joxi.ru/n2Y7vRjukX6QRr
301 Moved Permanently 364 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9c463ba986b2dab91286bf905d05c161
3ec446ce81aa6671ecaf23096cd939744a9fc8ae
3327f01938cd70179dbfd65841e25d9e1cab3722e62b20b8bcb44fb2298e426a
GET /n2Y7vRjukX6QRr HTTP/1.1
Host: joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 Feb 2023 07:25:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.26
Cache-Control: private, must-revalidate
Location: http://joxi.net/n2Y7vRjukX6QRr
pragma: no-cache
expires: -1
Vary: Accept-Language
Set-Cookie: js=qk6kATROO7BSYnpBswn6wvX4Ebw0eYZl49XuG9LuBDKp5maiB0SiNtGqqn2FXjTfulcV3JZjJfeFaxow0P1iz2; path=/
lunetics_locale=en; expires=Wed, 08-Feb-2023 07:25:50 GMT; path=/; httponly
Node: vs10
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6888
Expires: Tue, 07 Feb 2023 09:20:38 GMT
Date: Tue, 07 Feb 2023 07:25:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9933
Expires: Tue, 07 Feb 2023 10:11:23 GMT
Date: Tue, 07 Feb 2023 07:25:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 06:34:07 GMT
content-type: application/json
age: 3103
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17570
Expires: Tue, 07 Feb 2023 12:18:41 GMT
Date: Tue, 07 Feb 2023 07:25:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PrScNYXu4DEMuU65N0VYCFtHcDU+NCujtxsuhbXJmkPZodrMtWJNpl5bIRl6kaXOFRjuLCs2Guc=
x-amz-request-id: 4GAANDK8YH90N14T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 06:35:25 GMT
age: 3026
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:51 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
joxi.net/n2Y7vRjukX6QRr
200 OK 5.6 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (431), with CRLF, LF line terminators
Hash 75306f72adc9932f6a2d9b0ea67df846
09a52989dcfdd95b1d11cb5b0455d5afb631c186
92a4a0bb79230f279ef3c099fe5c1778eb58834a9397cdd2e1ec72319b94a2bb
GET /n2Y7vRjukX6QRr HTTP/1.1
Host: joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Cache-Control: no-cache
Date: Tue, 07 Feb 2023 07:25:51 GMT
Vary: Accept-Language
Set-Cookie: js=wTGg57tH0RG5Dh8hxNkbh0MCTn2vhOuLRCoAqUzHWhX4x7dL%2C7uS3nEtKG9eMFDQkljZyx8JJWC8kArqtC1JU2; path=/
lunetics_locale=en; expires=Wed, 08-Feb-2023 07:25:51 GMT; path=/; httponly
Node: vs13
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/videojs-ie8.min.js
200 OK 9.6 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/videojs-ie8.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (27236), with no line terminators
Hash a80bb4cc60cfd3e960e0336c9cbf8e99
d9f9999007b9fe6e97b5b188b59355c2cc8af962
554eab323e8bd7716a1aa8b0365edd65d015ea7a488b8772ad3c2dcad10d41c1
GET /assets/video-js/videojs-ie8.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/video-js.css
200 OK 15 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/video-js.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (12483)
Hash ba8c2f399c2058e514f9436fc36b425c
5d566364bc82239b68c7cc3aeffd98403ce13310
99b6d2d589c288c8709bbc4cdb613a624a999d9881af4b2e5bf54159387cc0c2
GET /assets/video-js/video-js.css HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/lang-en.js
200 OK 325 B URL HTTP/1.1 cdn.joxi.ru/assets/js/lang-en.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 86afa16046b722323203baf9bbb82f8b
8f6efdc245c9815d1211f358ecb5366f3c2a879a
c49511af4f4a02ddfe9856512a215c88dc38d0a5a298c09ffab127957ec0c6f3
GET /assets/js/lang-en.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Content-Length: 325
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-145"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/css/common_3d899dba.css
200 OK 36 kB URL HTTP/1.1 cdn.joxi.ru/assets/css/common_3d899dba.css
IP
ASN #24940 Hetzner Online GmbH
File type assembler source text\012- assembler source, Unicode text, UTF-8 text
Hash 0fb3145ae8690d4990f2f89eb77fc2e2
230d0b5ff795f1a8d43b6d88198e86ef8c54bb22
60ac269b14c2da8461a6b33a192fcdac9c6d520fcd98e84afed5e54df42b25e0
GET /assets/css/common_3d899dba.css HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 09 Jun 2020 13:54:03 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/jquery-1.11.1.min.js
200 OK 36 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/jquery-1.11.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32086)
Hash 8445953ea1b2b87a77605996a027e70a
17020d294ea2a0487a337342b9b337892c6a944a
f12966674335f9021e09b016785cf256ce3331293c1b10783bcce8898ab6e2da
GET /assets/js/jquery-1.11.1.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/jquery-2.2.1.min.js
200 OK 33 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/jquery-2.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32019)
Hash babe8001c39ee2ca531ea5c2c6276325
8ed6c04a85d7e818f356ce195f64d0a0783da67e
fe36ab50f79332aad6c59cd974594b0d98c20a88afb051b8666a2294d62268ee
GET /assets/js/jquery-2.2.1.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/video-js-5.9.2.min.js
200 OK 67 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/video-js-5.9.2.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32012)
Hash 3e8f312b20f385371febf56de3015879
5c86f07d77f45d7071c77eca53ff386dc89ecdd2
0ccc5a49264c4df559ae79f4c0d9561a1efd8056b4d91f3cbfd82c7cf59562b4
GET /assets/video-js/video-js-5.9.2.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/common_79cf64d9.js
200 OK 26 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/common_79cf64d9.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (789)
Hash 199afa6ba4e122b9cfedfb4afc208865
5a396c2e650c99d5d0e0b0a4e960231684a3eb65
f5eadc5633b14e589e8bdba099b8014572e2b1736c274f6b281ca6717fae4b04
GET /assets/js/common_79cf64d9.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 20:48:11 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/images/userpic-default.png
200 OK 1.5 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/userpic-default.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced\012- data
Hash 1b240659255d73dd910ccb761ded4f56
0e6da96eacc6f7d7df73cba9045a2e511ad52f6d
0ff196c9d9258507ab91d23671e4b07818fabdfe1167056787bf5b721fe3799e
GET /assets/images/userpic-default.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: image/png
Content-Length: 1519
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-5ef"
Node: vs10
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 07:07:20 GMT
age: 1111
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
dl3.joxi.net/drive/2023/02/07/0052/2126/3438670/70/02908a0604.jpg
200 OK 28 kB URL HTTP/1.1 dl3.joxi.net/drive/2023/02/07/0052/2126/3438670/70/02908a0604.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 362x248, components 3\012- data
Hash 4c39ea6e52cebd1af1a1eed801b6280d
d86b47cf2d809bcb96b4034a0d42db936e28cd75
dcdc932092863009eab92cf462cc52441227c1c7b3a12698420ef43e4015d1aa
GET /drive/2023/02/07/0052/2126/3438670/70/02908a0604.jpg HTTP/1.1
Host: dl3.joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: image/jpeg
Content-Length: 28454
Last-Modified: Tue, 07 Feb 2023 04:22:59 GMT
Connection: keep-alive
ETag: "63e1d223-6f26"
Access-Control-Allow-Origin: joxi.ru, joxi.net, beta.joxi.ru, beta.joxi.net
node: vs02
Accept-Ranges: bytes
cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
200 OK 67 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (554)
Hash ef43d3ffb8aef2b411a0b682c4b1ad69
4eda3ff7d52a8f45881d9856c425d92a0ae037ef
62813252c14a793232d7c1bd6cff9d05ea450c30b9e1b4a0a6dd115ebfac4b56
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"28b9e-k7VMbzLlxta0PUMGv7+1skJZRMc"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 Feb 2023 07:25:51 GMT
age: 37400
x-served-by: cache-fra-eddf8230043-FRA, cache-bma1622-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 67152
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4867
Expires: Tue, 07 Feb 2023 08:46:58 GMT
Date: Tue, 07 Feb 2023 07:25:51 GMT
Connection: keep-alive
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash c7efdde0ae9b6915d7cc299ac61585ca
cc980c9ae1312f2cf37d9d3e846785387c435150
28979796bc89064613e837365c8869f9aa923820bcb6079efb3fcf8b54f21e7d
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "649DD59AA36E72D3CAEFC42F180962BFCA6FD4A8"
Expires: Tue, 07 Feb 2023 19:00:00 GMT
Last-Modified: Tue, 07 Feb 2023 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 837
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64de9ef60b31-OSL
cdn.joxi.ru/assets/images/logo.png
200 OK 27 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/logo.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 116 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 7928b5b1e81f046a0ca2dc5b3e96dcc4
593341a8210ed0259cc481bea2ac97acdce1b2b7
b3aa5d847dd7a9e291a4fcdd26d5fca89f59cd9f9b8e2e5a7761cad0bad8815c
