Overview

URLwww.fl.ru/away/?href=www.figma.com/file/tnUknHJyMSNFRFpVf3yMzF/%D0%BA%D0%B8%D0%B7%D0%B4%D0%B0%D1%80-(Copy)?node-id=0-1&t=T9fbiwjmNMrtgQIQ-0
IP 185.129.100.57 (Russia)
ASN#57724 Ddos-guard Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 14:24:44 UTC
StatusLoading report..
IDS alerts3
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (30)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
fonts.gstatic.com (1) 0 2014-09-09T02:40:21Z 2023-03-29T11:19:48Z 485 22108 142.250.74.3
www.google.no (1) 25607 2016-04-05T21:50:59Z 2023-03-29T09:59:29Z 503 578 142.250.74.163
bam.eu01.nr-data.net (1) 9782 2018-05-17T14:36:00Z 2023-03-28T18:38:06Z 987 192 185.221.87.23
retagro.com (2) 131855 2017-12-25T18:19:19Z 2023-03-26T06:56:43Z 1263 1576 85.25.203.29
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-29T10:13:53Z 434 630 172.217.21.170
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2372 35.241.9.150
ocsp.globalsign.com (2) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 718 3307 104.18.20.226
www.gstatic.com (1) 0 2016-07-26T11:37:06Z 2023-03-29T09:13:03Z 443 169346 142.250.74.3
region1.google-analytics.com (1) 0 2022-03-17T12:26:33Z 2023-03-29T05:15:25Z 833 440 216.239.34.36
r3.o.lencr.org (11) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 3718 9746 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5882 34.160.144.191
stikilo.com (1) 325943 2019-03-15T19:00:23Z 2023-03-23T15:24:56Z 368 281 104.248.36.113
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 52.41.124.48
x.cnt.my (4) 95384 2012-10-24T14:39:03Z 2023-03-26T06:56:42Z 2258 2422 138.201.230.88
js-agent.newrelic.com (11) 378 2018-06-22T06:15:37Z 2023-03-29T05:14:31Z 4398 36481 151.101.66.137
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3246 51689 34.120.237.76
www.fl.ru (3) 733318 2013-08-23T18:27:23Z 2023-03-25T07:42:01Z 1864 39824 185.129.100.57
cdn.fl.ru (12) 0 2018-06-14T05:20:21Z 2023-03-23T15:24:33Z 5235 1082422 5.101.71.73
www.google-analytics.com (1) 40 2012-10-03T03:04:21Z 2023-03-29T06:01:47Z 366 20615 216.58.207.206
client.getinchat.com (1) 438258 2017-09-08T12:23:25Z 2023-03-23T15:24:34Z 431 260 147.135.44.9
citydsp.com (1) 113134 2019-02-20T12:25:17Z 2023-03-26T06:56:42Z 376 682 62.138.6.193
ocsp.pki.goog (13) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 4459 9092 142.250.74.131
www.google.com (1) 7 2015-05-10T13:11:19Z 2023-03-29T05:55:56Z 395 1077 142.250.74.164
stats.g.doubleclick.net (1) 96 2013-06-10T22:21:11Z 2023-03-29T09:08:31Z 588 588 64.233.162.156
ocsp2.globalsign.com (1) 1544 2012-05-23T20:10:04Z 2023-03-29T05:20:49Z 367 1933 104.18.20.226
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
www.googletagmanager.com (1) 75 2013-05-22T04:07:37Z 2023-03-29T05:44:04Z 377 83842 142.250.74.72
mc.yandex.ru (11) 2672 2012-05-21T11:38:30Z 2023-03-29T14:40:55Z 10068 82695 93.158.134.119
vk.com (2) 2243 2012-05-21T17:01:19Z 2023-03-29T05:11:07Z 1005 24423 87.240.137.164
ajax.googleapis.com (1) 12905 2013-08-16T11:51:31Z 2023-03-29T10:10:07Z 385 34577 142.250.74.10

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 14:24:41 UTC medium Client IP Internal IP ET INFO URL Shortening Service Domain in DNS Lookup (vk .com) 
2023-03-23 14:24:41 UTC medium Client IP Internal IP ET INFO URL Shortening Service Domain in DNS Lookup (vk .com) 
2023-03-23 14:24:42 UTC medium Client IP  87.240.137.164 ET INFO Observed URL Shortening Service Domain (vk .com in TLS SNI) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.129.100.57
Date UQ / IDS / BL URL IP
2023-04-25 16:16:36 UTC 0 - 4 - 0 www.fl.ru/download/users/Ne/Neekita/private/o (...) 185.129.100.57
2023-04-24 19:31:09 UTC 0 - 4 - 0 www.fl.ru/away/?href=https://zaochnik.com/ 185.129.100.57
2023-04-21 20:24:23 UTC 0 - 4 - 0 www.fl.ru/away/?href=https://docs.google.com/ (...) 185.129.100.57
2023-03-23 14:24:44 UTC 0 - 3 - 0 www.fl.ru/away/?href=www.figma.com/file/tnUkn (...) 185.129.100.57
2023-03-20 04:08:45 UTC 0 - 3 - 0 www.fl.ru/a.php?href=rusimm.com/redirect?url= (...) 185.129.100.57


Last 5 reports on ASN: Ddos-guard Ltd
Date UQ / IDS / BL URL IP
2023-06-07 00:00:09 UTC 0 - 12 - 0 upstream.to/0asi52qj9w9e 185.178.208.135
2023-06-06 20:03:13 UTC 0 - 7 - 1 viportal.do.am/load/zarubejni/vremya_i_steklo (...) 195.216.243.180
2023-06-06 20:02:57 UTC 0 - 4 - 0 vsthouse.ru/load/vst/rabota_s_vokalom/antares (...) 195.216.243.232
2023-06-06 19:10:08 UTC 0 - 6 - 0 oxy.st/d/PbNg 185.178.208.137
2023-06-06 14:44:08 UTC 0 - 3 - 2 animezone.ucoz.de/faq/ 195.216.243.26


