Overview

URLwww.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
IP 172.67.189.181 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-06 17:22:38 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (28)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-06 05:02:20 UTC 52.89.136.7
tr.outbrain.com (2) 2017 2017-04-12 07:58:35 UTC 2022-10-06 06:16:03 UTC 64.202.112.63
firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-10-06 06:47:58 UTC 54.230.111.118
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-06 04:55:14 UTC 34.160.144.191
cdn.taboola.com (1) 1040 2013-07-19 23:48:03 UTC 2022-10-06 05:00:00 UTC 151.101.85.44
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-06 04:46:50 UTC 34.117.237.239
www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-10-06 08:32:24 UTC 142.250.74.168
go.barxbuddy-busyball.com (1) 0 2022-09-20 23:34:10 UTC 2022-10-05 23:24:07 UTC 104.21.76.64 Unknown ranking
trc-events.taboola.com (4) 1779 2020-06-09 13:52:57 UTC 2022-10-06 05:11:44 UTC 141.226.228.48
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-06 04:46:31 UTC 23.36.77.32
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-10-06 08:40:07 UTC 142.250.74.174
stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-06 06:27:32 UTC 173.194.73.155
www.google.com (2) 7 2016-08-04 12:36:31 UTC 2022-10-06 14:48:50 UTC 142.250.74.164
www.google.no (4) 25607 2016-04-05 19:50:59 UTC 2022-10-06 06:32:55 UTC 142.250.74.3
sp.analytics.yahoo.com (1) 816 2014-01-31 20:48:24 UTC 2022-10-06 05:47:25 UTC 212.82.100.181
www.gapbay.ru.com (65) 0 2022-10-05 23:24:01 UTC 2022-10-06 17:21:26 UTC 104.21.65.90 Unknown ranking
fonts.gstatic.com (6) 0 2014-08-29 13:43:22 UTC 2022-10-06 04:51:09 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
connect.facebook.net (2) 139 2012-05-22 02:51:28 UTC 2022-10-06 04:46:20 UTC 31.13.72.12
googleads.g.doubleclick.net (3) 42 2021-02-20 15:43:32 UTC 2022-10-06 11:49:48 UTC 172.217.21.162
ocsp.pki.goog (14) 175 2017-06-14 07:23:31 UTC 2022-10-06 04:46:05 UTC 142.250.74.3
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-10-06 10:24:12 UTC 93.184.220.29
static.hotjar.com (2) 641 2014-11-01 05:14:27 UTC 2022-10-06 04:46:19 UTC 54.230.111.39
www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-10-06 04:46:20 UTC 31.13.72.36
www.barxbuddy-busyball.com (1) 0 2021-05-21 12:07:02 UTC 2022-10-05 23:24:07 UTC 104.21.76.64 Unknown ranking
trc.taboola.com (2) 602 2013-07-11 10:17:31 UTC 2022-10-06 04:46:52 UTC 151.101.85.44
amplify.outbrain.com (1) 2255 2017-04-12 07:58:35 UTC 2022-10-06 06:18:41 UTC 23.38.201.81
s.yimg.com (2) 375 2012-05-20 22:45:00 UTC 2022-10-06 09:31:21 UTC 188.125.94.206
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-06 04:25:36 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-06 2 www.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5- (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.189.181
Date UQ / IDS / BL URL IP
2023-03-07 07:29:18 +0000 0 - 0 - 1 m.hzdvrvx.cn/e027RghEWEJneXJhem8-eElveCYuUlYW (...) 172.67.189.181
2023-01-31 23:31:41 +0000 0 - 0 - 8 soundhealing.today/TRNC.php? 172.67.189.181
2023-01-16 03:52:29 +0000 0 - 5 - 0 web-bancoctt-pt.ga/ 172.67.189.181
2022-10-06 17:22:38 +0000 0 - 0 - 1 www.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0x (...) 172.67.189.181
2022-09-26 09:47:57 +0000 0 - 0 - 2 accountverified.page/451216646/ 172.67.189.181


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-30 20:10:32 +0000 0 - 0 - 3 happywithvegas.com/landingpages/vv068_mg/index.php 188.114.96.1
2023-03-30 20:07:24 +0000 0 - 0 - 1 doccc.aaf-intl.com 188.114.96.1
2023-03-30 20:04:18 +0000 0 - 0 - 1 stfrancisacademy.com/sfa/wp-login.php 104.16.167.2
2023-03-30 19:58:09 +0000 0 - 0 - 2 iowin-download.net/dowl/virtual-disk-developm (...) 104.21.79.24
2023-03-30 19:51:53 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10910862122924 (...) 162.159.134.233


Last 1 reports on domain: gapbay.ru.com
Date UQ / IDS / BL URL IP
2022-10-06 17:22:38 +0000 0 - 0 - 1 www.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0x (...) 172.67.189.181


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-10-10 15:24:06 +0000 0 - 0 - 66 www.warmsoft.sa.com/ycjof/iukjfpl877206sckxp/ (...) 104.21.25.125
2022-09-21 02:40:12 +0000 0 - 0 - 64 www.navybeer.sa.com/uwsxxbbofa/ljggi875823hfb (...) 172.67.223.131

JavaScript

Executed Scripts (65)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (137)


Request Response
                                        
                                            GET /rtaam/vctp877111rtwnnln/Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2B8Axr554Uh5%2BdzRsBa7pcQHCu6P86MlDZT4CJ74khvu1DE7Vf8lVIgUT9vsv%2FK1uI5540w6SSH%2BHnanktcxDjoJpPu2JhFkj07L41ryJe7uzFogluA3JnRfMgfkuXBjJYOOJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75601447591eb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   466
Md5:    c722d2bb10e1800ed66b6f9fdad8ea11
Sha1:   2ba123af9f039e0da15d114d3fd07d6f74bf3543
Sha256: f5f91eb61ce6ac9403f57ffcba50aafa0798c32d52cc7d6b29555c8910d5441a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.118
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yATHRawotdPAPxQhU-4cKLflB3LqGnO-XcfDJvhZsE4XSS7Ptem4HA==
Age: 92109


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10441
Expires: Thu, 06 Oct 2022 20:16:28 GMT
Date: Thu, 06 Oct 2022 17:22:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4769
Expires: Thu, 06 Oct 2022 18:41:56 GMT
Date: Thu, 06 Oct 2022 17:22:27 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 5Pf/OT0FtodqkS0FPXpDlc908xeGFbZsJEt/nUp5cHJZfzG3nIsFOoAHl1WSlzrGY/7U7jSk+Jk=
x-amz-request-id: CHES92WFRHB7MR7F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 16:58:49 GMT
age: 1418
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 06 Oct 2022 17:22:27 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /jquery-1.11.0.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mmh%2FAqUnOru1eR1ZKrsb%2F%2BDghfEDD9xQovu5DmJg9hqQSNA61pao7ZXnDlhDzzCX6gePOItSDVmnfy7iRF0oySDMXIRMnQR5XnSIp7pZ7ER1kOJDKquIUbJFSdbFq9yFw7Vabg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601449ccddb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32341)
Size:   33436
Md5:    95fe3f4dd117c33f6015e1c3d6df1d0d
Sha1:   d5b8856932d1ea63f51824de0bb50670d2e960bc
Sha256: e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
                                        
                                            GET /gtag/js?id=UA-22484186-3 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 06 Oct 2022 17:22:27 GMT
expires: Thu, 06 Oct 2022 17:22:27 GMT
cache-control: private, max-age=900
last-modified: Thu, 06 Oct 2022 16:38:19 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42431
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42431
Md5:    37d39a9f57ffe71cbf9081bf38c6af4c
Sha1:   e86980639c8ad6f6455d463f00243dd2748ab32a
Sha256: 8197600978a0c6ef02f0d90cecb623b45f9baec44d4bd02c0456d0bc7646ddd1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /offer.php?id=449&sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/rtaam/vctp877111rtwnnln/Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Upgrade-Insecure-Requests: 1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYtBGamXtf71fhPrVNTOkjuhhRT%2BIaycTzT39ro9r6MsDoVhCoqiVEzczJJeGfNZI7qUK4T3MU1K0hSCdZOh03K85S%2Bf7iJ1gq2zedXzZgwg5BoOwolhd6ttO5H1M%2F6wzr2u5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7560144afe23b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   268
Md5:    fe7a7e214eba8a611c764999409fdace
Sha1:   c430f27aa458862ba6a87dbd25183103279aee85
Sha256: 4311977f9d6090959df86a7f1ce5c4c38f68036d0668c4d1748b101cf4139684
                                        
                                            GET /clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 06 Oct 2022 17:22:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2BJuqM3jRwukIj45S6PozifQkXJUr6fKWODkZJhzXdFPKrPfqFyvHJCHP5obK6sgBt3kEeMtG3x8lRdnhRdBqCzyjxcGp7ankHBaPw%2FQSSMnDQ5VoPPfjS%2BRn72r%2FHV20NEGCg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7560144bdf19b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6926), with CRLF line terminators
Size:   21324
Md5:    6b935de055ecbbaa41fbf0c61b4cba23
Sha1:   56339436a8f9f5d1b4fd505424b3884700ef4743
Sha256: e1b5c5b1ece79e84d20796de68c685ca442c14215ed05ecb79593ff491438164
                                        
