victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
301 Moved Permanently 162 B URL HTTP/1.1 victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET /?ysclid=lb21ti6a9z680938540 HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 29 Nov 2022 10:01:23 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2686
Expires: Tue, 29 Nov 2022 10:46:10 GMT
Date: Tue, 29 Nov 2022 10:01:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4006
Cache-Control: max-age=92203
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:24 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:38:07 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5624
Expires: Tue, 29 Nov 2022 11:35:08 GMT
Date: Tue, 29 Nov 2022 10:01:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 09:17:53 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2611
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FHUsY+7u2fzsMcuOtU2zGHK+fLObHuWMR/S6TXFvaNgV+yAcGncAdapAyxeTO5aOZdIid6GLL3I=
x-amz-request-id: C16WHMRRD5CWX6YJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 09:45:24 GMT
age: 960
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 09:08:56 GMT
cache-control: public,max-age=3600
age: 3148
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2781
Cache-Control: max-age=85912
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:24 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:53:16 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
200 OK 39 kB URL HTTP/2 victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash bd716841417f4fa361a2b78f7a1401fd
90bd47d786bda5ea6c73cd9c934c193d27428f6e
8350242d5225563ce570afaa007c895c5f0d049a8d021fe087ee692925b55dc8
Analyzer Verdict Alert fortinet Malware
GET /?ysclid=lb21ti6a9z680938540 HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/html; charset=UTF-8
content-length: 38850
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/themes/root_child/style.css
200 OK 278 B URL HTTP/2 victoria-hdd.ru/wp-content/themes/root_child/style.css
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash ca20d59974c77d23bbfc1013e01ebe5a
1a23070db3d74e179f6f8790bc3cfe08c8410b0d
53cb486a3f6a61535fd7bb4fa01a15a1b1154f18e5f14ce32950ec257bc66aba
GET /wp-content/themes/root_child/style.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
content-length: 278
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
etag: "62e98cc8-116"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/uploads/2019/03/1victoria-11111.png
200 OK 18 kB URL HTTP/2 victoria-hdd.ru/wp-content/uploads/2019/03/1victoria-11111.png
IP
File type PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced\012- data
Hash e38af12cdb9ef01c98982db697bb87cb
65fc10b81f9a0b1d6eab316806e24ef0e33ccc5b
555d5241f0e230dad1998b77d44f767f96e539546874caa35d518790c1a2abb9
GET /wp-content/uploads/2019/03/1victoria-11111.png HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: image/png
content-length: 17753
last-modified: Tue, 02 Aug 2022 20:44:53 GMT
etag: "62e98cc5-4559"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/uploads/2019/03/victoriahddbar.png
200 OK 52 kB URL HTTP/2 victoria-hdd.ru/wp-content/uploads/2019/03/victoriahddbar.png
IP
File type PNG image data, 300 x 201, 8-bit/color RGB, non-interlaced\012- data
Hash 85540415ab85b9c08e0eeb5570c01c57
7dff2dd7b0bffd59ee34e2ad2d39b648dd5ca071
1dd6d08da494eb9cba5ad2d33fe5666e0edad407f4f2aef1a80467fc4488fce4
GET /wp-content/uploads/2019/03/victoriahddbar.png HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: image/png
content-length: 52184
last-modified: Tue, 02 Aug 2022 20:44:53 GMT
etag: "62e98cc5-cbd8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash cf8ecd10767275bde2cfc6fac62a1329
72ac83e974b6d65b421294b350668f0db2c03f21
b1547428138008b38f530c906d8d64fd8836fa42aaafa923f1671aa14bb29c67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 946
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:24 GMT
Last-Modified: Tue, 29 Nov 2022 09:45:38 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b7c36184a7949fbf6140e43e73ff5aa
e73175a4ae1b44a6e8a4ff0bc9ae99099d4775a1
93a987ea443dc8595b65d65f05cc6a39c231e6bae57cbbcfeaf6fd2666a99900
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "93A987EA443DC8595B65D65F05CC6A39C231E6BAE57CBBCFEAF6FD2666A99900"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3206
Expires: Tue, 29 Nov 2022 10:54:50 GMT
Date: Tue, 29 Nov 2022 10:01:24 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pheasantnt.com/api/scripts/mSetupWidget?id=217
200 OK 8.9 kB URL HTTP/1.1 pheasantnt.com/api/scripts/mSetupWidget?id=217
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (3565)
Hash 5a3650c60b057747133666fc1da7ae66
481afc1a3cc42beef5b9660144adcb9508871957
b336e8c49997d346ec0de4b017ba309d153d7b0cdce5edd1c104fc387ad26864
GET /api/scripts/mSetupWidget?id=217 HTTP/1.1
Host: pheasantnt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 29 Nov 2022 10:01:25 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.8
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0wgVea6d7ovZ+mAcP7CJLw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: REIxBRrKcb49jYRAxXL8zlG7AKk=
ocsp.digicert.com/
200 OK 279 B IP
Hash cf8ecd10767275bde2cfc6fac62a1329
72ac83e974b6d65b421294b350668f0db2c03f21
b1547428138008b38f530c906d8d64fd8836fa42aaafa923f1671aa14bb29c67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 947
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Last-Modified: Tue, 29 Nov 2022 09:45:38 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/js/ninja-tables-footable.3.1.0.js
200 OK 88 kB URL HTTP/2 victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/js/ninja-tables-footable.3.1.0.js
IP
Hash 08581a7995779fb48a39c1013fb9ca9c
3b314f502639cab02c2a0710aff3b190dc669c37
a15cf7e514fee99f7791bea41b8e57567ce665478602347ccdeb47669285e765
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ninja-tables/assets/js/ninja-tables-footable.3.1.0.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:54 GMT
vary: Accept-Encoding
etag: W/"62e98cc6-802e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/contact-form-7/includes/css/styles.css
200 OK 1.4 kB URL HTTP/2 victoria-hdd.ru/wp-content/plugins/contact-form-7/includes/css/styles.css
IP
Hash 6ad78af8b6f0eefe4c7c8b20b4ba06f6
148bb6aa13921653f7edcfdbf69bf0a1fb94a9e7
d06ee72a7690b4a47bf845354d82a51e31e278031af39e8c5d3f1e1f4b2aaa30
GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
last-modified: Wed, 31 Aug 2022 11:40:53 GMT
vary: Accept-Encoding
etag: W/"630f48c5-aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/contact-form-7/includes/js/index.js
200 OK 7.0 kB URL HTTP/2 victoria-hdd.ru/wp-content/plugins/contact-form-7/includes/js/index.js
IP
Hash 5c158b2ff13456d8257a1a6ca77eec0b
bfb1d85f04299487f819cec789bf972173158187
d5ec90ff2cf1a82c77570367fd386eaf287c0cf0333f50b9e8a14764f9a5fef1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:40:53 GMT
vary: Accept-Encoding
etag: W/"630f48c5-5591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 484037
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-includes/js/comment-reply.min.js
200 OK 2.3 kB URL HTTP/2 victoria-hdd.ru/wp-includes/js/comment-reply.min.js
IP
Hash f04b26d7cdd3456bbe28c382b9293a12
5dcba6689a5e113fc45f8d6ff2115006687207f5
df09063fd78c4681582197bbfaf2f89477d3636adf148cdf33ccb3f0541abd31
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:39:17 GMT
vary: Accept-Encoding
etag: W/"630f4865-ba5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
victoria-hdd.ru/wp-content/themes/root/js/scripts.min.js
200 OK 19 kB URL HTTP/2 victoria-hdd.ru/wp-content/themes/root/js/scripts.min.js
IP
Hash aeeb5435ff6280cbd2fff1f70dd5f17f
a3ac5df4ef335aa7b0f4c1e26b904e347c8fc7c7
8de7ab57ef52a7ac568d3c57bfddbb7e4b4dc486a5122e294888dfca3d1340fc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/root/js/scripts.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-1d5c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
victoria-hdd.ru/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css
200 OK 18 kB URL HTTP/2 victoria-hdd.ru/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css
IP
Hash 5da6e9f22adaf1ec568b84142e348e8b
3f28b018a05b843f7de2589faa12fe237933a4d7
2e776d3fb78f4900398eeaf8ffb73d23910b186c569f703e2224d0004934fdf1
GET /wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-b7b6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 95 kB URL HTTP/2 victoria-hdd.ru/wp-includes/js/jquery/jquery-migrate.min.js
IP
Hash 73ed117d180d5642430c6eb4452063ec
2d76cc4f4cfeefe4c193311d4ce35b5d3da6f276
bf5e64d7c2f0af72930364d12d296de5a01c662c9a3029a5703c488cfa400aa0
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:52 GMT
vary: Accept-Encoding
etag: W/"62e98cc4-2bd8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:56:18 GMT
expires: Thu, 23 Nov 2023 18:56:18 GMT
cache-control: public, max-age=31536000
age: 486307
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2
200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10292, version 1.0\012- data
Hash 5bdb5a70335e7a4462e02f8c45decb57
1c98607dae007f36fcc31ccc15df771fb925f543
a6933e678530b263486fa7b185a449cac947e1496ef61d496642032f339e9e43
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 20:06:15 GMT
expires: Thu, 23 Nov 2023 20:06:15 GMT
cache-control: public, max-age=31536000
age: 482110
last-modified: Wed, 11 May 2022 19:24:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21276, version 1.0\012- data
Hash 59c9b83cc112cf7eeb3bf7a5e96b21fe
771790b776b5e1bc3039c337024e400974184208
a8447cdec51e85d9e93971a0d4a53bcf6085d70bf1d201662837d2fb953422c7
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:57:47 GMT
expires: Thu, 23 Nov 2023 18:57:47 GMT
cache-control: public, max-age=31536000
age: 486218
last-modified: Mon, 11 Jul 2022 19:01:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 408067
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 06:19:49 GMT
expires: Fri, 24 Nov 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 445296
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/uploads/2019/11/victoria-hdd-16.png
200 OK 44 kB URL HTTP/2 victoria-hdd.ru/wp-content/uploads/2019/11/victoria-hdd-16.png
IP
File type PNG image data, 800 x 379, 8-bit colormap, non-interlaced\012- data
Hash c232af8127f3660ea3cde58381af700b
b3b14c3ec36f0866034a3fbda9837aa52e03ebfd
2f99dbd7b6ef810a56b411112f9932dcf554d6b8f3d960efb15689b7c5934008
GET /wp-content/uploads/2019/11/victoria-hdd-16.png HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:25 GMT
content-type: image/png
content-length: 44460
last-modified: Tue, 02 Aug 2022 20:44:53 GMT
etag: "62e98cc5-adac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700%7CMontserrat%3A400%2C400i%2C700&subset=cyrillic&display=swap
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700%7CMontserrat%3A400%2C400i%2C700&subset=cyrillic&display=swap
IP
Hash 05d9a070256fa9c45e586300c6d053b8
688300bc0f28cb1a482d5b696a3f4b975846c1e1
3fb6693a03bd5c9e80958e95cb05c76bc7ca8e1eb33fff45cf0592b78ba88b94
GET /css?family=Roboto%3A400%2C400i%2C700%7CMontserrat%3A400%2C400i%2C700&subset=cyrillic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 10:01:24 GMT
date: Tue, 29 Nov 2022 10:01:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-192x192.png
200 OK 9.7 kB URL HTTP/2 victoria-hdd.ru/wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash fa7937ef3a1a2928738ade7b37bb47f7
1f367c51a74b2779cfdf616bd5e0c4b3335ae1ac
df17b413e58e86161a1f713858921acf11bdfca2f42519b7fbe47bfe374ca138
GET /wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-192x192.png HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:25 GMT
content-type: image/png
content-length: 9672
last-modified: Tue, 02 Aug 2022 20:44:53 GMT
etag: "62e98cc5-25c8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-32x32.png
200 OK 1.2 kB URL HTTP/2 victoria-hdd.ru/wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 32f4b304d120b5410c4b7b27ee485163
1b9354a9d6dd943f82505ccb65df7fa92ab417a5
a4c38f68ac4431aa25ce17f1b56b7a5e71d5f9e82e96c7caeb067dc27eb60691
GET /wp-content/uploads/2019/03/cropped-victoriahdd-logo-2-32x32.png HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:25 GMT
content-type: image/png
content-length: 1166
last-modified: Tue, 02 Aug 2022 20:44:53 GMT
etag: "62e98cc5-48e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 09c85c15166f439fe02296b02a821922