Last 5 reports on domain: fl.ru
Date UQ / IDS / BL URL IP
2023-04-25 16:16:36 UTC 0 - 4 - 0 www.fl.ru/download/users/Ne/Neekita/private/o (...) 185.129.100.57
2023-04-24 19:31:09 UTC 0 - 4 - 0 www.fl.ru/away/?href=https://zaochnik.com/ 185.129.100.57
2023-04-21 20:24:23 UTC 0 - 4 - 0 www.fl.ru/away/?href=https://docs.google.com/ (...) 185.129.100.57
2023-03-23 14:24:44 UTC 0 - 3 - 0 www.fl.ru/away/?href=www.figma.com/file/tnUkn (...) 185.129.100.57
2023-03-20 04:08:45 UTC 0 - 3 - 0 www.fl.ru/a.php?href=rusimm.com/redirect?url= (...) 185.129.100.57


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-24 17:31:00 UTC 0 - 3 - 0 www.fl.ru/away/?href=docs.google.com/document (...) 185.129.100.57

JavaScript

Executed Scripts (41)

Executed Evals (1)
#1 JavaScript::Eval (size: 33) - SHA256: 74d9394c16a1e3f9527f35741c1b20ec2380e0bd8760d5a904ac87e0149fbf26
typeof xcntCallback == 'function'

Executed Writes (0)


HTTP Transactions (97)


Request Response
                                        
                                            GET /away/?href=https://www.figma.com/file/tnUknHJyMSNFRFpVf3yMzF/%D0%BA%D0%B8%D0%B7%D0%B4%D0%B0%D1%80-(Copy)?node-id=0-1&t=T9fbiwjmNMrtgQIQ-0 HTTP/1.1 
Host: www.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.129.100.57
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf8
                                            
Server: ddos-guard
Date: Thu, 23 Mar 2023 14:24:32 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://www.fl.ru/away/?href=https://www.figma.com/file/tnUknHJyMSNFRFpVf3yMzF/%D0%BA%D0%B8%D0%B7%D0%B4%D0%B0%D1%80-(Copy)?node-id=0-1&t=T9fbiwjmNMrtgQIQ-0
Content-Length: 568


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Size:   568
Md5:    2761b98db33884ab29711096ab315edb
Sha1:   8cea6e53464aea178b72e06a906205d040f14ca5
Sha256: 9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3820
Expires: Thu, 23 Mar 2023 15:28:12 GMT
Date: Thu, 23 Mar 2023 14:24:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4776
Expires: Thu, 23 Mar 2023 15:44:08 GMT
Date: Thu, 23 Mar 2023 14:24:32 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 14:15:06 GMT
age: 566
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4ad6984a756720fbfff47b37a75513a2
Sha1:   355e35258114452af8b9638985ed9d8ef3bf0aca
Sha256: 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9223
Expires: Thu, 23 Mar 2023 16:58:15 GMT
Date: Thu, 23 Mar 2023 14:24:32 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: LHznYlmv30TsKX+hJYNen/vTJeyfUUIZir3KgjfEDnIJbfhZ/Q1vy3J0Neniq1Te5Eo5b12hO2Y=
x-amz-request-id: 2JGST6H0DWQ7FFSK
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 13:54:04 GMT
age: 1828
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:32 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 11:30:19 GMT
ETag: "59710af9f979b58922c59b32b83adac0f51f90de"
Last-Modified: Thu, 23 Mar 2023 11:30:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac756ac3c131bfa-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    f780f6072418182279f0fe0627c19545
Sha1:   59710af9f979b58922c59b32b83adac0f51f90de
Sha256: ae7ab09846c4652028260834353c9fc3d2e94a49bb11373ef86aa644afc9b75d
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:32 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /away/?href=https://www.figma.com/file/tnUknHJyMSNFRFpVf3yMzF/%D0%BA%D0%B8%D0%B7%D0%B4%D0%B0%D1%80-(Copy)?node-id=0-1&t=T9fbiwjmNMrtgQIQ-0 HTTP/1.1 
Host: www.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             185.129.100.57
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
server: ddos-guard
date: Thu, 23 Mar 2023 14:24:32 GMT
content-length: 28127
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: __ddg1_=UoVPhghozt6L56zivHzA; Domain=.fl.ru; HttpOnly; Path=/; Expires=Fri, 22-Mar-2024 14:24:32 GMT XSRF-TOKEN=BrArXQmSDppNPa31HdMYv39LTQiHmRraQdilvaTr; expires=Tue, 28-Mar-2023 14:24:32 GMT; Max-Age=432000; path=/; domain=www.fl.ru; secure PHPSESSID=ebYCezQSp8bryf53VvF6YZv1lxtduWFXk1m9ZNRr; expires=Tue, 28-Mar-2023 14:24:32 GMT; Max-Age=432000; path=/; domain=www.fl.ru; secure; httponly
vary: Accept-Encoding
content-encoding: gzip
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (63660)
Size:   28127
Md5:    2b664ade7010bd6712bd905c003831ab
Sha1:   bb4852484a46455f3719472f33d359779d9458ee
Sha256: 0a8ca6e1cad52e4237347014e0f56ed4f2358a42783057047ef85c03ad257528
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?onload=vueRecaptchaApiLoaded&hl=ru HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Thu, 23 Mar 2023 14:24:32 GMT
date: Thu, 23 Mar 2023 14:24:32 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 579
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (914), with no line terminators
Size:   579
Md5:    eb9062af7677cefe3156769dc2ccabb1
Sha1:   ca1ff802bac0cac70463362da9f50aa178466c72
Sha256: 914fd6258d7d6565705f9d30e1c5de5e3e8028376ca671cf9d7613ad29191091
                                        