                                            GET /clicks/BarxBusyBall_files/analytics.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:50 GMT
ETag: W/"632a3272-c41d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h2bjdZuAcBP3LOh46G%2Bo2F336rIwr6hrwm%2FLU7rXj%2BGtU1Pr5P%2Bd3U1tje8kLM6q%2FMqKib66RXcjuyxpJsqCCl54NFfOSEVGDrmgn6jU%2FCUrMT5n3j82vlVNmRXCByKPm69foQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144c5948b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20073
Md5:    591d54bd92cf26b373257e9fb7a33f6b
Sha1:   a55b132ed25dee24900bf1d4672336ae640f22c8
Sha256: 851e9a6d089fa3f28cae238a77546d6e195f7148c8930e40636668d66b294fb0
                                        
                                            GET /clicks/BarxBusyBall_files/fbevents.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:01 GMT
ETag: W/"632a327d-192f8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7TdZomcny%2FrVilNDRmadhsVTNp9CIq0SBCF3KtF4rDQ9tVOrSQXgLuyyarYEjldkUtKj%2FoIkqdp8zHNb4C%2BQgRp3qLIgG8%2FRIINMvz67oQ0NMklB5hA6bBKk0MGTD5V19%2BhCVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144c5f14b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26878
Md5:    a4a24a0cc251d41c2c34daca410fef20
Sha1:   7d228600f6c2af7cbf5dbf39026dd54c2e2a45b2
Sha256: 9e6fd695ea02e5df7e597d9713a20362c439fb54415598602dc6324505ba8e32
                                        
                                            GET /clicks/BarxBusyBall_files/gtm.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:06 GMT
ETag: W/"632a3282-1ebc6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JDjPXpBrm164BmMzX4D7dEPwNFbLWTIdyzKTEglxDB0YlT7thoh6T1cTCCzDQ1oDirRo2ENxKqoOhQ4u%2BfcBjzA7H%2FnAwGMjCozjp2bv5JeoGlbdFIpnQqgu40d5cYvH%2FEjkAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144c5ba61c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (5023)
Size:   47966
Md5:    bc89e8d21075123f643899c2c9bba6ca
Sha1:   d1db9a2b1334b891e91429f1cf52ab2ded511444
Sha256: d40c0195a5fc269fa19fd16ba79fa5e661b54e6edf50e86ad8db93cd7a44911e
                                        
                                            GET /clicks/BarxBusyBall_files/elementor-icons.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:00 GMT
ETag: W/"632a327c-4b4f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wpgn4ikDBMN2AL3b8fif6shRCalPC6nQjzWkf1CnX2XQAEnPYawBr2OyjPMxB0B02b0FE0eonBZKvJtudAqUHxyvYN0VwDNawTlEn9lEhsdf4Er38mD0yKsQ6vUs%2B%2BtarPt9UA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144c6efab4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (19233)
Size:   3838
Md5:    8ff9a7b769f1dd6a22e37d3e77c538f1
Sha1:   3c904f8b42df2e2a0a566c18c19d6793b26d37bf
Sha256: cbb4376f0b776b633543bbea816811a257d3ea9b44c5e632d531513638d46fa6
                                        
                                            GET /clicks/BarxBusyBall_files/frontend.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:03 GMT
ETag: W/"632a327f-2871e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1t2Lv5AoJBJ97%2FSU03PukRdLXRxYK86d%2B2gDKxXw2Vo9pvKVsbTsy7aNDgs6Npb0LN%2FPfle3XdbVxhj9MogSC9jjM49T7zwXNvKUstXwv92dyE%2Ft%2BNP6Q1RFS9qjBIvBfDlnoA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d2a7fb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   20024
Md5:    a99c6e51459887016152f5ff10940d79
Sha1:   af1351af92cac87a558edf47e49c9e1a1797498b
Sha256: 4d4a79921112de5e7ba5f5a295637200eb94a0c95a95a370a61c3a0cc9ddade9
                                        
                                            GET /clicks/BarxBusyBall_files/frontend-legacy.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:02 GMT
ETag: W/"632a327e-35ed"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2qM63JpaJBBZwFp6gtNggCuSh44BJvcz6DxTj6FumLDFUomg7AfIhHqzAqzTyqPrEvqhwrdAzECxEyfTEkTtacqU%2BByO0yoip37xPWe%2F2W1or30geb17O9iFs%2F3cZecQS0%2BqgA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d086bb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (13766)
Size:   841
Md5:    33628cd8b2d92ed0a17f803521030e29
Sha1:   3419f47abb56eed874af447f42b372afedd17043
Sha256: b78e1b4ca7ffdc42f304e81c98aa52ac90f1bc59a7d0c193f60d26b5237787cd
                                        
                                            GET /clicks/BarxBusyBall_files/post-293.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:19 GMT
ETag: W/"632a328f-520"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gkKk9x5GgF4z5qZWiya2sw2EW%2BYlPTwVGM820sGkFGld4YMAEGzAlrwRHkc0dw%2BGuCsAnD%2Fjm%2BFx%2FlOVOGGsOfG5LrHx1xuP3jAmi6po%2F5TI1KkqNM3wxzUX1uGxgl33VjEzfw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d688db529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1312), with no line terminators
Size:   442
Md5:    0b02aeac8980b28de54af97c665dfe72
Sha1:   25da527faf97f005948f97bfebb5fe79537df218
Sha256: 1d582e5785547b4bfc359af4c96fdfcddc8b308dfb20c6fbc9b51a9ea38d7401
                                        
                                            GET /clicks/BarxBusyBall_files/frontend.min_002.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:04 GMT
ETag: W/"632a3280-7551c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FkM%2FMpaH3CgbCkLoXUQyUvsO2impRAxTEhAg36U9lmuZohuoHsrOscZ1kscCs%2FowJD%2BrTcb85h1XMhQ1EwqKMlXJFXZvsGBcXKABl1daivjmHCe6kX8zOqYofS19%2F1IATKjs7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d6ccb1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65493)
Size:   40679
Md5:    62e8c8a0a838d2816dea4ef7ee12aa0b
Sha1:   29266c33f27efc4a16d9640900e04b52f84cb4f0
Sha256: e2464930e1729fc3f0b57ad6a5c86b6d9f11d230aa888699eb6f6344bf24aea3
                                        
                                            GET /clicks/BarxBusyBall_files/global.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:06 GMT
ETag: W/"632a3282-9b5c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6KcGeIsQG358aq7UVqdDoD%2FdYhgn%2BbjwyQyRP%2FTkHkf3YucM2QbZ2uLXc5T%2FTnZGD7H1UJi7wt8JZIp5l%2BA8njX9D9z7nXjMDiQNXjaJ8Z2fAa%2F4zAGypzxmORJRmqWfAcvswA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d687db51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (14692)
Size:   2748
Md5:    22d3258e386dbbdf95db8ab2ba7e423d
Sha1:   0dedc3fb838491f2a04cfc3f549472371412dc00
Sha256: b0b68fb219665b2c2bd80632f53e90675e3dda3ffa6d7e31a559ffe24741314d
                                        
                                            GET /clicks/BarxBusyBall_files/css.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:57 GMT
ETag: W/"632a3279-1257e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9HN3LP7jqAmD3aj89J3QayOGjpYpIA4yRNjufQGZKTorO7xtLXePHYLKRf9Dl6IR0RaECy4aFGnvQjjxglCNNKZUShVqTS3Ed94Vp63HJOdh3pTsRRdxMVvvrXLG5KSF%2FqN%2B8g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144dbb63b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   2093
Md5:    a2042d6e18638f91b3ba7da090bfb9c0
Sha1:   10b872776163043e59f3338b8c5a664bd42f25c7
Sha256: 9b86b7e21024d4c484fedf5a03cc4294cbbb6b9025985512925b8362c99023eb
                                        
                                            GET /clicks/BarxBusyBall_files/post-30.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:20 GMT
ETag: W/"632a3290-6ab2"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4%2BihqCFGUHGlxNqDGh8bQ68GkzvPJt9ydikAO3gTHtcsOAkDAImNaOZCNmMSTXQyw%2Fa5StziDQZrWn1dUy7to0IHOD%2BdgLIqWx9X9SorGExHRZG1SxDgceFDnmx8ps1zM1MZJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144d68a4b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (27314), with no line terminators
Size:   2545
Md5:    775ce3a6470487fccab1ad577464ba12
Sha1:   b4623e5f9bdd5001f150ff33cc9c4e3667a10305
Sha256: 364bac287f929cadd0410cfde464a3acc5ba8c463a3633ec233dfcf68cc89a40
                                        