GET /assets/images/logo.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.joxi.ru/assets/css/common_3d899dba.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: image/png
Content-Length: 27135
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-69ff"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
rotarb.bid/248h9.min.js?98275b3
200 OK 19 kB URL HTTP/1.1 rotarb.bid/248h9.min.js?98275b3
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63133), with no line terminators
Hash bbf2fa4e6280ebccb8fdc4483ef800c6
1569952e7c1e6e22ce42ce707b292dc6f5ca8975
ec75b89dfb7f7def5efdfb932a38e2b6475e01afef54c8ed01bfa476c83b186c
GET /248h9.min.js?98275b3 HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Cache-Control: max-age=300
Expires: Tue, 07-Feb-2023 09:30:51 EET
Duration: 505377
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
cdn.joxi.ru/assets/fonts/helveticaneuecyr-ultralight-webfont.woff
200 OK 26 kB URL HTTP/1.1 cdn.joxi.ru/assets/fonts/helveticaneuecyr-ultralight-webfont.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 25740, version 1.0\012- data
Hash e4bc1c2afd9ba699e90116b055812539
e16d1cc0d90dd60bdeda5f34848aa61f630aa1a0
b16c52edca6da03f0e8d51d188b34ed03f4b29de7b7e09e08b5f4b7f0b25bbca
GET /assets/fonts/helveticaneuecyr-ultralight-webfont.woff HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://joxi.net
Connection: keep-alive
Referer: http://cdn.joxi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/font-woff
Content-Length: 25740
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-648c"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/images/icons.png
200 OK 70 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/icons.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 242 x 807, 8-bit/color RGBA, non-interlaced\012- data
Hash fc87c39d53b4e68a9c47b305f0943fab
4c03c5ece71bc98fda09b04c34593185735e6718
b86b29f13ca937b3a0f884eea766b082d994c125820f0835fea7dcf117ae4b63
GET /assets/images/icons.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.joxi.ru/assets/css/common_3d899dba.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: image/png
Content-Length: 70165
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-11215"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/fonts/helveticaneuecyr-light-webfont.woff
200 OK 24 kB URL HTTP/1.1 cdn.joxi.ru/assets/fonts/helveticaneuecyr-light-webfont.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 24132, version 1.0\012- data
Hash cabd33a55ebc96aab3cf9f02f2acaace
3fb4c86aa1684db0f92cf0019b1c7db70310197e
6344718a67ed4427607fc3163e1af2a302b22bc9164c138e9950e9c47ad59dd4
GET /assets/fonts/helveticaneuecyr-light-webfont.woff HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://joxi.net
Connection: keep-alive
Referer: http://cdn.joxi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: font/woff
Content-Length: 24132
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-5e44"
Node: vs10
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b2e23bb6724e595eb6c0aa372bc89174
f1c1d0ef0ee43ee04a455285e366c0869d75ee00
ff7895904a78e7acc28a69d5dfd2a7bd87a8238aaa859e8f760706db992cb579
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 Feb 2023 07:25:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 06 Feb 2023 21:46:26 GMT
Expires: Tue, 07 Feb 2023 21:46:26 GMT
ETag: "f1c1d0ef0ee43ee04a455285e366c0869d75ee00"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 3d2787fda5e5883cdc9cc55b3aa495fe
f8efc6895b41ff9370d0c72355248553c855de92
9f227fed8892fcb96aca2f41e76fe253df308f590772533c867a8cf32ba41369
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 11 Feb 2023 06:24:40 GMT
ETag: "f8efc6895b41ff9370d0c72355248553c855de92"
Last-Modified: Tue, 07 Feb 2023 06:24:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 493
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e0182f0b31-OSL
cdn.ftd.agency/libs/e.js
200 OK 1.7 kB IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 02f679c9e331e69ac43f87af96915b9d
e589290852a088c34cbf7bb3104faa833244e1d4
7ea9bdfdd368aa5835ba2930414dc029b4d2ffbd46c362e33d2efaffbb8fad32
GET /libs/e.js HTTP/1.1
Host: cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 13 Sep 2022 09:47:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"632051a8-aec"
Expires: Wed, 08 Feb 2023 07:25:52 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Headers: X-PINGOTHER
Access-Control-Max-Age: 1728000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block;
Content-Encoding: gzip
rotarb.bid/248h9.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash e2538841561673a8b17785c9f234f2de
21f97e98e46300e6ad096e9af148e45eb3ac5bfc
5be533f7b6f1e3176902ea7fc609e5277b6269b02f6467588f22d994c2df12a4
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 82
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
rotarb.bid/248h9.json
200 OK 436 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- HTML document, ASCII text, with very long lines (659), with no line terminators
Hash 26dcb6395e8e32819d0c7e78c86fce55
157aef0a5e8cdcfa9bd3a1b897653a1739020cb2
fad49db1586f16c359051a7ee856be5709de07e4393de98150905f16998b75b8
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 287
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0Ic5SIfFpdIGfX3Y0e5itw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g/7nTKQaS2kk2w7F90kyyBZfkQ0=
mc.yandex.ru/watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20%2828%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20%2828%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 5393598dc2a60cc7dfcd64cdfbc6919f
3e715a31f3ee7bf82a09935b7e1c243281cd62a3
5fac27f94c6a6f9b222eb61d1f2590cc315b72465f41f6b169febfe124c7d398
GET /watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20%2828%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Referer: http://joxi.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 07 Feb 2023 07:25:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:52 GMT
last-modified: Tue, 07-Feb-2023 07:25:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
z.cdn.ftd.agency/load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1413&hc=16&n=1675754800674&url=joxi.net%2Fn2Y7vRjukX6QRr&vc=0&ti=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=1923219954
204 No Content 0 B URL HTTP/1.1 z.cdn.ftd.agency/load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1413&hc=16&n=1675754800674&url=joxi.net%2Fn2Y7vRjukX6QRr&vc=0&ti=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=1923219954
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1413&hc=16&n=1675754800674&url=joxi.net%2Fn2Y7vRjukX6QRr&vc=0&ti=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=1923219954 HTTP/1.1
Host: z.cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
P3P: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Set-Cookie: AU=66910b6b4414ac9f; Expires=Tue, 06 Feb 2035 22:00:38 GMT; Path=/; HttpOnly; Domain=.cdn.ftd.agency; SameSite=None; Secure
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Tue, 07 Feb 2023 05:43:33 GMT
Expires: Tue, 07 Feb 2023 07:43:33 GMT
Cache-Control: public, max-age=7200
Age: 6139
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
joxi.net/favicon.ico
200 OK 1.2 kB IP
ASN #24940 Hetzner Online GmbH
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 546dbe511faa76b1ba0cb49ee5223856
d0598d0e0639857572882e2d915c34387f7e4547
3318698dcf656d03f7fdf432aab1e8771b55a4aebcae24c42f38e0087a3ee919
GET /favicon.ico HTTP/1.1
Host: joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/n2Y7vRjukX6QRr
Cookie: js=wTGg57tH0RG5Dh8hxNkbh0MCTn2vhOuLRCoAqUzHWhX4x7dL%2C7uS3nEtKG9eMFDQkljZyx8JJWC8kArqtC1JU2; lunetics_locale=en; _ym_uid=1675754801814355745; _ym_d=1675754801
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Connection: keep-alive
ETag: "5a7827a6-47e"
Node: vs13
Accept-Ranges: bytes
www.google-analytics.com/collect?v=1&_v=j99&a=585490341&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1741882730&gjid=332670452&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&z=2068593596
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=585490341&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1741882730&gjid=332670452&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&z=2068593596
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=585490341&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1741882730&gjid=332670452&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&z=2068593596 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Tue, 07 Feb 2023 01:18:03 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 22069
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c398b3efc966f31b63f4acc6f1c47551