                                            GET /gtag/js?id=G-RD9LL0K106 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 14:24:33 GMT
expires: Thu, 23 Mar 2023 14:24:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28283)
Size:   83241
Md5:    f0ee2c8c182d302f2f12036ff262f71a
Sha1:   05d228b36e660aa1904bd8c5be71d375a121629e
Sha256: 1e3e6a549799b4c5a4c32c9cccfde5b5c87dc3e5ad51977efb2729c116f75868
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 14:17:23 GMT
age: 430
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /assets/all.f900a0629a696f7a4ea114219efedc41.css HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"f900a0629a696f7a4ea114219efedc41"
last-modified: Fri, 17 Mar 2023 08:46:32 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042791.42247
x-trans-id: 174d2885d95d9e74
x-xss-protection: 1; mode=block
age: 11
cache: HIT
x-cached-since: 2023-03-17T08:47:13+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   145720
Md5:    cfa5be9e756ebdef4ba6996c6a70c696
Sha1:   ab9f4b623d19e8eb4af2d1458f6b80753a48c1c8
Sha256: 4f5cf570037be6c36dfa12bd31e4cce13897e9fc56268213ebba235f2980d456
                                        
                                            GET /fonts/FiraSans-SemiBold.woff2 HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: application/octet-stream
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
content-length: 154908
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "94061f2f769c77e515d64ed97be7dbdd"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.81318
x-trans-id: 16806cea27c0746d
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 154908, version 1.0\012- data
Size:   154908
Md5:    94061f2f769c77e515d64ed97be7dbdd
Sha1:   d0373e7c46d6c5a2008c2c1bab2a78a901118d4b
Sha256: dd042f85d2b46b2ed60c63e94ec02cfce4df22b3326772917da27f8a5aa1981a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /fonts/FiraSans-Medium.woff2 HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: application/octet-stream
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
content-length: 148228
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "163b97d1657ef31c6f668ada8717f9d6"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.72742
x-trans-id: 16806cea2352240a
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 148228, version 1.0\012- data
Size:   148228
Md5:    163b97d1657ef31c6f668ada8717f9d6
Sha1:   100e77a9e01f15300cdea3568bba1822e63d9e82
Sha256: eccdac72fb9ccc9b8ad0cb3bc629c5f8eb1165ed7811eab7b96b251099cd58c4
                                        
                                            GET /assets/vue/entry-client.4aa82e9c2db084c3da647ee0ae00ae03.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"4aa82e9c2db084c3da647ee0ae00ae03"
last-modified: Wed, 22 Mar 2023 10:42:43 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679481762.25107
x-trans-id: 174eb7c3b5a9231e
x-xss-protection: 1; mode=block
age: 22
cache: HIT
x-cached-since: 2023-03-22T10:43:23+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   411035
Md5:    323bb388a9180dc94047078d88163914
Sha1:   b9b007887c4c39c30c12539ca9831247b19cc056
Sha256: 0e20cb162137cedbc05a3d12afb7a627d3300344946fcfc641e207af595fa832
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:01:17 GMT
age: 73162
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21276, version 1.0\012- data
Size:   21276
Md5:    59c9b83cc112cf7eeb3bf7a5e96b21fe
Sha1:   771790b776b5e1bc3039c337024e400974184208
Sha256: a8447cdec51e85d9e93971a0d4a53bcf6085d70bf1d201662837d2fb953422c7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "3D5C050323B299D3EF4979D79200207CDFE2AF31F4D769CA68623A2C75B7191E"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2450
Expires: Thu, 23 Mar 2023 15:05:23 GMT
Date: Thu, 23 Mar 2023 14:24:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "86AE0B535095E3219C991F1647FAA852FC22F79BBE80D7DDD759F57AAB3B5132"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=299
Expires: Thu, 23 Mar 2023 14:29:32 GMT
Date: Thu, 23 Mar 2023 14:24:33 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: prwj7TfiwJRSNQ3+8aMfpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.41.124.48
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ciURGjuooVAbQQv14BPFVEzWeO8=

                                        
                                            GET /assets/vue/manifest.267b5a81fe9842433cfe9c8fda1e48a6.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"267b5a81fe9842433cfe9c8fda1e48a6"
last-modified: Mon, 06 Mar 2023 13:14:49 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108488.16616
x-trans-id: 1749d6c76b93f0f6
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:46+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1929), with no line terminators
Size:   1155
Md5:    1d9e002ec7d4d773569e2417b246fd5d
Sha1:   a45a0e0e067b105a85266bf5984514177938520a
Sha256: 39913867dbce17119e3e7b43f116adbdbdb2f8fb20188169384cf0400823b780
                                        
                                            GET /assets/icons.svg HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Origin: https://www.fl.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"091efb656b35df3f2167ec22328d67ca"
last-modified: Fri, 17 Mar 2023 08:46:32 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1679042791.51439
x-trans-id: 174d2885de62718f
x-xss-protection: 1; mode=block
age: 70
cache: HIT
x-cached-since: 2023-03-17T09:34:24+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   212004
Md5:    e8f4b7b7c587a335a7fa11f3a8f774fe
Sha1:   b939f0fd9e2009bb56ea32534379123aeb239bb2
Sha256: 8c792b9f282841b714ba1638da3ab4852112ea79b2eb69365ecf85081c0a9729
                                        
                                            GET /px/?r=0.7153340921524344&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             138.201.230.88
HTTP/2 301 Moved Permanently
content-type: text/plain; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
content-length: 370
cache-control: no-cache
set-cookie: xcntUt=x2112210f47de98115; Expires=Fri, 24 Mar 2023 14:24:33 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
location: /px/?r=0.7153340921524344&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rand=0.654706844093743&xtmp=1
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (370), with no line terminators
Size:   370
Md5:    91d4a6a361816f0870f43573bef0635f
Sha1:   9c5064907d9feed3e7d01063835b0ac0d434ca38
Sha256: 91af4e72a71a76aa621e9e24da9c7d661600c6fcbaffd1a46bb4946741bb4e72
                                        
