff5aca5
82702a0197bef80b863c1235889bcf86c8ba1fd0
218aee5647a2ada0801cf95275f0ea36a833773f22e0fa4491c82eaa8f7562fe
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 03bc5133184855561b45c8ff685c3e38
444bba387303d112072485fccfde035ba634c5f1
3c568990c9cd1b297a973d99789ed136a136bc0538c3f8f427351b844010d6e1
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Aug 2024 11:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET inv-nets.admixer.net/adxcm.aspx?gdpr=&gdpr_consent=&us_privacy=&redir=1&rurl=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Dadmixer%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24%24visitor_cookie%24%24
302 Found 0 B URL GET HTTP/2 inv-nets.admixer.net/adxcm.aspx?gdpr=&gdpr_consent=&us_privacy=&redir=1&rurl=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Dadmixer%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24%24visitor_cookie%24%24
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerSectigo Limited
Subject*.admixer.net
FingerprintCE:3A:91:EF:C5:C3:1B:59:7E:AA:04:8A:1A:D2:13:8B:79:07:B5:87
ValidityFri, 08 Dec 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adxcm.aspx?gdpr=&gdpr_consent=&us_privacy=&redir=1&rurl=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Dadmixer%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D%24%24visitor_cookie%24%24 HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Cookie: am-uid=59cbeaad19cf44aa8c509a6323984eaf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 21 Aug 2024 11:59:45 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
x-xss-protection: 0
p3p: CP="NID DSP ALL COR"
location: https://pbs.prd.audiencerun.com/setuid?bidder=admixer&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=59cbeaad19cf44aa8c509a6323984eaf
set-cookie: am-uid=59cbeaad19cf44aa8c509a6323984eaf; expires=Tue, 19 Nov 2024 11:59:45 GMT; domain=.admixer.net; secure; SameSite=None
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 411
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.youtube.com/generate_204?6DGT2w
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?6DGT2w
IP
Requested by https://www.youtube.com/embed/IEZhbV9s1Ag
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?6DGT2w HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 21 Aug 2024 11:59:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST d.audiencerun.com/pm
204 No Content 0 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.audiencerun.com
Fingerprint5A:C8:CB:27:EE:22:97:36:83:0F:FB:B2:11:4A:87:46:2A:64:78:73
ValidityWed, 11 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pm HTTP/1.1
Host: d.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 9893
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Cookie: AWSALBTGCORS=k+DznK31SZd0MJmbWYV1RbBrdTPbE6NsjDu2iFqgKOiaUckr8rc9yjWu/vQmQovzGvJHBPRwuAtCMoY05CLw79uQaCNh91hTu06g8G5SzJbThL6myImXfhtMJG9DEZ1dNn2FmDllP6ysOGjsdM8MiI9q9PIYzMeOOnwp9DmjQXwO; AWSALBCORS=ne8RSvW2DXuAHoYyNHi8wEO2dpq9dMby5iSLJtYg1H9z8rb0oKP4SQXdsCEoPuPJgX+rkSiMetLv/DxAML+inoT0JwO7/uwFqBCRGnVe8VwomM4Eftpv4UkVRozy; ui=166c5d6ad1685d813010637
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 21 Aug 2024 11:59:45 GMT
set-cookie: AWSALBTG=03nA58ZSZ6Ig/WlWM0ukIlh699s77YmECMYPTInAaUzSkmh9Q1+z8Q0KIFalwBoPY/0TCrp38+J0egxFZtqLTNwKqjrUXJ11c9l6Zbj1v+E/iTXuM5IVcNcrXowbuJS1co1JA1sN923PO30w2syOm77UNwuSvSkanaqURTWg8/N7; Expires=Wed, 28 Aug 2024 11:59:45 GMT; Path=/
AWSALBTGCORS=03nA58ZSZ6Ig/WlWM0ukIlh699s77YmECMYPTInAaUzSkmh9Q1+z8Q0KIFalwBoPY/0TCrp38+J0egxFZtqLTNwKqjrUXJ11c9l6Zbj1v+E/iTXuM5IVcNcrXowbuJS1co1JA1sN923PO30w2syOm77UNwuSvSkanaqURTWg8/N7; Expires=Wed, 28 Aug 2024 11:59:45 GMT; Path=/; SameSite=None; Secure
AWSALB=6SbyfAZwv7U+Ci0L0S/XERoTazOSkzdt7MwwHjNuycETkmidzoslLWmRalkdzy75WtphlVWSy4vS39New1G0yJi6SyS6uEz9ENsn6XcqmKZGhDTQ2bEtSzwMrk4R; Expires=Wed, 28 Aug 2024 11:59:45 GMT; Path=/
AWSALBCORS=6SbyfAZwv7U+Ci0L0S/XERoTazOSkzdt7MwwHjNuycETkmidzoslLWmRalkdzy75WtphlVWSy4vS39New1G0yJi6SyS6uEz9ENsn6XcqmKZGhDTQ2bEtSzwMrk4R; Expires=Wed, 28 Aug 2024 11:59:45 GMT; Path=/; SameSite=None; Secure
server: nginx
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pbs.prd.audiencerun.com/setuid?bidder=admixer&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=59cbeaad19cf44aa8c509a6323984eaf
200 OK 86 B URL GET HTTP/1.1 pbs.prd.audiencerun.com/setuid?bidder=admixer&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=59cbeaad19cf44aa8c509a6323984eaf
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.prd.audiencerun.com
Fingerprint60:A3:12:F9:CF:AC:27:7F:FD:32:CB:49:E7:16:E7:3A:64:40:5E:8C
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 27 Feb 2025 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Hash 6c6641b08f4be6f479f1588af08054b3
8da28b3146834c48fd843b108749191516d2a65d
c2ecff291918a3caf0b7e470323e89f2a1f05b92e12a10649e598cacebe62acf
GET /setuid?bidder=admixer&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=59cbeaad19cf44aa8c509a6323984eaf HTTP/1.1
Host: pbs.prd.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
DNT: 1
Connection: keep-alive
Cookie: ui=166c5d6ad1685d813010637
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/png
Date: Wed, 21 Aug 2024 11:59:45 GMT
Expires: 0
Pragma: no-cache
Set-Cookie: uis=eyJ0ZW1wVUlEcyI6eyJhZG1peGVyIjp7InVpZCI6IjU5Y2JlYWFkMTljZjQ0YWE4YzUwOWE2MzIzOTg0ZWFmIiwiZXhwaXJlcyI6IjIwMjQtMDktMDRUMTE6NTk6NDUuMjIzNjMzNTA5WiJ9fX0=; Path=/; Domain=audiencerun.com; Expires=Tue, 19 Nov 2024 11:59:45 GMT
Vary: Accept-Encoding, Origin
Content-Length: 86
Connection: keep-alive
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241585238
Content-Type: application/json
X-Goog-Visitor-Id: CgtyRkFPUTFERE5xNCitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgFg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581829&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 10870
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 11:59:45 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 411
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.youtube.com/generate_204?hPd90g
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?hPd90g
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?hPd90g HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Wed, 21 Aug 2024 11:59:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 411
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 21 Aug 2024 11:59:45 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 4981fd44153f05a314003a09a1bab3e8
803cdb176cf51fbd7255194178aeb0c285a4ebdf
3146f887fb3c8be0cdafbb6faca09291275f60fdc280f5bde2948d2174502f3d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 927
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1100
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 417
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 21 Aug 2024 11:59:45 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 1761c5b63570201c4e294d5052845dbb
7ea06a9dc421ef7c896b333f76f2c53736c87e0e
faf7995ca6f2ce5900686ee8893d2b26c0ac080575386d62fb98312e65e50428
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1082
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1100
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 417
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:45 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
504 B IP
ASN #20940 Akamai International B.V.
Hash 44a6008e47b9d3a88a9e1635c27f0b5e
ffe2c4ccbf84fe5ca743f8a6b9c285cb59ce3994
2b6955e6c676cbc17e221a9336f60692a857e4292ce89ef3f45dff74f608d1d9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2B6955E6C676CBC17E221A9336F60692A857E4292CE89EF3F45DFF74F608D1D9"
Last-Modified: Wed, 21 Aug 2024 07:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6927
Expires: Wed, 21 Aug 2024 13:55:13 GMT
Date: Wed, 21 Aug 2024 11:59:46 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 44a6008e47b9d3a88a9e1635c27f0b5e
ffe2c4ccbf84fe5ca743f8a6b9c285cb59ce3994
2b6955e6c676cbc17e221a9336f60692a857e4292ce89ef3f45dff74f608d1d9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2B6955E6C676CBC17E221A9336F60692A857E4292CE89EF3F45DFF74F608D1D9"
Last-Modified: Wed, 21 Aug 2024 07:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6927
Expires: Wed, 21 Aug 2024 13:55:13 GMT
Date: Wed, 21 Aug 2024 11:59:46 GMT
Connection: keep-alive
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:46 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Aug 2024 11:59:46 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 21 Aug 2024 11:59:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS logs2.sportslocalmedia.com/events
200 OK 0 B URL OPTIONS HTTP/2 logs2.sportslocalmedia.com/events
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectlogs2.sportslocalmedia.com
FingerprintCF:57:2F:61:63:84:FB:C9:BD:E1:A6:BF:E3:03:B4:E5:04:57:B2:D7
ValidityMon, 08 Jul 2024 06:18:47 GMT - Sun, 06 Oct 2024 06:18:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events HTTP/1.1
Host: logs2.sportslocalmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rusbrig.forum2x2.ru/
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 11:59:46 GMT
content-type: application/octet-stream
content-length: 0
access-control-max-age: 86400
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST, OPTIONS
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1100
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:46 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
Hash 4902adfb8a98ee5f37b6e9dcc0862afa
a1a12991c2cc576d018dcaf3650734ff87ed7a05
43332c7d1793f9091dd6851975ee1dd8dcd0e94ae55269ebd95938b063764157
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1251
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:46 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS logs2.sportslocalmedia.com/events
200 OK 0 B URL OPTIONS HTTP/2 logs2.sportslocalmedia.com/events
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectlogs2.sportslocalmedia.com
FingerprintCF:57:2F:61:63:84:FB:C9:BD:E1:A6:BF:E3:03:B4:E5:04:57:B2:D7
ValidityMon, 08 Jul 2024 06:18:47 GMT - Sun, 06 Oct 2024 06:18:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: logs2.sportslocalmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 1962
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 11:59:46 GMT
content-length: 0
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
allow: POST, OPTIONS
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL OPTIONS HTTP/3 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 418
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Aug 2024 11:59:46 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241586336
Content-Type: application/json
X-Goog-Visitor-Id: Cgt3SXZMWmMyLVZWUSitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgEg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581964&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 11923
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 11:59:46 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241587268
Content-Type: application/json
X-Goog-Visitor-Id: CgtPanZKdkd0NmJQTSitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgQA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581879&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 11906
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 11:59:47 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
204 No Content 0 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint68:43:4E:42:7A:BC:94:FF:CA:52:98:82:9C:A9:F1:B1:8D:7C:92:75
ValidityThu, 04 Jul 2024 09:55:47 GMT - Wed, 02 Oct 2024 09:55:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Wed, 21 Aug 2024 11:59:47 GMT
server: envoy
vary: accept-encoding, Accept-Encoding
x-envoy-upstream-service-time: 2
X-Firefox-Spdy: h2
GET onetag-sys.com/usync/?cb=1724241584582
204 No Content 0 B URL GET HTTP/2 onetag-sys.com/usync/?cb=1724241584582
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1724241584582 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241588153
Content-Type: application/json
X-Goog-Visitor-Id: CgtyRkFPUTFERE5xNCitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgFg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241582718&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 2169
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 11:59:48 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET as.ck-ie.com/prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D
204 No Content 0 B URL GET HTTP/1.1 as.ck-ie.com/prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D
IP
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerGoDaddy.com, Inc.
Subjectck-ie.com
FingerprintCA:2D:C5:3A:1D:4F:22:2B:75:27:3A:79:15:7C:D4:91:43:B3:4F:43
ValidityWed, 03 Apr 2024 12:03:00 GMT - Fri, 13 Dec 2024 11:51:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D HTTP/1.1
Host: as.ck-ie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adxbid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Type: text/plain
Date: Wed, 21 Aug 2024 11:59:49 GMT
Connection: keep-alive
Keep-Alive: timeout=5
GET onetag-sys.com/usync/?redir=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Donetag%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24%7BUSER_TOKEN%7D&gdpr=&gdpr_consent=&us_privacy=
302 Found 0 B URL GET HTTP/2 onetag-sys.com/usync/?redir=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Donetag%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24%7BUSER_TOKEN%7D&gdpr=&gdpr_consent=&us_privacy=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?redir=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Donetag%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24%7BUSER_TOKEN%7D&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store
location: https://pbs.prd.audiencerun.com//setuid?bidder=onetag&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=
content-length: 0
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
GET adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
200 OK 2.7 kB URL GET HTTP/2 adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectadxbid.info
Fingerprint82:89:B2:58:FC:96:29:00:31:89:22:7C:0C:B0:64:7E:80:4A:00:16
ValiditySun, 28 Jul 2024 07:53:54 GMT - Sat, 26 Oct 2024 07:53:53 GMT
File type JavaScript source, ASCII text, with very long lines (7486)
Hash e178f207a27096f8e92d011d4bdf57b7
f768e98226b08a13c757e90c57276aab7daa91ec
47af46bda8c32293b5e7d29cea895926ad5aca5397e108556edecf4e7866c0d7
GET /sync-all.html?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: adxbid.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:48 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 26 Jan 2023 09:50:58 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wAG2aesY5lRUxKM9NAZPTbdQHsdalmYUXHLMCVfT7Xvv%2BiG0UTYZYpan3F2UFp9%2FFTI1%2Bh9ecGsX6sPdy%2BhC3HQxrmOkmR0dpZrImEPrEdtPmW0oLErkPLlGn3fYtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a75866ea1b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET prebid.a-mo.net/isyn?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Damx%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID
200 OK 141 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Damx%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint68:43:4E:42:7A:BC:94:FF:CA:52:98:82:9C:A9:F1:B1:8D:7C:92:75
ValidityThu, 04 Jul 2024 09:55:47 GMT - Wed, 02 Oct 2024 09:55:46 GMT
File type HTML document, ASCII text, with no line terminators
Hash 3e5597eeccb159792eacbd7b2daf7f0a
71c96651f154324d3759a1cbcb9e3fcc99f66e3e
c50df34f7e5841ef084c8ae8fc9d1ec543c0dd04b6afa2a49aeb0e6f65b8be77
GET /isyn?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Damx%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, private, must-revalidate
content-type: text/html; charset=utf-8
date: Wed, 21 Aug 2024 11:59:48 GMT
server: envoy
vary: accept-encoding, Accept-Encoding
x-envoy-upstream-service-time: 0
content-encoding: gzip
X-Firefox-Spdy: h2
GET user-sync.adxpremium.services/setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8
200 OK 27 B URL GET HTTP/1.1 user-sync.adxpremium.services/setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8
IP
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerSectigo Limited
Subject*.adxpremium.services
Fingerprint3A:50:63:23:2E:BB:6E:AA:49:FA:79:1A:46:45:4A:62:82:BA:A7:AD
ValidityTue, 30 Jul 2024 00:00:00 GMT - Tue, 05 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1e3f0c05047d3a79b0ece7ede1d9d185
ac12d2e906b2ed1c31a2cd07bf68148bb0be0a07
15924e7ac56cfb4c82b6c013b8b4879037fc65f9545cf3b519c9ec11f959c269
GET /setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8 HTTP/1.1
Host: user-sync.adxpremium.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid.vidoomy.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 21 Aug 2024 11:59:35 GMT
content-length: 27
content-type: text/plain; charset=utf-8
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241611356
Content-Type: application/json
X-Goog-Visitor-Id: CgtyRkFPUTFERE5xNCitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgFg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581829&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 940
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/3nJY7n8KaOY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 12:00:11 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS logs2.sportslocalmedia.com/events
200 OK 0 B URL OPTIONS HTTP/2 logs2.sportslocalmedia.com/events
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectlogs2.sportslocalmedia.com
FingerprintCF:57:2F:61:63:84:FB:C9:BD:E1:A6:BF:E3:03:B4:E5:04:57:B2:D7
ValidityMon, 08 Jul 2024 06:18:47 GMT - Sun, 06 Oct 2024 06:18:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events HTTP/1.1
Host: logs2.sportslocalmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rusbrig.forum2x2.ru/
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 12:00:11 GMT
content-type: application/octet-stream
content-length: 0
access-control-max-age: 86400
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST, OPTIONS
X-Firefox-Spdy: h2
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241611362