c49f8bcf1142356f5a9f9260aafc2287e96deb34
ee98d7419fc748cef49095cc01238121561743a4e232ed9e49684d93dda0b0ca
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:13:15 GMT
ETag: "c49f8bcf1142356f5a9f9260aafc2287e96deb34"
Last-Modified: Tue, 07 Feb 2023 05:13:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2762
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e1898d0b31-OSL
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73769
date: Tue, 07 Feb 2023 07:25:52 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Tue, 07 Feb 2023 08:25:52 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:52 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Tue, 07 Feb 2023 08:25:52 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c398b3efc966f31b63f4acc6f1c47551
c49f8bcf1142356f5a9f9260aafc2287e96deb34
ee98d7419fc748cef49095cc01238121561743a4e232ed9e49684d93dda0b0ca
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:13:15 GMT
ETag: "c49f8bcf1142356f5a9f9260aafc2287e96deb34"
Last-Modified: Tue, 07 Feb 2023 05:13:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2762
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e19fed1c02-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afe7db92a730b1a76bed3113f60da924
531e2ba6a5907332e9e77fdcc2d88da9adb5f703
04534a7ebb8a6583102a0a532496c38d09b744572f1d01a5da952ff4a2b9825f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (3649)
Hash 8f18b510f451ba834c64aeba50c9f718
542cf87c8d06c1cddbfc209c13d7e82e03895bd5
450bbaf288feb7cb8dd7ab808c8f2032ca2344cbc853f2452d998bda487db96c
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 07 Feb 2023 07:25:52 GMT
expires: Tue, 07 Feb 2023 07:25:52 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 16140281703443269972
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49973
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=1497077269.1675754801&jid=1741882730&gjid=332670452&_gid=1928245094.1675754801&_u=IGBAgAABAAAAAE~&z=240296203
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=1497077269.1675754801&jid=1741882730&gjid=332670452&_gid=1928245094.1675754801&_u=IGBAgAABAAAAAE~&z=240296203
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=1497077269.1675754801&jid=1741882730&gjid=332670452&_gid=1928245094.1675754801&_u=IGBAgAABAAAAAE~&z=240296203 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://joxi.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 07 Feb 2023 07:25:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906
IP
File type ASCII text, with very long lines (3642)
Hash 86bfaaa012c08464a2c66eeb022c320f
b633bf5bc8688a62e996799244e97deeca10d6ac
7e1799bec025c42409ee15b1f710bf40dab1df26626d00257b387e00beea9679
GET /pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 07 Feb 2023 07:25:52 GMT
expires: Tue, 07 Feb 2023 07:25:52 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 11188943818068461723
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49989
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=585490341&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=aGBAgAABAAAAAE~&jid=&gjid=&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&cd1=No&z=519461345
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=585490341&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=aGBAgAABAAAAAE~&jid=&gjid=&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&cd1=No&z=519461345
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=585490341&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&ul=en-us&de=UTF-8&dt=1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=aGBAgAABAAAAAE~&jid=&gjid=&cid=1497077269.1675754801&tid=UA-30950280-5&_gid=1928245094.1675754801&cd1=No&z=519461345 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Tue, 07 Feb 2023 01:18:03 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 22069
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yandex.ru/ads/system/header-bidding.js
200 OK 31 kB URL HTTP/2 yandex.ru/ads/system/header-bidding.js
IP
File type ASCII text, with very long lines (65479)
Hash 97e5230389d39db8f4aa696ddb8dd6d9
3cbae4e76ab29b6cf7903b5be23de82d6e750330
5ad08cdf72cd1bef79c330f6b48654a3ef48846c5e5d60348a527544c3c2bdb8
GET /ads/system/header-bidding.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=Rk8WAkoSNOQjWWEpB6W0HeRqUEpT01Dp5MyoPJaT5hF2SYUUtjFQ/DYzMD7Fu3pecWzp7RaA4ZfVOTBZe8pnwXU8FIY=; Expires=Thu, 06-Feb-2025 07:25:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=2708795451675754752; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:52 GMT; SameSite=None; Secure; HttpOnly
expires: Tue, 07 Feb 2023 08:25:52 GMT
x-yandex-req-id: 1675754752279011-16835817141762243700-sas2-0903-sas-l7-balancer-8080-BAL-653
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230202/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230202/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20230202/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Tue, 07 Feb 2023 04:05:08 GMT
expires: Tue, 21 Feb 2023 04:05:08 GMT
cache-control: public, max-age=1209600
age: 12044
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A611049637%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A611049637%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 4930b421f1bbf673698f28faa210f8be
460c5c8229c9d536b853f37a5ac147dc7a889da9
b0870c47072caeef9910b7dccf175fc09c880db44c96ef801f0c4ae32f242e7f
GET /watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A611049637%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/89142389/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A611049637%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20%2828%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 07 Feb 2023 07:25:52 GMT
access-control-allow-origin: http://joxi.net
set-cookie: yabs-sid=1508677211675754752; Path=/; SameSite=None; Secure
i=GxnEcJVghrbVmGY6Qpns7M6FiLzsZFpW1Gyf3ULWrwAFeSz3nj0tTPWHxxO2sNXZWwzSnhhOME2dwA0ANklECnW2yAw=; Expires=Fri, 04-Feb-2033 07:25:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7092276911675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7092276911675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707290752.yc.1675754752#1707290752.yrts.1675754752#1707290752.yrtsi.1675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:52 GMT
last-modified: Tue, 07-Feb-2023 07:25:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2fce8afed139e1bd1abb4f8cd62f3994
980ecae1200d2ba3892361c131e8893592c024b2
4b88caadabd58cb3bb4da8435133b17239d4330aeb074515822ff82b7fb09f27
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:55:06 GMT
ETag: "980ecae1200d2ba3892361c131e8893592c024b2"
Last-Modified: Tue, 07 Feb 2023 04:55:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e2ca850b31-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2fce8afed139e1bd1abb4f8cd62f3994
980ecae1200d2ba3892361c131e8893592c024b2
4b88caadabd58cb3bb4da8435133b17239d4330aeb074515822ff82b7fb09f27
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:55:06 GMT
ETag: "980ecae1200d2ba3892361c131e8893592c024b2"
Last-Modified: Tue, 07 Feb 2023 04:55:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e2c8c11c02-OSL
yastatic.net/partner-code-bundles/716043/3e236fcb1ee21489aa80.js
200 OK 8.4 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/3e236fcb1ee21489aa80.js
IP
File type ASCII text, with very long lines (29540)
Hash 38754f22a76b2ffd33f727be33edb241
7588df06536c52983d31f1937349d3befeaa7d7b
ec4927b299c203db56b5761f9609bfdda8ac47c93f69bf13dc16bfd8054e3904
GET /partner-code-bundles/716043/3e236fcb1ee21489aa80.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 8397
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "38754f22a76b2ffd33f727be33edb241"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/b887192c4a62fd372984.js
200 OK 3.5 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/b887192c4a62fd372984.js
IP
File type ASCII text, with very long lines (9149)
Hash 2e50dbda190111e20b06531c8df6dce2
2e37aeb104cb3f7e4564cd701702f803adc4f6b0
9a1f38cb09607578fe9cb9ebc2a0b3fc5d066ab26ae5b9269c13f5c2b121154d
GET /partner-code-bundles/716043/b887192c4a62fd372984.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 3549
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "2e50dbda190111e20b06531c8df6dce2"
expires: Thu, 06 Feb 2053 13:59:10 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js
200 OK 4.8 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js
IP
File type ASCII text, with very long lines (14344)
Hash 7749d37e0e2ba5a2c857a1c0bdc8b1fd
c1beb845c858b6d22045d76bf6ba1e90a168714d
ed2c47feabe99774879658c0517c72c406a9e2d2b8fd280394eaf4bb98729970
GET /partner-code-bundles/716043/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "7749d37e0e2ba5a2c857a1c0bdc8b1fd"
expires: Thu, 06 Feb 2053 13:58:56 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js
200 OK 24 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js
IP
File type ASCII text, with very long lines (65494)
Hash 5d29968bb46055943c2db2d4205797bf
51cb5c66e80cf6a1f135a4922d5fd120bf145974
d3bec2a3bb2d81a15e8b431c184c5d07e7b176efbb2ddbcab0b75b8b472d9451
GET /partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 23531
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "5d29968bb46055943c2db2d4205797bf"
expires: Thu, 06 Feb 2053 13:59:05 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 5275808ddc90a180d34bf4edf4be49d8
0dbc16f150f5ce35067356822f4a98c1026380ff
57fc4b8ec63e1709144b9568b97b63a92543f44091b607d72e4b33ca3409bc7f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:23:43 GMT
ETag: "0dbc16f150f5ce35067356822f4a98c1026380ff"
Last-Modified: Tue, 07 Feb 2023 05:23:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1575
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e30ace0b31-OSL
yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
200 OK 26 kB URL HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Hash 7f0cdaf91230f9789ca4162aedff612e
965de571aa794dab64076c3cc64dc8894b843f23
033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Wed, 07 Feb 2024 13:12:08 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: 2c711bd798ed7403
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/07cea2bf8567304efc16.js
200 OK 7.9 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/07cea2bf8567304efc16.js
IP
File type ASCII text, with very long lines (23593)
Hash 9e20c0213c1a25dded304a55c581b154
893a64811863a2d63ad12abf6c04d0c3b8a60a5b
27d7cdda3b34100a6bcabc26195471e0eac866e08111321b4fe8f63c66a0ec8a
GET /partner-code-bundles/716043/07cea2bf8567304efc16.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 7930
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "9e20c0213c1a25dded304a55c581b154"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/2ec9a88e40a26b53acde.js
200 OK 2.1 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/2ec9a88e40a26b53acde.js
IP
File type ASCII text, with very long lines (6989)
Hash 09997d8f01e586ad7fa18f4ef6592dcc
82ff24812894f0230f8c1e691a4cf98d02d28aa1
630f3c92319e83e4284a13a67789e26c788f741ce0d6c131fe68e180712bf570
GET /partner-code-bundles/716043/2ec9a88e40a26b53acde.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 2065
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "09997d8f01e586ad7fa18f4ef6592dcc"
expires: Thu, 06 Feb 2053 13:58:56 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js
200 OK 113 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js
IP
File type ASCII text, with very long lines (65497)
Size 113 kB (113366 bytes)
Hash 0736127f132f9c5d09ad0fb5d789a73a
f9203cd3a945aad6f790f8d2e286052c40d2fa50
9a14aedcb1039ca82f4ddfa1b338a50fd48ebe92a20c82c37dc2b85d0c6ac377
GET /partner-code-bundles/716043/de9c4be8e88d42b2efb9.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 113366
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "0736127f132f9c5d09ad0fb5d789a73a"
expires: Thu, 06 Feb 2053 13:58:56 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
matchid.adfox.yandex.ru/getcookie
200 OK 88 B URL HTTP/2 matchid.adfox.yandex.ru/getcookie
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 120ab2d76e8018294802093c690d33e6
ca3e4ef6f35af21557a97e364c62c7b6ca8dc891
48c606538182ba90423c232efab1e76fe39d7b842b4ecede1b181b78545fffbe
GET /getcookie HTTP/1.1
Host: matchid.adfox.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 88
access-control-allow-credentials: true
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: application/json
timing-allow-origin: *
access-control-allow-origin: http://joxi.net
x-content-type-options: nosniff
X-Firefox-Spdy: h2
yandex.ru/ads/system/context.js
200 OK 83 kB URL HTTP/2 yandex.ru/ads/system/context.js
IP
File type ASCII text, with very long lines (65492)
Hash 894e11feb640a8027df2e4525e425c2e
e8bd2779b3693daab348c3e1ceb47013d9ebf399
f4ab68f796eed5c02022a6c958f9d52326a71edc816f5c55ec5623b6f47d3d0f
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=3biX2FYq5kDtuqriBf/dEO/YxfEaLQDbAZO3VIz3IPYWRxLOYWacRGRq9EnOvjPpGiH6L+CXHV9McbdI4jEFXFPh8zU=; Expires=Thu, 06-Feb-2025 07:25:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=4242207451675754752; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:52 GMT; SameSite=None; Secure; HttpOnly
expires: Tue, 07 Feb 2023 08:25:52 GMT
x-yandex-req-id: 1675754752283390-10125070065182272457-sas2-0903-sas-l7-balancer-8080-BAL-7854
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bf5dde1998e758f435532059b3f02580
87e23fc73c8669ee1a0aba633185acafb72196f1
d123fa0668b1504ff2ccf7d0476d0c2c83ff97029464d3cd7726bb7c736f9a35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D123FA0668B1504FF2CCF7D0476D0C2C83FF97029464D3CD7726BB7C736F9A35"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5192
Expires: Tue, 07 Feb 2023 08:52:24 GMT
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 11 B URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=joxi.net&callback=_gfp_s_&client=ca-pub-5187259805604906
200 OK 249 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=joxi.net&callback=_gfp_s_&client=ca-pub-5187259805604906
IP
File type ASCII text, with very long lines (383), with no line terminators
Hash bfaaaddd28c7ab84c7bcd411fc5a926b
b95fe4d642f838f4f68726618b37e594f9b1e2d1
6de96c5ad85c08303ecd8de1f4a7de3595995ddbb4b9dc84c96630e21131279f
GET /gampad/cookie.js?domain=joxi.net&callback=_gfp_s_&client=ca-pub-5187259805604906 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:52 GMT
server: cafe
cache-control: private
content-length: 249
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5668ddba7a7f740deb36f83b1a9badc1
5c259d95d7af456c128be24f31921a0c5806ee5e
d034f4cea704c9661a14599951fcfb45f52e1325bbf8770ffc6e9708e11b8a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D034F4CEA704C9661A14599951FCFB45F52E1325BBF8770FFC6E9708E11B8A3F"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4379
Expires: Tue, 07 Feb 2023 08:38:51 GMT
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=joxi.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=joxi.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=joxi.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:52 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 048afb8b19f34f62d6d9f836636dd63d
cb81d2e01c055c556663f969c032ff21cad592f4
5c8dd3d01b87efcd0412d9034fe488e67a9be6b1ceb81c0b7f0454ff9c3a7c8c
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:07:30 GMT
ETag: "cb81d2e01c055c556663f969c032ff21cad592f4"
Last-Modified: Tue, 07 Feb 2023 05:07:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1636
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e43e800b45-OSL
adservice.google.com/adsid/integrator.js?domain=joxi.net
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=joxi.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=joxi.net HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:52 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kdmttk.com/get_data?format=adfox
204 No Content 0 B URL HTTP/2 kdmttk.com/get_data?format=adfox
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /get_data?format=adfox HTTP/1.1
Host: kdmttk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 821
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.19.0
date: Tue, 07 Feb 2023 07:25:52 GMT
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://joxi.net
set-cookie: sspUid=fa650884eb322ac7ef9696f9ee12cd14; expires=Wed, 07 Feb 2024 07:25:52 GMT; domain=kdmttk.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ca65a4dd6952351eac9c5c6039514b08
0727c851a1651548bf4633d3b51c262c49443f31
db811f42029ccdd0afec242162cf5380cee260cead834fc994bb8d210b736d74
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:02:16 GMT
ETag: "0727c851a1651548bf4633d3b51c262c49443f31"
Last-Modified: Tue, 07 Feb 2023 05:02:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 90
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e47c430b31-OSL
yhb.p.otm-r.com/yhb
200 OK 11 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yhb HTTP/1.1
Host: yhb.p.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 815
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.23.2
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: text/plain; charset=utf-8
content-length: 11
access-control-allow-credentials: true
access-control-allow-origin: http://joxi.net
set-cookie: mpid=NjNlMWZkMDAwMzZlNmFiNQ==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hbe199.hybrid.ai/adfoxhb
200 OK 31 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 70a3f5705db5d75aa36946fac45138c3
439162e19fe0142008cc9b68d33c4dcdb2523154
b4dd339a3779ecbcb0de8c2c202c0cf6c28211022fcc2ef4489132e65a8f338c
POST /adfoxhb HTTP/1.1
Host: hbe199.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 929
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: application/json; charset=utf-8
content-length: 31
cache-control: no-cache, no-store
pragma: no-cache
content-encoding: gzip
expires: -1
x-mode: 11601
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
rotarb.bid/248h9.json
200 OK 60 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 8c77fd4008b1242241fe789be3f89c1a
ad0c06517fe1b290b40833e39263ec51717c47c6
a03fc45573179e0c65c63f8c921113cff617edb17cca187e74fef115eb088b0f
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 330
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/json
Content-Length: 60
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
ssp-rtb.sape.ru/adfoxhb
200 OK 11 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /adfoxhb HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 821
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Access-Control-Allow-Origin: http://joxi.net
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Set-Cookie: sspuid=CkICRmPh/QA0QABFbxIfAqf/wi9TnVtVSc/Vy6EtSTMh3YCv; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
rotarb.bid/248h9.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 0e8297cac1a776c3fcd48d9e76d0ed71
63128f81548595b7cc306d9362da5e52fe5624cb
e5b76ca6bd883c7ef9a9c7df797302f2ceab1a24734727db1ece4ec64862a310
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 266
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
rotarb.bid/media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png
200 OK 385 kB URL HTTP/1.1 rotarb.bid/media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 240 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 385 kB (385096 bytes)
Hash 56bc9cb8d843453fafb510507f5a0cd0
a6749c40f379673429ffd3273d08b40afe332c04
13595fec98790a573137335e23ead84834ce336edc309a2c57b56783f3211eb0
GET /media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: image/png
Content-Length: 385096
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Fri, 22 Jul 2022 12:46:29 GMT
ETag: "62da9c25-5e048"
Expires: Tue, 07 Feb 2023 07:35:52 GMT
Cache-Control: max-age=600, public, must_revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000
ocsp.sectigo.com/
200 OK 471 B IP
Hash dbb3fe4d8642c214cf6c1f4523abff84
595c46af4c12a911a209b5d4c6f12b5834b4cbc1
2193d8508d4538173a02bca99856f53dc4b1e4ad0c2bbd057b20d76349f25435
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 03:41:04 GMT
Expires: Sat, 11 Feb 2023 03:41:03 GMT
Etag: "595c46af4c12a911a209b5d4c6f12b5834b4cbc1"
Cache-Control: max-age=331510,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795a64e43e5ab4f1-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash d28ed3e080cbd1ec203a146092a4fbcb
9a6603e8c7baf71763e6580ed393eac576aea446
67055b2b4523563bf69bdfdd432a16bf6b9521ef296694c57bd4e8dce105e429
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:03:24 GMT
Expires: Sat, 11 Feb 2023 14:03:23 GMT
Etag: "9a6603e8c7baf71763e6580ed393eac576aea446"
Cache-Control: max-age=368850,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795a64e458e01c0a-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f48592c9ce931276d6e5e6e7e342cc3
55bfae3bef5fb97c8262eb622a54a0f603d41ec9
36472b536e89d8c01926bcdb2e23240f69f0bd7cde3b39a53a75b0a804291fd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
exchange.buzzoola.com/ssp/adfox
307 Temporary Redirect 0 B URL HTTP/2 exchange.buzzoola.com/ssp/adfox
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ssp/adfox HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
server: nginx
date: Tue, 07 Feb 2023 07:25:53 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, If-None-Match
access-control-allow-origin: http://joxi.net
access-control-expose-headers: Set-Cookie, Etag
etag: W/"581016f7a26cf6296f06b760a7ddb5417549bc2b2579b430269c5f9c9b12b2e4"
location: /ssp/adfox?set_buzzoola_cookie=t
set-cookie: uuid=2d59aadc-8715-4219-499a-e8fc3ccf07a5; Path=/; Domain=exchange.buzzoola.com; Expires=Thu, 09 Mar 2023 07:25:53 GMT; Max-Age=2592000; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 07 Feb 2023 07:25:53 GMT
expires: Tue, 07 Feb 2023 07:25:53 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 23:41:05 GMT
expires: Tue, 06 Feb 2024 23:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 27888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.mail.ru/hbid_yandex/
200 OK 14 kB IP
Hash 2a505cf07ccc7ee71e65838e8c0a9a3f
957f61015ddb1c9162f3a7e12397be0a10e45927
d1f22c8fb8b38a9d7d471cea522cd519e4d50b9791685e2fec75e48ff20b0a63
POST /hbid_yandex/ HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: application/json
cache-control: private, no-cache, no-store
timing-allow-origin: *
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0c18b789b296a2b3cc9adb04c94e6f7
a0fa241f813c414178f5dffd30d5c2b82d16669b
95ec61ae9d1384fdbcee256ec441d6db4e3243ed3f8e1801b3607ce3c2e1e3f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t
200 OK 11 B URL HTTP/2 exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /ssp/adfox?set_buzzoola_cookie=t HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Referer: http://joxi.net/
Connection: keep-alive
Cookie: uuid=2d59aadc-8715-4219-499a-e8fc3ccf07a5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:53 GMT
content-type: text/plain; charset=utf-8
content-length: 11
access-control-allow-credentials: true
access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, If-None-Match
access-control-allow-origin: http://joxi.net
access-control-expose-headers: Set-Cookie, Etag
set-cookie: cookiesyncs=000000000000000000000000d93dab9edf0912baf9008f35866978f1; Path=/; Domain=exchange.buzzoola.com; Expires=Tue, 07 Feb 2023 19:25:53 GMT; Max-Age=43200; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=adfox
200 OK 548 B URL HTTP/2 ads.betweendigital.com/adjson?t=adfox
IP
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (794), with no line terminators
Hash caf2025ec9eb74433ebf8c3d570fe5fd
a789f1f183022499885428a195ec0dddfb57a359
837c012fa6287cfd19f61b167f946442a1d734725bf8eabc14262e06131fc643
POST /adjson?t=adfox HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:53 GMT; Path=/; Domain=.betweendigital.com
tuuid=0568b568-b3db-5226-a77a-35d8c49bc8d9; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:53 GMT; Path=/; Domain=.betweendigital.com
ut=Y-H9AQAAYajfMPMLzrVGe_upH8dqNXXAX7AIHA==; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:53 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:53 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11921
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11921
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11921
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11921
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11921
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0594f78c4fdfed5dd2e0666312555f40
db903b9a3f387c1510170f8d16dd4d289f7df83f
8874083a529064657b18be58147ae7df5fe79c822c4bd2a023fdf3df7186a62e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3712
x-amzn-requestid: 44c7e7bd-1a95-49b6-9b0a-f8aff3725ded
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftbOtH-lIAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba591-2fb19c33646c3d327681e9f9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 11:59:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ws42XiDa6w4O13v7obhNXNfA0QQIv03RG0Ze0IPrKWxxvsvUY2eCVg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:55 GMT
age: 34618
etag: "db903b9a3f387c1510170f8d16dd4d289f7df83f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 34625
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3cd20c6639e2b0d996fbbd7df2d4f47
2e54c22fb83981e2690161cd521e4fc3998e9c16
9b2b1f3e062fca74341d09540e44d2a02ec451b8349440ed5917073e8fab988d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6316
x-amzn-requestid: 1988058c-5aee-4964-9046-83a5f14a927d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwhjnFdxoAMFgpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dce2e3-5ec35d0d6bef4d4944c629c0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 10:33:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z9b1A_GpinQXvbA-g2PoKhVSNVd5gMrId0WUTmKSCkg-YAan1dtp-w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:21:35 GMT
age: 32658
etag: "2e54c22fb83981e2690161cd521e4fc3998e9c16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88178e0f623494e30ece4da4eed04d60
7f016d87157a577e4ad4e4cf6c854a0489f8571a
e5658ac599ca37e797637a596ca9b65c80c1053b2ce5dacc667ae3b8b1ce54a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6384
x-amzn-requestid: 5f91a438-31d9-42ca-96b4-71344cc736c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77IcE2-oAMFbZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17235-1ce1ebfa4e9ae6053434c48d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ee3lrCu0ZcpPQ-tQiF3j59bjY0W_zFOKl2H__y_twSGGESxmir3JHg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:46:30 GMT
age: 34763
etag: "7f016d87157a577e4ad4e4cf6c854a0489f8571a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: c380f2eb-c707-4086-9646-179ea89ba210
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy9JKEpqoAMF9RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dddbd4-49510561740468ba7b39f211;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 04:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ofAz9sRlztBs3zypgsL9DkiJypsxagC7ZcUX3PLL_7FzUALp_MxtKA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:39 GMT
age: 45674
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92008e687831334af1cdbf4b8a57579f
e6ff750f12836637adf5b253d64c2102fdf3c180
39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5wy_7Z30HRIcZufSPCTKu9UoJD1o_NDlhuyL5bvidDwbqC_3p99yYA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:57 GMT
age: 34856
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_5c38bb32d4140c988d102aa09afae2a5fc956360173a35d29ccb3f1c7d73a7ce&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A226537394%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_5c38bb32d4140c988d102aa09afae2a5fc956360173a35d29ccb3f1c7d73a7ce&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A226537394%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_5c38bb32d4140c988d102aa09afae2a5fc956360173a35d29ccb3f1c7d73a7ce&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A226537394%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:53 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:53 GMT
last-modified: Tue, 07-Feb-2023 07:25:53 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_d9f444c5aaac2bc8dc64d0b09bcb226d3d695176fa13683ef9192dc72d451166&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A78766218%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_d9f444c5aaac2bc8dc64d0b09bcb226d3d695176fa13683ef9192dc72d451166&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A78766218%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&hittoken=1675754752_d9f444c5aaac2bc8dc64d0b09bcb226d3d695176fa13683ef9192dc72d451166&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A897652722993%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A78766218%3Arqn%3A2%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2131%2C2131%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754799260%3Aadb%3A2%3Ast%3A1675754802&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:53 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:53 GMT
last-modified: Tue, 07-Feb-2023 07:25:53 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 751bf754ecdf35a1d48719a9465156d5
781d9e85c30c5a95825e67e35cfc6bf75659f0e4
8fc1b63e43873f9cfcc03190c79ab52501c07cdc9a26455a7f416b8aed3b9aea
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:32:24 GMT
ETag: "781d9e85c30c5a95825e67e35cfc6bf75659f0e4"
Last-Modified: Tue, 07 Feb 2023 04:32:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 588
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64ea38b40b31-OSL
ads.adfox.ru/260971/event?pm=cyz&hash=23d4d737cc39f117&duid=1675754801814355745&p5=nfmax&rand=nkuvcge&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=cyz&hash=23d4d737cc39f117&duid=1675754801814355745&p5=nfmax&rand=nkuvcge&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=cyz&hash=23d4d737cc39f117&duid=1675754801814355745&p5=nfmax&rand=nkuvcge&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:53 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:53 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adfox.ru/260971/event?pm=cza&hash=b6a24f4ea21a0076&duid=1675754801814355745&p5=nfmax&rand=mrrkctq&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=cza&hash=b6a24f4ea21a0076&duid=1675754801814355745&p5=nfmax&rand=mrrkctq&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=cza&hash=b6a24f4ea21a0076&duid=1675754801814355745&p5=nfmax&rand=mrrkctq&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:54 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:54 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adfox.ru/260971/event?pm=bmn&hash=1aab51806308ec14&duid=1675754801814355745&p5=nfmax&rand=bgeqdak&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=bmn&hash=1aab51806308ec14&duid=1675754801814355745&p5=nfmax&rand=bgeqdak&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=bmn&hash=1aab51806308ec14&duid=1675754801814355745&p5=nfmax&rand=bgeqdak&sj=kk9_Nqi5I3tJNhBzxETI7xhvXCR6HWv3E6KpnpIW1gPfy3n3gRdW2vSZqFnw&ad-session-id=4766401675754802031&utg=oxum<s=flbbjdx&ytt=146786413182981&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&pr=njymnse&p1=cusln&rqs=AAAAAAAAAAAB_eFjRvUT8CDW2K45LLFP&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:55 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:55 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/14929090?wv-check=7814&wv-type=0&wmode=0&wv-part=1&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=531110958&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/14929090?wv-check=7814&wv-type=0&wmode=0&wv-part=1&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=531110958&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/14929090?wv-check=7814&wv-type=0&wmode=0&wv-part=1&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=531110958&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:59 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:59 GMT
last-modified: Tue, 07-Feb-2023 07:25:59 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=157838760&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=157838760&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=300796926&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&rn=157838760&browser-info=et%3A1675754808%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072648%3Au%3A1675754801814355745%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754808&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:59 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:59 GMT
last-modified: Tue, 07-Feb-2023 07:25:59 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.digitalcaramel.com/css/joxi.ru.css
200 OK 0 B URL HTTP/2 ads.digitalcaramel.com/css/joxi.ru.css
IP
ASN #24940 Hetzner Online GmbH
GET /css/joxi.ru.css HTTP/1.1
Host: ads.digitalcaramel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:51 GMT
content-type: text/css
last-modified: Tue, 23 Aug 2022 11:46:50 GMT
vary: Accept-Encoding
etag: W/"6304be2a-231"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15724800; includeSubdomains; preload
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20(28%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A1132%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1445492973371%3Ahid%3A300796926%3Az%3A0%3Ai%3A20230207072640%3Aet%3A1675754801%3Ac%3A1%3Arn%3A12399519%3Arqn%3A1%3Au%3A1675754801814355745%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A52%2C39%2C112%2C1%2C355%2C0%2C%2C563%2C20%2C%2C%2C%2C1169%3Aco%3A0%3Ans%3A1675754799260%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754801%3At%3A1675743778508%20%2828%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 07 Feb 2023 07:25:52 GMT
access-control-allow-origin: http://joxi.net
set-cookie: yabs-sid=2499484391675754752; Path=/; SameSite=None; Secure
i=FSdDBVJZSvfrNfta53iPKmZdBzJNbrhMJB0zczGT0SAYxTtcFGCn/2MGPkg0WBw2g0Zv6KnYTCwe5WTKD3JnZ9RiiDs=; Expires=Fri, 04-Feb-2033 07:25:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6407553481675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6407553481675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707290752.yc.1675754752#1707290752.yrts.1675754752#1707290752.yrtsi.1675754752; Expires=Wed, 07-Feb-2024 07:25:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:52 GMT
last-modified: Tue, 07-Feb-2023 07:25:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&date=2023-02-07T07%3A26%3A42.027%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=1643753791&pr=4134025068&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786413182981&is-turbo=0&skip-token=&ad-session-id=4766401675754802031&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=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%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&pcode-test-ids=706743%2C0%2C46%3B657518%2C0%2C44%3B685674%2C0%2C60%3B711101%2C0%2C23%3B716614%2C0%2C36%3B714014%2C0%2C76%3B717975%2C0%2C47%3B708998%2C0%2C32%3B715191%2C0%2C94%3B716043%2C0%2C10%3B711772%2C0%2C8&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUk5cYuCcFs38SKXRZp0sy367zsUZVuSHbruLlCkjuI5HM6cOTOj7xMyrSjDsiSc40xmSCBZI4ZKLnPK5IJkmEpSyZSWCZ28efd98nV187SevJmsn%2F%2BavJo8rr88kk%2Fwqx9bnu9Pfrx%2FNVkgLhn%2Bo8FcyEWJapkzWkqU8YG9YA3uAwR26ERWC4ArlBR4dDh8yElFBAb%2F0jmfUSEviJjRRkgEvgtu8i7w%2FSByzwb%2FP5BRUcia0axJBT885jxoDJBn5qUHovICZ15AKmSBEly0UACSoKrCzJydwHW9sO9LhS8kn4M1%2FFOAFGWYybpAyxHU2KHId%2BJ45xCpajTFkguSzpcyI1yBZ23UEpXaLKeX8JjhVEiOi2IAjS%2FrIXRoO3vohg%2B9rFBVN%2BZbxnZoeTsAMWMQLcyYClMuecMWeAkhhyROJeGyAposUEGyE6BO4Ec7UJSp6C8VbzskQXWZdDVjBAut0IvCPVhRgIe0KpaybpKCpBLVpE0rpIQLqGwzmm1bvt0r2pIusKQF2JK3eCcEqnx%2F3kPbjTxrTzihiwIzTmg1sIRvOlE8tAUZcVrbpiIdpdrblHXf9PHhad0z85zIjfWRKuect6we2Yx52DNSscK4kjThGFI8ou%2Fd6sPNemDpBk6sc5CTS5DOSs4wmc6ErIT5SM93Yx3uJaoyfClZIzNaIlIZpdUKHTfYnZcwOgdn4Sw5ZSPujS3t0I%2BCoweqUhOMJEZzx7YCXQ5vceXIvIGqvCAZCCMpoWqNtp7tdXLe2naVLRPKVFIZykjDf%2FtJhCVSfmuHgfMXaGnUZN9zwy7OWa5Yy2taATEEKTHU3cDUsSxraOtZrr5zndIMqyLluDIKte%2F5ANNRSekVw4q72%2FOkkimjuReGzqE5SA78vFBFBOz8FYStAyBSzSBbrnXcusCIVbJUE8ECMYJG93YGh%2FqW1UW5ZoQyIpYyWUJrwhc1ZeaABWHQ1d6WF53Ep9zYPHwQ6KjHSBDhFIE%2BQ6NIU8gSN6iEH7u%2BbQ9sWxbz3RxRgzaTamoG8fxO3VLaVAKoLJY1lq7Za9Bsv5eekqUQJ04SUkDUzMfFYfCiJSi%2FTEH15ydO32KUTSGI7vYSBDYn0GmJukSOUnM1x5EThj0%2FOhA9h0ADA7Kp1p%2FAWKMqRjBaFCfmAMvxXM26KUOJY%2F4uUNTaf7dtT30D33Ys0%2FePVL7tv2CxJccMt%2B2H4QxzmJKN%2Ftm%2BE2hrNXAwnIPmzGAmmpLUbBe5ncC2swArVQUxXG37Xs1wYpb4ADTasQelBD2QAa8rqKYZhnwo2eYpUx2Oc6MSBXZse9qfnhGqa3WVKZSG2dixY3%2FgyYyI9ho9MAjmXFCzF27oOIO5N61LWeKMIAkgSJBF2%2BTNGLE73CbSOv3PGKPRPsM5goo6c6r3fCsIBmHiJWJCwmjVYAV%2BKkl%2BEAT7TUsPqSPP9MxK1djbDqiSFye8Cu2wq8ZUzd606liIcqVxJIdJEOsh30zHMIqDeDeK5YwADEyn2p60ZDrDPpkflPqBRRC7HWd7Fueur0EYe1a4Q4E%2BmCmE0nxy5AX2%2BGRNMvNZjtNNub3CULPcT1VHFHi2u9UMGIlgsYSrAmmk61h6Rmt7gh63Dle7A7wwcg9vIabmO0Caor3VXvK5rKGdQGeFnXeBy3FPnnz%2BIh%2Fvnz5ej9YuK3LGy6WW3SN57FbzE8mBrasrXl1esAXWUrC2QZ1qmUEce263wwyPzguqlyvt6AmQqCupl0Bapg7Ds3mWt6tneb3eXF0%2FvgBHKiXJc5ygRMJGYHIC1tkoHNS1loaLGVCuxz61yup1tIGG167eMI9hUEljuYe25XWTDWNS9z7RwAipZaMNdKtQzXR2chP1dN0X6O2yVRrZDuB9s%2B%2BTz%2BvHj9fl6uFqc9e18Nv7D5ubNf%2B4utncXU3eOD%2BG%2ByTMLT0SaI2FeVwmhWJCQYbb7LvJ7Wpz8%2FrhCXz7Z3X3af0Mn3%2Ff3K6u1l8Gj65Wt%2B2TT9%2FWd%2Frrq6%2Bbx3v98fZ175dPd5vuqULeIcCDh9W3m%2Ftv192fvz3o%2F58eVq%2Fv1n9%2FOfjCn6v7201r%2Bv74Ffvlu0%2BtOX3BlucDY8VPdCLxYLl%2Fc9CVbTtLcpjjYdXfbdNd0fWmVobVgjAkfiqK0VuiIPR%2BER8mt8X2lJ88pP%2BCbfe2TrFDVe34jd5IeT4%2B3oyobFt2NyvzbD5%2BoQChC2xvFEz1RFmIKVUbDYV0FJKV9fHx8%2BBEz7K9g5aQUq5mcgnMn2MBH1Noi4mojq52GRaIFHwIG8ZdcR%2BDXaIO2cyTHYbK46JGxLCWWgPlikDx9pZ60%2FgFS8VsBPo2U1QhJUyx%2B1WlfcOFFal66mcM9a9gnwGYNHkOWLisgccFIJ531868HQLOjZWaILYVBecXSGAz6Xx7u%2F4rnT5Cc8tzRzRXT368%2F%2FEvyqoxHQ%3D%3D&use-server-side-rendering=1&pcode-icookie=90fmSLeavdcrRDkCZ7TsRba%2BpuUUGZkHuhuyd5sr9MSYgeP2%2FNBVo3MQGio5lzzFjxxcsTq%2FnMJbPpxvsu2BS1V1FuQ%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqgycSPJ80EY1vtg5V81A5uImPBM-U3WrUsnYSXob9JxUnPT5m3DTCRYFkwLNrW2AWJOLJMv6Rc6ada13cCBW5dIRiQiEZEhEIkISBSEDSIJYeNMSFtWWpnjxwb7ZpZnht5EEDaJQoKwgSkwHTIJ7lPcycj_dRtTiXL-nT5ju_EbMkGLarMI2s9hEWKP7S2QxppAdZQI6se561Qf3sY9NKbkkextlBq_RnjbprLLx1-mXYm9VPRaqsvXLAN6G22mBG8rU_8Ve3vbZfRZZK4Ta868HXRJjBIovsP8WLEoR3V0rEg74Dl7_czq5IJBK2yLTGI1Fbm11R4f98hFGQVTj2GKTK3oZZl51mFb7uZ5ER-NS4Uk1obketWXlFsIdQvNktXZdnyYuOQW82xd16ID6RX7Of3ms9f6GF8XTLIt0DvmDiOxgzdjva9LC0dyOSvFbuAcCTngZKNS1XORFU481_OkK701x89dvYFfcVJmFStdwIry2ZjpnAf8HRnm6hbMKROjDcFu_EVMoAYWS4AKfzFmKfha4LuHwCQPWT2-uoIHcmmXnSnHWCpa0Fw_UV05G0-BGGG5dG9KU2H1pmEUucal_uhz-zMY6sVPOA8LdOT4N05Ui8Pnooqvpgut6hawrWAfl6Y2j911pfs4MJRU9mPDaNvPfIZLP3p-c4xTb73iWFPfQ3QD_hwOGOA0DhP3xT4J1NMJ-h0ZzSpTlGvwa6-30biSKloxzw17BEqbOVg0MkCHOXAf99z-ZoctF3P8mYDgCW6jV0WWBr_bNL8tpU3jtdJOJwr0PbMFG4iJRVL6SSuRQHXM7N1ySVv3CJ3N8wYjGL1odgxOB9iCV_Jj-2MAgPHDwZ2KHw_g5wF1mEPk2MGqp0DRzWT67TiohIqhGBi7VjIBQC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BURx-U_G6_ClRFoZ3DGChFCOtAOs6UuRk7aQPag6pM7xfQfRgyZ1kSki1zcoR6DcuHmGVE-Yv2hf4nkJPoyrC6ND_9ojcOF72wK6nPg-zSLHzYvNrYMaFSA_q2kX_JbTuRtqdMD-D3MaOJ4mVW5M2qYtEvqZ2J66Gdymg_5wxvMZMoRKiyYtMoOLyAwuIrF85MQ_ZukcRR6W5hVARARGpMjSy7x0W3T9zDfoYrmmCN2ClM5VxbRoUZNC98Eezghi1Ih8sNfh58SN9RoUF7aXazYsLDiIG_zJbj6ptPMHEeoHRBqF6eJiSbFjma14eVWqDcDuQQkG4GJA_w%3D%3D&tga-with-creatives=1
200 OK 0 B URL HTTP/2 yandex.ru/ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&date=2023-02-07T07%3A26%3A42.027%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=1643753791&pr=4134025068&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786413182981&is-turbo=0&skip-token=&ad-session-id=4766401675754802031&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=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%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&pcode-test-ids=706743%2C0%2C46%3B657518%2C0%2C44%3B685674%2C0%2C60%3B711101%2C0%2C23%3B716614%2C0%2C36%3B714014%2C0%2C76%3B717975%2C0%2C47%3B708998%2C0%2C32%3B715191%2C0%2C94%3B716043%2C0%2C10%3B711772%2C0%2C8&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUk5cYuCcFs38SKXRZp0sy367zsUZVuSHbruLlCkjuI5HM6cOTOj7xMyrSjDsiSc40xmSCBZI4ZKLnPK5IJkmEpSyZSWCZ28efd98nV187SevJmsn%2F%2BavJo8rr88kk%2Fwqx9bnu9Pfrx%2FNVkgLhn%2Bo8FcyEWJapkzWkqU8YG9YA3uAwR26ERWC4ArlBR4dDh8yElFBAb%2F0jmfUSEviJjRRkgEvgtu8i7w%2FSByzwb%2FP5BRUcia0axJBT885jxoDJBn5qUHovICZ15AKmSBEly0UACSoKrCzJydwHW9sO9LhS8kn4M1%2FFOAFGWYybpAyxHU2KHId%2BJ45xCpajTFkguSzpcyI1yBZ23UEpXaLKeX8JjhVEiOi2IAjS%2FrIXRoO3vohg%2B9rFBVN%2BZbxnZoeTsAMWMQLcyYClMuecMWeAkhhyROJeGyAposUEGyE6BO4Ec7UJSp6C8VbzskQXWZdDVjBAut0IvCPVhRgIe0KpaybpKCpBLVpE0rpIQLqGwzmm1bvt0r2pIusKQF2JK3eCcEqnx%2F3kPbjTxrTzihiwIzTmg1sIRvOlE8tAUZcVrbpiIdpdrblHXf9PHhad0z85zIjfWRKuect6we2Yx52DNSscK4kjThGFI8ou%2Fd6sPNemDpBk6sc5CTS5DOSs4wmc6ErIT5SM93Yx3uJaoyfClZIzNaIlIZpdUKHTfYnZcwOgdn4Sw5ZSPujS3t0I%2BCoweqUhOMJEZzx7YCXQ5vceXIvIGqvCAZCCMpoWqNtp7tdXLe2naVLRPKVFIZykjDf%2FtJhCVSfmuHgfMXaGnUZN9zwy7OWa5Yy2taATEEKTHU3cDUsSxraOtZrr5zndIMqyLluDIKte%2F5ANNRSekVw4q72%2FOkkimjuReGzqE5SA78vFBFBOz8FYStAyBSzSBbrnXcusCIVbJUE8ECMYJG93YGh%2FqW1UW5ZoQyIpYyWUJrwhc1ZeaABWHQ1d6WF53Ep9zYPHwQ6KjHSBDhFIE%2BQ6NIU8gSN6iEH7u%2BbQ9sWxbz3RxRgzaTamoG8fxO3VLaVAKoLJY1lq7Za9Bsv5eekqUQJ04SUkDUzMfFYfCiJSi%2FTEH15ydO32KUTSGI7vYSBDYn0GmJukSOUnM1x5EThj0%2FOhA9h0ADA7Kp1p%2FAWKMqRjBaFCfmAMvxXM26KUOJY%2F4uUNTaf7dtT30D33Ys0%2FePVL7tv2CxJccMt%2B2H4QxzmJKN%2Ftm%2BE2hrNXAwnIPmzGAmmpLUbBe5ncC2swArVQUxXG37Xs1wYpb4ADTasQelBD2QAa8rqKYZhnwo2eYpUx2Oc6MSBXZse9qfnhGqa3WVKZSG2dixY3%2FgyYyI9ho9MAjmXFCzF27oOIO5N61LWeKMIAkgSJBF2%2BTNGLE73CbSOv3PGKPRPsM5goo6c6r3fCsIBmHiJWJCwmjVYAV%2BKkl%2BEAT7TUsPqSPP9MxK1djbDqiSFye8Cu2wq8ZUzd606liIcqVxJIdJEOsh30zHMIqDeDeK5YwADEyn2p60ZDrDPpkflPqBRRC7HWd7Fueur0EYe1a4Q4E%2BmCmE0nxy5AX2%2BGRNMvNZjtNNub3CULPcT1VHFHi2u9UMGIlgsYSrAmmk61h6Rmt7gh63Dle7A7wwcg9vIabmO0Caor3VXvK5rKGdQGeFnXeBy3FPnnz%2BIh%2Fvnz5ej9YuK3LGy6WW3SN57FbzE8mBrasrXl1esAXWUrC2QZ1qmUEce263wwyPzguqlyvt6AmQqCupl0Bapg7Ds3mWt6tneb3eXF0%2FvgBHKiXJc5ygRMJGYHIC1tkoHNS1loaLGVCuxz61yup1tIGG167eMI9hUEljuYe25XWTDWNS9z7RwAipZaMNdKtQzXR2chP1dN0X6O2yVRrZDuB9s%2B%2BTz%2BvHj9fl6uFqc9e18Nv7D5ubNf%2B4utncXU3eOD%2BG%2ByTMLT0SaI2FeVwmhWJCQYbb7LvJ7Wpz8%2FrhCXz7Z3X3af0Mn3%2Ff3K6u1l8Gj65Wt%2B2TT9%2FWd%2Frrq6%2Bbx3v98fZ175dPd5vuqULeIcCDh9W3m%2Ftv192fvz3o%2F58eVq%2Fv1n9%2FOfjCn6v7201r%2Bv74Ffvlu0%2BtOX3BlucDY8VPdCLxYLl%2Fc9CVbTtLcpjjYdXfbdNd0fWmVobVgjAkfiqK0VuiIPR%2BER8mt8X2lJ88pP%2BCbfe2TrFDVe34jd5IeT4%2B3oyobFt2NyvzbD5%2BoQChC2xvFEz1RFmIKVUbDYV0FJKV9fHx8%2BBEz7K9g5aQUq5mcgnMn2MBH1Noi4mojq52GRaIFHwIG8ZdcR%2BDXaIO2cyTHYbK46JGxLCWWgPlikDx9pZ60%2FgFS8VsBPo2U1QhJUyx%2B1WlfcOFFal66mcM9a9gnwGYNHkOWLisgccFIJ531868HQLOjZWaILYVBecXSGAz6Xx7u%2F4rnT5Cc8tzRzRXT368%2F%2FEvyqoxHQ%3D%3D&use-server-side-rendering=1&pcode-icookie=90fmSLeavdcrRDkCZ7TsRba%2BpuUUGZkHuhuyd5sr9MSYgeP2%2FNBVo3MQGio5lzzFjxxcsTq%2FnMJbPpxvsu2BS1V1FuQ%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqgycSPJ80EY1vtg5V81A5uImPBM-U3WrUsnYSXob9JxUnPT5m3DTCRYFkwLNrW2AWJOLJMv6Rc6ada13cCBW5dIRiQiEZEhEIkISBSEDSIJYeNMSFtWWpnjxwb7ZpZnht5EEDaJQoKwgSkwHTIJ7lPcycj_dRtTiXL-nT5ju_EbMkGLarMI2s9hEWKP7S2QxppAdZQI6se561Qf3sY9NKbkkextlBq_RnjbprLLx1-mXYm9VPRaqsvXLAN6G22mBG8rU_8Ve3vbZfRZZK4Ta868HXRJjBIovsP8WLEoR3V0rEg74Dl7_czq5IJBK2yLTGI1Fbm11R4f98hFGQVTj2GKTK3oZZl51mFb7uZ5ER-NS4Uk1obketWXlFsIdQvNktXZdnyYuOQW82xd16ID6RX7Of3ms9f6GF8XTLIt0DvmDiOxgzdjva9LC0dyOSvFbuAcCTngZKNS1XORFU481_OkK701x89dvYFfcVJmFStdwIry2ZjpnAf8HRnm6hbMKROjDcFu_EVMoAYWS4AKfzFmKfha4LuHwCQPWT2-uoIHcmmXnSnHWCpa0Fw_UV05G0-BGGG5dG9KU2H1pmEUucal_uhz-zMY6sVPOA8LdOT4N05Ui8Pnooqvpgut6hawrWAfl6Y2j911pfs4MJRU9mPDaNvPfIZLP3p-c4xTb73iWFPfQ3QD_hwOGOA0DhP3xT4J1NMJ-h0ZzSpTlGvwa6-30biSKloxzw17BEqbOVg0MkCHOXAf99z-ZoctF3P8mYDgCW6jV0WWBr_bNL8tpU3jtdJOJwr0PbMFG4iJRVL6SSuRQHXM7N1ySVv3CJ3N8wYjGL1odgxOB9iCV_Jj-2MAgPHDwZ2KHw_g5wF1mEPk2MGqp0DRzWT67TiohIqhGBi7VjIBQC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BURx-U_G6_ClRFoZ3DGChFCOtAOs6UuRk7aQPag6pM7xfQfRgyZ1kSki1zcoR6DcuHmGVE-Yv2hf4nkJPoyrC6ND_9ojcOF72wK6nPg-zSLHzYvNrYMaFSA_q2kX_JbTuRtqdMD-D3MaOJ4mVW5M2qYtEvqZ2J66Gdymg_5wxvMZMoRKiyYtMoOLyAwuIrF85MQ_ZukcRR6W5hVARARGpMjSy7x0W3T9zDfoYrmmCN2ClM5VxbRoUZNC98Eezghi1Ih8sNfh58SN9RoUF7aXazYsLDiIG_zJbj6ptPMHEeoHRBqF6eJiSbFjma14eVWqDcDuQQkG4GJA_w%3D%3D&tga-with-creatives=1
IP
GET /ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2Fn2Y7vRjukX6QRr&date=2023-02-07T07%3A26%3A42.027%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=1643753791&pr=4134025068&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786413182981&is-turbo=0&skip-token=&ad-session-id=4766401675754802031&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=W3siYmlkZGVyTmFtZSI6ImJldHdlZW5kaWdpdGFsIiwiY2FtcGFpZ25faWQiOjk1Nzg5MywicmVzcG9uc2VfdGltZSI6NjYzLCJlcnJvciI6eyJjb2RlIjoxfSwicGxhY2VtZW50X2lkIjoiNDU4OTU1NCJ9LHsiYmlkZGVyTmFtZSI6Im90bSIsImNhbXBhaWduX2lkIjoxNTM2MTMxLCJyZXNwb25zZV90aW1lIjozODYsImVycm9yIjp7ImNvZGUiOjF9LCJwbGFjZW1lbnRfaWQiOiIzNDQ3MCJ9LHsiYmlkZGVyTmFtZSI6ImdldGludGVudCIsImNhbXBhaWduX2lkIjoxMDQ4ODk5LCJyZXNwb25zZV90aW1lIjoxMDAyLCJlcnJvciI6eyJjb2RlIjozfSwicGxhY2VtZW50X2lkIjoiNjZfMjQweDQwMF8xX2FsZmFkYXJ0In0seyJiaWRkZXJOYW1lIjoicnRiaG91c2UiLCJjYW1wYWlnbl9pZCI6MTAxOTEwNSwicmVzcG9uc2VfdGltZSI6Mzg1LCJlcnJvciI6eyJjb2RlIjo0fSwicGxhY2VtZW50X2lkIjoiU01YRjJpMlA5aHhsdnNVbGJZdTEifSx7ImJpZGRlck5hbWUiOiJteXRhcmdldCIsImNhbXBhaWduX2lkIjo5NTI5NjEsInJlc3BvbnNlX3RpbWUiOjQzMiwiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6IjEwNzMxNjUifSx7ImJpZGRlck5hbWUiOiJiaWR2b2wiLCJjYW1wYWlnbl9pZCI6MTQ0NTcyNSwicmVzcG9uc2VfdGltZSI6Mzg1LCJlcnJvciI6eyJjb2RlIjoxfSwicGxhY2VtZW50X2lkIjoiMjU0MzIifSx7ImJpZGRlck5hbWUiOiJzYXBlIiwiY2FtcGFpZ25faWQiOjE2NzI2OTcsInJlc3BvbnNlX3RpbWUiOjQ3NCwiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6Ijc3MDc4MCJ9LHsiYmlkZGVyTmFtZSI6ImJ1enpvb2xhIiwiY2FtcGFpZ25faWQiOjk1NzEyOSwicmVzcG9uc2VfdGltZSI6NzU3LCJlcnJvciI6eyJjb2RlIjoxfSwicGxhY2VtZW50X2lkIjoiMTIzNDc3OCJ9LHsiYmlkZGVyTmFtZSI6Imh5YnJpZCIsImNhbXBhaWduX2lkIjoxODc5NzU5LCJyZXNwb25zZV90aW1lIjo0MDMsImVycm9yIjp7ImNvZGUiOjF9LCJwbGFjZW1lbnRfaWQiOiI2MmJhZGQ3MGZhMWUyZWE4NTA2OGVjMTQifSx7ImJpZGRlck5hbWUiOiJrYWRhbSIsImNhbXBhaWduX2lkIjoxOTkzMTQ2LCJyZXNwb25zZV90aW1lIjozODYsImVycm9yIjp7ImNvZGUiOjR9LCJwbGFjZW1lbnRfaWQiOiIzMjc5MTAifV0%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMTgxNDM1NTc0NQ%3D%3D&pcode-test-ids=706743%2C0%2C46%3B657518%2C0%2C44%3B685674%2C0%2C60%3B711101%2C0%2C23%3B716614%2C0%2C36%3B714014%2C0%2C76%3B717975%2C0%2C47%3B708998%2C0%2C32%3B715191%2C0%2C94%3B716043%2C0%2C10%3B711772%2C0%2C8&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUk5cYuCcFs38SKXRZp0sy367zsUZVuSHbruLlCkjuI5HM6cOTOj7xMyrSjDsiSc40xmSCBZI4ZKLnPK5IJkmEpSyZSWCZ28efd98nV187SevJmsn%2F%2BavJo8rr88kk%2Fwqx9bnu9Pfrx%2FNVkgLhn%2Bo8FcyEWJapkzWkqU8YG9YA3uAwR26ERWC4ArlBR4dDh8yElFBAb%2F0jmfUSEviJjRRkgEvgtu8i7w%2FSByzwb%2FP5BRUcia0axJBT885jxoDJBn5qUHovICZ15AKmSBEly0UACSoKrCzJydwHW9sO9LhS8kn4M1%2FFOAFGWYybpAyxHU2KHId%2BJ45xCpajTFkguSzpcyI1yBZ23UEpXaLKeX8JjhVEiOi2IAjS%2FrIXRoO3vohg%2B9rFBVN%2BZbxnZoeTsAMWMQLcyYClMuecMWeAkhhyROJeGyAposUEGyE6BO4Ec7UJSp6C8VbzskQXWZdDVjBAut0IvCPVhRgIe0KpaybpKCpBLVpE0rpIQLqGwzmm1bvt0r2pIusKQF2JK3eCcEqnx%2F3kPbjTxrTzihiwIzTmg1sIRvOlE8tAUZcVrbpiIdpdrblHXf9PHhad0z85zIjfWRKuect6we2Yx52DNSscK4kjThGFI8ou%2Fd6sPNemDpBk6sc5CTS5DOSs4wmc6ErIT5SM93Yx3uJaoyfClZIzNaIlIZpdUKHTfYnZcwOgdn4Sw5ZSPujS3t0I%2BCoweqUhOMJEZzx7YCXQ5vceXIvIGqvCAZCCMpoWqNtp7tdXLe2naVLRPKVFIZykjDf%2FtJhCVSfmuHgfMXaGnUZN9zwy7OWa5Yy2taATEEKTHU3cDUsSxraOtZrr5zndIMqyLluDIKte%2F5ANNRSekVw4q72%2FOkkimjuReGzqE5SA78vFBFBOz8FYStAyBSzSBbrnXcusCIVbJUE8ECMYJG93YGh%2FqW1UW5ZoQyIpYyWUJrwhc1ZeaABWHQ1d6WF53Ep9zYPHwQ6KjHSBDhFIE%2BQ6NIU8gSN6iEH7u%2BbQ9sWxbz3RxRgzaTamoG8fxO3VLaVAKoLJY1lq7Za9Bsv5eekqUQJ04SUkDUzMfFYfCiJSi%2FTEH15ydO32KUTSGI7vYSBDYn0GmJukSOUnM1x5EThj0%2FOhA9h0ADA7Kp1p%2FAWKMqRjBaFCfmAMvxXM26KUOJY%2F4uUNTaf7dtT30D33Ys0%2FePVL7tv2CxJccMt%2B2H4QxzmJKN%2Ftm%2BE2hrNXAwnIPmzGAmmpLUbBe5ncC2swArVQUxXG37Xs1wYpb4ADTasQelBD2QAa8rqKYZhnwo2eYpUx2Oc6MSBXZse9qfnhGqa3WVKZSG2dixY3%2FgyYyI9ho9MAjmXFCzF27oOIO5N61LWeKMIAkgSJBF2%2BTNGLE73CbSOv3PGKPRPsM5goo6c6r3fCsIBmHiJWJCwmjVYAV%2BKkl%2BEAT7TUsPqSPP9MxK1djbDqiSFye8Cu2wq8ZUzd606liIcqVxJIdJEOsh30zHMIqDeDeK5YwADEyn2p60ZDrDPpkflPqBRRC7HWd7Fueur0EYe1a4Q4E%2BmCmE0nxy5AX2%2BGRNMvNZjtNNub3CULPcT1VHFHi2u9UMGIlgsYSrAmmk61h6Rmt7gh63Dle7A7wwcg9vIabmO0Caor3VXvK5rKGdQGeFnXeBy3FPnnz%2BIh%2Fvnz5ej9YuK3LGy6WW3SN57FbzE8mBrasrXl1esAXWUrC2QZ1qmUEce263wwyPzguqlyvt6AmQqCupl0Bapg7Ds3mWt6tneb3eXF0%2FvgBHKiXJc5ygRMJGYHIC1tkoHNS1loaLGVCuxz61yup1tIGG167eMI9hUEljuYe25XWTDWNS9z7RwAipZaMNdKtQzXR2chP1dN0X6O2yVRrZDuB9s%2B%2BTz%2BvHj9fl6uFqc9e18Nv7D5ubNf%2B4utncXU3eOD%2BG%2ByTMLT0SaI2FeVwmhWJCQYbb7LvJ7Wpz8%2FrhCXz7Z3X3af0Mn3%2Ff3K6u1l8Gj65Wt%2B2TT9%2FWd%2Frrq6%2Bbx3v98fZ175dPd5vuqULeIcCDh9W3m%2Ftv192fvz3o%2F58eVq%2Fv1n9%2FOfjCn6v7201r%2Bv74Ffvlu0%2BtOX3BlucDY8VPdCLxYLl%2Fc9CVbTtLcpjjYdXfbdNd0fWmVobVgjAkfiqK0VuiIPR%2BER8mt8X2lJ88pP%2BCbfe2TrFDVe34jd5IeT4%2B3oyobFt2NyvzbD5%2BoQChC2xvFEz1RFmIKVUbDYV0FJKV9fHx8%2BBEz7K9g5aQUq5mcgnMn2MBH1Noi4mojq52GRaIFHwIG8ZdcR%2BDXaIO2cyTHYbK46JGxLCWWgPlikDx9pZ60%2FgFS8VsBPo2U1QhJUyx%2B1WlfcOFFal66mcM9a9gnwGYNHkOWLisgccFIJ531868HQLOjZWaILYVBecXSGAz6Xx7u%2F4rnT5Cc8tzRzRXT368%2F%2FEvyqoxHQ%3D%3D&use-server-side-rendering=1&pcode-icookie=90fmSLeavdcrRDkCZ7TsRba%2BpuUUGZkHuhuyd5sr9MSYgeP2%2FNBVo3MQGio5lzzFjxxcsTq%2FnMJbPpxvsu2BS1V1FuQ%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqgycSPJ80EY1vtg5V81A5uImPBM-U3WrUsnYSXob9JxUnPT5m3DTCRYFkwLNrW2AWJOLJMv6Rc6ada13cCBW5dIRiQiEZEhEIkISBSEDSIJYeNMSFtWWpnjxwb7ZpZnht5EEDaJQoKwgSkwHTIJ7lPcycj_dRtTiXL-nT5ju_EbMkGLarMI2s9hEWKP7S2QxppAdZQI6se561Qf3sY9NKbkkextlBq_RnjbprLLx1-mXYm9VPRaqsvXLAN6G22mBG8rU_8Ve3vbZfRZZK4Ta868HXRJjBIovsP8WLEoR3V0rEg74Dl7_czq5IJBK2yLTGI1Fbm11R4f98hFGQVTj2GKTK3oZZl51mFb7uZ5ER-NS4Uk1obketWXlFsIdQvNktXZdnyYuOQW82xd16ID6RX7Of3ms9f6GF8XTLIt0DvmDiOxgzdjva9LC0dyOSvFbuAcCTngZKNS1XORFU481_OkK701x89dvYFfcVJmFStdwIry2ZjpnAf8HRnm6hbMKROjDcFu_EVMoAYWS4AKfzFmKfha4LuHwCQPWT2-uoIHcmmXnSnHWCpa0Fw_UV05G0-BGGG5dG9KU2H1pmEUucal_uhz-zMY6sVPOA8LdOT4N05Ui8Pnooqvpgut6hawrWAfl6Y2j911pfs4MJRU9mPDaNvPfIZLP3p-c4xTb73iWFPfQ3QD_hwOGOA0DhP3xT4J1NMJ-h0ZzSpTlGvwa6-30biSKloxzw17BEqbOVg0MkCHOXAf99z-ZoctF3P8mYDgCW6jV0WWBr_bNL8tpU3jtdJOJwr0PbMFG4iJRVL6SSuRQHXM7N1ySVv3CJ3N8wYjGL1odgxOB9iCV_Jj-2MAgPHDwZ2KHw_g5wF1mEPk2MGqp0DRzWT67TiohIqhGBi7VjIBQC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BURx-U_G6_ClRFoZ3DGChFCOtAOs6UuRk7aQPag6pM7xfQfRgyZ1kSki1zcoR6DcuHmGVE-Yv2hf4nkJPoyrC6ND_9ojcOF72wK6nPg-zSLHzYvNrYMaFSA_q2kX_JbTuRtqdMD-D3MaOJ4mVW5M2qYtEvqZ2J66Gdymg_5wxvMZMoRKiyYtMoOLyAwuIrF85MQ_ZukcRR6W5hVARARGpMjSy7x0W3T9zDfoYrmmCN2ClM5VxbRoUZNC98Eezghi1Ih8sNfh58SN9RoUF7aXazYsLDiIG_zJbj6ptPMHEeoHRBqF6eJiSbFjma14eVWqDcDuQQkG4GJA_w%3D%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://joxi.net
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1675754753435691-7551787601322114535-sas2-0903-sas-l7-balancer-8080-BAL-2682
last-modified: Tue, 07 Feb 2023 07:25:53 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Tue, 07 Feb 2023 07:25:53 GMT
set-cookie: yandexuid=6221145351675754753; Path=/; Domain=.yandex.ru; Expires=Fri, 04-Feb-2033 07:25:53 GMT; SameSite=None; Secure
i=95Du5H2XbR7m6u4MhxtcRdvFuzTeJrBSg0R2YqMlB/+kJNnNEmz6c9ysVREwblSnbbO/BT1gdnB/ixNMhXjHMqaaxDQ=; Expires=Thu, 06-Feb-2025 07:25:53 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=4562952301675754753; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:53 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Tue, 07 Feb 2023 07:25:53 GMT
X-Firefox-Spdy: h2
ads.digitalcaramel.com/js/joxi.ru.js
200 OK 0 B URL HTTP/2 ads.digitalcaramel.com/js/joxi.ru.js
IP
ASN #24940 Hetzner Online GmbH
GET /js/joxi.ru.js HTTP/1.1
Host: ads.digitalcaramel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:51 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 23 Aug 2022 11:46:50 GMT
vary: Accept-Encoding
etag: W/"6304be2a-1b3e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15724800; includeSubdomains; preload
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
78.47.21.152
142.250.74.110
77.88.21.179
104.18.21.226
37.48.117.210
95.101.11.115
188.42.34.65