                                            GET /px/?r=0.7153340921524344&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rand=0.654706844093743&xtmp=1 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Connection: keep-alive
Cookie: xcntUt=x2112210f47de98115
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             138.201.230.88
HTTP/2 200 OK
content-type: image/gif; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
content-length: 35
cache-control: no-cache,max-age=0,must-revalidate, no-cache
access-control-allow-origin: *
set-cookie: xcntIDR=y21fdbb34a61c6aad2; Expires=Fri, 22 Mar 2024 14:24:33 GMT; Path=/; Domain=fl.ru; Secure; SameSite=None xcntID=y21fdbb34a61c6aad2; Expires=Fri, 22 Mar 2024 14:24:33 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None xcntUt=x2112210f47de98115; Expires=Thu, 23 Mar 2023 14:24:33 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
pragma: no-cache
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__ru.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 168479
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Mar 2023 19:11:57 GMT
expires: Wed, 20 Mar 2024 19:11:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
vary: Accept-Encoding
age: 155556
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1258)
Size:   168479
Md5:    b08f5996d0361adfd0683b7766ea5bd9
Sha1:   c5262aa63db6aa74c029427da8df2c49bda8205c
Sha256: fcce9afbe333cb4205c9b771bdbe1ebc0b280080808f745e3435cb5ff9460ea8
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/away/?href=https://www.figma.com/file/tnUknHJyMSNFRFpVf3yMzF/%D0%BA%D0%B8%D0%B7%D0%B4%D0%B0%D1%80-(Copy)?node-id=0-1&t=T9fbiwjmNMrtgQIQ-0
Cookie: __ddg1_=UoVPhghozt6L56zivHzA; XSRF-TOKEN=BrArXQmSDppNPa31HdMYv39LTQiHmRraQdilvaTr; PHPSESSID=ebYCezQSp8bryf53VvF6YZv1lxtduWFXk1m9ZNRr; _ga_RD9LL0K106=GS1.1.1679581481.1.0.1679581482.0.0.0; _ga=GA1.1.56188700.1679581482; uechat_3_pages_count=1; uechat_3_first_time=1679581481999
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             185.129.100.57
HTTP/2 200 OK
content-type: image/x-icon
                                            
server: ddos-guard
date: Thu, 23 Mar 2023 14:24:33 GMT
content-length: 4542
last-modified: Fri, 02 Oct 2020 14:04:51 GMT
etag: "5f773383-11be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 33x32, 32 bits/pixel\012- data
Size:   4542
Md5:    2170bd32702d0f420e0f96220e16eb78
Sha1:   6c287f0dcdbf2259710cf6e3409705be4da89a11
Sha256: 2d193279addc3106f20379e618d628f24908c43eff7a502885f3ad45ddc55160
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.206
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 14:05:11 GMT
expires: Thu, 23 Mar 2023 16:05:11 GMT
cache-control: public, max-age=7200
age: 1163
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 11:35:34 GMT
ETag: "a14650b0a067e8337f0eb95af144b8546fc8206b"
Last-Modified: Thu, 23 Mar 2023 11:35:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2830
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac756b4dc3d1bfa-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=56188700.1679581482&jid=79585417&gjid=2040981120&_gid=826091151.1679581482&_u=aCDAgEABAAAAAEAAI~&z=1095780844 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.162.156
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.fl.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 23 Mar 2023 14:24:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 74070
date: Thu, 23 Mar 2023 14:24:34 GMT
access-control-allow-origin: *
etag: "641c2335-12156"
expires: Thu, 23 Mar 2023 15:24:34 GMT
last-modified: Thu, 23 Mar 2023 13:00:21 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Size:   74070
Md5:    d25e62ce8ed279843870678fdc0cfcb1
Sha1:   15964da72c0123793ef56d6913b408f0392972d3
Sha256: 05a678b9e81dc748077b1648055ce694e38f499a6b470a9e1cded275d9a87737
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 27 Mar 2023 12:20:27 GMT
ETag: "a0b202aa8cf16567acb50214a894350a79f13929"
Last-Modified: Thu, 23 Mar 2023 12:20:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3598
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac756b5befcb515-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    86177ad4fd1e9696e7368707d45015f5
Sha1:   a0b202aa8cf16567acb50214a894350a79f13929
Sha256: 7ecefd3c05094919ffc88e05a56deff7cb417652bfb49df98c47b0e9759703c6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=56188700.1679581482&jid=79585417&_u=aCDAgEABAAAAAEAAI~&z=135947141 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 14:24:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D49D59C5385C722478B7FEFF3D3C7E8EF66DE3493F3CC59714E9C59136A8380F"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3172
Expires: Thu, 23 Mar 2023 15:17:26 GMT
Date: Thu, 23 Mar 2023 14:24:34 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 14:24:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/api/openapi.js?168 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.240.137.164
HTTP/2 200 OK
content-type: application/x-javascript
                                            
server: kittenx
date: Thu, 23 Mar 2023 14:24:34 GMT
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Mon, 27 Mar 2023 14:24:34 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3849)
Size:   23318
Md5:    6b56e2aa629cc5f334bba9e200af3bfe
Sha1:   1e99707868f45c499400d95e75348c3d7b7686f5
Sha256: 7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
                                        
                                            GET /watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtqzj%3Afp%3A1180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A325215245154%3Ahid%3A893225619%3Az%3A0%3Ai%3A20230323142442%3Aet%3A1679581482%3Ac%3A1%3Arn%3A304889363%3Arqn%3A1%3Au%3A1679581482256660581%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C101%2C126%2C0%2C288%2C0%2C%2C839%2C20%2C%2C%2C%2C1387%3Aco%3A0%3Ans%3A1679581480475%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679581483%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 302 Found
                                            