                                            GET /clicks/BarxBusyBall_files/fontawesome.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:02 GMT
ETag: W/"632a327e-e238"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEuwQIUl40B4BkoBHHOBC9JXey84rsqPHWXvi8zlNSPNa0kFAu3dwk8ZAq2roLU91D7wpKuDRn5SXJV%2Fgdo64dj%2Fs0EeKYxjM0SMuPQ7cgLxFEa%2BdkfJAU4FUw%2B%2BxCzaK5pHaw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144dc989b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (57726)
Size:   12381
Md5:    17fd94d9f0bb4766d4ef7a40e9b72c6d
Sha1:   209efb50dd482437e0d7f4dee1a42e8525c5b203
Sha256: bdc3f617f541d996de0579bbd01ecb9b643a4968ce2d5b0bea3aedfc73417755
                                        
                                            GET /clicks/BarxBusyBall_files/brands.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:56 GMT
ETag: W/"632a3278-2a3"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HDbwKzDWZ9jXswh3b41KGoMYdDCU0%2FjZE%2FPOGW%2Fz%2FUohrlgssMKY3IBBnVRfz%2BcMChnjx%2BzDXsFai6awSpaWffQipotjqbq%2BHlyoa44eR2q5jrLaqTJY6hxEjwhcf5X%2Bq%2BUlAg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e195bb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (489)
Size:   312
Md5:    6a022b68e443848e247029d92bc6ecdc
Sha1:   c11c6feabf7997fa9d1b08eb2c36476f9352d4de
Sha256: bf7945206dad7cb2c0b38023fe794ce553791a43664c32c39fd2f6b44aff5951
                                        
                                            GET /clicks/BarxBusyBall_files/solid.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:24 GMT
ETag: W/"632a3294-29d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXBVnKcmSxLWwJS8GJEPH5pmcVKYyk2YNEeOl4kgXIwtsmwhGJIX2clFX%2FHY%2F0QQSClBux1SXItJ3ccROM9BQRShDp%2FWG22vhtpjtU9LyLi3cjOTN1OIyqlbYSEFjGUJwjuOvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e2d691c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (483)
Size:   311
Md5:    217be86c62c0f0465c8766bdc869d10a
Sha1:   9e43286e9b4f012b1e00a722af7f299946af47e5
Sha256: 13f78c579d9ac42e0ecacf5a61c41b8e16c6a93e34c22e967927aa41016ed0d4
                                        
                                            GET /clicks/BarxBusyBall_files/jquery.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:13 GMT
ETag: W/"632a3289-15d98"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6DBdzWXB6T0%2BbqeI259DImODel5PaZPQtsCZIN3%2F7H5Qjr6bF2ONQ5iE60TJe6L6zq8wmfLamOeOMGR9OPRMMhbzpL92BofcJtXRYJE7%2Fs65R5aheWGyfeg6zUnU%2By49fTcyrw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e3a04b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30908
Md5:    de51a7f2c2c244ceb7103216144f03dc
Sha1:   9545e4547e01b6fcabebdfa08c2d75089808fbee
Sha256: 10b58517301b7a47ed1354030c9b652a1d96259d24e1e1b4c4b1aa33b94682ee
                                        
                                            GET /clicks/BarxBusyBall_files/bootstrap.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:55 GMT
ETag: W/"632a3277-1d9ac"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4kWiWoS1BCL4CuwchoMM3KqxcFsBw4ms9Cc6GSdddIX8Dj5%2Fzh0gDJqeBPlrDBFGnmYGpY%2BKloxOgDzTnL7UhygKaDyT3T6BJnDvDuWbtAhmu8BvvJ87DhftxRr2%2B1A55N1%2Bkg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e295db51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   19584
Md5:    989805476e91c69067f09b5cd302a063
Sha1:   b304cca15ecd1c8e0afca179ef50c970addf4f73
Sha256: f90dedab7e9bc8eb19d5844b65263b6fe49bf3b1b4bc66a8c80b5194fb0faedf
                                        
                                            GET /clicks/BarxBusyBall_files/style.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:25 GMT
ETag: W/"632a3295-99c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4AkCBuAiNg8LXN6JcAhQUbXRidqCWCKgHo6Vr5NGNIbjIbzP1ngecrt6WqBJIie%2FjMCxeWMC4UNPlIMtPDNmkSSLsADqJXDUMfMmwUJrosclEw%2F%2BQ8pSeiYmFncL7reGkm4Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e3c12b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   1048
Md5:    e99b51ef4084cd73f88cb7a91d894af9
Sha1:   d092923bdf3e3625fb1c7d5447825afe0ead22a1
Sha256: b04c604b656626b3f8952e397e0516851e219d246f8838337b7a7b1235285e91
                                        
                                            GET /clicks/BarxBusyBall_files/jquery-migrate.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:12 GMT
ETag: W/"632a3288-2bd8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0rRg53G0n8hy1AIIRsexia3o66%2FEGjvcuvPRWzbjdumr6yEUWEfRzjB7sRpWNr1mn9VK9im3VDXcDus5RSSsuFtgeMm8i6Pxj85gB2SVGwuRqD%2BHbq16bU1CIx10NnwxVCUrBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144e8ab4b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4165
Md5:    0d5bb2a36d1fc2e095235bc201eb5579
Sha1:   98f0154e2ed5322a9f65077f954868d6c800b337
Sha256: fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.118
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Thu, 06 Oct 2022 16:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 06 Oct 2022 17:03:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: W8B5-dAfZQVKDF8zsrXihNiSb6XZz28A2wix8490O0ISDp4w673N4w==
Age: 3167


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /clicks/BarxBusyBall_files/jquery.bind-first-0.2.3.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:12 GMT
ETag: W/"632a3288-525"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3ZjjOSj7YEGAgD9%2FIYNFAVgCQg6i7q%2FPQCcLI17aie6AwPMrwgxyne7Em6FOPH2cq3N7FXNrdKRgBiZW0ey%2BAVhyHEBkxNhX281DHddg5%2BHXXz8Eux%2FbqkJbLwBGr7o9kWTwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144eaa2eb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1146)
Size:   691
Md5:    f23b394fb0399373a0f11feacefca734
Sha1:   933b8403b8e7d601e9cf7ae08359d0389784675d
Sha256: 13e90c9e8fbcb9e345f05c98ce1a8847dc0663cf02ef003a962cf7a983a43d2a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6552
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 17:22:28 GMT
Last-Modified: Thu, 06 Oct 2022 15:33:16 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /clicks/BarxBusyBall_files/js.cookie-2.1.3.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:14 GMT
ETag: W/"632a328a-6ad"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OHQ4V70PN%2BbkI1tnJ8Jw%2B6xDTsVA8qNE4lZUcHbr7Wxno0iDoblKkL6uijcuX4TNqQ6U0TB0DhWS4%2BFHYDLZykixG0%2FdNCcZR1aUI32GFxGMajJlR9OqvZraSVIZRiA0nvNoOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144ede341c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1709), with no line terminators
Size:   869
Md5:    26a96c3ee576726a849adece9131100d
Sha1:   04c0b1daac7ea93718df250a7fca4ace3fe1b0e7
Sha256: 7504f9aeaed0f4f24b5d68e2fcd9ab2bf19c2ef80a151b6399252ac4c6cc2e36
                                        
                                            GET /clicks/BarxBusyBall_files/public.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:22 GMT
ETag: W/"632a3292-1417f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMWy5RVAu0Ol1FhYwSb4Wer7Rh4SRzyKs1VdVkyPNbLi2LLy8lK9WhA%2FoZMw3maThGcRFtU2o4Rr%2B8tHRL41jxKN%2Fu2bSFZKSccNoAADbbtaEksea9Hdlmf7%2FCBVr99fUTprjA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144efb3fb4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   12943
Md5:    75375dac977a95b47addeb0f163faafa
Sha1:   575de150ed3eb7cc5a0f81dab0ef7051f6ceb8c2
Sha256: 45e4f9eabd33cdfaa02f5c4714c7817318a063f71466b7fc21d243714d475142
                                        
                                            GET /clicks/BarxBusyBall_files/hotjar-1282132.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:09 GMT
ETag: W/"632a3285-1221"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2F2E%2FPs6eXmR3odwpq5O3xcxg%2BM%2Bvni0SW9hnyEJWRw4yRR5z1%2FzUguM4%2BhRMICMbCbQo%2BSQRErMPArCswHzmlzAElwmNNkDcIask8eVZ2ml78z0JSYmuxjg68P4lqQbI53DYg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144f0a62b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (3790)
Size:   2286
Md5:    c7f79f90dfc00c4db81536b7a4f3a05c
Sha1:   f5438d62a69251f1f3e6bce67934d29356cc993b
Sha256: 77fda3b197fbeaf0358f7e24a638dcae6b684144b56a45c66dccf5b532ae086a
                                        