8e83177795cd932a07afc69986ceda1b0c31fc51
9a0d9457783bcd7e7d1d1e2fa36f9c80b649e9fd173dfaf80a9aa62d0b08aed4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:25 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 08:57:35 GMT
ETag: "8e83177795cd932a07afc69986ceda1b0c31fc51"
Last-Modified: Tue, 29 Nov 2022 08:57:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2033
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a807f6c44b4fd-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash bf83c9337807000e76dde42f37774994
70a0922313b03c71ec812f581f4c4292c6d35fba
62d3d4cc1201e13694ed9be49c5356aee7df1425037791e23be7bec8bccc69ec
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:25 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 03 Dec 2022 08:06:47 GMT
ETag: "70a0922313b03c71ec812f581f4c4292c6d35fba"
Last-Modified: Tue, 29 Nov 2022 08:06:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3316
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a807f6f15b50c-OSL
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4885)
Hash 2f045ee97bac4ca4a1f15be05200c366
67ee43c71fa733aa89e42c05f6b6e8a64eb2b3e4
dd35c479fccd644adb868a27940014c9a7bc5050694316bf05b04f3edee0b509
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 29 Nov 2022 10:01:25 GMT
expires: Tue, 29 Nov 2022 10:01:25 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 14865139133339724352
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49134
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 944d02e8164f773f6c4e658ffdca963b
0912dc0c38a3ff91fbdfa948b9aacd5e52fdb1c1
37cb2a10dfd6c77d0f9762e4c2cf533a5e80eddf5481ea4d465c22fd3d988be7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37CB2A10DFD6C77D0F9762E4C2CF533A5E80EDDF5481EA4D465C22FD3D988BE7"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3796
Expires: Tue, 29 Nov 2022 11:04:41 GMT
Date: Tue, 29 Nov 2022 10:01:25 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 1d79426653c3b55939eaec59a2ce8ef5
c6db0314df7a4e5c08047f6306e0b79a1ad3bab2
2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73267
date: Tue, 29 Nov 2022 10:01:25 GMT
access-control-allow-origin: *
etag: "6384bff1-11e33"
expires: Tue, 29 Nov 2022 11:01:25 GMT
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mpraven.org/api/getslugv3?partner_apikey=74871b1c7ebc38d956d3a712a5e86f05&bl=0&raw=Victoria%20HDD%204.47%20%D0%B8%205.37%20Rus%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%20%D1%83%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D0%B8%20%D0%BD%D0%B0%D1%81%D1%82%D1%80%D0%BE%D0%B9%D0%BA%D0%B0&sourceURL=&sourceName=&sourceIntro=&sourceNote=&priority=source&tag=victoria-hdd&rnd=8aef28967ebcba1c67f9433430986b12&d=0&utm_content=&err=0&b=0&rfr=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540
200 OK 102 B URL HTTP/1.1 mpraven.org/api/getslugv3?partner_apikey=74871b1c7ebc38d956d3a712a5e86f05&bl=0&raw=Victoria%20HDD%204.47%20%D0%B8%205.37%20Rus%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%20%D1%83%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D0%B8%20%D0%BD%D0%B0%D1%81%D1%82%D1%80%D0%BE%D0%B9%D0%BA%D0%B0&sourceURL=&sourceName=&sourceIntro=&sourceNote=&priority=source&tag=victoria-hdd&rnd=8aef28967ebcba1c67f9433430986b12&d=0&utm_content=&err=0&b=0&rfr=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 4a89b2093499f8df6a546619733d70ad
f2bea96f92bc75635f92f1181888cb7a040e6de8
f30fd864c680adf6b84fd2f231d7bbdf0e92ef10ec49c055ee62bcadedc31c27
GET /api/getslugv3?partner_apikey=74871b1c7ebc38d956d3a712a5e86f05&bl=0&raw=Victoria%20HDD%204.47%20%D0%B8%205.37%20Rus%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8F%3A%20%D1%83%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%20%D0%B8%20%D0%BD%D0%B0%D1%81%D1%82%D1%80%D0%BE%D0%B9%D0%BA%D0%B0&sourceURL=&sourceName=&sourceIntro=&sourceNote=&priority=source&tag=victoria-hdd&rnd=8aef28967ebcba1c67f9433430986b12&d=0&utm_content=&err=0&b=0&rfr=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540 HTTP/1.1
Host: mpraven.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 10:01:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-SF: bad request
X-Slug: check Tag
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Content-Encoding: gzip
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221110/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Mon, 28 Nov 2022 11:45:52 GMT
expires: Mon, 12 Dec 2022 11:45:52 GMT
cache-control: public, max-age=1209600
age: 80133
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/52942117?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716085%3Ac%3A1%3Arn%3A207538005%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C%2C%2C%2C1773%3Ans%3A1669716082966%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716085%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 461 B URL HTTP/2 mc.yandex.ru/watch/52942117?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716085%3Ac%3A1%3Arn%3A207538005%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C%2C%2C%2C1773%3Ans%3A1669716082966%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716085%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (461), with no line terminators
Hash b382046abdfba2143a723571a8aa6dc7
6693bb9ad770945c990d25203817b24593f0df5f
ac598e77cdb3640bf59dd12f04b85d629f3d07b08b575026a6f30b272827903e
GET /watch/52942117?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716085%3Ac%3A1%3Arn%3A207538005%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C%2C%2C%2C1773%3Ans%3A1669716082966%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716085%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/52942117/1?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716085%3Ac%3A1%3Arn%3A207538005%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C%2C%2C%2C1773%3Ans%3A1669716082966%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716085%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 10:01:25 GMT
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: yandexuid=6357982491669716085; Expires=Wed, 29-Nov-2023 10:01:25 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6357982491669716085; Expires=Wed, 29-Nov-2023 10:01:25 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=664743631669716085; Path=/; SameSite=None; Secure
i=TBHEvr02z6u4k7jmQrw4kIxzCt7S70v7T2hmp5QWgkaJWs3cw/OgJMu07udXwNxtHDEiJCQcITuRX5eBiiMkpkMXVBU=; Expires=Fri, 26-Nov-2032 10:01:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701252085.yc.1669716085#1701252085.yrts.1669716085#1701252085.yrtsi.1669716085; Expires=Wed, 29-Nov-2023 10:01:25 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:25 GMT
last-modified: Tue, 29-Nov-2022 10:01:25 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash da136bad96a81c94433cf5a12d224a97
876e82c46ff5e9dfd379435a6810c6ae1cadc0e9
101ea23c70eaee9931ad6b959c3d949725f08a86503d2ab6f6965e77fafe9186
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:26 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 09:21:46 GMT
ETag: "876e82c46ff5e9dfd379435a6810c6ae1cadc0e9"
Last-Modified: Tue, 29 Nov 2022 09:21:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 796
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a80820a93b50c-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash da136bad96a81c94433cf5a12d224a97
876e82c46ff5e9dfd379435a6810c6ae1cadc0e9
101ea23c70eaee9931ad6b959c3d949725f08a86503d2ab6f6965e77fafe9186
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:26 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 09:21:46 GMT
ETag: "876e82c46ff5e9dfd379435a6810c6ae1cadc0e9"
Last-Modified: Tue, 29 Nov 2022 09:21:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 796
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a80820a9db50c-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash da136bad96a81c94433cf5a12d224a97
876e82c46ff5e9dfd379435a6810c6ae1cadc0e9
101ea23c70eaee9931ad6b959c3d949725f08a86503d2ab6f6965e77fafe9186
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:26 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 09:21:46 GMT
ETag: "876e82c46ff5e9dfd379435a6810c6ae1cadc0e9"
Last-Modified: Tue, 29 Nov 2022 09:21:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 796
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a80820fb1b4fd-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash da136bad96a81c94433cf5a12d224a97
876e82c46ff5e9dfd379435a6810c6ae1cadc0e9
101ea23c70eaee9931ad6b959c3d949725f08a86503d2ab6f6965e77fafe9186
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:26 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 09:21:46 GMT
ETag: "876e82c46ff5e9dfd379435a6810c6ae1cadc0e9"
Last-Modified: Tue, 29 Nov 2022 09:21:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 796
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a80821aabb50c-OSL
an.yandex.ru/system/context.js
200 OK 147 kB URL HTTP/2 an.yandex.ru/system/context.js
IP
File type ASCII text, with very long lines (65492)
Size 147 kB (146973 bytes)
Hash 325c7b0d4bf5f877ac513153c48ef791
5feddc409b772bbce5a64ae14c99146d113aefc7
d9903bf019c3a22db614c8410e0120bf2f8b2d084060be7d6864ce603b4544ee
GET /system/context.js HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-allow-origin: *
expires: Tue, 29 Nov 2022 11:01:25 GMT
x-yandex-req-id: 1669716085763693-846617272360471248000108-production-app-host-sas-pcode-58
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/1c0942547d39e10f5f56.js
200 OK 4.8 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/1c0942547d39e10f5f56.js
IP
File type ASCII text, with very long lines (14344)
Hash 4a212ddb994ab1967ae3f72d65a94c11
a45dbe83af3e52d2b7bbbd8e34cc174eacc74c16
00332fc6b6eaeb9332977d94cffffb7cdfca74c1131930ab3fe9d737dcc5b079
GET /partner-code-bundles/686552/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "4a212ddb994ab1967ae3f72d65a94c11"
expires: Thu, 28 Nov 2052 16:36:02 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/87b042f43db43ba41a70.js
200 OK 144 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/87b042f43db43ba41a70.js
IP
File type ASCII text, with very long lines (65492)
Size 144 kB (144470 bytes)
Hash b6ca589feeca45dac378dbad5119a413
c867593dad33f9c1dd68f6c464887d17fe41a089
5ddb7766d25d31f9d7d6ec00d55794c9a6b30194efedb47d443766ec7bae7b6f
GET /partner-code-bundles/686552/87b042f43db43ba41a70.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 23460
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "19a60649466abae1eb0e978e65c49f45"
expires: Thu, 28 Nov 2052 16:36:02 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 8.9 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
File type ASCII text, with very long lines (33703), with no line terminators
Hash f80882bf67cf261aa08d636da095149a
3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Thu, 28 Nov 2052 16:33:12 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/012527c9dcf28e3faf36.js
200 OK 99 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/012527c9dcf28e3faf36.js
IP
File type ASCII text, with very long lines (65497)
Hash e91ea85320f559c19431d710dbc955c7
77db353a8aaa66d0444ba07fc144ca4ff6e63d3a
6e69fe8a9eed7786b8b8cd81a4d7e903d68495ef446ecb0f7ac814abf01a19c0
GET /partner-code-bundles/686552/012527c9dcf28e3faf36.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 99098
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "e91ea85320f559c19431d710dbc955c7"
expires: Thu, 28 Nov 2052 16:36:02 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6769
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:01:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6769
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:01:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6769
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:01:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6769
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:01:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6769
Expires: Tue, 29 Nov 2022 11:54:15 GMT
Date: Tue, 29 Nov 2022 10:01:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:49:48 GMT
age: 22298
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 415b1b1d5a29fc17b4114bb3df1d1c22
600859401c885cc2cdd1f199cccc198eb41d6a04
abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ds96jURZ0epaXMg2oTUETRQCpHwlVJrl5hTqvpUAWEGVa5rbDve1FA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:42 GMT