location: /watch/6051055/1?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtqzj%3Afp%3A1180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A325215245154%3Ahid%3A893225619%3Az%3A0%3Ai%3A20230323142442%3Aet%3A1679581482%3Ac%3A1%3Arn%3A304889363%3Arqn%3A1%3Au%3A1679581482256660581%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C101%2C126%2C0%2C288%2C0%2C%2C839%2C20%2C%2C%2C%2C1387%3Aco%3A0%3Ans%3A1679581480475%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679581483%3At%3A&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 14:24:34 GMT
access-control-allow-origin: https://www.fl.ru
set-cookie: yabs-sid=2530090701679581474; Path=/; SameSite=None; Secure i=efyztsIFpL6hn5iFuJxMGXS7mN6/IioiPEbp3bca6mFa9CnwQmzKy/DqFYwIFhJdZ+yCR+d0Lbj803gBCgq2bn/ns8M=; Expires=Sun, 20-Mar-2033 14:24:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=4982644021679581474; Expires=Sun, 20-Mar-2033 14:24:31 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=4982644021679581474; Expires=Fri, 22-Mar-2024 14:24:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711117474.yc.1679581474#1711117474.yrts.1679581474#1711117474.yrtsi.1679581474; Expires=Fri, 22-Mar-2024 14:24:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:34 GMT
last-modified: Thu, 23-Mar-2023 14:24:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Size:   400
Md5:    1792042a0aa765d0eff9307fc8f5ffc7
Sha1:   09ec4e93de624954bce1f6a97ff00491234a484c
Sha256: 47f3fc95e9b2a26035ad0fe441b3cc83dd96c95685c04f5e5fda2086de2a989a
                                        
                                            POST /g/collect?v=2&tid=G-RD9LL0K106&gtm=45je33k0&_p=130775265&cid=56188700.1679581482&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1679581481&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.fl.ru
date: Thu, 23 Mar 2023 14:24:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&charset=utf-8&hittoken=1679581474_edf02719325ea9217bc06558c0a95db95e1436f138cc10490586ed0cac219523&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3ue65zhww2f2brt35wtqzj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A325215245154%3Ahid%3A893225619%3Az%3A0%3Ai%3A20230323142442%3Aet%3A1679581483%3Ac%3A1%3Arn%3A901512359%3Arqn%3A2%3Au%3A1679581482256660581%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679581480475%3Ast%3A1679581483&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 52
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:34 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:34 GMT
last-modified: Thu, 23-Mar-2023 14:24:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:34 GMT
access-control-allow-origin: *
etag: "641c2335-2b"
expires: Thu, 23 Mar 2023 15:24:34 GMT
accept-ranges: bytes
last-modified: Thu, 23 Mar 2023 13:00:21 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /ue/agents/feedback.fl.ru?rnd=0.1758099474465794&uewv=2.5.6 HTTP/1.1 
Host: client.getinchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             147.135.44.9
HTTP/2 200 OK
content-type: text/html
                                            
server: nginx/1.17.6
date: Thu, 23 Mar 2023 14:24:34 GMT
content-length: 2
last-modified: Thu, 19 Dec 2019 20:38:16 GMT
etag: "5dfbdfb8-2"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2
Md5:    897316929176464ebc9ad085f31e7284
Sha1:   09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
Sha256: 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
                                        
                                            GET /rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.240.137.164
HTTP/2 200 OK
content-type: image/gif
                                            
server: kittenx
date: Thu, 23 Mar 2023 14:24:34 GMT
content-length: 65
x-powered-by: KPHP/7.4.113534
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixlang=3; expires=Sun, 17 Mar 2024 11:47:49 GMT; path=/; domain=.vk.com remixstlid=9113692926211310080_31LfiqguMNmyHbkkmypBVUIUk2qHApDcqb4bdZ1Z1g4; expires=Fri, 22 Mar 2024 14:24:34 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   65
Md5:    ec4341fe3a8b2c4880fbfe0ef9cde34f
Sha1:   a0947414eb426b2939ca1a05fc870763f6bfc63f
Sha256: 01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
                                        
                                            GET /async-api.737e0ca6-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: LLTB4EDFC5QdmDB6fBVQH93tx9tnr4EXlsaYC2YJm4sqjgK75ZMyTo22k8mG/8P1cD3albbe9oA=
x-amz-request-id: X1KWZ3FX1KK6PDEW
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "d12e5c859f6125ad9fcfab27abe9d60a"
x-amz-server-side-encryption: AES256
x-amz-version-id: .VExrz.uwnbfzMN2qSXv.A5mU3ucPuDN
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4349
x-timer: S1679581475.791326,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1123
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2129), with no line terminators
Size:   1123
Md5:    03dfc27bd3e9c55760c43279990e3229
Sha1:   b113bb4989edd07f098c6e1bb09b363444fac3ca
Sha256: 701b3c2622fc68fc8853e1898044bd46d6717de875a178bca0ecf2e533b0234b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7984
Expires: Thu, 23 Mar 2023 16:37:38 GMT
Date: Thu, 23 Mar 2023 14:24:34 GMT
Connection: keep-alive

                                        
                                            GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:02:57 GMT
expires: Tue, 19 Mar 2024 14:02:57 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
vary: Accept-Encoding
age: 260497
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33593
Md5:    a54a444f20643b131117dc2112cca05f
Sha1:   074964746b12ff1d30f7656310d6154ae1cc98b5
Sha256: aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7984
Expires: Thu, 23 Mar 2023 16:37:38 GMT
Date: Thu, 23 Mar 2023 14:24:34 GMT
Connection: keep-alive