Content-Type: application/json
X-Goog-Visitor-Id: Cgt3SXZMWmMyLVZWUSitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgEg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581964&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 959
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dgZTeVnM5Sw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 12:00:11 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/dgZTeVnM5Sw
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1724241611368
Content-Type: application/json
X-Goog-Visitor-Id: CgtPanZKdkd0NmJQTSitrZe2BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgQA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240818.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1724241581879&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 939
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/IEZhbV9s1Ag
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Wed, 21 Aug 2024 12:00:11 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS logs2.sportslocalmedia.com/events
200 OK 0 B URL OPTIONS HTTP/2 logs2.sportslocalmedia.com/events
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectlogs2.sportslocalmedia.com
FingerprintCF:57:2F:61:63:84:FB:C9:BD:E1:A6:BF:E3:03:B4:E5:04:57:B2:D7
ValidityMon, 08 Jul 2024 06:18:47 GMT - Sun, 06 Oct 2024 06:18:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: logs2.sportslocalmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
Content-Type: application/json
Content-Length: 284
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 12:00:11 GMT
content-length: 0
access-control-allow-origin: https://rusbrig.forum2x2.ru
access-control-allow-credentials: true
allow: POST, OPTIONS
X-Firefox-Spdy: h2
GET vid.vidoomy.com/sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D
200 OK 50 kB URL GET HTTP/2 vid.vidoomy.com/sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D
IP
ASN #60068 Datacamp Limited
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerSectigo Limited
Subject*.vidoomy.com
Fingerprint18:AF:A3:4C:BA:C9:5B:1A:FC:8B:1D:B0:76:50:FE:2F:8A:44:59:F3
ValidityWed, 06 Sep 2023 00:00:00 GMT - Sun, 06 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D HTTP/1.1
Host: vid.vidoomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adxbid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:49 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 12 Dec 2023 09:09:26 GMT
x-rgw-object-type: Normal
etag: W/"a9290c6b5f8c75ebc321b414a16a5c2a"
x-amz-storage-class: STANDARD
x-amz-request-id: tx0000065019b5b84f86acc-006579900f-2bb0e51-prg
x-77-nzt: BLlMCRQ3Nzf/EngKALlMCgk3Nzf/CgAAANRmOBE3NzehbT1aAotn3wA
x-77-nzt-ray: af5856309ce4b1d8b5d6c5663096550b
x-77-cache: HIT
content-encoding: gzip
x-accel-expires: @1724592291
x-accel-date: 1723555491
x-cache-lb: HIT
x-age-lb: 10
x-77-age: 686098
server: CDN77-Turbo
x-accel-date-max: 1702465561
x-cache: HIT
x-age: 686098
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET ac.aruncdn.com/j/prebid/pre.js?416
200 OK 443 kB URL GET HTTP/2 ac.aruncdn.com/j/prebid/pre.js?416
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 443 kB (442919 bytes)
Hash c795971928edfa45819be0d8770680d0
f2473ea21f00b5ca46c26790cc5ef78642274b2a
18e899b7ea22fd338ced891a5a10fbd2a7ef9f76c33e43e801fad1102d3050b8
GET /j/prebid/pre.js?416 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: application/javascript
last-modified: Mon, 19 Aug 2024 10:11:56 GMT
etag: W/"c795971928edfa45819be0d8770680d0"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: uUtu3wMnXJZexArAcEzCf_LnIrbHn22h
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a1883601a786b7317faec0d94ef154f2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: wVAapR-TJ1Ureu50Kc7CYUSTe5Shzh8MRXVRTfJ_0JMAAsM6XALIPQ==
age: 17346
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Y53V7UlSVboBKO2YZf41o0CMDbIarzjvbNUn74s%2FTxBLcBJDo2EXJsr6CLKBtiWyI1prkhLQ5q8TqBMkXX186fkANzc3Ara6ww4%2B%2B2qd14OtxMKs7mtRmHKDOWCOItj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
content-security-policy: upgrade-insecure-requests
server: cloudflare
cf-ray: 8b6a75559f605699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Frusbrig.forum2x2.ru%2F&lang=ru&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Frusbrig.forum2x2.ru%2Ftopicit%2Findex.php%2Fconnect&version=1
200 OK 4.3 kB URL GET HTTP/3 connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Frusbrig.forum2x2.ru%2F&lang=ru&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Frusbrig.forum2x2.ru%2Ftopicit%2Findex.php%2Fconnect&version=1
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjecttopicit.net
FingerprintDB:F2:D0:A6:48:0F:61:53:90:C5:55:0B:9C:F3:95:20:0C:D2:6D:75
ValidityMon, 01 Jul 2024 22:41:21 GMT - Sun, 29 Sep 2024 22:41:20 GMT
File type HTML document, ASCII text, with very long lines (4483), with no line terminators
Hash 0b5160ccba4d5ee55aa3314ea26f8c4f
cb0d160500407db4fce9c7d458f9901a54cec5cb
09da35d8b2e3d2dec36c7df4630212cf94827201b922e8ad33b4697025741ef8
GET /button/light?id=topicit-connect-0&redirect=https%3A%2F%2Frusbrig.forum2x2.ru%2F&lang=ru&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Frusbrig.forum2x2.ru%2Ftopicit%2Findex.php%2Fconnect&version=1 HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, post-check=0, pre-check=0, private
last-modified: Wed, 21 Aug 2024 11:59:41 GMT
expires: Wed, 21 Aug 2024 00:00:00 GMT
set-cookie: XSRF-TOKEN=eyJpdiI6IlY2b1A4SkNhZm9rb0VFNHFteWhXUFE9PSIsInZhbHVlIjoib2thbFhrSURkQlR5QStwTnc2VU9UZGRYXC81WXo0eFwvMk9ZZFNscVwvOUZ1bjV4V0czdlp6M0RJU1pESFFYYVRGRiIsIm1hYyI6IjNjYzAzZjEzNzcyYjc3MzQ5YjM3ZDUwZWZhZWUxZjk4MmRkYmY5ZGNmYjVlYTAyY2RkZmE4ZDUxMzliYmIzODMifQ%3D%3D; expires=Wed, 21-Aug-2024 13:59:41 GMT; Max-Age=7200; path=/; domain=.topicit.net
topicit_session=v7ZWQDt3vQRhNZ8jl0TnR68uie3LoIYKcQ7T3jsy; expires=Wed, 21-Aug-2024 13:59:41 GMT; Max-Age=7200; path=/; domain=.topicit.net; httponly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZS9Iwy2WKsClE18kLFinepVkW2PdP%2BWUOOBqK%2BFLdpTvpuxMNYFIr1bxRhJzX757h8lI4oAhlzYtCGfvc42Ed%2FEBGD9OWuselXzYIcvpgZ0OiHLyeu4uzD2ZnXlsbUDdRPnH3x8i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a7559a80756aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET illiweb.com/rs3/87/frm/mentions/tooltipster.js
200 OK 18 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/mentions/tooltipster.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, ASCII text, with very long lines (17499), with no line terminators
Hash c5c6a5cbc41364e0fbc73470d7ce7dfc
2c0a798e6fe124e3c58393c73ccb632be9058f48
a56d8fd2c346648167ab574f3be9f54f3a96707aeddcdd3ceabd3ac1201b8057
GET /rs3/87/frm/mentions/tooltipster.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:32:55 GMT
last-modified: Tue, 27 Aug 2019 14:00:10 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RC18ojcht%2BrqQhQkzDHVof9jMS4xH9VTnYXB9n6udmrE2iHCCZduc0Pf8%2FiPEgC%2FByXYwgjRgOcYM%2B2z9sDx4I5UZMqYPKPxG0xhQHWGTmmkPUuIJ%2BFFAUCQY0ASeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551fe61b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET s018.radikal.ru/i515/1201/5e/456e06298a69.jpg
0 B URL GET s018.radikal.ru/i515/1201/5e/456e06298a69.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i515/1201/5e/456e06298a69.jpg HTTP/1.1
Host: s018.radikal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
200 OK 62 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectm91.maxns.net
Fingerprint6F:AC:0A:41:63:3E:F2:8C:26:37:A7:4F:D8:03:10:A6:4F:BC:DF:F1
ValiditySun, 04 Aug 2024 04:09:39 GMT - Sat, 02 Nov 2024 04:09:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: rusbrig.forum2x2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Wed, 21 Aug 2024 00:00:00 GMT
last-modified: Wed, 21 Aug 2024 11:59:39 GMT
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 430 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type JavaScript source, ASCII text, with very long lines (2059)
Size 430 kB (429559 bytes)
Hash 6517f632318fbd1e0f7be4f48b8050a4
08505d81b6f0a8db87ec5fd7536544ace838727f
693007b10d791da9b2fe25a8645e592f5e5588ffb66597a040efbbc895ee3ca1
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 146693
date: Wed, 21 Aug 2024 11:59:44 GMT
expires: Wed, 21 Aug 2024 11:59:44 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pbs.prd.audiencerun.com//setuid?bidder=onetag&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=
200 OK 0 B URL GET HTTP/1.1 pbs.prd.audiencerun.com//setuid?bidder=onetag&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerAmazon
Subject*.prd.audiencerun.com
Fingerprint60:A3:12:F9:CF:AC:27:7F:FD:32:CB:49:E7:16:E7:3A:64:40:5E:8C
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 27 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //setuid?bidder=onetag&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid= HTTP/1.1
Host: pbs.prd.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
DNT: 1
Connection: keep-alive
Cookie: ui=166c5d6ad1685d813010637
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html
Date: Wed, 21 Aug 2024 11:59:49 GMT
Expires: 0
Pragma: no-cache
Set-Cookie: uis=; Path=/; Domain=audiencerun.com; Expires=Tue, 19 Nov 2024 11:59:49 GMT
Vary: Accept-Encoding, Origin
Content-Length: 0
Connection: keep-alive
GET ac.aruncdn.com/i/logo/logo.svg?3
200 OK 1.0 kB URL GET HTTP/3 ac.aruncdn.com/i/logo/logo.svg?3
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type SVG Scalable Vector Graphics image
Hash f36b2c1c6be939ce2b3c32d3b1495d31
554a2e940768d536c74745a5cadb74f6d6b0256d
29d45467cd155b67d94f40ecc5950ed68908173ad67e99db6de184c1c6c158e5
GET /i/logo/logo.svg?3 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:43 GMT
content-type: image/svg+xml
last-modified: Thu, 06 Jun 2024 14:41:35 GMT
etag: W/"2f850b9b51d9dfef215f3107413d73d9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: sr6E3OaskjZJAVHU0_IjBB9JZQJNrF1e
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fedd444eadd43dacc7e53f24b46bddf8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: PqJ1jdNX1AqZZobB2qt3L6ZzPUy6q-iP_RQZ9W8IbYYpSNVI4Y9kdA==
age: 4070888
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7BdGG27Erts8J2sxtKkCux7tuiQ9wN0H%2BgK2BBOlQcGziXboZNIAu4Dq3PtJzdojPHSPTnCCIMGVUvA3iBd2npr81oacCqzRP9I41bte5MZUPBFZUBFjwooHJW1L%2FJ0o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a7567e9e57128-OSL
alt-svc: h3=":443"; ma=86400
GET ad-delivery.net/px.gif?ch=2
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=2
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectad-delivery.net
FingerprintD3:6C:33:E0:88:AC:63:91:E5:B1:DC:FF:5F:46:EC:DE:3D:00:C4:B5
ValidityMon, 15 Jul 2024 10:29:29 GMT - Sun, 13 Oct 2024 10:29:28 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: image/gif
content-length: 43
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
x-guploader-uploadid: ABPtcPqbKSdoxbAA410mrggZiKfDXsJhP9ixcj5r_g42RwC-BpGRQV1l4taKqygKMi5bdZIZlA
expires: Wed, 14 Aug 2024 07:47:09 GMT
cache-control: public, max-age=86400
age: 621581
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9fipQ3Ubk4ckY2BM9inUBOj18vVMK5Ae5hFhS0Snf3cQIz5urWKep1Tmma78t6K%2BfcwAbnHKk1XFR7O4tc4e6vbIKXPgFMVlNmkFdZD9Nc26vsI%2BwfCR6IxJj6c8BBJ22g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a755c99841c12-OSL
X-Firefox-Spdy: h2
GET www.youtube.com/embed/dgZTeVnM5Sw
200 OK 96 kB URL GET HTTP/2 www.youtube.com/embed/dgZTeVnM5Sw
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/dgZTeVnM5Sw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 21 Aug 2024 11:59:41 GMT
strict-transport-security: max-age=31536000
content-security-policy: require-trusted-types-for 'script'
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=d3fxRwpwGGU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=wIvLZc2-VVQ; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgEg%3D%3D; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET savepic.ru/5688189.png
0 B IP
Requested by https://rusbrig.forum2x2.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5688189.png HTTP/1.1
Host: savepic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ac.aruncdn.com/f/nat/n.js?452
200 OK 37 kB URL GET HTTP/3 ac.aruncdn.com/f/nat/n.js?452
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f/nat/n.js?452 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
last-modified: Wed, 21 Aug 2024 07:08:27 GMT
etag: W/"ba24d4ce04af6dc3a2a27977b9a8ca43"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: viie4Cc8XQAth1XV1MC2kXI9C0gOhMOf
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: stZVmxoa4rHP4IJ-6th3HZLFhPO2i259iFDY1w0BUVl-FZ77uzNHSA==
age: 17347
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIlTDGOlX2RRtebCSMwkQC%2FUUwT%2B6FqBOTVUIcwpWt8Tzm5Y45LMxqcOYBNtU9q7mVhn32zVCPnQfuSF9j04Ljqcln6IhdcpxZA0jR3Bm0qSPuTCpU9B56qFQXsk%2F9qo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a755c5f777128-OSL
alt-svc: h3=":443"; ma=86400
GET savepic.org/1560094.jpg
0 B IP
Requested by https://rusbrig.forum2x2.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1560094.jpg HTTP/1.1
Host: savepic.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ac.aruncdn.com/f/nat/1.native.js?ver=270085
200 OK 16 kB URL GET HTTP/3 ac.aruncdn.com/f/nat/1.native.js?ver=270085
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
File type JavaScript source, ASCII text, with very long lines (15842), with no line terminators
Hash 0b8f24c6d87e1c425d170fcda6036e7e
24a57e3891f72e8f07b124f3cbe41f792670f394
cbeda8c681183b4cf452950ae66650e596ab8ecda43e51f32d411d466fc01c90
GET /f/nat/1.native.js?ver=270085 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
last-modified: Thu, 01 Aug 2024 18:36:54 GMT
etag: W/"0b8f24c6d87e1c425d170fcda6036e7e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: PAExLn5FWgJA0snBF.jO7SJvK5Xjr7Rx
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: i7eQvQWMvZfiqhRsq951T9eIvTvR3r_y68JwWV41UB8PCVKXabBriA==
age: 17347
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=id0X1gW7eOsmJukOz9XfQSDLBgWHt4feewUvbodAseHd4hgMZLRU7Mi9Wz07xgbB59dX4fpqlaMYmicDagp9jslkBZUxdMHCG4GXkW3DRbHrgVyGa5zlrNcMSpH59Up1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a755eaad17128-OSL
alt-svc: h3=":443"; ma=86400
GET 7img.net/users/1316/20/94/38/album/th/getima10.jpg
200 OK 6.0 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/getima10.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 86x99, components 3
Hash 0a387375c14d7563833f0649912e37ee
f4bf2a8f0af59efb753b77f6cbe2ae2f0f5d7a5f
e048d5b33454152fc9e9515879bb56c567b501a1909d8e85a92ba28cac772726
GET /users/1316/20/94/38/album/th/getima10.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5980
last-modified: Thu, 29 Mar 2012 06:26:05 GMT
etag: "4f74007d-175c"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AfMcAVgibxIk5WIHpEGCS5%2BScLiwQYKGReQiBh3vrF1F7ESqnKJehxTi%2BKrIeBpe3E1xJL%2FOhu70Obdy7IkUjLLrI7GkpBCh1QozRh23vV3%2FQo6hyb%2BplqwwsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7557a8f056b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 2img.net/i/fa/empty.gif
200 OK 42 B IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subject2img.net
Fingerprint5E:D4:86:47:9C:66:9A:C0:08:FA:78:7B:0F:D4:1C:2B:E1:D5:6B:0A
ValidityMon, 01 Jul 2024 01:43:54 GMT - Sun, 29 Sep 2024 01:43:53 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /i/fa/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/gif
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 13110623
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s7qhrExxphLTwQUNaxUrBZS97t95DTwcUYEYUa4lgvmR1Fj3pUQSaR5tv%2F9u4sZloliGx2%2BPhDEH3Pg45p9YCrt1iQ78kH7AmpOHOHaMIZWHLXcaRyylGT09XA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75572d936402-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET assets.a-mo.net/js/n1.js
200 OK 3.8 kB IP
Requested by https://prebid.a-mo.net/isyn?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Damx%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID
Certificate IssuerGoogle Trust Services
Subjectassets.a-mo.net
Fingerprint67:4C:B2:74:43:5E:E2:5E:62:05:3F:BC:2F:81:E7:BC:0E:CF:A3:E1
ValiditySat, 03 Aug 2024 00:23:44 GMT - Fri, 01 Nov 2024 00:23:43 GMT
File type JavaScript source, ASCII text, with very long lines (3909), with no line terminators
Hash 47ed4e1592ca9220c0cf30e1936dd900
fb81890cf027727a2c909561b73d452ae8a8c2ee
aad44315ed64b183de0beca41b7323e1ab4b41b76f67c389984531b2563d89c2
GET /js/n1.js HTTP/1.1
Host: assets.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://prebid.a-mo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:49 GMT
content-type: text/javascript
last-modified: Fri, 17 Nov 2023 21:37:06 GMT
x-amz-server-side-encryption: AES256
etag: W/"594c94f05d6e65f49ee3acdd5d971b89"
x-cache: Hit from cloudfront
via: 1.1 0162e02b2d0212054988a68716227daa.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-P5
x-amz-cf-id: Rdfn_u2O7PriAqoafc_lugXSCNSMMoFSR53c_4-e6C6D0oQglB3Itg==
cf-cache-status: HIT
age: 38
expires: Wed, 21 Aug 2024 12:59:49 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b6a75912b6b712f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/jquery/ticker/ticker.js
200 OK 7.8 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/jquery/ticker/ticker.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, ASCII text, with very long lines (7779), with no line terminators
Hash 14af7439828911c6edf6f6270c5c3807
56404125ebd29b30a8bafc4a9f297c9b1a73efcd
baabbc8d86cacc4447bf55706be4fdcbf50bdef4e44a2b2ba9751991299e3f02
GET /rs3/87/frm/jquery/ticker/ticker.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=9485
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:33:15 GMT
last-modified: Wed, 15 Mar 2023 11:21:26 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 771984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9JPRtDmalAmdM9gmSxVeGaUBV5vHcaHPdpNKALBxOKeRPZYhSOkUyCrEpA4SFQ3EapHbSkDopzn%2FPb9RuWMdmuQes3oglQgSLJmUADlnXKMcUMXvojthT7ra5k4EEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551ee39b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET id.a-mx.com/sync/?tagId=&ref=null&u=https://rusbrig.forum2x2.ru/&tl=https://rusbrig.forum2x2.ru/&nf=0&rt=true&v=9.8.0&av=2.0&vg=paubjs&us_privacy=null&am=null&gdpr=0&gdpr_consent=
0 B URL GET id.a-mx.com/sync/?tagId=&ref=null&u=https://rusbrig.forum2x2.ru/&tl=https://rusbrig.forum2x2.ru/&nf=0&rt=true&v=9.8.0&av=2.0&vg=paubjs&us_privacy=null&am=null&gdpr=0&gdpr_consent=
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerSectigo Limited
Subjectid.a-mx.com
FingerprintE1:1E:89:FE:28:E7:84:69:37:FD:D0:2F:18:B1:BB:F3:45:1E:1C:E9
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/?tagId=&ref=null&u=https://rusbrig.forum2x2.ru/&tl=https://rusbrig.forum2x2.ru/&nf=0&rt=true&v=9.8.0&av=2.0&vg=paubjs&us_privacy=null&am=null&gdpr=0&gdpr_consent= HTTP/1.1
Host: id.a-mx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rusbrig.forum2x2.ru/
content-type: text/plain
Origin: https://rusbrig.forum2x2.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET www.patmax.eu/C2/120418082809.ico
0 B URL GET www.patmax.eu/C2/120418082809.ico
IP
Requested by https://rusbrig.forum2x2.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /C2/120418082809.ico HTTP/1.1
Host: www.patmax.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET savepic.ru/5688189.png
0 B IP
Requested by https://rusbrig.forum2x2.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5688189.png HTTP/1.1
Host: savepic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET 7img.net/users/1316/20/94/38/album/th/56389210.jpg
200 OK 5.7 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/56389210.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 86x99, components 3
Hash a99ee8a9d5cc73b4a35582f1bcc38004
7f09a46904cba84ba78570696b163e294aaab335
93597d623add41101678e956ee431c86446882048eebbed9acc86a955a62f473
GET /users/1316/20/94/38/album/th/56389210.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5737
last-modified: Thu, 29 Mar 2012 06:37:13 GMT
etag: "4f740319-1669"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VYVB9AvXkk6GXxG69O3ZJzkGg%2BKedMJM0FZmIxBYc2OjZBm%2FlBoS5usnPy%2Bc9PE9Dlg5glGR6a4jy9moUx6iNmm3JZQWHLpEVWBb%2Bze6BozcZoZkAiMjp2mXUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755798d956b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illiweb.com/rs3/87/frm/lang/ru.js
200 OK 76 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/lang/ru.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rs3/87/frm/lang/ru.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=75728
access-control-allow-origin: *
expires: Tue, 12 Aug 2025 13:32:55 GMT
last-modified: Tue, 16 May 2023 15:02:01 GMT
x-cache-ne: MISS
x-cache-pr: MISS
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 772004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6zNk5dwx2KQnJriu%2FPRh6AGTxGCDStY1nJ328wDJt8sOKHxhClKzygR4ag0z7uk6ILmkpGcdrNIOQ3mOKmkP8xBlbae31viOlu05OMrEyJqCM%2FNM8rov%2FdqHjloWYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bde7b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ac.aruncdn.com/f/nat/0.native.js?ver=270085
200 OK 115 kB URL GET HTTP/3 ac.aruncdn.com/f/nat/0.native.js?ver=270085
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subjectaruncdn.com
FingerprintA8:16:D4:53:68:3F:F4:61:2B:F8:07:8A:CD:6A:45:CD:36:EF:A9:96
ValidityMon, 08 Jul 2024 21:22:48 GMT - Sun, 06 Oct 2024 21:22:47 GMT
Size 115 kB (115396 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f/nat/0.native.js?ver=270085 HTTP/1.1
Host: ac.aruncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 21 Aug 2024 11:59:41 GMT
content-type: application/javascript
last-modified: Wed, 21 Aug 2024 07:08:27 GMT
etag: W/"65dee2145ac608d51c1d51b046ed3b52"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
x-amz-version-id: Y4Yi5K30lWtrklhYFQIt.aR9qcmrUwv3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ff51bc3614c373d274030fe4ca1a34fc.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: m3XT2YxEGQ4wYkSJWaS4W3BAUq78G7q7VY2e4arFbplNd5KImIJWVg==
age: 17347
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5AYOMyvvd%2FEN58cutH%2Bwuvg4Zw8OnNPawyu8H3FErME%2FOqYlMfn9rPj4jXdDnpz4teJw1aQYzMOeBvPh%2FBEW80StlabPG4A0zhg915O7hsJbkYArOFt8ztO%2FblEwYA5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b6a755eaaca7128-OSL
alt-svc: h3=":443"; ma=86400
GET illiweb.com/rs3/87/frm/jquery/marquee/jquery.marquee.min.js
200 OK 4.5 kB URL GET HTTP/2 illiweb.com/rs3/87/frm/jquery/marquee/jquery.marquee.min.js
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerLet's Encrypt
Subjectilliweb.com
FingerprintC6:5F:E8:E6:8A:BD:7A:47:F5:FB:80:49:4F:D6:68:D3:DA:A8:92:B9
ValiditySat, 10 Aug 2024 21:46:00 GMT - Fri, 08 Nov 2024 21:45:59 GMT
File type JavaScript source, ASCII text, with very long lines (4769), with no line terminators
Hash e0d7ab914a6110b11965f0ace08e0796
b6c5a5da438a8668523cdc0242afd37acb3bfdb2
aa41cfcf4d5226769d0e7209f085973e718e86ac46035d16fb933362a1b8a64c
GET /rs3/87/frm/jquery/marquee/jquery.marquee.min.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:39 GMT
content-type: application/x-javascript
last-modified: Tue, 27 Aug 2019 14:00:14 GMT
expires: Tue, 12 Aug 2025 13:37:09 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
cf-cache-status: HIT
age: 771750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLRr0%2BOUcIJWfMyPMdoPFouq9BY5XRMS0kKQISAWNflrAFmZZn2B9N1yQl5x1LKZLCzAmE3lsDmLci37NsVxp5VR2yeqzzALAxv1ud3zg7C7F22ynpIQBzs0YAuEGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7551bdecb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 7img.net/users/1316/20/94/38/album/th/zkn9ve10.jpg
200 OK 4.5 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/zkn9ve10.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 71x99, components 3
Hash 65f8fb2ab15658de410db120553438a2
188878951900d0810c65f2f7e34a39e3ace38705
35f76e080b6be9f9d233cbae842ad5b2f2910d2123d0df127527b5de70c037e8
GET /users/1316/20/94/38/album/th/zkn9ve10.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 4507
last-modified: Wed, 27 Aug 2014 12:44:25 GMT
etag: "53fdd2a9-119b"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDJvz6RnYAhfbm3PtxxHYC4iIctMQB0Fa4Mx8T0NJgJU1VmRz8BqK6YjRt5SeS6Y6jhVKucNNfzKMABUHImV3HKyB26ISJgv%2BlGYBc0alm1UWWlOh2MRLmegcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a755798da56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youtube.com/embed/IEZhbV9s1Ag
200 OK 96 kB URL GET HTTP/2 www.youtube.com/embed/IEZhbV9s1Ag
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/IEZhbV9s1Ag HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 21 Aug 2024 11:59:41 GMT
strict-transport-security: max-age=31536000
content-security-policy: require-trusted-types-for 'script'
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=0JQJ_YxoXS0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=OjvJvGt6bPM; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgQA%3D%3D; Domain=.youtube.com; Expires=Mon, 17-Feb-2025 11:59:41 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pbs.prd.audiencerun.com//setuid?bidder=amx&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=
200 OK 0 B URL GET HTTP/1.1 pbs.prd.audiencerun.com//setuid?bidder=amx&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=
IP
Requested by https://prebid.a-mo.net/isyn?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fpbs.prd.audiencerun.com%2F%2Fsetuid%3Fbidder%3Damx%26gdpr%3D%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Db%26uid%3D%24UID
Certificate IssuerAmazon
Subject*.prd.audiencerun.com
Fingerprint60:A3:12:F9:CF:AC:27:7F:FD:32:CB:49:E7:16:E7:3A:64:40:5E:8C
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 27 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //setuid?bidder=amx&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid= HTTP/1.1
Host: pbs.prd.audiencerun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://prebid.a-mo.net/
Cookie: ui=166c5d6ad1685d813010637
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html
Date: Wed, 21 Aug 2024 11:59:49 GMT
Expires: 0
Pragma: no-cache
Set-Cookie: uis=; Path=/; Domain=audiencerun.com; Expires=Tue, 19 Nov 2024 11:59:49 GMT
Vary: Accept-Encoding, Origin
Content-Length: 0
Connection: keep-alive
GET 7img.net/users/1316/20/94/38/album/th/53620410.jpg
200 OK 5.8 kB URL GET HTTP/2 7img.net/users/1316/20/94/38/album/th/53620410.jpg
IP
Requested by https://rusbrig.forum2x2.ru/
Certificate IssuerGoogle Trust Services
Subject7img.net
FingerprintE2:08:F7:5F:05:97:6F:E7:A6:A7:E0:36:B7:D1:CE:21:74:DF:F9:2B
ValidityFri, 26 Jul 2024 15:01:12 GMT - Thu, 24 Oct 2024 15:01:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 86x99, components 3
Hash b0f36fc36d3a7b7d57f3b99757eb96c1
9c15b8b1208803ad8ea5c0ac96eb63cdb7686dd9
9869f26e9547803fa017aa121d2a8878c8edb4c0086ecf33248654e38ecd3600
GET /users/1316/20/94/38/album/th/53620410.jpg HTTP/1.1
Host: 7img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rusbrig.forum2x2.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 21 Aug 2024 11:59:40 GMT
content-type: image/jpeg
content-length: 5791
last-modified: Thu, 29 Mar 2012 06:25:15 GMT
etag: "4f74004b-169f"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 126
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pKhSw%2B6SFKrgULCEJ%2FoPiTBBbEJ7sAiA%2F94qLkF4%2B3fYWoXoZeE5GQTrcR2pv4IbbDrV29Tic0%2BZO6m1cedSXZVIC%2FCfxV7fvZ54B5ouZO5SwndTVGysuJ%2FV%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8b6a7558096c56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
178.33.43.178
142.250.74.35
104.21.235.76
185.76.9.22
188.114.96.1
23.36.76.226
94.23.159.185
116.202.167.133
185.9.147.4
0.0.0.0