age: 44084
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:18:11 GMT
age: 24195
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e44c46db2ac9917110dc47aa38fdc85
b5b245c90705ad80c31d457c0d7c96709ca31e96
5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8796
x-amzn-requestid: 2eed036c-fcda-425b-8c5d-0b0ff31214a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEEWMIAMFwKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-5cb071a2098d43d909eb8d5c;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uWzs8gOBoczTeYXB7-FfJemWbh-hYHwNcR3b9BM5VtJ55NRUzCZeTQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 14:56:22 GMT
age: 68704
etag: "b5b245c90705ad80c31d457c0d7c96709ca31e96"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae2e2986caa15a90b615147f229b51ec
c6dfd277cdbd057472e6df6ad1a200f50684d442
ec3799922c38ee6394601744ff4b2c405ee44c4718a2b90c104134657f8b480b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9015
x-amzn-requestid: 9f657586-a44e-46f0-8c38-f1bf26142486
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVOlEE6ZoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852aed-1da2400f4165dd553418f8b9;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:41:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mqdz1NhVCqmSrhYLIF0miDzrBiS82SUU6ZRFzDMllbCwS70hC0rMRQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 44071
etag: "c6dfd277cdbd057472e6df6ad1a200f50684d442"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:49:50 GMT
age: 18696
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=victoria-hdd.ru
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=victoria-hdd.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=victoria-hdd.ru HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 10:01:26 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=victoria-hdd.ru
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=victoria-hdd.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=victoria-hdd.ru HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 10:01:26 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/fonts/ninja-tables.woff2?1a82860cb5286f7833a2c33fbdd1d76c
200 OK 2.7 kB URL HTTP/2 victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/fonts/ninja-tables.woff2?1a82860cb5286f7833a2c33fbdd1d76c
IP
File type Web Open Font Format (Version 2), TrueType, length 2688, version 1.0\012- data
Hash 1a82860cb5286f7833a2c33fbdd1d76c
575bc67d5010efa7c8b2572721d9a9feabe3ffc4
8e61ab5a434415c4fdf027230912056bacedfe03878fad5bd5f6bd5a3d1d38ea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ninja-tables/assets/fonts/ninja-tables.woff2?1a82860cb5286f7833a2c33fbdd1d76c HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/css/ninjatables-public.css
Cookie: _ym_uid=1669716085782602161; _ym_d=1669716085
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: font/woff2
content-length: 2688
last-modified: Tue, 02 Aug 2022 20:44:54 GMT
etag: "a80-5e54830483d80"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 447515
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:10:08 GMT
expires: Fri, 24 Nov 2023 21:10:08 GMT
cache-control: public, max-age=31536000
age: 391878
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:26 GMT
access-control-allow-origin: *
etag: "6384bff1-2b"
expires: Tue, 29 Nov 2022 11:01:26 GMT
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/52942117/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&hittoken=1669716086_a007e43ec34137f8e22acd5b7552dcd0f77e24b4a8b821caae0c11b6438ea47f&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A703305949%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669716082966%3Arqnl%3A1%3Ast%3A1669716086&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/52942117/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&hittoken=1669716086_a007e43ec34137f8e22acd5b7552dcd0f77e24b4a8b821caae0c11b6438ea47f&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A703305949%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669716082966%3Arqnl%3A1%3Ast%3A1669716086&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/52942117/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&hittoken=1669716086_a007e43ec34137f8e22acd5b7552dcd0f77e24b4a8b821caae0c11b6438ea47f&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A924728389270%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A703305949%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669716082966%3Arqnl%3A1%3Ast%3A1669716086&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:26 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:26 GMT
last-modified: Tue, 29-Nov-2022 10:01:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee42df19cb85a32274da55a436f6099c
f2efc95b28a170acce5d07080a1841a704490890
d227692b55435fe171db887ceecd17983ee29cc2ed2b8f1f11429fa9116474d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee42df19cb85a32274da55a436f6099c
f2efc95b28a170acce5d07080a1841a704490890
d227692b55435fe171db887ceecd17983ee29cc2ed2b8f1f11429fa9116474d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5559d3bff3b0df32a76343a873b15612
bc2faed483f422fc34b9863fc2028a9373832427
c18670a28169ee49d550b634ea930e61694b6705e1d3144337f9de539de13233
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 29 Nov 2022 10:01:26 GMT
expires: Tue, 29 Nov 2022 10:01:26 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 05:45:03 GMT
expires: Tue, 28 Nov 2023 05:45:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 101783
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yandex.ru/ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=4&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=47125625&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=670&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A670%2C%22h%22%3A0%2C%22width%22%3A670%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A119%2C%22top%22%3A403%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6961446308046%5D
200 OK 30 kB URL HTTP/2 yandex.ru/ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=4&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=47125625&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=670&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A670%2C%22h%22%3A0%2C%22width%22%3A670%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A119%2C%22top%22%3A403%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6961446308046%5D
IP
Hash 13a0d264517fa7e347d7b7e6ed6ca6b5
a5209c8a91b50535cc9f93cfa0eb81cc11759b39
d1f92f6f34b5c5eb642e6f55b67145ab1eadbd450d92826f8260062682e73391
GET /ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=4&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=47125625&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=670&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A670%2C%22h%22%3A0%2C%22width%22%3A670%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A119%2C%22top%22%3A403%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6961446308046%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://victoria-hdd.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1669716086576515-13027763749067900170-sas3-0737-9f4-sas-l7-balancer-8080-BAL-2839
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
last-modified: Tue, 29 Nov 2022 10:01:26 GMT
date: Tue, 29 Nov 2022 10:01:26 GMT
set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Tue, 06-Dec-2022 10:01:26 GMT
i=X+y5LZWX7uGws3uhYQp6uz3Xt8q2w0Aff/8CLCwIM3WkDBtSR2egn0ZVR2pwqb0GOuqT8mpPe4bO+ckH0M9qtouwiGo=; Expires=Thu, 28-Nov-2024 10:01:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
ssr: true
expires: Tue, 29 Nov 2022 10:01:26 GMT
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 514 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 874a1f3873d7edd09f0803713e3ab57f
9ed3c0a62d3a7f2081d5cb467c6b0cd58596d301
8cd8cd13a846302f1c9ff443836f9d3099b1668d53c4e04676812f3da2aeb09d
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 29 Nov 2022 10:01:26 GMT
date: Tue, 29 Nov 2022 10:01:26 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-vtqRUoHO7G7NO5qCI3b75Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 514
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yastatic.net/s3/games-static/favicons/icon-192.png
200 OK 24 kB URL HTTP/2 yastatic.net/s3/games-static/favicons/icon-192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7819c957eaa80af5bf14f760d49b64a7
93b670523acd14f884c3a538d59d408da0888a6c
ca78c114bba40b141a59c55a9d3fb6db7672bc3effd4337f2b1ce512b4d06c9e
GET /s3/games-static/favicons/icon-192.png HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: image/png
content-length: 24134
access-control-allow-origin: *
cache-control: public, max-age=216013
etag: "7819c957eaa80af5bf14f760d49b64a7"
expires: Thu, 01 Dec 2022 21:58:15 GMT
last-modified: Thu, 14 Apr 2022 12:22:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: fa15cd1d90a95467
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/bb76ad8c383bc7061336.js
200 OK 5.1 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/bb76ad8c383bc7061336.js
IP
File type ASCII text, with very long lines (14785)
Hash 94f943a4a02bb1c8f8d869cb5bfe5ca3
e21b507f79ca9997a5b62dcee6d58ad16e8b5f51
0a94008a9576c26b8624d741e12c0977a4ae127bc1681ee81745e1d345b73f0a
GET /partner-code-bundles/686552/bb76ad8c383bc7061336.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 5107
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "94f943a4a02bb1c8f8d869cb5bfe5ca3"
expires: Thu, 28 Nov 2052 16:33:49 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/d2f96f6ffdcc81e7cbc9.js
200 OK 3.2 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/d2f96f6ffdcc81e7cbc9.js
IP
File type ASCII text, with very long lines (9813)
Hash 742dd6d62d668e6202a316d32bb0d635
7924443ceae83bf749c347b5f6dac62a1ec61ce9
c990b17cdfccf5e56dd6dcf28b5e02d45b57206343d73fd94264986498a6f733
GET /partner-code-bundles/686552/d2f96f6ffdcc81e7cbc9.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 3172
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "742dd6d62d668e6202a316d32bb0d635"
expires: Thu, 28 Nov 2052 16:34:06 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/686552/7e6b1fcc36032051afc3.js
200 OK 6.7 kB URL HTTP/2 yastatic.net/partner-code-bundles/686552/7e6b1fcc36032051afc3.js
IP
File type ASCII text, with very long lines (24031)
Hash 3c69bafbb7ad11e5634c59c50698924f
ee263429cb75e6e666c8a30e4b46e6c690204bba
d1941ff9e7f8d6157cb4766a816510d89ff6217b93f73de7a8d14ea0286074d5
GET /partner-code-bundles/686552/7e6b1fcc36032051afc3.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 6725
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "3c69bafbb7ad11e5634c59c50698924f"
expires: Thu, 28 Nov 2052 16:36:09 GMT
last-modified: Fri, 25 Nov 2022 16:47:32 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
200 OK 6.3 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Hash eb77de48712912aadc9aa8171ac75ede
f375e4ed6b585c4e30b2d56f4f41c3beed909349
437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: text/html
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Thu, 28 Nov 2052 16:34:08 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 805175b3f4c6e9e05e11f6d2af56b57b
f54a48475ae5e07197368a039fdd91b0b519cc16
e2786092cd280ce5521185b50ff4cde0df1d30008312011af45105dd5af52ce2
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 08:34:24 GMT
ETag: "f54a48475ae5e07197368a039fdd91b0b519cc16"
Last-Modified: Tue, 29 Nov 2022 08:34:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1509
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a80874a54b50c-OSL
avatars.mds.yandex.net/get-vh/5518362/2a0000017ece96ecb7228f2c3ad629495fe4/orig
200 OK 93 kB URL HTTP/2 avatars.mds.yandex.net/get-vh/5518362/2a0000017ece96ecb7228f2c3ad629495fe4/orig
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 1920x1080, components 3\012- data
Hash b80ab2456281094a5be038f0b5057138
4dadd25710c21950395a32cd33b8a1bfe60eefed
29ad923f78b80fb2ba71a287edcbed5b310354a747615444c9c0b54e14f965b1
GET /get-vh/5518362/2a0000017ece96ecb7228f2c3ad629495fe4/orig HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: image/jpeg
content-length: 92609
last-modified: Sun, 06 Feb 2022 10:31:45 GMT
cache-control: max-age=86400,immutable
x-request-id: 2a06ce36553c5607
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5283206/Dj0wvEdSLZmy2LRp-sdDyg/x450