                                        
                                            GET /lazy-loader.540ab0d1-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: HNXAVOU1+5WnN+AUDz2G+vBPOv0Zex2FvNHd5Lc4ngcrm02q0Use/ZfKYM1PCBaMYII9KuwAHiM=
x-amz-request-id: X1KHYM6H2X0GJ99K
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "a041a84a662929211a210e7b10cc82d0"
x-amz-server-side-encryption: AES256
x-amz-version-id: i5brlKSFH8dErjq3e9pOJ9e9W7YKVyAf
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4342
x-timer: S1679581475.814589,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 415
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (928), with no line terminators
Size:   415
Md5:    0b53ee06b30157139fb5c09dc6c0fe36
Sha1:   f3b8adc2a11e6b1bca4a21b390eba1d38b9b5a09
Sha256: bd24585f29a4e2ebc31878107971ff2f6bccd63fb3b004d67bf8d3068edc997a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7424
x-amzn-requestid: 4d4097db-ae95-4a34-8f92-a56c29e836e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CENb6FKDoAMF_cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417f5e5-772b562b3176f7ca0740db72;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 05:57:57 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: d_lhTrmtXesTfnCpReJoiiv68EudX-RCSzr3fwqOe3ouJv-M0IOLtw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:22 GMT
age: 60072
etag: "709b01a360624eceafb1876f56378824aa4936b3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7424
Md5:    05c7970e81559904d05b6e8cf693f085
Sha1:   709b01a360624eceafb1876f56378824aa4936b3
Sha256: a4fd80c9bdce27961560d7c31e216706e9e32d42d1edd883e283c149505b3db0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 4xGMCVWy2EXLLN8keteGLQvQjOp6KH97rkn_FK10eyng0-5EudcOig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:33 GMT
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
age: 60061
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /178.52056f28-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: aT06CGh5oOpXrIqz5qwibNaMUOM/m7kcMAEg7Jf3TVcRfAagKDE4/nS+nf0+eQPu+zomW62XXt4=
x-amz-request-id: J3KF281NCW962AQS
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "b21a67c8e50dcceef0405ebb063eca96"
x-amz-server-side-encryption: AES256
x-amz-version-id: tfnJWGkgjVdXF5EV55Q2uJIk1QgPYrSL
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4119
x-timer: S1679581475.848545,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3764
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9255), with no line terminators
Size:   3764
Md5:    0cdee4386fc5e26c88588f13c1f98d2f
Sha1:   7f787ff772c58db6d8eb86e3718210cf02e823bf
Sha256: d2aea8be91ec37fa5c0f6fe1f65baba7486684ecbd60f73d56d22d423a657025
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261caab9-983c-4eb1-9fca-fd73dc738e9e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10284
x-amzn-requestid: e4d2c324-d0b0-436d-9739-29269e62aed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM6hjEqtIAMFvXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b713c-5a5bd6b60c1f52ab580f1757;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:21:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: g53sZY66fiEL8H79MzI7c7rqI-c-XxMvgB3myz79aw_lE9Aqgc66LQ==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:32:23 GMT
age: 24731
etag: "5035ed41f497c97faefae9cdaf42dc07ab468557"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10284
Md5:    4e89d0b1281259e7399294fb5fa19d2b
Sha1:   5035ed41f497c97faefae9cdaf42dc07ab468557
Sha256: f404d286deab5b4759be6e554e6488faab3b4f7988a86eb57520dac4e0d6a192
                                        
                                            GET /page_view_event-aggregate.2ae3c96c-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: RGUZ8edb5ibnhA3ai0RzLn0AOxcz8rfWlVv3yR0obJn8Nxhj+jSWLnK9qmK/G80UOegoBtuC5Q4=
x-amz-request-id: J3K0ZC8YB249SAHT
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "f768d3f0fb8ea163c644cfa4a536676d"
x-amz-server-side-encryption: AES256
x-amz-version-id: FeegzFVNqKt6H_XSfsFwZcx1Np._S4kr
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4122
x-timer: S1679581475.852201,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3814), with no line terminators
Size:   1713
Md5:    eb1f985802faf8e291793c6c6a509a0d
Sha1:   77a00623aa6fcce14e8acc3d17adbfe30e6d9f55
Sha256: 0b876f14f19c14c874c6e4f892517f91b36be238f18acebc5502d001244f65f9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 06:24:31 GMT
age: 28803
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5556
Md5:    c831201ad81f55c63c1b101ce854a810
Sha1:   0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
Sha256: c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: V_1L8vYf9-uS_-cGgsCstGC__IYpLZjEa0gOlsYgYOWwNJxxXJo83g==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:09:40 GMT
age: 58494
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10480
Md5:    6f0b9e85381489dcf646c251722b21d4
Sha1:   5f7ea91288a2170bcabdca6be296718c4191eacd
Sha256: 911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:34 GMT
age: 60060
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /spa-aggregate.494130b7-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: TIE1n7VMj7a0ZMKSZyXsxWQwz/KtqLTPsDtLZjBBbER8IkqtT+Hq/WcV1TH3DMAy7qYWlCTW2j4=
x-amz-request-id: J3KFTKZNH4ZC5FKN
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "c9a85289539a80c3ce75d510ee52f0c6"
x-amz-server-side-encryption: AES256
x-amz-version-id: MOfgH_1ttKzddlisAak1jm7fbEtINNGC
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1701
x-timer: S1679581475.881291,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18780), with no line terminators
Size:   6664
Md5:    8663942728c4e3ba0df2337240c35ee3
Sha1:   cfad319e622269f9c3a29c2bc7e0e0df7bc4a6d6
Sha256: fa933e57987c869c0d563c218372a4c85acd6cf1d737cfc789a0b47a774ec96f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "DEF3AD8B488DCCD2E0966EEC54DC00B07EC50CE5C6A2B45EA24896E256AD5C6B"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1102
Expires: Thu, 23 Mar 2023 14:42:56 GMT
Date: Thu, 23 Mar 2023 14:24:34 GMT
Connection: keep-alive

                                        
                                            GET /dsp?h=www.fl.ru&r=0.665867181916477 HTTP/1.1 
Host: citydsp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             62.138.6.193
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 14:24:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: userId=9729258957; path=/; HttpOnly; Secure; SameSite=none; expires=Tue, 19 Sep 2023 14:24:35 GMT; httponly
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (540), with no line terminators
Size:   300
Md5:    e249bb83554c5077e442d453c091defe
Sha1:   23de50ad6cc57487e7cb4bd500d14be025b310ad
Sha256: 71a96e9ffae1b3c27a03b8a810f2703ab566b204d53dc95ae3d13691910cd4cf
                                        