                                            GET /clicks/BarxBusyBall_files/animations.min.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:51 GMT
ETag: W/"632a3273-4824"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bs6DbQFsXr4sJZnCdIv9ZIyJZr42xYyN7Zw8VZso3FI4GXZsV4mhUadwHi9SmnwzV7%2FkFLV9%2FiJVevNoYA2SKVaFybTkOaAcQQKQVYVPr8Oc9q7%2BRy2t3NXVpJ9xxY%2F0QsP8mA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144f2d96b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (10019)
Size:   2565
Md5:    4c70bb5ced8549969c4fd5763e3ac298
Sha1:   20cb3c388b2e002b67b3d0f3b4be087b16d19976
Sha256: f28829988ee5fda24ab97ab7f0a729e5d1a11a047c39f2947905f0d33ebc217f
                                        
                                            GET /clicks/BarxBusyBall_files/wp-embed.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:28 GMT
ETag: W/"632a3298-592"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YVe1cbltDnJkTWXhRTCxXtIm%2FeBmTsVElmZGw7T0%2FGemY71l7YALEor3e8%2BwgxEtpamJwPU7YEP9T%2BxIvDw40Um49mMkdzcs3DF9FaTEvHChnp0%2B5zSFLn%2BXhQHomagVU1x3Ug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144f2b88b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391)
Size:   769
Md5:    82e67f050afdb38c20ac6eb305f97c17
Sha1:   df1349df76d66a9cf64377cf335c67c337d85470
Sha256: 5f6c33116e2106cd0f2f28c16062f1d584e74b8539a14ed45e17957634d71b7e
                                        
                                            GET /clicks/BarxBusyBall_files/bootstrap.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:55 GMT
ETag: W/"632a3277-9004"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGgmVIv0h7sHxN6IPa812I6qEDMloKZhjpsAx0NGhPOVdcEiLDzODdQpXPU9T8PE7KCLz59hP8rIJlpbpmIcigu3jNzPUi7zL1Lw6hKLlLmmwwpLJW71VQ9pmYOkopSaHWoyJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144f2af2b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32003)
Size:   9763
Md5:    58d37dee3da217a04a9928284dd6e09a
Sha1:   412d316bc6cc79694772c5a86405cac30b00e2d8
Sha256: d38e60ffa16dcdc8904f412aa9a74d96d637ddd2eec98a338cff900fa9d5283c
                                        
                                            GET /gtag/js?id=UA-22484186-3&l=dataLayer&cx=c HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         142.250.74.168
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.googletagmanager.com/gtag/js?id=UA-22484186-3&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Thu, 06 Oct 2022 17:22:28 GMT
Server: Google Tag Manager
Content-Length: 279
X-XSS-Protection: 0


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   279
Md5:    3345d55aa2a26a83a27b97bb6995c8fa
Sha1:   4649c20e5cd8a0f68eac5bffda0d2daf1a24c7fc
Sha256: 117fdcc93510d2b55da4a428e694cb2f5bc2ce97d55eff95f87f352b9082374e
                                        
                                            GET /clicks/BarxBusyBall_files/main.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 17
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:14 GMT
ETag: "632a328a-11"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mcMQFvQut97xvTKkFZGCfiDW7TFwzbyc9FojcloRNSKZEKTQ1sTAtABcG%2FxQvTtqfbOD3UBWoLAHDDAh%2BE3T%2F%2BcVesTjHbmG46U1cBGhYzDKZd9ZYqBhAZrIVIi7uOM3rfCObQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144f8eea1c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   17
Md5:    a932bc38777af90144148f9db9e3a6d6
Sha1:   1e5066d4bca2ce414111ee89b7aa4caf2564720e
Sha256: 8e9b2258b5383cd80acc415960b62c979d06f45af9ea4d59ee328ed76e8a69ab
                                        
                                            GET /clicks/BarxBusyBall_files/webpack.runtime.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:28 GMT
ETag: W/"632a3298-135d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Z0gNe31ZFbDburXHratkkYi0EGBjoTghNU6SSk0w9LPkYQuX2zt1Qx8Msa2s29C67jM0bENHPZCaJ55QNJygvtBuq5%2BjReySZX%2BlIOktNStgS8HwqpCMVWFR4Nz%2B3vDqP4jIA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144fbb69b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (4918)
Size:   2188
Md5:    3080b214c7a96972c67a75895578632a
Sha1:   8033a9030a569ff2152b8bf5681753edb0c75561
Sha256: daf37966c7b0293b89c7503e76d36797da0e5c846d3a39a29e1b5b7f0ad22489
                                        
                                            GET /tracking/universalJSRequest.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1547514574828824688|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_ HTTP/1.1 
Host: go.barxbuddy-busyball.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Upgrade-Insecure-Requests: 1

search
                                         104.21.76.64
HTTP/1.1 301 Moved Permanently
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 06 Oct 2022 18:22:28 GMT
Location: https://go.barxbuddy-busyball.com/tracking/universalJSRequest.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1547514574828824688|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ea7JNTsRTmzVoYCVaNJVj2TpBH0Vl6YeWyMUZUkfoNSz36B4hrdjXkQ%2FQ1o1OTpaM6ysqTiUt4PNpEzRB4A6eZgXEUEseeob26Uz%2FJ85YDx%2Fk6QtAQTeObbo08jIrcIEVsglNZ5tloOoikFr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014503840fac0-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /clicks/BarxBusyBall_files/webpack-pro.runtime.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:27 GMT
ETag: W/"632a3297-1440"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LBIC5hja%2FJJ4yox3rzBD6YwAUn6ZoMDwvA%2BrhYo56as65GKsNb10xVRQgTFCGfXVYkF9uSxRcBdpWeUW2SRiFCHB9c7C9VYGsKrnlFEGi0e2U0BgCHTXD31%2FrNMxV0SLztEg1w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144fbc44b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (5141)
Size:   2367
Md5:    22c64f0e109871be8b7abd98390abb2d
Sha1:   123615b09a6c03a94c09c9c86ee5c0abe8ebee6e
Sha256: bd1136e0e1642361ae4608815564bc4248cd39ea9e2729be218fc0b2933d2515
                                        
                                            POST /j/collect?v=1&_v=j96&a=1852814705&t=pageview&_s=1&dl=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&ul=en-us&de=UTF-8&dt=Home%20-%20BarxBuddy%20Busy%20Ball&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=KEBAAEABEAAAAC~&jid=55864431&gjid=1575349958&cid=2043736478.1665076948&tid=UA-197636334-1&_gid=1849796984.1665076948&_r=1&_slc=1&z=2066143109 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.gapbay.ru.com
date: Thu, 06 Oct 2022 17:22:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    38684612f0c6bb6dfa16da92f4a6878f
Sha1:   6fe62d0dd7db314b7f9bb945672f078e01d27f0f
Sha256: a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
                                        
                                            GET /clicks/BarxBusyBall_files/frontend-modules.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:03 GMT
ETag: W/"632a327f-80a1"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g3SjRy%2Fr7Rh6SVmp1DL8sfQvmhsvtHfdJdYaMHrf89J2gAwztRv6iaUzh4hAzSvZlBOlU4GZYQzi3kIrA0xOdJ33btrKveuMaZZV9uqCfGPsiwP2LU3HB%2Fbd4tZg3M9U3AQouQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144fde79b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32889)
Size:   10692
Md5:    34dfd3a702a8fef627e6a76ce3628333
Sha1:   d57617d6306ffea7aa0de32ddfb551d074ed956a
Sha256: aeb67eba2e473afb02e9a2ec51f74e9432829736b09ef4114c186f7348435dfa
                                        
                                            GET /clicks/BarxBusyBall_files/wp-polyfill.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:29 GMT
ETag: W/"632a3299-183ee"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xBV4EQCHrrDV45N7pxHE4Y0sGPWu4VeWsRDMW9rlJpr7hn1bOCNrxJxuiir%2BcY5%2BgMcXiq2V2v%2By9W%2BNA8CL4rpkeuDwyacetRHpMLkwvmn3KcjSeOsq4A5H7F4kRsLV6kf1Vw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144fec97b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Size:   34213
Md5:    7700052880938fe98594cdf1e2ba3054
Sha1:   ea7e60afdb107fda98f82f917b819eaee23ccb80
Sha256: e142ee6e547fe3ed111e22f803b1c56adbb8a3b3355ac2984ef7d8b1bae70f5b
                                        
                                            GET /clicks/BarxBusyBall_files/hooks.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:08 GMT
ETag: W/"632a3284-1b43"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZ06CCzqGS%2BhU8TT6ZAlWtg0x4Nuu5VkwB0OEXH9zoV0NqiWVgeu4gPNozUpCEgn2v5%2FpEwD15WJ0fK2rNV0ZK3VgV9t5YDQ99YtYyh9%2BG8eFcFfGN8kYf5KPZNpX%2BLIu1hz2g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560144fec18b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (6944)
Size:   2324
Md5:    03540560694e212a77995c376f83921b
Sha1:   2132b73afc60c57cd03846b1cc9887af9f4a8cfe
Sha256: d2e2120a70173503c5f249e650dae6432ea5cd1f8149a79663577738ff717d65
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/BarxBusyBall_files/i18n.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:09 GMT
ETag: W/"632a3285-27d6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FsDkTR7yyXvfkLLAZiGfxQkAVpyOXLTVzq7YJtrt4yl5MeuFEwcAjIIKDXEXhu%2FdrjCSqmT7tji4yVFw1TKmOkq7WSzzhdEaTqkG3PYNn2DtvYEgyET%2BsazlhLubLnc%2BrRVC7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560145048161c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  data
Size:   3862
Md5:    8a9cafdbf3d1486429ee2c11cad276d6
Sha1:   c3fd805962ed20863829cfa99f92374764548230
Sha256: 3dabc9317768a089b5ee35bcf593a64b0f8b675fda95d6a3fe359126322b514f
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 46iRJCSJBcCCKydNz92x8Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.89.136.7
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bPodebAu0cavOd1NGVdbnUr22Bw=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/BarxBusyBall_files/waypoints.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:27 GMT
ETag: W/"632a3297-2fa6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tei%2BsTTN86PXxhd5xvrT6TtSkyMpzBE50NPUi2d2A2X90IFs2fhjY7mK4TFo%2FCs21tISln8gd205Bw%2BZ1293mqafb%2FjZzXbLH2TIfOpWEPtLg8jrOEq4ms8Cbxm8FBXCXkyvzw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014506d6eb4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (12198), with no line terminators
Size:   2986
Md5:    c0db6d5c401074694c0330081ea8fffe
Sha1:   6a7474cbdd8d9f96165eb43a2d0e26840061a7fc
Sha256: 45cb1f190f039721a49a08310c0d932c469c9cb470786b34d6a904e20ffa8c93
                                        
                                            GET /clicks/BarxBusyBall_files/frontend.min_002.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:05 GMT
ETag: W/"632a3281-53a9"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nOibAAOKI7C4yXEy4%2BKYzsZ7ClrDcAlwz3trOM2d08j1iHM1SNCPi4Kc20i5p4NTgU7ilsYzBI4LZ4mJCwv%2BwWIZUlTr6obkyHgcp%2F3MQfbNQ9yKLG%2FaoFW2w75glqxOt%2Fhs4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014504c42b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (21374)
Size:   5696
Md5:    8074fd95a166a82ebca91755e25847f3
Sha1:   c12acecda79a93a2bbabebcb4fb1a7ad3f07ccc4
Sha256: d6fb4f401ac29b037a5e6651b2b413b676aa165655b660689ce5c99a6d923a90
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:42:51 GMT
expires: Fri, 06 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 41977
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 18:59:14 GMT
expires: Tue, 03 Oct 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 253394
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Size:   47952
Md5:    17b406b7b8caa297435fa358e194f5a1
Sha1:   e2132f0e97781af56fa966c0fabb49132f2af203
Sha256: 84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:47:56 GMT
expires: Thu, 05 Oct 2023 19:47:56 GMT
cache-control: public, max-age=31536000
age: 77672
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Size:   17368
Md5:    abe083d96b58eb02ada8b7c30d7b09f2
Sha1:   61447d66d13a8c8f4335696777a85c438c46f749
Sha256: db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:08 GMT
expires: Thu, 05 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 78500
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:08 GMT
expires: Thu, 05 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 78500
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:40:23 GMT
expires: Thu, 05 Oct 2023 19:40:23 GMT
cache-control: public, max-age=31536000
age: 78125
last-modified: Wed, 11 May 2022 19:24:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Size:   15752
Md5:    b20371a6daf29d4a1f2e85dbbf40fb20
Sha1:   0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
Sha256: 7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
                                        
                                            GET /clicks/BarxBusyBall_files/core.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:56 GMT
ETag: W/"632a3278-5133"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xB1%2BJm4lHfwQSQa14ifrGolm74M%2F6b%2Bw2mxXQyGziCeL38DgEuov6kDZHN7vr32Cr0y0MW1IV8%2F4S3LFwkteLDHiCxWGIoWP4qQNXiVhpBij0gDfZF00WKtrKw4CqmKREZAJ%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601450afa5b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (7973)
Size:   6859
Md5:    97427162a3287e2a44e758b14839c6de
Sha1:   9b38ec9f301d54a3eb2ea1da12a5f1464e1a19b2
Sha256: bd5550423958f5eba378c8fb77c628f67ecfbf654d1be7b54a3f2fb7183dbe20
                                        
                                            GET /clicks/BarxBusyBall_files/swiper.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:26 GMT
ETag: W/"632a3296-21f91"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FcueRmAZ5vXt0eElQ4j%2BVDIbt0cYOaU%2BLo6CUXuddxAjQqUcLBZA4xZIsugY8jCcYKuhUmClO17vS1%2FDIC4I0prDDarl5UxLa6HTgbemeaPOfVh1vkkYnmT20dxleRDBw2WtCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601450adb1b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65280)
Size:   35367
Md5:    c52f5df023eba51e4ec35d3b781c9720
Sha1:   9e6368361ed9627ee355654b6a709212960dcaf8
Sha256: 099f87704891ccf1300cf3ce4bd3af8a217540e8412d89b9228f6b9eeb084a01
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/BarxBusyBall_files/frontend.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:04 GMT
ETag: W/"632a3280-9e36"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mj7Ra9sJn9QCJceOGVdJBlHBT0q5xeaOjd2IEdwGsXljF4bhHRJS6B0%2FQzrwmCdrYO4%2Fzqx3Goiy2lQkIz05gP8MCI926FTTy%2FUCZ33BMuFvTLJ4wSgNxzXOpP%2B%2BdcGB2XTajQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601450fe0fb4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (40463)
Size:   12019
Md5:    329471be076fb60c9e9e8785b0f590f0
Sha1:   9db1b243ccc73bab68d1652f4d3e9e743ad3f72e
Sha256: 9d5481690292d36853154bf8d572dbbff17261b54e17c88431d993d6e2922cbc
                                        
                                            GET /clicks/BarxBusyBall_files/share-link.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:22 GMT
ETag: W/"632a3292-a3c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ojDOcbFDY%2B%2Fp04bOPAIVo%2FgPBgMmqpLFbzXgS8q%2FnaTPn3a1%2FwntiO3fhdlWc%2BYQtTNRTJQoxZlZYWc3iq9hMX92IkK8cHLER9ISGi0Y2x0K9jLfdGzZaj1hC%2Fg4%2BuLK53MZZg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601450bd10b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (2620), with no line terminators
Size:   1133
Md5:    04137bf1c2687485f57ecf53a3d1f9da
Sha1:   2e441c6f91e26322802ac93a57b18dc58dc745cc
Sha256: de19aff59e33bd5997352345f978568eb24971ce0aac1f3842b981049f224855
                                        
                                            GET /clicks/BarxBusyBall_files/dialog.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:57 GMT
ETag: W/"632a3279-29ba"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bGoEuGxhWM1sldI3JzKWPJqOYgNCNjgLuaRZJ6HWoVsvSOnrgrAQ4quWNczfSscSKr6alKSeHEZOwfKl%2BNPaekJWX0%2Be3ItYfZqZ24uTrO2sqS3InGEqSGAWunHq%2BtRikVoMow%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601450e8c11c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (10544)
Size:   3448
Md5:    1816af5b3ee327cd6a73773fdac161fb
Sha1:   8cd583eb2a709d5e67cd9afae3764791e6238339
Sha256: 1fa80d69fe6acdcf2a119d33cd7521b43b0a0e0b776e1f9284d5df29dcd98f4c
                                        
                                            GET /clicks/BarxBusyBall_files/preloaded-elements-handlers.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:21 GMT
ETag: W/"632a3291-20de6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtZ8R138RRXJPAUYw9MzPqu1kGraxbnBAjYWdwBWucjTLkrp8i4hg1Rh0Wgu%2BppOpsSdl3%2FiPVsBZbUyg4IwtxJGG3JhflLhY%2B6uYC33xdqFIN6PeN7A89%2BLdPznD5zYaD5G8g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014510d6fb51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65493)
Size:   31406
Md5:    3192fe4695c7d72bad352969820565cd
Sha1:   77d149d57900a2aaa799dc487b998944fd6c7db6
Sha256: e189adca89a4af08f25bc791e476587c6aa331ae86a7f634aa0d384bed0ab85f
                                        
                                            GET /clicks/BarxBusyBall_files/preloaded-modules.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:21 GMT
ETag: W/"632a3291-a884"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j2efoBrTKKp0MRPhBSwcpkR4EmRNk6DQatkkZMgnveqpcqj4gdV8YchRsvPhHu7yOGE%2F9N9p3Ne8OIcLVCS1GMRkoL9%2B5uOFw51kL3EveIjXrUL8Ff5MqqpfMYV5WtnGvnWxIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014515898b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (43101)
Size:   13213
Md5:    161f6b6d7f9cd000afe9c8dbbfa3173e
Sha1:   1f2b235e36c2006fc349b8abf2bab883c9b9edde
Sha256: 49946dbb50ce76b8a61136e134d71baafb6958ca3404ea07147dba68223256b1
                                        
                                            GET /clicks/BarxBusyBall_files/jquery.sticky.min.js HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:13 GMT
ETag: W/"632a3289-e78"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lZko9ad6BApmSTlmvnf0Y1MpW1wAgWoTfIo6aBTW9uN%2Baw1WNgppgwHUDzFDUPn4xp6yTPHFeH9PUlJ9FcZrYLN8vb5szJ%2BcxhDOXUkNk8oWXBYPIhpNpb68jnek6%2FbIhIzvyA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014516eaab511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (3703)
Size:   1589
Md5:    f81fd6ca08a44fe13ee107c0298ad600
Sha1:   5e87769c1fee743ddf6624948928851103e4671c
Sha256: c9d4a0ce00dc8f6e46852042450a0fdfdabd4900f97f29c16163cc30e06a5b71
                                        
                                            GET /clicks/webfonts/fa-brands-400.woff2 HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/brands.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qHLmh6Zm%2Br%2FbNuAmhj5ur%2F2vAKEMv907o1N1JZFzRFSZHUntVtQ%2FNtNBLzZacZ6M4Z9PWWtBBtXZq%2FseRbcJZiToZInz6FEFhacP2BIo%2BSvMLtDFcdCJ6funjf4vS3nrdqj0uA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014518e29b529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   153
Md5:    706a98254456810d3e849c3957af9d01
Sha1:   e461d072a6ba8f0082d6f187eba7f053343529c6
Sha256: 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
                                        
                                            GET /clicks/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/solid.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Bw5yYv2Pj%2FdeNS12fZrvqUcQDbK1BNT3B7avYNdG3v5lP3TCvo0fnBTqzQkmiygLzkTq%2BIkflXvrVXJ6HGRnZN46wC9Dh%2FyTvXZBa4qDln3LVyoJsxjaKsiOCgqmdkO2ZOkhw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560145189641c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   153
Md5:    706a98254456810d3e849c3957af9d01
Sha1:   e461d072a6ba8f0082d6f187eba7f053343529c6
Sha256: 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
                                        
                                            GET /clicks/BarxBusyBall_files/ball.png HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 857072
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:53 GMT
ETag: "632a3275-d13f0"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UusdKPPtpY2%2BmXEutx0BLsflkmjgKO%2Fo7VQy3zgOSabZhw8gUGEOgFuRk058sC0aQ9R6M%2BrpBQOuTpLxRCpe1NJ03BctFLaQn8DPuT5yvnl%2Ft%2F%2FQLR1meKRbjfPgKX8S6AM19w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7560145209d01c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 900 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size:   857072
Md5:    64f0dde2fdf833d02527c4e7677abf03
Sha1:   d90bbcfc400dc6039a73d272c77d01b7fba88b07
Sha256: 057cc4996f1546d56346830ad2aaa0f771c8a652556d7fde3e1773e3a088001c
                                        
                                            GET /clicks/BarxBusyBall_files/star-1.png HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 1650
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:25 GMT
ETag: "632a3295-672"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o3XhKp7jDFndkqu2m3fCtmQj%2Bk2AX4a2BHuI%2Bo2mUQLBUyP2MTW9wOmhPbo6bwGRbA0rx%2Btg1eI5gBV73oRx%2FQCJqcDRVbeMVThHaCQ0AJKBbvonmFBqtqNYBlWs1BESEscMSg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601451d928b4fa-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 200 x 40, 8-bit colormap, non-interlaced\012- data
Size:   1650
Md5:    3acd96edd2f2f2773e229e1f80461688
Sha1:   44b2adde2b2aeb6092d282b017dbfd21919e78cd
Sha256: c89a9b248c391aca5a38d7d7275c5a14c824d58a2ce580d009ab8dbc4ec3b0c5
                                        
                                            GET /clicks/BarxBusyBall_files/universalJSRequest.htm HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1
Upgrade-Insecure-Requests: 1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:26 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gB7HbjAhKLS2peEVLzflWdX53w0aH8bq8%2Bq7nxHTjICCQEelVFX843g%2FxvoT1djy4UxXXCHpFz0KXt8nUWPUbEEJJZ8kcE6UvxSmtYtUVoCEF%2FfHm2ghVf6Mjbg8XVJDQxTueA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75601451df78b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1090), with CRLF line terminators
Size:   661
Md5:    bd38cf171f669990f149613e6c670f32
Sha1:   c9041934b6f3cc06c5632c01448f28da0ea96abf
Sha256: 1ccc1307b22fee047d7f8f78a94a99a526eff20aac7456244a80202b91636aa6
                                        
                                            GET /clicks/BarxBusyBall_files/9.png HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 16011
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:50 GMT
ETag: "632a3272-3e8b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vFLQHK44WBhDkzYsFUcbUu4I6szKUNcO%2F7BTzrkBC7ekYNS2XngiMNivrbTL9j4JQysVmB6EbMiZrEP0EuRMTZK%2FOM0D3WpmMcBy%2BD7tThUe5dAei5cRt3dqRvGxuuxY8Su2xg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014520f93b4e8-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced\012- data
Size:   16011
Md5:    3aac065009b5122410847ea8c22cd48d
Sha1:   adf6ba08fad5046d765104ed5e2ef5f715b92053
Sha256: 1723e02494a6822228851fefd4b9e1d08b43008337b2d08c7d29f5a963b93b4c
                                        
                                            GET /clicks/BarxBusyBall_files/h-logo.png HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 17332
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:08 GMT
ETag: "632a3284-43b4"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CDOPSSHZFiqgTtym4LN9lpFpk8ELW89s%2Bh37QBsnurLle%2BfBibMdgGIHbotEDCVLkk6V04cc02WZU8aIIeIFMrow2usuRvkCbSZSPlWoMvCwCs1jRgeRY6lcwDStr4HZeq0JMw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014520f4cb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 364 x 95, 8-bit/color RGBA, non-interlaced\012- data
Size:   17332
Md5:    215db7d61345c483e47e26954cc90171
Sha1:   5bf5b6255a3965453dfdeb289326e27b75d51920
Sha256: cfb755f03da045604bed70578f66f61b410a16ee211ff1eb8530a53f71669bcd
                                        
                                            GET /clicks/webfonts/fa-brands-400.woff HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/brands.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fq1D3VxRwuwzvGyU9wf0DyOGQPyX5veU2pvTVi3goBWSwv4CYI8QIaVnSTuvnUdTDuPagnrLuZ2Pq%2F4ZwKIzY3htOXn3CH7m9ycfuJG8dc2cQnP83FkAo5H0cm%2FuJGvvc%2BLU1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601452ea70b4fa-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   153
Md5:    706a98254456810d3e849c3957af9d01
Sha1:   e461d072a6ba8f0082d6f187eba7f053343529c6
Sha256: 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
                                        
                                            GET /clicks/BarxBusyBall_files/2-2.jpg HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 06 Oct 2022 17:22:28 GMT
Content-Length: 212218
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:40 GMT
ETag: "632a3268-33cfa"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aalJlcFYe6jZTUJyNkftXdoay3Spv2F6qmBRw4YX%2By24YCWofUPnrRZPz%2FbvXKbfoBEaAz%2FTXxF1BJNAlc99ANXSzJa1aprcszv0nEo%2BWUS%2Bq9c0FEG02Lx30Nty9oSVS2nyxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014520edbb529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            GET /clicks/BarxBusyBall_files/blank.htm HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1
Upgrade-Insecure-Requests: 1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:36:54 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2BG9cP8YJBPXK77uMv7mck%2BIpghPL9RK6nmlbqTpwlTeGuICfBc91ORjh7FY7Nw%2BgWtF84hpJmEy3nXT19sY6KCp6Jxn6y2fX%2BlnzT32H9yIDH1%2BVJxEOKwwJpTONqrqZG3DUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75601452e8a1b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Size:   548
Md5:    cd64b4aeec0a8560c0d6527312e2c806
Sha1:   3b84cb918c9cf6a06d81b2aee07f5fec52ec6878
Sha256: 7dc0902142b34ea216d209ad68f58687c2190ebb974b2f540f61cc64b2b22ef4
                                        
                                            GET /clicks/webfonts/fa-solid-900.woff HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/solid.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4F7oYXgcPjASEri0buWpprWAzM9daW03a%2FP3ozMF88QAuxxp9yTA4Grtcf13L7MplhFZpbH1Ud8qwDYVfbF0Kv7cmZi0mOwJKxcE2lks20TS8Sp0CBFUyt63QnnzX06vzmWF%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601452e8dbb51b-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   153
Md5:    706a98254456810d3e849c3957af9d01
Sha1:   e461d072a6ba8f0082d6f187eba7f053343529c6
Sha256: 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
                                        
                                            GET /clicks/fonts/eicons.woff?5.16.0 HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/elementor-icons.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWpLxtKl2GKd0D5EQcrdQQobllcDKo9sPnw8dRB9QJ%2F2XmSh4tUeVEyzEeeAeYqr%2FKXz8QySHr7GG3iM9mSSlZjFg2jp3TYmiCtLIy%2Fx%2FeHlSXKrocRSkxSlQcT1kFj80Q3iiw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75601452eabc1c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   153
Md5:    706a98254456810d3e849c3957af9d01
Sha1:   e461d072a6ba8f0082d6f187eba7f053343529c6
Sha256: 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
                                        
                                            GET /clicks/BarxBusyBall_files/download.png HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall.php?sid=995937&h=Z0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc/W2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Content-Length: 1158119
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:00 GMT
ETag: "632a327c-11abe7"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPWocpKRnm7oo6BZ7XXAKfAbJHg22w8IBrdP2RMN8XgZdvIEMfm%2FVKfxyUqGWJl8vy1MTl6ktggd1c1F2BX5XuKQecAhjM4IaVL7I5IdplgKAo6B9xE2mIbUlAvjNOrrsAIvEw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014530808b529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 1015 x 1015, 8-bit/color RGBA, non-interlaced\012- data
Size:   1158119
Md5:    f0d41ae842748c4a9d7f68bd32e3f9b4
Sha1:   e1bb6386c35740f41ee7835af64c5cabd26a21e2
Sha256: c466eb600c892017f3d7f4bbbe1b78e7bcc0df5d1be2187a45ca748e80dacc30
                                        
                                            GET /clicks/webfonts/fa-brands-400.ttf HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/brands.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1; _gat_gtag_UA_22484186_3=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JV%2Fq51g3chq7waN7axLvLZQsp9XPyG%2F%2Ftfni2YhZzsrvxeYPeGi%2BiQ5COARCn7ejKD1Rb%2BTY4YRbWOHLWZDZxHqnEmE5j7leE8zQcmOyEeuvlMEwp3o4%2FfPyWfw34XK26Bc9cA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014542983b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   116
Md5:    d6e62b966693d7822072903ae8310d00
Sha1:   2de307cf4db56a090d7633f2da9ce6d224f6ffb7
Sha256: 36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
                                        
                                            GET /clicks/BarxBusyBall_files/blank_data/inject.css HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/blank.htm
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1; _gat_gtag_UA_22484186_3=1

search
                                         104.21.65.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 21:37:34 GMT
ETag: W/"632a329e-f28"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HX0rq%2FwhOUD7mKAwmCP7Z%2ByZct6Ceiw47UAlkiEAqwxbOVJRA9hC7TUHnMJA9NgdK8gBhWhdAncKNqXCMYiby4p%2FTnL%2BQOwvfq9rLClkjdZpEDTtbz54Bi31%2FgBy0PfeMYtYCg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014543a7fb4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   928
Md5:    e1c22e631b7cce42e3ef13cd9bb02ff5
Sha1:   6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
Sha256: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/fonts/eicons.ttf?5.16.0 HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/elementor-icons.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1; _gat_gtag_UA_22484186_3=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A7NEz7uKZV8ARzh4VdOGJTJQsVJve%2F4qIr8G5bycw9EG5tqG079lXaxFc9RpDLOtBp%2F071r0KfCRmP%2B47T1NaNEC%2FobJqy5qOVDnUnFzm7AdE7DlBZp5E6PziWkqlH38%2BitvLw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014542c051c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   116
Md5:    d6e62b966693d7822072903ae8310d00
Sha1:   2de307cf4db56a090d7633f2da9ce6d224f6ffb7
Sha256: 36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
                                        
                                            GET /clicks/webfonts/fa-solid-900.ttf HTTP/1.1 
Host: www.gapbay.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/clicks/BarxBusyBall_files/solid.min.css
Cookie: _ga=GA1.3.2043736478.1665076948; _gid=GA1.3.1849796984.1665076948; _gat=1; _gat_gtag_UA_22484186_3=1

search
                                         104.21.65.90
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FgNxB7IqtlmpjNvpUX5UxrTDPCySmkA2y39hxfYJcLsPMAUINMr%2BNeT8LXVg9u5iCfHnJVjLqnogum0DdnUCe9%2BJsKJ5vbv0XMQhcpP2eQeYbfwS8EPke2obuhvHWCGUX%2BSrzA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756014542accb51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   116
Md5:    d6e62b966693d7822072903ae8310d00
Sha1:   2de307cf4db56a090d7633f2da9ce6d224f6ffb7
Sha256: 36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=2043736478.1665076948&jid=1710415211&gjid=225178821&_gid=1849796984.1665076948&_u=aEDAAUABEAAAAC~&z=2118830981 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         173.194.73.155
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.gapbay.ru.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /c/hotjar-1282132.js?sv=5 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         54.230.111.39
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Thu, 06 Oct 2022 17:22:29 GMT
Content-Length: 167
Connection: keep-alive
Location: https://static.hotjar.com/c/hotjar-1282132.js?sv=5
X-Cache: Redirect from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vzoPzRCPJrWLreKk7Bl3Ccr_VlXjO5xOlYOhc0oJ2FOwY8TC1IKXgg==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 06 Oct 2022 17:42:29 GMT
Date: Thu, 06 Oct 2022 17:22:29 GMT
Content-Length: 3249
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8072), with no line terminators
Size:   3249
Md5:    9b19340ef7db3cbb26aa923adb8dbe6e
Sha1:   082e699bca6e80ca6c72a43f2894f4a32e785e26
Sha256: c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
                                        
                                            GET /libtrc/unip/1169954/tfa.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         151.101.85.44
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Connection: keep-alive
Content-Length: 17948
x-amz-id-2: 9IWrk30tja6YBEYVjX+fckfHDe5XG9o7im1PaMVNAGJqOUaPZG+JCjAawnqqjketwFpSGqCOiKI=
x-amz-request-id: 8J8DJGZZS3P98RQ6
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 02 Oct 2022 11:35:14 GMT
ETag: "264656e880744542b59feba1c3883164"
x-amz-version-id: p9e9ZCN63zkwVJf8aH6xnNu80ZaOsLbS
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Thu, 06 Oct 2022 17:22:29 GMT
Via: 1.1 varnish
Age: 106
X-Served-By: cache-bma1682-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1665076949.286014,VS0,VE8
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 50


--- Additional Info ---
Magic:  ASCII text, with very long lines (58492)
Size:   17948
Md5:    2cbcaab9a7778395349c9a35efb10b8c
Sha1:   7d5361b7bc3ef64c9a384ef222b49319502f4ee1
Sha256: 58e090e2110f1227a3bc1048d10e0d5bb20b4fdcb4520db705888b47eb0d9574
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6249
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 17:22:29 GMT
Last-Modified: Thu, 06 Oct 2022 15:38:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wi/ytc.js HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         188.125.94.206
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: LDYRruwH/yzdfdI/c0HIXP5CodQxucD44SzJ5DajQtlZeq2Fep5LibVYw5oogxPSPSkRVoU0Kak=
x-amz-request-id: TJ4VDT9CS2XFHB8W
date: Thu, 06 Oct 2022 17:16:23 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 367
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16553), with no line terminators
Size:   5929
Md5:    2f6a1b8a4843f74a5ba54c055fcb3850
Sha1:   919a5f9166f3f9c73803cebd312ad016570a30d8
Sha256: 1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ZtQn4vIyvewJbAom+biJpnbG4CeroTASUNYMKsYQD6LlLjQfxWpxhiwHwWBAVJ3qkNPKlW5ec/TAhMqCS3ZYzg==
content-length: 26840
x-fb-trip-id: 1904183273
date: Thu, 06 Oct 2022 17:22:29 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26840
Md5:    e1327a02d76346c7e23d114e4e508b30
Sha1:   195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
Sha256: 331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 06 Oct 2022 17:22:29 GMT
expires: Thu, 06 Oct 2022 17:22:29 GMT
cache-control: private, max-age=3600
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15187
Md5:    8766c5a801f08afceca9b66ff9097e6a
Sha1:   ce7640d1d166eddeb9d40be642ec34652f790713
Sha256: f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6249
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 17:22:29 GMT
Last-Modified: Thu, 06 Oct 2022 15:38:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=2043736478.1665076948&jid=1710415211&_u=aEDAAUABEAAAAC~&z=1370868247 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/viewthroughconversion/730868448/?random=1665076949374&cv=9&fst=1665076949374&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1138
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 17:37:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2490), with no line terminators
Size:   1138
Md5:    d382bfdd0e9a15588ea967744797045d
Sha1:   aa86895641641387b11df87a2fb3ce20c3dbff3a
Sha256: 09fc4e7056f72ea778d0c5ed690ed32556ff7c6d0aceaaf9d6d43145faa885c4
                                        
                                            GET /pagead/viewthroughconversion/730863180/?random=1665076949373&cv=9&fst=1665076949373&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1140
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 17:37:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2490), with no line terminators
Size:   1140
Md5:    752b4d3a568ea2c2aeee81705fc6e58f
Sha1:   af0d639a42a00e319d76ecb10f9abab11705a7f6
Sha256: 3354fb6319be8599b9bafef24d934bb9aa930e09522b2a9af2a090cd260dad44
                                        
                                            GET /pagead/viewthroughconversion/730905238/?random=1665076949370&cv=9&fst=1665076949370&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1140
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 17:37:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2490), with no line terminators
Size:   1140
Md5:    a7fce2a70038f7f7b39ba6e053c05b30
Sha1:   bc7ceb81333013ea3a41addf66a027238228e27b
Sha256: e56a49ec3577b5311b7d310ed3233dea5c93c424ec78114b7b3008593d9c87cc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=2043736478.1665076948&jid=1710415211&_u=aEDAAUABEAAAAC~&z=1370868247 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cachedClickId?marketerId=00efe76b38216f21fb23950db8e6453936 HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         64.202.112.63
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Content-Length: 56
X-TraceId: 8845b3121a9b4dd2a185409488ddbfde
content-encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   56
Md5:    77fbe8ab311fa20557d95906363035ed
Sha1:   5806df80f09a37e070d5f37c49f19797c2763fd0
Sha256: 4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
                                        
                                            GET /pagead/1p-user-list/730868448/?random=1665076949374&cv=9&fst=1665075600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&async=1&fmt=3&is_vtc=1&random=1215718568&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/730863180/?random=1665076949373&cv=9&fst=1665075600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&async=1&fmt=3&is_vtc=1&random=3531759772&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/730905238/?random=1665076949370&cv=9&fst=1665075600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9j0&sendb=1&frm=0&url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&tiba=Home%20-%20BarxBuddy%20Busy%20Ball&async=1&fmt=3&is_vtc=1&random=3806625264&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /unifiedPixel?marketerId=00efe76b38216f21fb23950db8e6453936&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&optOut=false&bust=01661680471248913&referrer= HTTP/1.1 
Host: tr.outbrain.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gapbay.ru.com/

search
                                         64.202.112.63
HTTP/1.1 200 OK
Content-Type: image/gif;
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 7a40fd5d1e85c91b7a6f363684f73d58
content-encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   60
Md5:    fb0fc5c090282e372b8bf8ff13ae3ee2
Sha1:   2de3834253ece606ce4d2a6f10a59654b6fa378b
Sha256: 90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
                                        
                                            GET /wi/config/10141746.json HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         188.125.94.206
HTTP/2 200 OK
content-type: application/json
                                        
x-amz-id-2: /6EOcnd2OeaEXdpZL8GkuZQT6T7Aq+RLz5pW3rgbstv7nNnfZsUO+90cnJyF3a1inFxzjyoo5uU=
x-amz-request-id: EVKV2R8WPA1DTBPT
date: Thu, 06 Oct 2022 17:22:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 13 Jul 2022 12:57:15 GMT
x-amz-expiration: expiry-date="Fri, 18 Aug 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "30ed61bd14cb90ac9fc0b14709d892b8"
x-amz-server-side-encryption: AES256
x-amz-version-id: rtrgFCJeOY7XeDJM.FhR8ZSfB9_GHv5M
accept-ranges: bytes
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   46
Md5:    30ed61bd14cb90ac9fc0b14709d892b8
Sha1:   3b8b6d3e092bedca36158e4144c384b9d97bb94e
Sha256: c5d3efce28e1e4b610068a3bbced4986ea0281028cc3fef3458a4b9c241c1da3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 06 Oct 2022 17:22:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sp.pl?a=10000&d=Thu%2C%2006%20Oct%202022%2017%3A22%3A29%20GMT&n=0&b=Home%20-%20BarxBuddy%20Busy%20Ball&.yp=10141746&f=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1 
Host: sp.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         212.82.100.181
HTTP/2 200 OK
content-type: image/gif
                                        
date: Thu, 06 Oct 2022 17:22:29 GMT
expires: Thu, 06 Oct 2022 17:22:29 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBNUOP2MCEIAevg1_djkpsIIU37blotIFEgEBAQFgQGNIYwAAAAAA_eMAAA&S=AQAAAgm-VoY6pDpq4pvWMF58WWA; Expires=Fri, 6 Oct 2023 23:22:29 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    bff56ce49dd485d195fdfa0a02342568
Sha1:   74fb4071deab7d3ab083562067b735df32c43397
Sha256: 0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9533
Expires: Thu, 06 Oct 2022 20:01:22 GMT
Date: Thu, 06 Oct 2022 17:22:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9533
Expires: Thu, 06 Oct 2022 20:01:22 GMT
Date: Thu, 06 Oct 2022 17:22:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9533
Expires: Thu, 06 Oct 2022 20:01:22 GMT
Date: Thu, 06 Oct 2022 17:22:29 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6476b35e-8b14-44b0-a85a-4793280f25c1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3777
x-amzn-requestid: 093c576f-e1f7-4d45-9f8c-7ca3e7539313
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPtDEpSIAMF_Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df986-3cbcc83c1db24bbf193c3047;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: GXneoYCI_hqJxLyI-RAxkJJf08pBsc6usoQlztb3HHPQSd1PDh7kgQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:52:47 GMT
age: 70182
etag: "0e1d6cefe5ffe1994f26322962df8b0a13743339"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3777
Md5:    1a1a279f8386262762dcf70621e06ed5
Sha1:   0e1d6cefe5ffe1994f26322962df8b0a13743339
Sha256: a4146e8a0561009b63c55d0c13673958546b96f684a9c5a43a1f3200782798e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7270
x-amzn-requestid: e5d0bb7a-b9d5-49b1-b51c-8db019da641f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQOGEQloAMFjgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa5a-519d91fb0b83920960da479d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: l1HGT5ycH36vVojsOPFptRSU1YJFvLbBsgiWJqzRlRIGgm2o5vf6jg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:58:56 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
age: 69813
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7270
Md5:    e238ccaa3b9fa88476a8514855e8232f
Sha1:   447cbf348ef10d0136a1811e843c46937defbba1
Sha256: 43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 05:04:17 GMT
age: 44292
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9044
Md5:    70ea26af79226e9ff06d6198e2c019dc
Sha1:   ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57
Sha256: f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: BddSUzh-PKiFmfw2p9gPW-B0qtrXWxCXfee29Pk-wLqN7RO21Yic6g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
age: 71123
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7511
Md5:    9e520f87cae411cfc2ed1c8a14184385
Sha1:   69ad212cb7ae309d4f02019552887135bfae67da
Sha256: 723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aeOU8fGkf5uHuYZ79k17EzxiFnwm0_z7SeZJElgwECzRyhR2N_SYJA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 03:50:38 GMT
age: 48711
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10158
Md5:    4fc2ddd86450d64d3fb659ab4e78be58
Sha1:   bbe71936b78a8c34d03ab87948dc840b35c6948f
Sha256: 84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4140
x-amzn-requestid: f3cb33c4-26b6-4fd8-9293-dfb42be34600
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZiEZ4IAMFvLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-424459547db8b3d721d75e54;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: q70sezhl0h-lASzUDh5_WQ6KraRa3fWYl_tO0iuE0CpbJ5GeiihgMw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
etag: "26694f34166345ee5693653e0101db6b910e68ba"
age: 71123
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4140
Md5:    dbba56f647bf5989ca51863632bbebfc
Sha1:   26694f34166345ee5693653e0101db6b910e68ba
Sha256: ec5cc38f2a77e8e655aeeb7a376cf882ccb7163e4ef9d1ce4633ab4754e48765
                                        
                                            GET /tr/?id=2573418419437376&ev=PageView&dl=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr-&rl=&if=false&ts=1665076950021&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665076950019.2133883624&it=1665076949364&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Thu, 06 Oct 2022 17:22:30 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /1169954/log/3/unip?en=pre_d_eng_tb&tos=1565&scd=7&ssd=1&est=1665076949320&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665076950890&vi=1665076949318&ri=4cc8905664c595f6aabd1dfc87d1a8a7&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Thu, 06 Oct 2022 17:22:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.gapbay.ru.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1307114/log/3/unip?en=pre_d_eng_tb&tos=1567&scd=7&ssd=1&est=1665076949320&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665076950893&vi=1665076949318&ri=13a6f9b934263f960b82df62fec55282&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Thu, 06 Oct 2022 17:22:30 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.gapbay.ru.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1169954/log/3/unip?en=pre_d_eng_tb&tos=4568&scd=7&ssd=1&est=1665076949320&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1665076953893&vi=1665076949318&ri=4cc8905664c595f6aabd1dfc87d1a8a7&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.gapbay.ru.com
Connection: keep-alive
Referer: http://www.gapbay.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Thu, 06 Oct 2022 17:22:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.gapbay.ru.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /1307114/log/3/unip?en=pre_d_eng_tb&tos=4570&scd=7&ssd=1&est=1665076949320&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1665076953896&vi=1665076949318&ri=13a6f9b934263f960b82df62fec55282&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.gapbay.ru.com%2Fclicks%2FBarxBusyBall.php%3Fsid%3D995937%26h%3DZ0xp1xTLn-zDdeGXRA-SmA5Qb_gt7f-5-SgqlmO-4Nc%2FW2r1GxrlpUwF77NwpzRLSVCvv8W5LnQO22XPr1Wt7OHEytBPr- HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0