200 OK 22 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5283206/Dj0wvEdSLZmy2LRp-sdDyg/x450
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 450x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4806bab0afc4e725579abb1b32868479
c58157b5617c28fb17c14f66dfdd34f85234ce2e
961d65ef493469ff3c06009c02c2c6f73ae82f402d52310369112a2635e6dbbe
GET /get-direct/5283206/Dj0wvEdSLZmy2LRp-sdDyg/x450 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:27 GMT
content-type: image/webp
content-length: 22154
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Wed, 11 Aug 2021 14:15:16 GMT
cache-control: max-age=31536000,immutable
x-request-id: fa68e357d9e0cf55
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 165 kB URL HTTP/2 an.yandex.ru/event_confirmation
IP
Size 165 kB (164958 bytes)
Hash 0eed077736fa111c45204a593dd91ed1
4cd29831b3e8231cc5004e4d16ede2f06ec9de78
dedc5c68a786e4ead85f7ed2e3df6d69d60f0e51c6c188478f01c1061b0614e8
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 315
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:26 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 10:01:26 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 10:01:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5739142/3s8CtPFcEIFymdR3v7hzOw/y300
200 OK 13 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5739142/3s8CtPFcEIFymdR3v7hzOw/y300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4682cd9ee1138c29e126c95e2f053a0f
3432957588f053fb2ec984f17e8389e4858b9ef6
9cce4b1cac2b4c3326598d0692925614f9e61ec71beca14e9c91ca493410aa94
GET /get-direct/5739142/3s8CtPFcEIFymdR3v7hzOw/y300 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:27 GMT
content-type: image/webp
content-length: 13266
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 11 Aug 2022 15:44:55 GMT
cache-control: max-age=31536000,immutable
x-request-id: 77e328e7b7fd726b
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y300
200 OK 15 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bbac4fac641fe9d43583d236330c4e3b
49a2ab90c245681bb60cdeafd9f44540dd42706b
1dbda8791d27b0ecbfd4cb6ea785609df4784df94c8612daa382a1dd8f59776d
GET /get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y300 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:27 GMT
content-type: image/webp
content-length: 14848
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 24 Nov 2022 12:55:26 GMT
cache-control: max-age=31536000,immutable
x-request-id: 86d9d7c68f6c7c92
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 7de5941542ef375d582ad8240a29992e
6f953fbba81f37d0abc168f498e5217ce43b5c12
74006b6457fefe1fd576128e089bad8cc198e927e98a23fdc6a1f2df244cfec5
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 03 Dec 2022 08:04:11 GMT
ETag: "6f953fbba81f37d0abc168f498e5217ce43b5c12"
Last-Modified: Tue, 29 Nov 2022 08:04:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3115
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a8088bd59b50c-OSL
favicon.yandex.net/favicon/usb2sd.com?size=32&stub=2
200 Ok 1.1 kB URL HTTP/1.1 favicon.yandex.net/favicon/usb2sd.com?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 429bc045bcc04bf4df9fe0966d0a3002
bcae76f267e8fd8cf64837d7c071efb88a63f97b
3e9c945cf98567e6bccc525a8d2f9deb55dff30e06c60252a3b0cb0721d5a381
GET /favicon/usb2sd.com?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
favicon.yandex.net/favicon/octobrowser.net?size=32&stub=2
200 Ok 2.6 kB URL HTTP/1.1 favicon.yandex.net/favicon/octobrowser.net?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fe4410ec5f0116b5242c7ef07237405e
f9f7977bf238e658994b585372f0ba065c4f475d
e440e5b3c59bc9a01b748f14dbe46dc5721b95a0e0bfc2673e511eec15c2615e
GET /favicon/octobrowser.net?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
mc.yandex.ru/watch/493465/1?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 371 B URL HTTP/2 mc.yandex.ru/watch/493465/1?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (371), with no line terminators
Hash 921af02c2242f4db1f911348be31f137
eee6290b0acc76bfb0ea68c83d46d6e44d5eb331
594b0538a8ef8314684d4bc7d4e99ea468c06dbfa3fcfbcc892268519fad3d7b
GET /watch/493465/1?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Referer: https://victoria-hdd.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 371
date: Tue, 29 Nov 2022 10:01:27 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:27 GMT
last-modified: Tue, 29-Nov-2022 10:01:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 8f33e374c2be3e2760193456580bb6ae
124609663e853e90abb0cfc14bd161c1ad79e81b
f9477ad809f19fbf055a09d54132f7afdf7184d9676c5962b1aeaceaa6bdb4d2
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Sat, 03 Dec 2022 08:04:49 GMT
ETag: "124609663e853e90abb0cfc14bd161c1ad79e81b"
Last-Modified: Tue, 29 Nov 2022 08:04:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1612
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a808a1f56b50c-OSL
ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
200 Ok 95 B URL HTTP/1.1 ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 60cf42b4d05caf10cf8bb15c0817a7b4
bd269860bb508aebcb6f08fe7289d5f117830383
18c327afa903633f86c3efcf12b77f098077eacaa8be101bb007846fd74f8b93
GET /static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes HTTP/1.1
Host: ysa-static.passport.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Server: nginx/1.14.2
Date: Tue, 29 Nov 2022 10:01:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: close
Cache-Control: private
Expires: Wed, 30 Nov 2022 10:01:27 GMT
X-RT-IQ: 0.0001
X-RT-IH: 0.0002
Strict-Transport-Security: max-age=315360000; includeSubDomains
mc.yandex.ru/watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A790764884%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C2787%2C2787%2C1%2C1773%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669716087&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)rqnt(1)aw(1)ecs(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A790764884%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C2787%2C2787%2C1%2C1773%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669716087&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)rqnt(1)aw(1)ecs(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A1635%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A790764884%3Arqn%3A1%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C106%2C550%2C0%2C252%2C0%2C%2C836%2C54%2C2787%2C2787%2C1%2C1773%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1669716087&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)rqnt(1)aw(1)ecs(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:27 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:27 GMT
last-modified: Tue, 29-Nov-2022 10:01:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash ca33075d0968d195131591cd69926e20
5e1795cf1f1d3375e4bb05e5b5c8465f56a0e107
ccf1e522a5d8cf72671b2ccf1f66add230487139fe6aa7c94e9ee400f023f81b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 07:02:14 GMT
ETag: "5e1795cf1f1d3375e4bb05e5b5c8465f56a0e107"
Last-Modified: Tue, 29 Nov 2022 07:02:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 657
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a808ab835b50c-OSL
strm.yandex.ru/vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085
302 Found 0 B URL HTTP/2 strm.yandex.ru/vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085 HTTP/1.1
Host: strm.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 29 Nov 2022 10:01:27 GMT
content-length: 0
location: https://ext-strm-itt06.strm.yandex.net/vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&noredir=1&lid=1529
x-plg: host=strm-plgo-production-137.myt.yp-c.yandex.net; version=10412819
x-request-id: 222c5573e80d6747
x-strm-request-id: 222c5573e80d6747
x_h: strm-anycast-ru-net-production-28.sas.yp-c.yandex.net
x-strm-log-split: 8
report-to: {"group": "network-errors", "max_age": 1200, "include_subdomains": true, "endpoints": [ {"url": "https://dr.yandex.net/strm", "priority": 1}, {"url": "https://dr2.yandex.net/strm", "priority": 2} ]}
nel: {"report_to": "network-errors", "max_age": 1200, "success_fraction": 0.005, "failure_fraction": 0.05, "include_subdomains": true}
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session
access-control-expose-headers: Date, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, Age, X-Server-Time-Ms, X-Plg-URL
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
favicon.yandex.net/favicon/turkeyimportdata.com?size=32&stub=2
200 Ok 1.4 kB URL HTTP/1.1 favicon.yandex.net/favicon/turkeyimportdata.com?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5700030f5beb924a1dcf3c6cdfd3bf38
deaee9446a941ff5bcb87fbae3144239296d1d47
7952f758e6095f4f704b3158cb55c829d47c5349a9c4bc97b7ef2fb863464816
GET /favicon/turkeyimportdata.com?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
mc.yandex.ru/watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A40263491%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716087%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A40263491%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716087%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/493465/1?page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&cnt-class=1&hittoken=1669716087_8d7748f73667acb2cb21c4d2e5cba1a5ad34cba33bd7827c90e5b053b4c778d6&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100126%3Aet%3A1669716087%3Ac%3A1%3Arn%3A40263491%3Arqn%3A2%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716087%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Referer: https://victoria-hdd.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:27 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:27 GMT
last-modified: Tue, 29-Nov-2022 10:01:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ext-strm-itt06.strm.yandex.net/vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&noredir=1&lid=1529
206 Partial Content 648 kB URL HTTP/2 ext-strm-itt06.strm.yandex.net/vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&noredir=1&lid=1529
IP
ASN #6762 TELECOM ITALIA SPARKLE S.p.A.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 648 kB (648192 bytes)
Hash 29ea63830fd63abbb215286ff01b03c3
ba3835b10aa627ef0d4ce1b2cfb8061b19bab209
afb0ce19eff98ae76bcc478053adf42e43f508960d7193c294b1ae05a344ca47
GET /vh-canvas-converted/vod-content/1276749371072432771/e0894fe4-e67edb70-37fe0eb5-199072d0/webm/VP8_426_240_500.webm?vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&noredir=1&lid=1529 HTTP/1.1
Host: ext-strm-itt06.strm.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://victoria-hdd.ru/
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Tue, 29 Nov 2022 10:01:27 GMT
content-type: video/webm
content-length: 648192
etag: "29ea63830fd63abbb215286ff01b03c3"
last-modified: Sun, 06 Feb 2022 10:31:54 GMT
x-amz-version-id: null
x-robots-tag: noindex, noarchive, nofollow
x-strm-log-split: 4
x_h: strm-ams06.strm.yandex.net
x-strm-request-id: 5a08881c7bc93ae7
x-request-id: 5a08881c7bc93ae7
expires: Tue, 29 Nov 2022 10:06:27 GMT
cache-control: max-age=300
report-to: {"group": "network-errors", "max_age": 1200, "include_subdomains": true, "endpoints": [ {"url": "https://dr.yandex.net/strm", "priority": 1}, {"url": "https://dr2.yandex.net/strm", "priority": 2} ]}
nel: {"report_to": "network-errors", "max_age": 1200, "success_fraction": 0.005, "failure_fraction": 0.05, "include_subdomains": true}
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session
access-control-expose-headers: Date, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, Age, X-Server-Time-Ms, X-Plg-URL
x-estimated-rtt: 46256
x-estimated-bandwidth: 941264
x-connection-id: 725457287
x-server-time-ms: 1669716087734
content-range: bytes 0-648191/648192
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash f8142b17fb7a515572f7c987a6eaf2f9
0d58c764b86fccfb2d2db503f8c1d52b51e34a57
9e1a44752f06295a494aa36fb1ffb9e12be2d177ada7f113e22397a9e3d99f24
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 10:01:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 07:52:22 GMT
ETag: "0d58c764b86fccfb2d2db503f8c1d52b51e34a57"
Last-Modified: Tue, 29 Nov 2022 07:52:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2387
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771a808e2ce4b50c-OSL
log.strm.yandex.ru/log?VAS=685798&event=PrioritiseMediaFiles
200 OK 0 B URL HTTP/2 log.strm.yandex.ru/log?VAS=685798&event=PrioritiseMediaFiles
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /log?VAS=685798&event=PrioritiseMediaFiles HTTP/1.1
Host: log.strm.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13113
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-credentials: true
access-control-expose-headers: Date
date: Tue, 29 Nov 2022 10:01:28 GMT
timing-allow-origin: https://victoria-hdd.ru
access-control-allow-origin: https://victoria-hdd.ru
x-request-id: 1669716088066845-10409662120576445872
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/webfonts/fa-solid-900.woff2
200 OK 74 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.2/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064\012- data
Hash 462806316fea535a6a57651bc2b000b0
80644191098f863f25be27841c0d92c452cf2327
4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2
GET /releases/v5.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:01:28 GMT
content-type: font/woff2
content-length: 74348
x-amz-id-2: D/bzhBsk8fSUcjFTQn9tIQ2/0gE7L9j0heqdbbwh0gFFTLfpyS4sOiNJljBqXWgrGa6lnk+l8uE=
x-amz-request-id: YHMDAC5FES9FDQFY
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:46:18 GMT
etag: "462806316fea535a6a57651bc2b000b0"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0gjqZiF490XultTaevgx%2BKlpPPqi2KpxdYTeUnf07FlhXy49JVHQfFXIFWBBWu43Xrrb7yoCe0vRmTY2DIhwlvRBOtKk0tMkixCWvqh7MtI0MABFSQvyU5mHK3dgPWXFPvbWAc0v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771a808e7f80f3f3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.2/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13592, version 329.31064\012- data
Hash 65779ebcc35604a25c2ba77309c5b8af
fbb0d9d51850d824d7eba66e0e210c778d6d42f5
940b3908bf9fc263ff7a9640fd719a1a3ecca9e1224e9ce4758053fa01edbcc0
GET /releases/v5.7.2/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:01:28 GMT
content-type: font/woff2
content-length: 13592
x-amz-id-2: ffQte3ZtxYQWPmXMt0D3Cq7Eyn3RQOaqClrHkpahxlUPkk1rY/LK6TE5CwGiPsp5rnmWAqF03Uk=
x-amz-request-id: YHM2TWPRX9CHSZDP
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:46:18 GMT
etag: "65779ebcc35604a25c2ba77309c5b8af"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YTohGbHpuLVxv5TUBFLIggVMthvkrVB47YiDv%2FQ1UO7jpPwhWhLTKxi1OJ7Cw8VZwcqwEMAm2E3rWGGmX7lfA%2BvHOvER0mlvBWrCWaZGB7OEQXA%2Bzprj4bFXdkfoidlIhJZYqMXB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771a808e8f86f3f3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716088%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100127%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716088&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716088%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100127%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716088&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716088%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100127%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716088&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 226
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:28 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:28 GMT
last-modified: Tue, 29-Nov-2022 10:01:28 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=0&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087088&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown
200 OK 58 kB URL HTTP/2 yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=0&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087088&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown
IP
Hash 65aa49b71458f176abd34dcabeeacdee
dceea242e57e92c751b79311ae41a3a3268f89f0
38dc59d1fd61802cf20eb66fec6a1ac5ea6aef5449920014e30547931d49c33d
POST /an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=0&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087088&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:28 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: i=aizAoqPVIjAZVVFajfOVzBdyYi7QLyHPcvYHCC/bzeS7ZHqRsGkoE10hZW79x6GzjMG/v3Jrgg6NE5YtXSEv52/IgTk=; Expires=Thu, 28-Nov-2024 10:01:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:28 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:28 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ecb3506821caec55c7bbba4661f05460
851aead7db5c43dba6547026590cd9a23cbcdadf
dc93906a7850df73e9052b353dee67b80bb5caf8e804370242e994fba3cf4152
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ecb3506821caec55c7bbba4661f05460
851aead7db5c43dba6547026590cd9a23cbcdadf
dc93906a7850df73e9052b353dee67b80bb5caf8e804370242e994fba3cf4152
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ecb3506821caec55c7bbba4661f05460
851aead7db5c43dba6547026590cd9a23cbcdadf
dc93906a7850df73e9052b353dee67b80bb5caf8e804370242e994fba3cf4152
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ecb3506821caec55c7bbba4661f05460
851aead7db5c43dba6547026590cd9a23cbcdadf
dc93906a7850df73e9052b353dee67b80bb5caf8e804370242e994fba3cf4152
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:01:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yandex.ru/set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fvictoria-hdd.ru%2F
200 OK 303 B URL HTTP/2 yandex.ru/set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fvictoria-hdd.ru%2F
IP
Hash a2fb47b1a8118a2ad5abccb60c659e25
cc9222fa5ac8f19a6dbd29a10eb6a5e9948f2684
678290bef7b27ac6f23417ffc44a1a1b45816d0b08bb14c6bd1ed59abc3142fe
GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fvictoria-hdd.ru%2F HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Origin: https://yastatic.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:01:28 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:28 GMT; SameSite=None; Secure
is_gdpr_b=CIy8DhCVmAEYAQ==; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:28 GMT; SameSite=None; Secure
_yasc=NxrhxAq6zXITBVUYGsJjSl8y00NwVclcN99nkPbsp63cGpWGirhaiNM2Ng58iQ==; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 10:01:28 GMT; secure
i=ely8ARgXrwzdamIW2uHfatHtKea+iBcRL3uGNwxLaH9ytAbN/gUXdvpdOG1+w6FkOpl44Dfh2SLYR5lxsKADbEy0JJI=; Expires=Thu, 28-Nov-2024 10:01:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: public,max-age=300
content-encoding: gzip
content-type: application/json; charset=utf-8
X-Firefox-Spdy: h2
yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=11&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087087&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown
200 OK 52 kB URL HTTP/2 yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=11&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087087&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown
IP
Hash d9c8baa84afcb7777026b7032a75a6e3
234fb1744308444c1540cf052b17e4fb24fea5ba
153aa22bbefa9b7d4ac23329caf6b53b0c98a887d94fa42b6b82d0ef7076e5dc
POST /an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=11&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716087087&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:28 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: i=L5lKk036vgOMJjk3j+DFvhJ0Dbvj8hzXBGJQbOK2/XS5ja9SGHqL5fnOSu23TmvTmSmMmivpr0ozGMCpMMNR7T1oA7o=; Expires=Thu, 28-Nov-2024 10:01:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:28 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:28 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
302 Found 42 B URL HTTP/2 www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=ediFY5iWA4qQ6wTbyIXoBg&random=551017811&sscte=1&crd=
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A675584221519%3Ahid%3A745628857%3Az%3A0%3Ai%3A20221129100128%3Aet%3A1669716088%3Arn%3A94571436%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Ast%3A1669716088&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
302 Found 1.0 kB URL HTTP/2 mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A675584221519%3Ahid%3A745628857%3Az%3A0%3Ai%3A20221129100128%3Aet%3A1669716088%3Arn%3A94571436%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Ast%3A1669716088&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
Hash 7d27d85b8e80d11c5d25bc07ff6380d9
1fed0dba285efe9e5f39023f4159ecb156e2bfdd
371afb91033fc24ecbba6b830665968c1f1b4a06d263a176f541c00a5d0f4dcc
GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A675584221519%3Ahid%3A745628857%3Az%3A0%3Ai%3A20221129100128%3Aet%3A1669716088%3Arn%3A94571436%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Ast%3A1669716088&t=clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A675584221519%3Ahid%3A745628857%3Az%3A0%3Ai%3A20221129100128%3Aet%3A1669716088%3Arn%3A94571436%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Ast%3A1669716088&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
date: Tue, 29 Nov 2022 10:01:29 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yandexuid=5068785051669716089; Expires=Wed, 29-Nov-2023 10:01:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5068785051669716089; Expires=Wed, 29-Nov-2023 10:01:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=609928841669716089; Path=/; SameSite=None; Secure
i=OyyLFhb2vzoZ3A4osz9URHYBq/RWg19sihAMTakHQNfiQSxqdKba25KWdq4BfjAh/llUvrm6tu+84C9MrrSS0yKZ7kQ=; Expires=Fri, 26-Nov-2032 10:01:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701252089.yc.1669716089#1701252089.yrts.1669716089#1701252089.yrtsi.1669716089; Expires=Wed, 29-Nov-2023 10:01:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:29 GMT
last-modified: Tue, 29-Nov-2022 10:01:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/an/count/WNKejI_zOEK0NGi0z18hgpju8EJb9mK0vG4GW8200J5ss8LZ000003YodZo80WIv0b_z1hxIaxhpy0B2ovUsW3lm1G6W1ku1oGPsH6hUfYSOHAa7pTsOtWUDWsBuW0e1Y0e3Y0i8gWiGNzIZRCtT002GTZSIcUw1W820Y0Ie3ysxmyJ-eEF1Of0G_A3TW8tRmzLta963iH82u1G1y1N1YlRieu-y_6F95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96RmAk1d___y1m1drsC39wlxxX3hI6H9vOM9pNtDbSdPbSYzoDpKtBJ7e6Pu5y1c0mWEO6jJ3Kx0RIBWR0u8S3Mz2GZfkOs57SaWuPJVf780T_t-080A880oo8GWsE3OoD3KwDz0X____0TKY__z__u4Z00000000y3yI07i6sp2ZCdXoodSqkZLohqh08Kt69RibXWNS5Mj-wZqg2m1IwJey-WM-sZb3XJ-AY1yrYej3YM1G~1=WOaejI_zOA80_Gi011PUXYEWeW64klwYweVWZPa1W06Nqf281OW1wwV4nuK1a062iDAure20W0AO0RghqhXMk07waFRO8zW1YgEWeW7W0PQLhva1_9ZUlW6W0exwXG600_dnfuu9Y0ELkjIc1R03bGU81SVA3905YvyDi0NwhWEu1Vgk0y05_PoZ0SW5uxyfq0NgbW6e1ku1gGVDtPZU1us3OhW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6o130i922Y181a181g1Enmy_6xxs1bXU05820WWJG5F_4WL3e58m2oHRmFvWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__HxcoNpvYe1he-hBStFIklsMe7W6m7m787yMHa56f86BYd8Es8wm_k23daoYo8GWsE3OoD3KwDx0Y0TKY__z__u4Z0F0_YIDcrZ-G8-6xz-pvaSNnKfWZd-_4pfJufiiN2010507tn16nMc8We92S5AULqda0b-WnOh1D5040~1?stat-id=4&test-tag=259484744210961&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&format-type=118&actual-format=10&pcodever=686552&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjU4MTY4MSJ9&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0&width=670&height=207&confirmTime=-1&confirmRatio=1000000&wmode=0&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0
302 Found 1.1 kB URL HTTP/2 yandex.ru/an/count/WNKejI_zOEK0NGi0z18hgpju8EJb9mK0vG4GW8200J5ss8LZ000003YodZo80WIv0b_z1hxIaxhpy0B2ovUsW3lm1G6W1ku1oGPsH6hUfYSOHAa7pTsOtWUDWsBuW0e1Y0e3Y0i8gWiGNzIZRCtT002GTZSIcUw1W820Y0Ie3ysxmyJ-eEF1Of0G_A3TW8tRmzLta963iH82u1G1y1N1YlRieu-y_6F95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96RmAk1d___y1m1drsC39wlxxX3hI6H9vOM9pNtDbSdPbSYzoDpKtBJ7e6Pu5y1c0mWEO6jJ3Kx0RIBWR0u8S3Mz2GZfkOs57SaWuPJVf780T_t-080A880oo8GWsE3OoD3KwDz0X____0TKY__z__u4Z00000000y3yI07i6sp2ZCdXoodSqkZLohqh08Kt69RibXWNS5Mj-wZqg2m1IwJey-WM-sZb3XJ-AY1yrYej3YM1G~1=WOaejI_zOA80_Gi011PUXYEWeW64klwYweVWZPa1W06Nqf281OW1wwV4nuK1a062iDAure20W0AO0RghqhXMk07waFRO8zW1YgEWeW7W0PQLhva1_9ZUlW6W0exwXG600_dnfuu9Y0ELkjIc1R03bGU81SVA3905YvyDi0NwhWEu1Vgk0y05_PoZ0SW5uxyfq0NgbW6e1ku1gGVDtPZU1us3OhW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6o130i922Y181a181g1Enmy_6xxs1bXU05820WWJG5F_4WL3e58m2oHRmFvWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__HxcoNpvYe1he-hBStFIklsMe7W6m7m787yMHa56f86BYd8Es8wm_k23daoYo8GWsE3OoD3KwDx0Y0TKY__z__u4Z0F0_YIDcrZ-G8-6xz-pvaSNnKfWZd-_4pfJufiiN2010507tn16nMc8We92S5AULqda0b-WnOh1D5040~1?stat-id=4&test-tag=259484744210961&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&format-type=118&actual-format=10&pcodever=686552&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjU4MTY4MSJ9&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0&width=670&height=207&confirmTime=-1&confirmRatio=1000000&wmode=0&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0
IP
Hash daf4489d72cbcdaffb8ff9f9c4933fc8
58f9327ac5b00a6482eb96e762dadf0a110bd7d9
86ee8fc47e328f4708de5474dcfcb823134035d92ca959a8734d38d0c341c6ce
GET /an/count/WNKejI_zOEK0NGi0z18hgpju8EJb9mK0vG4GW8200J5ss8LZ000003YodZo80WIv0b_z1hxIaxhpy0B2ovUsW3lm1G6W1ku1oGPsH6hUfYSOHAa7pTsOtWUDWsBuW0e1Y0e3Y0i8gWiGNzIZRCtT002GTZSIcUw1W820Y0Ie3ysxmyJ-eEF1Of0G_A3TW8tRmzLta963iH82u1G1y1N1YlRieu-y_6F95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96RmAk1d___y1m1drsC39wlxxX3hI6H9vOM9pNtDbSdPbSYzoDpKtBJ7e6Pu5y1c0mWEO6jJ3Kx0RIBWR0u8S3Mz2GZfkOs57SaWuPJVf780T_t-080A880oo8GWsE3OoD3KwDz0X____0TKY__z__u4Z00000000y3yI07i6sp2ZCdXoodSqkZLohqh08Kt69RibXWNS5Mj-wZqg2m1IwJey-WM-sZb3XJ-AY1yrYej3YM1G~1=WOaejI_zOA80_Gi011PUXYEWeW64klwYweVWZPa1W06Nqf281OW1wwV4nuK1a062iDAure20W0AO0RghqhXMk07waFRO8zW1YgEWeW7W0PQLhva1_9ZUlW6W0exwXG600_dnfuu9Y0ELkjIc1R03bGU81SVA3905YvyDi0NwhWEu1Vgk0y05_PoZ0SW5uxyfq0NgbW6e1ku1gGVDtPZU1us3OhW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6o130i922Y181a181g1Enmy_6xxs1bXU05820WWJG5F_4WL3e58m2oHRmFvWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__HxcoNpvYe1he-hBStFIklsMe7W6m7m787yMHa56f86BYd8Es8wm_k23daoYo8GWsE3OoD3KwDx0Y0TKY__z__u4Z0F0_YIDcrZ-G8-6xz-pvaSNnKfWZd-_4pfJufiiN2010507tn16nMc8We92S5AULqda0b-WnOh1D5040~1?stat-id=4&test-tag=259484744210961&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&format-type=118&actual-format=10&pcodever=686552&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjU4MTY4MSJ9&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0&width=670&height=207&confirmTime=-1&confirmRatio=1000000&wmode=0&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
timing-allow-origin: *
location: https://yandex.ru/an/count/WNKejI_zOEK0NGi0z18hgpjuuFRHRmK0vG4GmO200J5ss8LZ000003YodZo80WIv0b_z1hxIaxhpy0B2ovUsW3lm1G6W1ku1oGPsH6hUfYSOHAa7pTsOtWUDWsBuW0e1Y0e3Y0i8gWiGNzIZRCtT002GTZSIcUw1W820Y0Ie3ysxmyJ-eEF1Of0G_A3TW8tRmzLta963iH82u1G1y1N1YlRieu-y_6F95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96RmAk1d___y1m1drsC39wlxxX3hI6H9vOM9pNtDbSdPbSYzoDpKtBJ7e6Pu5y1c0mWEO6jJ3Kx0RIBWR0u8S3Mz2GZfkOs57SaWuPJVf780T_t-080A880oo8GWsE3OoD3KwDz0X____0TKY__z__u4Z00000000y3yI07i6sp2ZCdXoodSqkZLohqh08Kt69RibXWNS5Mj-wZqg2m1IwJey-WM-sZb3XJ-AY1yrYej3YM1G~1=WOuejI_zOAS09Gm0L1QOccoHfm4GW8200OIw_gBgX-2DcG600PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG7ycDw-0Q02Zlg50O03-V6dZWc80vMwrAO5i0EL1uW5nyeCa0MBdmsm1Vgk0xW5-gu3m0NzdAC1o0NZlodG1UgM0QW6xW6f1ytTcDu7ZODYk0U01U07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCcmR84C2ma8A84W6G4W6e4x73pyRllO6M5u0KW8221D0K_yI1KEWKZ0B95l0_c1UNjRGik1S1m1UrrW6W6Uu1k1d_0O4Q__z7kR9VFcAW6kZwijpSzAw_PQWU0R0V0SWVnP6GKQaWOkASWxOZh3-u8EUJAB8X23OuDZ8qDJeti281rIB__t__WIC0y3-98sRMFv0ZuRltxFcHnV5Ic2EVxyJEbFYconS8040K0VV44J5TOY3WaPmKpvNIUG2Sw36YiKru0G00~1?stat-id=4&test-tag=259484744210961&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&format-type=118&actual-format=10&pcodever=686552&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjU4MTY4MSJ9&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0&width=670&height=207&confirmTime=-1&confirmRatio=1000000&wmode=0&order-banners-options=eyI3MjA1NzYwNTY0MDA0NzYxNyI6MjA0OH0
date: Tue, 29 Nov 2022 10:01:27 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: yandexuid=9623759691669716087; Path=/; Domain=.yandex.ru; Expires=Fri, 26-Nov-2032 10:01:27 GMT; SameSite=None; Secure
i=RzCbAJkWtCVYegN5/xS5sXNqX/tPNthYyrJ1hiyXwP9z33fcHTBbWsZgSpLcRIq2VxopEu2HRA4y69lNYSZrhDE88kI=; Expires=Thu, 28-Nov-2024 10:01:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:27 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:27 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
yandex.ru/an/rtbcount/1UY6D3QV0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4IHubH6azIuZWmm3mr_6MKmC37EPG29dcVu3mIicWVWhYtFEtcLWc51cBZJp7Il3NoQGjbPcLY3Powm89ASoWpJCPMO3MSNCnA00iebb8pFRg_D-gOVl-9raBblnYssDerVXLR3Aks3o9xE34p_4eIo_zGw1MIjOEcGti33kO64zmC9uWMNZuVF7tkzjd2P-amNY_0_s3rdyYhzB-J-yOl-M1UI91Qoy9rdtS761fI-mDZGqiTnaBTKnMFdjFQVLLrQG7phO6bXci5qv7Bo0hNlFvWsjVy_iBrl91ZFc09l72JRcHsoy-KvELdd9YUv57XQfvY_PO1R-XBCcigit9DvLl_BMVXOxcvc5cQcfqGPsfXtiF2VOnH-mhxpsUyx7PRt7ZNwmym00aqUKdG00
200 OK 92 B URL HTTP/2 yandex.ru/an/rtbcount/1UY6D3QV0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4IHubH6azIuZWmm3mr_6MKmC37EPG29dcVu3mIicWVWhYtFEtcLWc51cBZJp7Il3NoQGjbPcLY3Powm89ASoWpJCPMO3MSNCnA00iebb8pFRg_D-gOVl-9raBblnYssDerVXLR3Aks3o9xE34p_4eIo_zGw1MIjOEcGti33kO64zmC9uWMNZuVF7tkzjd2P-amNY_0_s3rdyYhzB-J-yOl-M1UI91Qoy9rdtS761fI-mDZGqiTnaBTKnMFdjFQVLLrQG7phO6bXci5qv7Bo0hNlFvWsjVy_iBrl91ZFc09l72JRcHsoy-KvELdd9YUv57XQfvY_PO1R-XBCcigit9DvLl_BMVXOxcvc5cQcfqGPsfXtiF2VOnH-mhxpsUyx7PRt7ZNwmym00aqUKdG00
IP
Hash 32dc91aa5e5be7a85228811d496edc1d
1b2558db24575ae602cc57f361118b1172b74fe9
32c4b4fd4cd3b0db30793f29472d2c0b804cfe89fb13f299261b322ae4a78052
GET /an/rtbcount/1UY6D3QV0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4IHubH6azIuZWmm3mr_6MKmC37EPG29dcVu3mIicWVWhYtFEtcLWc51cBZJp7Il3NoQGjbPcLY3Powm89ASoWpJCPMO3MSNCnA00iebb8pFRg_D-gOVl-9raBblnYssDerVXLR3Aks3o9xE34p_4eIo_zGw1MIjOEcGti33kO64zmC9uWMNZuVF7tkzjd2P-amNY_0_s3rdyYhzB-J-yOl-M1UI91Qoy9rdtS761fI-mDZGqiTnaBTKnMFdjFQVLLrQG7phO6bXci5qv7Bo0hNlFvWsjVy_iBrl91ZFc09l72JRcHsoy-KvELdd9YUv57XQfvY_PO1R-XBCcigit9DvLl_BMVXOxcvc5cQcfqGPsfXtiF2VOnH-mhxpsUyx7PRt7ZNwmym00aqUKdG00 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:27 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: i=5ZrWHF7StBKf7iGrzKSeZQJqeemHkYCaOKQxyqgZ/pPlU0LQPZF/qCOJ7OSETRgJlLfQ8DD5omxO1CDt/2mrEEAxZXQ=; Expires=Thu, 28-Nov-2024 10:01:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:27 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:27 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-type: image/gif
X-Firefox-Spdy: h2
mc.yandex.ru/watch/493465?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 256 B URL HTTP/2 mc.yandex.ru/watch/493465?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
IP
File type gzip compressed data, from Unix\012- data
Hash dfd2d54d40fb22e191822e0f0d0f4681
b214928733c047980f172df7db266bfaed1b887b
0dca55ddca1be42a03de07783df271c275302823326fec8c34c207329cf733a5
GET /watch/493465?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/493465/1?wmode=7&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A771025045757%3Ahid%3A639984687%3Az%3A0%3Ai%3A20221129100125%3Aet%3A1669716086%3Ac%3A1%3Arn%3A856799142%3Au%3A1669716085782602161%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669716082966%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716086%3At%3AVictoria%20HDD%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%81%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 10:01:26 GMT
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: yandexuid=4022455271669716086; Expires=Wed, 29-Nov-2023 10:01:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4022455271669716086; Expires=Wed, 29-Nov-2023 10:01:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1321076281669716086; Path=/; SameSite=None; Secure
i=rQLLCCShR4VrjVjRQdhNZ2348JuAgs1gEB5x8yLHUxV4WLyiRV5q2gZ0vPM3uNgFNBJr5IQb7qsVnoxcbs1WVVU3Tb8=; Expires=Fri, 26-Nov-2032 10:01:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701252086.yc.1669716086#1701252086.yrts.1669716086#1701252086.yrtsi.1669716086; Expires=Wed, 29-Nov-2023 10:01:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:26 GMT
last-modified: Tue, 29-Nov-2022 10:01:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 62 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 315
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:27 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 10:01:27 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 10:01:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1669716088253&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=3061857582&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1669716088253&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=3061857582&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1669716088253&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=3061857582&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1008734293&crd=&is_vtc=1&random=578499054&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1008734293&crd=&is_vtc=1&random=578499054&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1008734293&crd=&is_vtc=1&random=578499054&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1669716088259&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=445266825&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1669716088259&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=445266825&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1669716088259&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=445266825&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=551017811&crd=&is_vtc=1&random=1313043381&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=551017811&crd=&is_vtc=1&random=1313043381&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=551017811&crd=&is_vtc=1&random=1313043381&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/693627671/?random=1669716088261&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=1680605485&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1669716088261&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=1680605485&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1669716088261&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=1680605485&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/693627671/?random=1669716088256&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=2022237247&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1669716088256&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=2022237247&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1669716088256&cv=9&fst=1669716000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fvictoria-hdd.ru%2F&async=1&fmt=3&is_vtc=1&random=2022237247&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:01:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
log.strm.yandex.ru/log?VAS=685798&event=VastTracking_impression
200 OK 0 B URL HTTP/2 log.strm.yandex.ru/log?VAS=685798&event=VastTracking_impression
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /log?VAS=685798&event=VastTracking_impression HTTP/1.1
Host: log.strm.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5596
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-credentials: true
access-control-expose-headers: Date
date: Tue, 29 Nov 2022 10:01:30 GMT
timing-allow-origin: https://victoria-hdd.ru
access-control-allow-origin: https://victoria-hdd.ru
x-request-id: 1669716090564261-18268683867643736156
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=385334479&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=385334479&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=385334479&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 55
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:30 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:30 GMT
last-modified: Tue, 29-Nov-2022 10:01:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=386252849&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=386252849&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=386252849&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100129%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 323058
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:30 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:30 GMT
last-modified: Tue, 29-Nov-2022 10:01:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100130%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100130%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=245443219&wv-type=5&browser-info=gdpr%3A14%3Aet%3A1669716090%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100130%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716090&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 40
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:30 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:30 GMT
last-modified: Tue, 29-Nov-2022 10:01:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr%286%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr%286%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 88e9a7492555beeb66b4a66f5d42726d
472deb4fde847d66fbe798114dbc34403c32fc93
ce82506e9a0001bec41db2d5451e296fcc47e1ca10d2e3b29d56963e62ff8670
GET /watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr%286%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Tue, 29 Nov 2022 10:01:32 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:32 GMT
last-modified: Tue, 29-Nov-2022 10:01:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wv-check=8289&wv-type=0&wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=462448423&browser-info=gdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wv-check=8289&wv-type=0&wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=462448423&browser-info=gdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wv-check=8289&wv-type=0&wmode=0&wv-part=1&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=462448423&browser-info=gdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:32 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:32 GMT
last-modified: Tue, 29-Nov-2022 10:01:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=13&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089106&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown
200 OK 63 B URL HTTP/2 yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=13&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089106&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown
IP
Hash 6275c3a33a322606dd1b018e6364e820
28a6d3fe9f4eabde8a8cb2e3f885bd154dc5992c
9c15b4f94b7e7e5cb5df7a56f98c2852b9aa222006ced95f8f44719e6ad5a1fd
POST /an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=13&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=372&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089106&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1120306636%3B0%3Bf1680304dcb19509%3B7098672502772129229%3B0%3B493465%3B4%3B0&product-theme=unknown HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:30 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:30 GMT; SameSite=None; Secure
is_gdpr_b=CIy8DhCVmAEYAQ==; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:30 GMT; SameSite=None; Secure
i=X6dOwl/aIA2I7uEVITk+5dGufWK+3uPDAxlQ1teMAFBbW8KHCl0Dc4fw0yh8wE98xzX7KJIZuYEoeFk1bvqesJtKeF0=; Expires=Thu, 28-Nov-2024 10:01:30 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:30 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:30 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=676584588&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=676584588&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52942117?wmode=0&wv-part=2&wv-hit=639984687&page-url=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&rn=676584588&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1669716092%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129100132%3Au%3A1669716085782602161%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Awe%3A1%3Ast%3A1669716092&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 10:01:33 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:33 GMT
last-modified: Tue, 29-Nov-2022 10:01:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:40:31 GMT
vary: Accept-Encoding
etag: W/"630f48af-23ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.7.2/css/all.css
IP
GET /releases/v5.7.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:01:25 GMT
content-type: text/css
x-amz-id-2: U7NfV1zCuNYUq9AmNgj+6jGQ1mIlZLxqJ4GlslTV7Ol4FidK0cj3BxsQ+ha2v0ODa0eBAeokvzY=
x-amz-request-id: VZHAWV4TD0JYSG0F
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wDP3t6lH9gR5l2i8ZNkBjtbMHrjoAUR7Q4AumcU%2BwWMYS%2B7%2FPjFRj%2F3gPNDuTKSvqEuB3P2vugDmlsL%2FtTvEAvAzzhpIhG8wTSpk%2BpgOYQsemdaZUYs60P86yhh7sjHcHQnqg7XI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771a807b0cc2f3f3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/shortcodes-ultimate/includes/css/icons.css
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/plugins/shortcodes-ultimate/includes/css/icons.css
IP
GET /wp-content/plugins/shortcodes-ultimate/includes/css/icons.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-848f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-includes/js/dist/vendor/wp-polyfill.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-includes/js/dist/vendor/wp-polyfill.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:39:17 GMT
vary: Accept-Encoding
etag: W/"630f4865-4ac6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
OPTIONS /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://victoria-hdd.ru/
Origin: https://victoria-hdd.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
date: Tue, 29 Nov 2022 10:01:26 GMT
access-control-max-age: 1728000
access-control-allow-headers: content-type
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/themes/root/js/swiper.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/themes/root/js/swiper.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/root/js/swiper.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-1e727"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-1108"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fvictoria-hdd.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A383238379713%3Ahid%3A745628857%3Aphid%3A639984687%3Az%3A0%3Ai%3A20221129100131%3Aet%3A1669716091%3Arn%3A944519964%3Arqn%3A1%3Au%3A1669716088513999367%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C336%2C2%2C541%2C541%2C1%2C356%3Ans%3A1669716086073%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669716091%3At%3A&t=gdpr%286%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 10:01:32 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yandexuid=1075543881669716092; Expires=Wed, 29-Nov-2023 10:01:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1075543881669716092; Expires=Wed, 29-Nov-2023 10:01:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2039037201669716092; Path=/; SameSite=None; Secure
i=7bAms7ldMs8yUaX06BKs4Md4+YUzXega/9oWVFmUvG2Ko82Ctil7bUxijf9gu8Rk2cXmetTHUCMOr2XzPHZzh/EQVwM=; Expires=Fri, 26-Nov-2032 10:01:30 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701252092.yc.1669716092#1701252092.yrts.1669716092#1701252092.yrtsi.1669716092; Expires=Wed, 29-Nov-2023 10:01:32 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 10:01:32 GMT
last-modified: Tue, 29-Nov-2022 10:01:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/css/ninjatables-public.css
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/plugins/ninja-tables/assets/css/ninjatables-public.css
IP
GET /wp-content/plugins/ninja-tables/assets/css/ninjatables-public.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
last-modified: Tue, 02 Aug 2022 20:44:54 GMT
vary: Accept-Encoding
etag: W/"62e98cc6-173dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
yandex.ru/ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=74118886&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=300&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2MTc%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A879%2C%22top%22%3A1316%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A1%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6642780452979%5D
200 OK 0 B URL HTTP/2 yandex.ru/ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=74118886&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=300&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2MTc%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A879%2C%22top%22%3A1316%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A1%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6642780452979%5D
IP
GET /ads/meta/493465?target-ref=https%3A%2F%2Fvictoria-hdd.ru%2F%3Fysclid%3Dlb21ti6a9z680938540&charset=utf-8&pcode-test-ids=657518%2C0%2C58%3B682878%2C0%2C41%3B685882%2C0%2C45%3B685741%2C0%2C15%3B678361%2C0%2C79%3B682306%2C0%2C58%3B681671%2C0%2C9&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uurpTUN0qibCISqSUpO25REG7rzQZI0kWbFu0W%2FfcdirIjKS7d7Bbwg2zonBnO5czQ3xZ0ybgguqFSklKXWGHdYoEbqSsu9JqWhGvKdMGbnC9evPq2%2BLy7%2BbRfvFjsv%2Fy9eLa433%2B8p%2B%2Fga5x5URwvvr9%2BtlhjqQX5oyNS6XWDW10J3mhcygleiY6MCZCfBKnXExCG85rMjMNDRRlVBPwrLuSKK72hasU7pTH4rqTLOxTHKA2fTP4rmHFd61bwsiuUfGzmadQEKJ%2BYlxGJyQvY3EAqdI1zUvdUQJJjxohwZweFYZT0NCXXjFuiNRGKFrjWdK3zTinO3CSQ4SSdkwAWSC7OOZCEfhZZLJU20HAeZYpM4eU5bOplJ%2BySmjSEqTOFCWjfRlCWusGXmmAhdUtEAdgJNPCmwCgM0Dh%2FjGy0vICIw8ckgeOSCN3WeDs7%2FTyJaRxk2TGJlLV4SbQ0YdvqIRxlX2m5aYey4pfwsyCF0pLU9YSaXLZT6sQPHqilsqElQtJZNsGJJEtn2HCITMfocBpTU7hpx9D7D5%2F2I1gUpGFmO72TcAzZF%2BEMMw%2FBCASRk4QwzXNJxHoeubvdm5v9BBmiILOlW9FLUDqmV4QuV0oz5TYZxWHm98AtZiW51KLTJW8wZU4l9JIgREd7ueAX4CzY0ktBSyfST%2BIUnTRosqwEzZ3wwPeQbZGXhAW66qAgNrQEHaMNFIwTG%2FnRoL499tBjORcmqQKXtJO%2F%2FSTDFhu%2FrcNQlRu8dUpoHIXJEOeyamF0yJYzKAxFGwLyPuswz5tiIy%2B0Z24LXhIQRIAyp67GUQw0QymZVhHE1O7BnjYd4oRHSRI8htPK9PTGNBFU539hODiwxnU3yVbonUbXoERMN2aAr7GgeC5HE6Ox5w1RbgXlgqqtzrcwScim5cIdMJSgofcOdTGoSyGduhVnfpKOKpJKXWAhYLriopgL70wl4iyMfX%2BC7atYHsd%2Bi8uSsqWbJIoj63nBO6aglNW2JTp0ex2lSTxKTyMKiJOkOa0ham5zWYJ%2BiNQcBnYNon3G%2BoGj6WpF7XDWILAVBZGn5hAVLtzdnKVBkoz8GEjs2qC4KVQzdXLYQkzHKMHr%2BswI8gKYZj3lUuA8cL8LJeo9vKslfTnxN%2FYDz%2FX%2Bic734x8gDsWxIv34EaQkEpZap39%2BHCCLNhNZkAo0ZwXjeEkLNy4NB4GFoFVUNKaDBGGHudcKkrslHoFGB%2F6klWAGCqhrBt20IpAPI9uyEGbCSelUIuRnfmT9GYFw25qjLKE13ODAz%2BKJJyuq%2BmOMyCCYF4q7vQiTIJisqUXb6IaUFGsgwYqu%2ByHv5sjC6fJftMX%2F5pht4iWpMHTUE5fwKPYQmoRJNlgoDfebjhjyc0mKEUI2zjV%2Bue2XPt3PqjHq2%2BLP%2Ff3bv5rdh6vru6Hab9%2B%2Fub7Zy7e7m%2Bu7q8WL4PtkH4%2B9YakZuwOjS%2Be16eoaxu%2FYwKvF7e765vmHT%2BDb193du%2F0XeP79%2BnZ3tf84%2Belqd9v%2F8u6f%2FZ19fff5%2Bv69fbx9fvzy%2BrQ3%2FVK%2BEuZyMI0%2BAd0XRgEpg%2FlGYYerz0Q%2B8ZNBccyaOEhYjdmyO7PMIFgoUnvPKMxSzNnQo7gyE4BWcL8ldvt2N2uSZig7elAJCjT1Vls87VvtCfj84pEQPkKgLBw6eoR46l0cJVnkJUcW2BJKw9C4LacR8ueWbQu6bQWBZ7NkpBc6yzRqe%2F6kaQxXyrl2mQ35pzQnRZH%2FcKtt7QIFijfsCBPsMOCm%2BONN1ODNicd3M4ZZ2004KlxLMvM%2FTYOHO6XSpcCjoldLfFxUYFLALXWomnObuLlmRf5ECs3K0D9xBtVn%2F5Po3QSX7bQ7USDDHxizrL%2B9v5lVaIgmxn4pp4nrw3rR35kriEAr%2BPrExXvOkwahhx5VJATWHT4fhANQ3%2F8FAY2HTw%3D%3D&pcode-icookie=AGpAx7HgXdXNimwisTZ8XmiS%2FTPpNpF1%2B7%2Bm%2B%2F%2FfQTjD9RmO8LkN67%2BOjygULcEINqlrYqZB4ln%2BC%2Fj8K3hbKgF%2F5Uc%3D&duid=MTY2OTcxNjA4NTc4MjYwMjE2MQ%3D%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=259484744155138&ad-session-id=5682631669716085254&target-id=74118886&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&pcode-version=686552&pcodever=686552&flash-ver=0&available-width=300&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2MTc%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A879%2C%22top%22%3A1316%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A1%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MzZ9CjKipoykqmGAGKxjDayj2saEvURyVnu_bNXfs-1FGDKKkiI7lZs20qL8hnSSLX62t2XrzK_z21tEWYcV1qZJExSyAfUNyGUMoDGBEUprMYsK_N4uIjENoIAAGptAUNCbUonC7hCgRNlxqHiEPBEOvAYgJQ6cziPnCRqwuDyCB56Hx-P3Brio4yDAocChOmT4PPwGa-fxcUDjGTiA4Rk8EY8AB84jxCNrCDRkRTyiBo8IckwxWNGzokfTeUZHx4oBTUdGLe48YQMngoaAgQOLpR_4G6wHXeFz9ZF5UDwQOAgaUEQHFOQYedBivsSgbqgA6UEX92Aga4CJePg8fBy4jyBwDeCEDWVD_ewnPiQOag36sHwowWjcWqjh4cDlCToOaDgUDXjCo3xDE-QNhaDzSB_EPJKHpVEMDtylD-JjHjyeoAGgUXxv3BAcBxp4IXnIAxPSv7H0z2-wkR7bDhrEDVBkT7TP8gbF5xdR410DnQAH1IOzMLjBAP2gSP6ojlvPAWED-hjfwHicgNlY9sCRdsgx8IBvHKE8AgWtwUzU1h9yDEjBQ40MiapwxzhoCQtfG6zQG_DGb3IF_e9uSsYEy5BnPnlDjrJRNfxfX0GjqUb7C72HLrAN5PAXMk-nt3ZGY95DqVHP7HCEsvLzacHYvXioAvKRa6AxnuO_n4LnpnHINoRIhskDgYHr4QOhgRb3QdsAFu94Q4xYdYtL2lEiR9oQgkgikUpYOmpUyJA8bDAa6RuNeY37LB0cqcQ0bTlY_ZDtKGRg2nKFsqOUKMC0JB0CW6aUWz68gLclMoUMUWeQS-nB6mLTlpjdNn0kwQYXYmQdcmY6k1bOxExn2UomZlNhyi0mgOUsMGNZ8DHTWqbdZTatBSm70hLTSxQ0pkIqY-_0UplpyUxI2Wf3yjw_mZM2SMGqU3sd_rYoJesFYUpchZl0SiVr_4nOXG7EhN9gJznGBkzB_ZW79SNtSwIbB3anacRsMzQqSNss7M6D2VhUN87Y_olO3R_ElDciJA_ia90NwhQPewLHd0JWdixMzFiWwBmkSoSdXm6LxZCy00lprU5jI7JUpkVLI7dNS6W0ENvUcvOAWrQKpQoThk5PLTaltCoGmx4sRBIptUzZ2ZmYlQowK1TFCtNqQNsFIGApaFRyhaztNL3EsmQqSQOFJWngBd1kZ2pz9pQkOKptFNQG7GnppuMBw6FgxmLv-rZlS8GuqsA2orMVMkvicX2QVilkDY2bayoGSVuOtjPaaFWaELj9ZI-3hRlLQ5aJmSZGMNlEJh6ANFKG14ZalPfTuYWktyRkv87brXf_NFvow4l3a9_613VqwaElYsZCwzTcjAFb-mViltmFnbSNTaoGEAUi-zmkS0EhkjHlMDFTywuCloy6ASVXtHVn8urdkRGWRzWI69QrHymNUuYjgV1ZzrBjoZaH9NqY5ZHA9O-AdmPkBmGV3VahoXmajCH-wP9IS0wFfRuIQUsjFZs_lDeEJkIaS3WAbC3JpBaraKgZ5AoxXaezGyAeMZOOmpZBZivkT_7RVDeQSBDO3D86TBF69_pA0Qy3rSimdDuPnsU0dmEBg0pM16i6DwBUKjGtLZc3zmF5RCs1pLS23Bn6ilaOQSVpEJaoVAwWYmmD6NAYe4U0TViJQf7epTmD_Falf1p_Gg8NeQOW8hrLtpRf2zJmmpW-lf2wMAhbylx7C6wGI2XXy6O9kXk-Gg0-0K72N95MLngJ-Tcu4i3YCD57XpBeGjtEK8wAfdATPzQaeS2oWv59aBqIng-4x440y22sBnFZ01JE3CszhwBxLpKHDs4s98GAl3RZwVPcj9Rn9S0_HeKfWbs6kaTC-JniWiFg2RwN_6An2jkQHmNIGpIPHJ4jlZzk_en46HYSmcZiABsONQjXJRoIbzLVakjjJf9ojqgPWL6yPNcQPHUlSci2kifdp-CICh-lI8NrLAG1IfC0h896fYWGyc8OnBTjyAqSvWA5KKaDjVgqvUSdkaaNY2ujLW0EnM24wIIhsWloWh-XS-2vg4wpyg4GzSCrtE2bkUZiicUV6gwNamKzwYS-tICFecDWG8hUC_RCrnL-0Q-k0KKJuU0tUwCW2mJUKBkxocOMBh1atEDGCNkjPJA2Gb_dMdqAs0EfHh5gqsZ1BY2lrACl7S11ap3fljPSN35Zkoa2guQ71tcIiQIRndnpFMoGRbmckUEqaU1VvHxeTh_KbZ6MEikYMcfEli2hp2NUKsQPMGVjAb1U_snu16QUUIdIVK8b6YD0qdH39J-4NlDunF8QZoOHcFARrzgYm6CRtQWl_BUULlBtM41Jzg4qPw7b_2vHhpOM0rcHqkOf1rcwKzcGqQOW_BvlQ_xSstzXcCgWdMaNMMn0byKWB3tLIzbsvbnOcMP9CbhGeU3GqEGvgMdXb66H3yAGpyU4FwLWOTcuJIOrrtH-DnJDD50Hg7UugLsC7-JLEdd6LWY8QumAE6t8tKpHzc50MRHpgYOkdpeopC5gdBg1EueG4vcfmG09otb0tgfmoJ407EyHEn_SuTikh3X1vqQCi3RaUNwEH9z1VxgOzBgxY8TYd9tYO3MbWKkMERMP-AqGoymy2yRhpRqPaARXMRt_n_NwAkbrh4uweMSNxAhbr2n0tSCqXU_7nU6D1d_cqzQEt98HrB-ytXbgjeLm_G0dKDb6uMLf6mrjTysy9z_fnV2pJx7jp_3_yeHlB78tYt-K0OklLbZl_dkRfdG8-KBNdRD5GTWR6rcDpBUKW3pvCI63LeJV1VpbwY4CKXLVl6-bW-KvQ0lS_kBN2eDncrOp-DKzlbinefjH9692gMphmz6VSyyaxtK0Kl6lu2JRTtzj8qN_QOay1faBvzWEeOa37cplv5hYMQK584DlgdR9Ln1XFs5Qb6_H2wo2fV-QToa9s8HUNTc574Pe5pVJseus3CEOWGqpad2qwXwSFD78n_tT7fzhNjpvlP09tvaqOPb4uQqCh09J1JWmk8AhaP6VQuJVXgq5S77tw7WSyTsaLLCStdr8dzvXkyzpE9evmrHJUhC8Op_2mgqVTNl9zbuphf8EhP5haexotEl-g9h6MqZex64xH-iU1IkiunRH2LdkVA1uUGbthbteu_RYEiLlYs8fKh4x0DCF6UPwnj6F49f04SL3u1e3-0168QQ0r1damg54wCtkSikY4o4Bo4pBYX7LQIv-AXkZiV_bbunBZqCWmdS1-YOvkFGDvhnKt334Wx8eEtHjNFm_6EJ1ggurXdlbkIsvZX2p5PovqQWyUO3tfolGN8i-dmNc5dZ_vrHW85MNu1bil7Qo2TjiLefKgxKbc6WBDKgDP_kn2hTu9NdVBp0tQuclK32oT2h2yG88WEZPUJ-ynIUbtehcp_fT3Kjj5cUZgD_Bce6PLxk19NrxPV7dz5or9y5AQFo3Kn7G5GC99s7gluj1Eq_vSQTfTFx5cSM5GB-0bZhYi2GYPbdOuwTub02JOAHpmmzcJ-cNIwmeXA5ksPv4su88eCAfjMb71avLf0qz-kvQlDXSvRU7-LYMEfW_wtMA4R-9312_pQm2Pi1_eHW5_9J0LpQJ6KIKkUxyg8qzmvB4_PXJh2ubPwYmzwHd1hvDUy0zrS0Ba1G01IEZywGsYy3Xv6AjNW2Z0pYo2fo0OWFNqAiPtEl1nZvJvn3Cernohc34lQDnBiE8GhPtovq_9r3E0aWcnvMClk3XJv9U321_u0o0Oedt86XKV03IcQB8ixdXz7I6TnPbHrTOCSpPpN6Wzi95MJy4GajD2rJlZPlr-C5PrEhRI0HdUaAo6R0KFGyswe9f_kwbcQtzVDTprZlst7A0pmCvsCfbOMvAmzj589qj3e-Z04GfND6bgJf-x47zxEVfLB1spKhUSRtRu7O7PDa7XEhZwWNFzYqMFQlrXa2aF3_C3LL18UemlXqTjpTy46zE2y5AXG-kXL5c0lTyGko3ieW43HvgqOYRbvlirZ_85OG94_I70H6cc5wKuVi1z0Evl_uvEbT5_H7szlPVkVpyxCrwpDLFM1CGSN1Ry2w5QrFC3ACt7Misryvv7kNi0dPJpHIpIoQs-f_j_7Jd_pA0kJusu8GSqgI7x2UuH3ibbHil1qSres1PMOQoqPQmuHH_dAxuYx_02G8o0vIbevdSDmobyhv4zZ_LczjjLZgSI5i3Iwhg9cK2JTrSnZ6j0du-W1_HHdwQKxUWuGM8aQ1U13-5LzCVrtcWW9rPQ0W4Tcq9n7i3bMIM3rxIItciPUmQHOWTbT1aMqCsoBuoHOhgbC56NEIYV24ILFtu0rFd3Y-4xp8NR3AgFn3GfvycOdq7c35c0YHTeFL-5Wbpk23UVILyjo7yjnyXB7V4Zo4VlFuQI06iRN3mnpbGktgmtcRiU7ug9KkU2QGPPw_IQXaOUYK6p3WQ92W4Ea5bLbzAKrex2-idi5IZtSZO2eiWNOqBrUG4fPLOeoLEEptiNmeLi7seduds4zoIN21UE6dh-545s0I937bO4uz_8S5DuYLpLbdv1KkSk3DSiRTjz-v5zD_IEdSZXrc8_q4GZXkIqrNpGUuRGjAP669aXG6UbMAH0oljfT9YrnL32XpjaczYTleY62wPxe2V2D2T44DMI3V7tPX81BQXMVdaETpbwyzPMPVMbKmOnzNx3N0ucThk9GvNf1PXebkF21XcUO9nBf_JfcqXtnODNfUN_W28GUwhIn1HRNrkXJ68LZi5_T1xRQQyMNYIxLhwI28NnmvTP3x-nixR498r5zfKY0NvoPkCSZn4bWcagL7vWFSh5JwK1EowbRm99UmGH2oHjapUO1ekFe9rvPAbkBJfWiDaJE9YX5QW4lv0jUnAHb3jHl2AhwpZRw4uFuQQQpgEH-uq3C_r17VEXPw1nky7fMzwWxIhdz-zYJJHkR9il6gc74Dkj0HnrVrqIqs_2pGDbvlQb91OT_OL00hvvwX1fLoUnrSE5bsDl-I7aXtih3D9oU1AanxAOUTQXSSwXB6Kyt3hf2X4dZ5KwpuEVvgluGKNOlGvaArE_2VbiLsznKX-yAJ1Gu81Kny3&uniformat=true&callback=Ya%5B6642780452979%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://victoria-hdd.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1669716086849044-9376012326750670167-sas3-0737-9f4-sas-l7-balancer-8080-BAL-9978
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
last-modified: Tue, 29 Nov 2022 10:01:26 GMT
date: Tue, 29 Nov 2022 10:01:26 GMT
set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Tue, 06-Dec-2022 10:01:26 GMT
i=H7ptwRPx8BG9CVDeqA/1PcwQ6W2dCtHserlPP72HmoMXjTxkecygpuyJBcoZhaNcgCbAiABwjZXroF0YxFC9KaEj3Io=; Expires=Thu, 28-Nov-2024 10:01:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
ssr: true
expires: Tue, 29 Nov 2022 10:01:26 GMT
X-Firefox-Spdy: h2
rbthre.work/pjs/AuB7VDwA_.js
200 OK 0 B URL HTTP/2 rbthre.work/pjs/AuB7VDwA_.js
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Malware
GET /pjs/AuB7VDwA_.js HTTP/1.1
Host: rbthre.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: cloudflare-nginx
date: Tue, 29 Nov 2022 10:01:25 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 10:48:43 GMT
etag: W/"635fa80b-84b9"
expires: Tue, 29 Nov 2022 10:11:25 GMT
cache-control: max-age=600, public, must_revalidate
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=14&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089103&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown
200 OK 0 B URL HTTP/2 yandex.ru/an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=14&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089103&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown
IP
POST /an/tracking/WV4ejI_zO3K1FGy0n1e00000ozmWYWK0DG8nTjY5Om00000uifuyOBm8Q0I00PVIa8W5Y07hfyJ7XG6G0OAmqhZMW8200fW1kglIk5Qu0VgGzjWZs06Aew2Y0U01bfMlcG6W0exwXG60E-W4bGVu18kV3OW5nyeCa0MBdmsW1PA51AW5-gu3i0NwhWEu1Vgk0y05_PoZ0SW5uxyfu0LGe0Rk0QW6xW791dP4Qjwc9nX4gGVDtPZU1us3OhW7W0KAq0YwY821me201kW9OkASWxOZh3-82mYg2n1VrADipTq0091sDnAPxWK0WO20W8W4g0_DkyF4_g3ZmMA04CNFk26Q41i9003uFnd84C2ma881eV0_W1I0W884g1IBdmq2q1J_n85Gs1I3aSkP1k0K0TWM_A3TW8tRmzLtWHVmFvWNbxMqBD0Nq8O3s1V5Y3pG627u6C6AzkoZZxpyOu0Pk1e3WXmDRq92EcvZOKToI3XbD-aSW1r_q1wWujhrgVYNW5_O7lhQ7g0VnS-u8R0V0SWVnP6GKT8V1ZOuDZKrCk0W1j0X____0TKY__z__u4ZYIDcPcPcPcRMFn40LI39LqTv66cJGAvS2b6c6DbDr6AkbtdhcMCDyK2QxUTLHnD2THS_UJHnG09Z-Alep8_sYWn60G00~1?action-id=14&adsdk-bundle-version=685798&adsdk-bundle-name=AdLoader&adsdk-container-visibility=100&adsdk-container-width=373&adsdk-container-height=210&video-avatar-width=373&video-avatar-height=210&ad-session-id=5682631669716085254&vsid=a4ef301a51bfacffce7e6999734afc0867950cc5e246xVASx6552x1669716085&top-ancestor=https%3A%2F%2Fvictoria-hdd.ru&top-ancestor-undetermined=0&client-ts=1669716089103&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:30 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:30 GMT; SameSite=None; Secure
is_gdpr_b=CIy8DhCVmAEYAQ==; Path=/; Domain=.yandex.ru; Expires=Thu, 28 Nov 2024 10:01:30 GMT; SameSite=None; Secure
i=OSKczuV7q+b25k0wKQhqPa6ob5C/Zz1cx+wdhSa1hG2ONWb1umshmZBs3NGPHrSm0GQqTE0ZAuAh2VfPA0SRfd3wtfA=; Expires=Thu, 28-Nov-2024 10:01:30 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:30 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:30 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/themes/root/js/lightbox.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/themes/root/js/lightbox.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/root/js/lightbox.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-bd2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
yandex.ru/an/rtbcount/1HxzUKgT0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4QJfAfYyoyWWmy3mbt4M4mF3N2QGo5cc_q3mYaaW_ihYdBDt6HWcb9aBpNp7ol2N2MHMApChaEnbLWIIKvb16kOoiu6iOcPYK03PnBAHcUtLUR_KmtVyJZANhVZ5jiRHg_0gMELTCFcJsS697-9GbjzwXy2i5ImTiXjO67Umi1vWORp0il7m-MFlzpPE4x_90d7-1_k7B7x5twNy7rwnVyi2yiG2LjwJh7kukC3I5rWR6ffORhAMwXYi_FQUq-ehAyWF7MmDB3FOhXmENi3MlMVpXjQ_P_QNhMI36NE0pUC46_CZDjvy9oUhlEH4zo8FYrJpbsmm2t_2MHFPrHiIxwfVUMi_YvtDpCBCrDHe0plJ3dQU4-pY3zXNNlizv-EotkD6FzXv092Nb9i0?confirmTime=-1&confirmRatio=1000000&test-tag=259484744155138&format-type=118&actual-format=10&rnd=9189401643530&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&width=670&height=207
200 OK 0 B URL HTTP/2 yandex.ru/an/rtbcount/1HxzUKgT0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4QJfAfYyoyWWmy3mbt4M4mF3N2QGo5cc_q3mYaaW_ihYdBDt6HWcb9aBpNp7ol2N2MHMApChaEnbLWIIKvb16kOoiu6iOcPYK03PnBAHcUtLUR_KmtVyJZANhVZ5jiRHg_0gMELTCFcJsS697-9GbjzwXy2i5ImTiXjO67Umi1vWORp0il7m-MFlzpPE4x_90d7-1_k7B7x5twNy7rwnVyi2yiG2LjwJh7kukC3I5rWR6ffORhAMwXYi_FQUq-ehAyWF7MmDB3FOhXmENi3MlMVpXjQ_P_QNhMI36NE0pUC46_CZDjvy9oUhlEH4zo8FYrJpbsmm2t_2MHFPrHiIxwfVUMi_YvtDpCBCrDHe0plJ3dQU4-pY3zXNNlizv-EotkD6FzXv092Nb9i0?confirmTime=-1&confirmRatio=1000000&test-tag=259484744155138&format-type=118&actual-format=10&rnd=9189401643530&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&width=670&height=207
IP
GET /an/rtbcount/1HxzUKgT0Te100000000U9nJB7F9khTCNSB5yEpT2I_OUvkJBCjkj2Op084dJ2IqmdgrTkpCTdQ6L4QWUERPkpFkWSHBMO2ysd8WqSe88Zj1ia30n32JiOCFmbx8k8uRmbh9U9uPmjhBcB64bU4ec7-M4QJfAfYyoyWWmy3mbt4M4mF3N2QGo5cc_q3mYaaW_ihYdBDt6HWcb9aBpNp7ol2N2MHMApChaEnbLWIIKvb16kOoiu6iOcPYK03PnBAHcUtLUR_KmtVyJZANhVZ5jiRHg_0gMELTCFcJsS697-9GbjzwXy2i5ImTiXjO67Umi1vWORp0il7m-MFlzpPE4x_90d7-1_k7B7x5twNy7rwnVyi2yiG2LjwJh7kukC3I5rWR6ffORhAMwXYi_FQUq-ehAyWF7MmDB3FOhXmENi3MlMVpXjQ_P_QNhMI36NE0pUC46_CZDjvy9oUhlEH4zo8FYrJpbsmm2t_2MHFPrHiIxwfVUMi_YvtDpCBCrDHe0plJ3dQU4-pY3zXNNlizv-EotkD6FzXv092Nb9i0?confirmTime=-1&confirmRatio=1000000&test-tag=259484744155138&format-type=118&actual-format=10&rnd=9189401643530&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzYxNyI6IjY3MHgyMDcifQ%3D%3D&width=670&height=207 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:27 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://victoria-hdd.ru
set-cookie: i=QGrmYb9kUBj/iMR4dHaROWppWY/KGtl3lSB1um3y1nJpNFODVtfbwDfZgkW7n4nK/AUToAr1GUL9x1Q45vewDX3+bxw=; Expires=Thu, 28-Nov-2024 10:01:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 29 Nov 2022 10:01:27 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 29 Nov 2022 10:01:27 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-type: image/gif
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-admin/admin-ajax.php?action=wp_ajax_ninja_tables_public_action&table_id=67&target_action=get-all-data&default_sorting=old_first
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-admin/admin-ajax.php?action=wp_ajax_ninja_tables_public_action&table_id=67&target_action=get-all-data&default_sorting=old_first
IP
GET /wp-admin/admin-ajax.php?action=wp_ajax_ninja_tables_public_action&table_id=67&target_action=get-all-data&default_sorting=old_first HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Cookie: _ym_uid=1669716085782602161; _ym_d=1669716085
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:26 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/themes/root/css/style.min.css
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/themes/root/css/style.min.css
IP
GET /wp-content/themes/root/css/style.min.css HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: text/css
last-modified: Tue, 02 Aug 2022 20:44:56 GMT
vary: Accept-Encoding
etag: W/"62e98cc8-26fd2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-includes/js/jquery/jquery.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-includes/js/jquery/jquery.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:39:17 GMT
vary: Accept-Encoding
etag: W/"630f4865-15db1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-includes/js/dist/vendor/regenerator-runtime.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-includes/js/dist/vendor/regenerator-runtime.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 11:39:17 GMT
vary: Accept-Encoding
etag: W/"630f4865-194b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
victoria-hdd.ru/wp-content/plugins/ninja-tables/public/libs/footable/js/footable.min.js
200 OK 0 B URL HTTP/2 victoria-hdd.ru/wp-content/plugins/ninja-tables/public/libs/footable/js/footable.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ninja-tables/public/libs/footable/js/footable.min.js HTTP/1.1
Host: victoria-hdd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://victoria-hdd.ru/?ysclid=lb21ti6a9z680938540
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:01:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Aug 2022 20:44:54 GMT
vary: Accept-Encoding
etag: W/"62e98cc6-14077"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 315
Origin: https://victoria-hdd.ru
Connection: keep-alive
Referer: https://victoria-hdd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 10:01:27 GMT
access-control-allow-origin: https://victoria-hdd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 10:01:27 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 10:01:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
185.235.130.197
87.250.251.15
95.216.65.102
104.18.20.226
142.250.74.162
23.36.77.32
93.184.220.29
185.70.202.8