                                            GET /page_view_timing-aggregate.a7d9d7be-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: MeR9P8RqaGzGYO1G4on1DBJmuSM9V+li+iEGIcVb5R/cEtGrnv/5zYy1NywRKsVssm0sdpVbJFI=
x-amz-request-id: J3KFSTCH0H35BJM1
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "eb3b7aaf78edc0a629532c28a1c06b8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: sqO0QzvZ3V3OZNlIV1_qDeOPuvdGFJah
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4105
x-timer: S1679581475.025553,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2224
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5426), with no line terminators
Size:   2224
Md5:    1d0aca99dc56a135a91221ab5314b29c
Sha1:   a44835c7e37f94e33cb20f4a2b51a2b94a1ed11d
Sha256: 7c1277b080c6737e0b266099b42d5c2ade65be54c9dc27c4a8e9625e34608357
                                        
                                            GET /jserrors-aggregate.941c6e17-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: WJlvLjGJlxrmBB8rgC9pVHFwHvXx9C2rr+PUuT0PJgAiqq/YbO4hm7afvFD3IsJsd2qC0CTtB/8=
x-amz-request-id: H85NTR4DKHDTZFMV
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "8a0b3cc73395206dfac178f98f412980"
x-amz-server-side-encryption: AES256
x-amz-version-id: wlVstoCC4UFYAF1ILBCZ5Nc.v2fH1cp7
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 878
x-timer: S1679581475.025866,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2938
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7661), with no line terminators
Size:   2938
Md5:    b94b9853573a235e49b390310d18f8c8
Sha1:   7edbeb499928788296b7e9eaaf52720b04423663
Sha256: bc57cadd1025ab6cbb6967cd21f5bbfc324f1a7c977fee20ee715a3ef074aa2c
                                        
                                            GET /metrics-aggregate.28086cfb-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: JlI9jEnvHwyUH5q51zPj7FC0eR8SIbY27K1rjyASXl8wqklVZ78+KkILmuVlfa9+u7BPhqCqDdg=
x-amz-request-id: J3KE7BT8ZDH9ZJM2
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "fd7ae418fde6eab067f9005c5dccc62b"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3OFnwVDELpuG2CawrTfxxEzGbg_GjKb5
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 4121
x-timer: S1679581475.025729,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1752
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4128), with no line terminators
Size:   1752
Md5:    4bee99d08a8fc5bee885a4663ace89dc
Sha1:   96445a39f3eb3f8f3d7b90e7333c91ef365b249a
Sha256: 25809b8e76c7398e2ac3da2b317a79159fb1febbb30c170b5941181a7eabe0e3
                                        
                                            GET /ajax-aggregate.52cc993d-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: uKYdlJCnwz1StUhF9zoiWKtlQ6fpSBIIT63aZy+F/+pAESRra5qRoyNBoOwr10NRBsbtUX8zuO0=
x-amz-request-id: J3KDR0B9Q3E16DTY
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "02a285136a56fd1bcf1e6bf9df3ce3f5"
x-amz-server-side-encryption: AES256
x-amz-version-id: M7cKVh.sJWWYP936S672_AC9W1qCcjJQ
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2518
x-timer: S1679581475.026147,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2366
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5165), with no line terminators
Size:   2366
Md5:    83226cc545f1573770e17c74c06e369e
Sha1:   a308a4f8cd6bc78c354ca8ad123088a485aa55bf
Sha256: 44ce733b51e98d329bc679cca1958fbdf4539a4e4aa80f9715d3c90a19004012
                                        
                                            GET /page_action-aggregate.2f41aaf7-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: cQya9Ywp0T2V/jWBNZ5XJuzu9cp1pmO6QX96R3G27WS7mhYd14VWFr8a14pQQ+odaVm54bHd9wQ=
x-amz-request-id: J3K8FWW5K0DE3R3B
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "92a020a299ca63b75917d615a52d026c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 33uPpeyapVuhMjJor_DeoOiouAFaWoOf
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2523
x-timer: S1679581475.026568,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1202
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2766), with no line terminators
Size:   1202
Md5:    0336e9116f41017d1f4ed8755e7fe22e
Sha1:   9f3418cc775a10992caab99e1591ea2c942e4c64
Sha256: 8dc96e300269a2f5b114a0e496e35fbbbf8d0afeb51f02b8a1edf61d317cc3d3
                                        
                                            GET /session_trace-aggregate.545db67a-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: 2/LkMvvv/W3Vc2zaO7/N0k1X0D1BEr2QUVv7EW93g6wV5zsa/CZODpT5p0a62KCeZ7DEF+5k8TM=
x-amz-request-id: J3KB37HK18WBXXKE
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "00f1a92b2eb88dcbd4684c44ca621600"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8sXc8kke00U4XRsYmYhWsmLPR6EjlyYd
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 14:24:35 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2510
x-timer: S1679581475.026628,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3742
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9923), with no line terminators
Size:   3742
Md5:    e7e6ee264746303d21bbb267a9ba3d81
Sha1:   752836aa17acfc6b7df98c952d736ea06f41f776
Sha256: 45d351c15ee5f1e543c07e3986f9e310c7af6c518c2bb3ddef3ae9d75743870f
                                        
                                            GET /1/NRJS-d04e86df01600da7fdc?a=480519922&v=1227.PROD&to=MhBSZQoZXhUFBUVYDAtacVIMEV8ISydBQT8oGlREFB1DOicJXFwMCylnVBokeBIQFm1yDAsBQl4UFFUUFzpwRgIcNl9fDApfCggDQ3EKCxFVSTkbRA8LCA%3D%3D&rst=2608&ck=0&s=7209d579e53b68d3&ref=https://www.fl.ru/away/&ap=89&be=561&fe=1875&dc=826&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679581480475,%22n%22:0,%22f%22:288,%22dn%22:293,%22dne%22:293,%22c%22:293,%22s%22:317,%22ce%22:396,%22rq%22:396,%22rp%22:522,%22rpe%22:544,%22dl%22:538,%22di%22:1361,%22ds%22:1387,%22de%22:1406,%22dc%22:2433,%22l%22:2433,%22le%22:2443%7D,%22navigation%22:%7B%7D%7D&fcp=1180&at=HldRE0IDTRs%3D&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.eu01.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.221.87.23
HTTP/1.1 402 Payment Required
content-type: application/json; charset=UTF-8
                                            
Connection: keep-alive
Content-Length: 2
x-served-by: cache-bma1641-BMA
date: Thu, 23 Mar 2023 14:24:34 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F03D40D17163FE6E4622C2C37A0364AF846CC63254633A1C7A40A9A95D1548F0"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1968
Expires: Thu, 23 Mar 2023 14:57:23 GMT
Date: Thu, 23 Mar 2023 14:24:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D5EE705065D66CA9E503615409055EEEEEA1F5CA51C8AFF493690A6B25EF3E93"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13102
Expires: Thu, 23 Mar 2023 18:02:57 GMT
Date: Thu, 23 Mar 2023 14:24:35 GMT
Connection: keep-alive

                                        
                                            GET /start?r=0.18968456182841864 HTTP/1.1 
Host: stikilo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.248.36.113
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 14:24:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip

                                        
                                            GET /init?r=0.6793440147292482 HTTP/1.1 
Host: retagro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             85.25.203.29
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 14:24:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1734), with no line terminators
Size:   911
Md5:    667853aec1e5ddf28da6d1a5392a4504
Sha1:   429f0a46466c0c5d91f90d6e8d25adc3e0795733
Sha256: 11af7a0a83ecbeddff2b4daae274a41478fb4b009f6234c09c3e466404f4878b
                                        
                                            GET /analytics?id=null&params=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221679581483342039%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1280%2C%22height%22%3A939%2C%22outerWidth%22%3A1280%2C%22outerHeight%22%3A1024%7D HTTP/1.1 
Host: retagro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             85.25.203.29
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 14:24:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: user_id=10616508578; path=/; HttpOnly; Secure; SameSite=none; expires=Tue, 19 Sep 2023 14:24:35 GMT; httponly
Content-Encoding: gzip

                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=1&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=409017134&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679581485%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142444%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581485&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2098
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:36 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:36 GMT
last-modified: Thu, 23-Mar-2023 14:24:36 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=2&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=656829024&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679581484%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142444%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581484&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 627725
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:36 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:36 GMT
last-modified: Thu, 23-Mar-2023 14:24:36 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=3&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=707550821&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679581485%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142445%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581485&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 998
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:36 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:36 GMT
last-modified: Thu, 23-Mar-2023 14:24:36 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=1&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=119054993&wv-type=3&browser-info=we%3A1%3Aet%3A1679581485%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142445%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581485&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:37 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:37 GMT
last-modified: Thu, 23-Mar-2023 14:24:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wv-check=4982&wv-type=0&wmode=0&wv-part=1&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=392197793&browser-info=we%3A1%3Aet%3A1679581490%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142449%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581490&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:41 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:41 GMT
last-modified: Thu, 23-Mar-2023 14:24:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=4&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=45769307&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679581490%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142449%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581490&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:41 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:41 GMT
last-modified: Thu, 23-Mar-2023 14:24:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/6051055?wmode=0&wv-part=2&wv-hit=893225619&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fwww.figma.com%252Ffile%252FtnUknHJyMSNFRFpVf3yMzF%252F%25D0%25BA%25D0%25B8%25D0%25B7%25D0%25B4%25D0%25B0%25D1%2580-%2528Copy%2529%253Fnode-id%253D0-1%26t%3DT9fbiwjmNMrtgQIQ-0&rn=171499534&wv-type=3&browser-info=we%3A1%3Aet%3A1679581490%3Aw%3A1280x939%3Av%3A990%3Az%3A0%3Ai%3A20230323142449%3Au%3A1679581482256660581%3Avf%3A3ue65zhww2f2brt35wtqzj%3Ast%3A1679581490&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 14:24:41 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 14:24:41 GMT
last-modified: Thu, 23-Mar-2023 14:24:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /assets/all.de49a196bafa706ce48df4c8ebda5eb7.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"de49a196bafa706ce48df4c8ebda5eb7"
last-modified: Mon, 06 Mar 2023 13:14:48 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108487.73128
x-trans-id: 1749d6c751bcfe2a
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:46+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /async/track/?r=0.9287049754746345 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             138.201.230.88
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
last-modified: Mon, 18 Jul 2022 14:03:34 GMT
etag: W/"62d56836-a11"
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.170
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 14:24:32 GMT
date: Thu, 23 Mar 2023 14:24:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /assets/vendor.114926bd473d15924d9c42a8ef9c4fd0.css HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"114926bd473d15924d9c42a8ef9c4fd0"
last-modified: Mon, 06 Mar 2023 13:14:23 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108462.79774
x-trans-id: 1749d6c1838e2ff8
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:45+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /assets/vendor.7032140c41eb0b3bd9f235faa097c4e6.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"7032140c41eb0b3bd9f235faa097c4e6"
last-modified: Mon, 06 Mar 2023 13:14:48 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108487.68073
x-trans-id: 1749d6c74eb6ced0
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:47+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             138.201.230.88
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
last-modified: Tue, 14 Feb 2023 17:51:39 GMT
etag: W/"63ebca2b-1769"
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /assets/popup.7111e2898d9926d285ef52f7bf462293.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"7111e2898d9926d285ef52f7bf462293"
last-modified: Mon, 06 Mar 2023 13:14:42 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108481.16439
x-trans-id: 1749d6c5ca4d56ba
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:47+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /assets/vendor.dll.3e1509e9bd1488d2b1ad5eb41e99144f.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"3e1509e9bd1488d2b1ad5eb41e99144f"
last-modified: Mon, 06 Mar 2023 13:14:49 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108488.75919
x-trans-id: 1749d6c78ef795e3
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:45+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /assets/vue/vendor.a5ce7ef636afb1a9fdc1270459f1833e.js HTTP/1.1 
Host: cdn.fl.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=UoVPhghozt6L56zivHzA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             5.101.71.73
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx
date: Thu, 23 Mar 2023 14:24:33 GMT
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"a5ce7ef636afb1a9fdc1270459f1833e"
last-modified: Mon, 06 Mar 2023 13:14:49 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1678108488.22355
x-trans-id: 1749d6c76f019d67
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-03-06T19:30:46+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: