rubos.my1.ru/
9.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2391)
Hash 3f89786ec0bc5ef5fbe7df4df49c4576
8a9ffc77c16d97cab957638f03304d893586f799
92468d1bdc1feadd80029d76191037c2cd3501b1942d1856c77a6e4ce7144d70
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET / HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=LeqLSL4efblD8sgejbew
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:30 GMT
Content-Type: text/html; charset=UTF-8
Set-Cookie: 5rubosuCoz=; path=/; expires=Wed, 01-Dec-2021 19:04:30 GMT; HttpOnly; domain=.rubos.my1.ru
5rubosuzll=1701457470; path=/; expires=Sat, 30-Nov-2024 19:04:30 GMT; domain=.rubos.my1.ru
5rubosuCoz=; path=/; expires=Wed, 01-Dec-2021 19:04:30 GMT; HttpOnly; domain=.rubos.my1.ru
5rubospushi=1; path=/; expires=Sat, 02-Dec-2023 18:04:30 GMT
Pragma: no-cache
Vary: host
Last-Modified: Tue, 14 Mar 2023 17:39:31 GMT
Cache-Control: no-cache,no-store, private
Content-Encoding: gzip
Transfer-Encoding: chunked
rubos.my1.ru/?lnhbrnPI9FYsNTFagjYwhhdPSbXrwzpm%217Qm%5EaWt0inyVNcSJpweJzOzM03tVwSrCLJp18GJuAlURF85rm8VJSmVg5AxOTPVrDtr7MO8slSIaG7%5EzwJvjyS2zNk%5EDV6TlQ1Jz7OncdUdAj6qhl14zgXXWvNgEAVhnqMGGr11RKChah4HAmqfnhKkmwlBWLp1eps1t1IlW%5E5qrQKkY77g
200 OK 622 B URL GET HTTP/1.1 rubos.my1.ru/?lnhbrnPI9FYsNTFagjYwhhdPSbXrwzpm%217Qm%5EaWt0inyVNcSJpweJzOzM03tVwSrCLJp18GJuAlURF85rm8VJSmVg5AxOTPVrDtr7MO8slSIaG7%5EzwJvjyS2zNk%5EDV6TlQ1Jz7OncdUdAj6qhl14zgXXWvNgEAVhnqMGGr11RKChah4HAmqfnhKkmwlBWLp1eps1t1IlW%5E5qrQKkY77g
IP
Hash 6006214945f80fd08a3d1d3762c3e3ea
aad7c5fe34f6f1a99c13866725eefff747e8e981
35228d6eb2dd2a015f595b07a6aa5fd9f6bd33cf48c2ff4346113289cad851a4
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /?lnhbrnPI9FYsNTFagjYwhhdPSbXrwzpm%217Qm%5EaWt0inyVNcSJpweJzOzM03tVwSrCLJp18GJuAlURF85rm8VJSmVg5AxOTPVrDtr7MO8slSIaG7%5EzwJvjyS2zNk%5EDV6TlQ1Jz7OncdUdAj6qhl14zgXXWvNgEAVhnqMGGr11RKChah4HAmqfnhKkmwlBWLp1eps1t1IlW%5E5qrQKkY77g HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:30 GMT
Content-Type: application/javascript; charset=UTF-8
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
rubos.my1.ru/.s/src/layer7.min.css
7.5 kB URL rubos.my1.ru/.s/src/layer7.min.css
IP
File type ASCII text, with very long lines (26874), with no line terminators
Hash 45971ba86dea543c14c85d20bb78df14
50674425536d5f4005ef53e04cce6a71b400579b
064e1c87b749fa97213e1187d02cd7ef117c0cd77a1079175a897887f251a2a5
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/layer7.min.css HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:28:29 GMT
Content-Type: text/css
Last-Modified: Tue, 14 Nov 2023 13:55:58 GMT
ETag: W/"65537c6e-68fa"
Expires: Wed, 20 Dec 2023 20:28:29 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 81362
Content-Length: 7476
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/src/css/786.css
4.8 kB URL rubos.my1.ru/.s/src/css/786.css
IP
Hash 3561b0c3495dd79855c34d454b269d0b
f17a564b615dee46254451e5a6b658c8e6ad66ae
ca1502ddc44a75abff73fd52bd8631c0ae9faa101e83d4e873acf25beb62d73f
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/css/786.css HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:44 GMT
Content-Type: text/css
Last-Modified: Wed, 26 May 2021 12:20:25 GMT
ETag: W/"60ae3d09-4498"
Expires: Wed, 20 Dec 2023 22:23:44 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 74447
Content-Length: 4791
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/src/ulightbox/ulightbox.min.css
200 OK 1.4 kB URL GET HTTP/1.1 rubos.my1.ru/.s/src/ulightbox/ulightbox.min.css
IP
File type ASCII text, with very long lines (4552), with no line terminators
Hash a05316c4712b56d4de87d83d57fc9a74
22db34df3400db68355d8b3e06c01c4f964ad484
5ddb669cd05d5c481a798631d2bd02b041950600ebaa4d419833fe0f01a04955
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/ulightbox/ulightbox.min.css HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:28:29 GMT
Content-Type: text/css
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
ETag: W/"628cd15d-11c8"
Expires: Wed, 20 Dec 2023 20:28:29 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 81362
Content-Length: 1359
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/src/base.min.css
200 OK 6.5 kB URL GET HTTP/1.1 rubos.my1.ru/.s/src/base.min.css
IP
File type ASCII text, with very long lines (25422), with no line terminators
Hash 1751094c3675691614e58d436b8207a3
5d393b7a172706dc864ccd92e4c0eacd9da2d7dc
8641e0eda2a09ed1527f65124909e13816d66257eb890f5c7e1b96e0fda6adeb
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/base.min.css HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:45 GMT
Content-Type: text/css
Last-Modified: Tue, 14 Nov 2023 13:55:58 GMT
ETag: W/"65537c6e-634e"
Expires: Wed, 20 Dec 2023 22:23:45 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 74446
Content-Length: 6480
DDG-Cache-Status: HIT,HIT
s7.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.0998432728964254
200 OK 0 B URL GET HTTP/1.1 s7.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.0998432728964254
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.0998432728964254 HTTP/1.1
Host: s7.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1_=tbdmW77vSMtDic1oa4zs; Domain=.ucoz.net; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:31 GMT
Date: Fri, 01 Dec 2023 19:04:30 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
rubos.my1.ru/.s/src/jquery-1.12.4.min.js
200 OK 34 kB URL GET HTTP/1.1 rubos.my1.ru/.s/src/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/jquery-1.12.4.min.js HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 17:20:58 GMT
Content-Type: text/javascript
Last-Modified: Tue, 17 Oct 2023 07:17:23 GMT
ETag: W/"652e3503-17b8b"
Expires: Wed, 20 Dec 2023 17:20:58 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 92613
Content-Length: 33793
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/?qI%3BzklrWj%5EQk4Ye7yBs7wlVFWX1E71qgO9YsAtOgTct0m3A0m%5ELCAt3%21aOJ6ShSRuDT7PVq1pl0Hm%3BOSKf54Dgmb4T%3BU7bQk3pQzUxf9Cn422d1KlKVz2pBZZ4GRMh%21kO5MgV4SRVinyq3nyEgNafkNL7wIkUasS6VswiKMBh69q6J0NeQU66GNBdqjGEuYgp1QNl7HLYppnOwt57eUo
335 B URL rubos.my1.ru/?qI%3BzklrWj%5EQk4Ye7yBs7wlVFWX1E71qgO9YsAtOgTct0m3A0m%5ELCAt3%21aOJ6ShSRuDT7PVq1pl0Hm%3BOSKf54Dgmb4T%3BU7bQk3pQzUxf9Cn422d1KlKVz2pBZZ4GRMh%21kO5MgV4SRVinyq3nyEgNafkNL7wIkUasS6VswiKMBh69q6J0NeQU66GNBdqjGEuYgp1QNl7HLYppnOwt57eUo
IP
Hash 011f8c0acd9d903bfd185e1b3de02cd5
697b78b75eb4493aa2ac3bf38331db6667afe637
b5012c7fb972712c55217c85e1ec389663d48b276018fabee16feb0cf412121f
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /?qI%3BzklrWj%5EQk4Ye7yBs7wlVFWX1E71qgO9YsAtOgTct0m3A0m%5ELCAt3%21aOJ6ShSRuDT7PVq1pl0Hm%3BOSKf54Dgmb4T%3BU7bQk3pQzUxf9Cn422d1KlKVz2pBZZ4GRMh%21kO5MgV4SRVinyq3nyEgNafkNL7wIkUasS6VswiKMBh69q6J0NeQU66GNBdqjGEuYgp1QNl7HLYppnOwt57eUo HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:30 GMT
Content-Type: application/javascript; charset=UTF-8
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
rubos.my1.ru/.s/src/social.css
200 OK 610 B URL GET HTTP/1.1 rubos.my1.ru/.s/src/social.css
IP
File type ASCII text, with very long lines (442)
Hash 917872d4bcfea5e238f1f02cef7a9596
84c5e7eb25c8d7b11639ea428a9fac50bab26f84
12c919cc8994233c2f67bdcf1185997781ccfe1ce3405308e31bfd33d260bd74
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/social.css HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:45 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Dec 2021 11:13:55 GMT
ETag: W/"61a758f3-9b8"
Expires: Wed, 20 Dec 2023 22:23:45 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 74446
Content-Length: 610
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/src/ulightbox/ulightbox.min.js
7.6 kB URL rubos.my1.ru/.s/src/ulightbox/ulightbox.min.js
IP
File type ASCII text, with very long lines (21832), with no line terminators
Hash f8885e861eba58ae642b08cdd18d965c
7bde2d4bd9d8013a471121b8e1e03b471f485334
7f8ef94f5ff6fc7281a813bda646bc54cf1b6f8f3618ac4f4d40b215e8a70948
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/ulightbox/ulightbox.min.js HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 17:20:58 GMT
Content-Type: text/javascript
Last-Modified: Thu, 19 Oct 2023 13:18:15 GMT
ETag: W/"65312c97-5548"
Expires: Wed, 20 Dec 2023 17:20:58 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 92613
Content-Length: 7619
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/src/uwnd.min.js
200 OK 57 kB URL GET HTTP/1.1 rubos.my1.ru/.s/src/uwnd.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 68f4243a27fb662940c82401c7ca90f2
e1760086213df4ac91be01dd96a4021f83b51b35
4928c07e3d64d2d59cc8a9ebdad623b3869aeba942e371bb67e36b045fe3203b
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/src/uwnd.min.js HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 17:20:58 GMT
Content-Type: text/javascript
Last-Modified: Thu, 09 Nov 2023 12:41:40 GMT
ETag: W/"654cd384-33326"
Expires: Wed, 20 Dec 2023 17:20:58 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Age: 92613
Content-Length: 56743
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/cp/49.gif
816 B URL rubos.my1.ru/.s/img/cp/49.gif
IP
File type GIF image data, version 89a, 80 x 15\012- data
Hash 0797216a036b027904627113963037af
c8c9d893858e9b0bccaaa75bce2ed118ef5e38e4
0f5bbfccc49ee5299473ff4489e25fe116869e043e9c5d7ffd220b2d1d328b62
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/cp/49.gif HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/gif
Content-Length: 816
Last-Modified: Wed, 01 Nov 2023 11:43:32 GMT
ETag: "654239e4-330"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74445
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/1.jpg
68 kB URL rubos.my1.ru/.s/t/786/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2011:09:08 11:24:48], baseline, precision 8, 416x416, components 3\012- data
Hash 8f501eb121a619b24b2d475628caf710
4264dd488d2a2a28c62574dd86c0576bb9a75b84
4682519b043a26c69ec80478266f55810df616e6addc0950388dd7e3d93cc569
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/1.jpg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/jpeg
Content-Length: 67817
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-108e9"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74445
DDG-Cache-Status: HIT,HIT
push-sdk.com/f/sdk.js?z=929379
16 kB URL push-sdk.com/f/sdk.js?z=929379
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (56585), with no line terminators
Hash 3ee1d398e1c10a7fcc0d63c45dc845d2
9ae2904c45de43c918a7917bf17c21c4907b4750
433bc5d8a3cf196a036c319b4f061f03f629b74a4f23cdf59016f795d04698f0
GET /f/sdk.js?z=929379 HTTP/1.1
Host: push-sdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 15541
content-encoding: gzip
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
rubos.my1.ru/.s/t/786/7.png
806 B URL rubos.my1.ru/.s/t/786/7.png
IP
File type PNG image data, 9 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash fce891a1b1deb1016efb9f16d747a006
98820a226301faff80b6d51827deed40595d3e9a
9bdd219d493ca343e3eacda24153533bdeddfcb83aadda3526c842789ae7ffbf
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/7.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/png
Content-Length: 806
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-326"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74446
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/stat/1701457476752?01
195 B URL rubos.my1.ru/stat/1701457476752?01
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 252efb04d1afe034a4b284f896da5a15
cf20264d1df1051f8a2f3c20aa8072ba545d5ec5
bcb7a9270c3316f26b92d97ee487118cbdb70a1c0955f2c5cc6e91b109e26e69
GET /stat/1701457476752?01 HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:31 GMT
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: 5rubosucnid=UxI5A1pojn; domain=rubos.my1.ru; path=/stat/795243295; expires=Fri, 01-Dec-2023 19:04:41 GMT
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: http://rubos.my1.ru/stat/795243295?11
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 1
DDG-Cache-Status: MISS,MISS
Transfer-Encoding: chunked
rubos.my1.ru/.s/t/786/11.png
1.4 kB URL rubos.my1.ru/.s/t/786/11.png
IP
File type PNG image data, 15 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash fe8833e63a4a4d816c0725eaed3ba91b
b59ac061539bbbf20a7a015b6609db054b62adde
0c7bb6d9478d605b4c140fcbb9d0b7274b8b6fa43ddb5729fa24b4884fedb6fe
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/11.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/png
Content-Length: 1396
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-574"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74446
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/16.png
200 OK 3.0 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/16.png
IP
File type PNG image data, 211 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash dc028efa64e5d255a4a45a70cb3447cb
9425d12cb46f3382ba48c219e7ee02aa5c66e4d5
14cfced3e4562be60cdfdf6b1075714439a986503ea74e8776e4fe225cfd8ca2
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/16.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 2981
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-ba5"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/10.png
1.5 kB URL rubos.my1.ru/.s/t/786/10.png
IP
File type PNG image data, 15 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 74fe474d9fe846d8619bedc359d29fd9
94c2e57861931a4eb87afdba7c3cc131d6c25966
202fd6d3577ca815910ed09e1658e06c33508cfcffb1a828e43722e81b1eb0b1
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/10.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 1485
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-5cd"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/6.png
200 OK 6.2 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/6.png
IP
File type PNG image data, 223 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ecb2a3c276538e11a497201ab982fe4
8a2fe3fa9d2bfd3e1620922c9f7893bc22a4cb5b
89c1df7697a515db757e38a1b81d43d0b1d054fe1148f39db29a806072d13c48
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/6.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:47 GMT
Content-Type: image/png
Content-Length: 6175
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-181f"
Expires: Wed, 20 Dec 2023 22:23:47 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74446
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/5.png
200 OK 2.0 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/5.png
IP
File type PNG image data, 1003 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 82eaf3b9e0bad02438a3e31d5097c316
93b80c2a18c521abbce6c352f8c0d6d4da8d68d7
4e3300ca66530d6e30ac27a689f08a9e1903015c0b775b95d14ff38fef070ca2
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/5.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 2045
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-7fd"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/13.png
1.5 kB URL rubos.my1.ru/.s/t/786/13.png
IP
File type PNG image data, 15 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 0287bdb2625bc806af01f7c9437dc4df
ea07494b45033957a64b4806294a2dd4d762b0a8
e0af10b202aa2b47b7b9a9c17b1c8972d3ab1e465f7a25fbec9a997a10a04705
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/13.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 1508
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-5e4"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/2.png
12 kB URL rubos.my1.ru/.s/t/786/2.png
IP
File type PNG image data, 953 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash fc238fc9d08dc75d55f61dae3a76f36f
21c6569294c08cd573d8382b41a3389283e027a6
12a77faeb5268a59e037b3873de5d872fd395281b20a1a63d01fe497ba6dab85
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/2.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/png
Content-Length: 11852
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-2e4c"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74446
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/9.png
200 OK 2.7 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/9.png
IP
File type PNG image data, 14 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash 70afb5bd18ca55af7cd9e89f23f0c477
c71b78ba43087a16c4f274fcce4c04d4c36049d9
ee42dcf4bd1ddc01c55bda3a6c3585a8183fff59ee1fba5906e305526254ba60
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/9.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/png
Content-Length: 2678
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-a76"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74446
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/14.png
4.0 kB URL rubos.my1.ru/.s/t/786/14.png
IP
File type PNG image data, 211 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash b3c430bb7d8fd0228de63091d525c81a
5d72a76b060c9b97dfc48c78fcd06925d6e14b42
dc80212f71555778b431edc972443bbe8ca1edf3661952cf4087c27c2ecfd3ff
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/14.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 4010
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-faa"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/21.png
2.1 kB URL rubos.my1.ru/.s/t/786/21.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d3c2374148031746afe39a9a7131239
8da8ff90c5739eb64261df6ff9f75c67776c40d6
23e1e1758b65f2d97722f0736943c9cc7a9799bff8eba02dabe839532e76ba6f
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/21.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:47 GMT
Content-Type: image/png
Content-Length: 2062
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-80e"
Expires: Wed, 20 Dec 2023 22:23:47 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74445
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/20.png
200 OK 2.2 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/20.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash a2aae7ef769f65dbeb3ce17a967b7b8f
34aaf789f7b1e85ec69a11943ccd462e312c085b
82a95c6f1f70c7bd667d460bb3af73403247ae4fadfb158abdfbc012cf178339
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/20.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 2237
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-8bd"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/22.png
1.9 kB URL rubos.my1.ru/.s/t/786/22.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e9fb779337319c5f645456705159614
5205d00af673bc05bb1cf9e9ebd0ef0db1f2376c
a1af6991f055ce231a655ceb00c25745a86cbf35675caef43ba3bf2ac9fb23cc
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/22.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 1947
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-79b"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/15.png
12 kB URL rubos.my1.ru/.s/t/786/15.png
IP
File type PNG image data, 211 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ead2639b0444f5978e01152ed0095dfa
f4110b44e00fcc1a9bcc95233c474ca8e195dafc
fff1b79b2b0a6601b98daa06355b036925362b1eb7b4fbca017830782b87e9e7
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/15.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 11604
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-2d54"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/12.png
1.4 kB URL rubos.my1.ru/.s/t/786/12.png
IP
File type PNG image data, 15 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ecb86a8eb7db09449612a4b75a3743f
dc94fae13fe3176bf5b7751b90f4927166b7f9e0
9cc8ff3772bb86577ae05449276c403193940aced8415ea231d157f34e42fc06
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/12.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 1434
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-59a"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/23.png
1.8 kB URL rubos.my1.ru/.s/t/786/23.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash b2bf63e73ffddc6ed85a9242b9416a95
accaecef349b9fce2c68b7f5aaaa5672cbac52ae
d965ebe278e21389a1859abcc13d535d5092e4c0bdd48fc92229d6f2bf620ab1
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/23.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:47 GMT
Content-Type: image/png
Content-Length: 1817
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-719"
Expires: Wed, 20 Dec 2023 22:23:47 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74445
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/8.png
283 B URL rubos.my1.ru/.s/t/786/8.png
IP
File type PNG image data, 1 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash c056bc626ea5d12a7c0493f1ed56e1f5
0f4ca91dd84ff5a32c05c54139a40abfeaba50a1
30f50e503914899ab7c430b18c3caed9e207f19b281d0589fd931db5fa58f9f3
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/8.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 283
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-11b"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/25.png
200 OK 1.8 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/25.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash 63bd421eef38f41d4414cfacee527bdf
feff742ff57abdd1bec2fba802d1b69b77acf723
812489f89485bd60a34eb4540ba6a94886e6d60baf3151aeb22dc4832313c750
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/25.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 1768
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-6e8"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/24.png
200 OK 1.8 kB URL GET HTTP/1.1 rubos.my1.ru/.s/t/786/24.png
IP
File type PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash c6bbe119e6716c5c580258e261212648
d427893bcbf232f3d07a7f553d63ada752602ff9
38651c7f36fd008c846b6a7d1a41014e3eb779a9ee8964f99dc2ba07588d13fe
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/24.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 1791
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-6ff"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/17.jpg
11 kB URL rubos.my1.ru/.s/t/786/17.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2011:09:09 10:14:54], baseline, precision 8, 244x32, components 3\012- data
Hash d20a4533051d0754de5bb3d30aecbe39
6acf724c87720d28585eaf437a32ee3e9fe2bcd3
c2a5be4dd5e8846604414a0b2b713ecfd4f1c52b4c74289349049044f2852662
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/17.jpg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/jpeg
Content-Length: 11372
Last-Modified: Tue, 23 Feb 2016 13:24:34 GMT
ETag: "56cc5d92-2c6c"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/icon/social/ya.svg
200 OK 455 B URL GET HTTP/1.1 rubos.my1.ru/.s/img/icon/social/ya.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7676c3eee5bd955efe08fd05367a443b
595e4e8dbf5ff472606434d0f45806d088de4c0c
b72d3f61ac56b4aa27bad5769589705004aff1f0ad341785ca72dc46ba16de5b
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/ya.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
ETag: W/"5950f318-294"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 74446
Content-Length: 455
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/icon/social/u.svg
425 B URL rubos.my1.ru/.s/img/icon/social/u.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 1e726893f02be39b70d24d502a3a9998
98c6fcf43a67426ed7e9c7a839e8115494ca8072
d0608cf0c4aff79f20a198427f7df73300d643face9bea72b8d406b432b84df9
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/u.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:28:29 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
ETag: W/"5950f318-264"
Expires: Wed, 20 Dec 2023 20:28:29 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 81363
Content-Length: 425
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/icon/social/gp.svg
399 B URL rubos.my1.ru/.s/img/icon/social/gp.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (534), with no line terminators
Hash 10d296226de121de55180e5b1b7d9d49
5980293f4f290734d09459d068a8c3996e43fe40
a657a4d5d05c6cd9b9f881ab6941e71f725c7eb451c9f37ceb514e45fdfd441d
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/gp.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:46 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 01 Feb 2019 12:57:26 GMT
ETag: W/"5c544236-226"
Expires: Wed, 20 Dec 2023 22:23:46 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 74446
Content-Length: 399
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/3.png
252 kB URL rubos.my1.ru/.s/t/786/3.png
IP
File type PNG image data, 953 x 187, 8-bit/color RGBA, non-interlaced\012- data
Size 252 kB (251527 bytes)
Hash 81af1a1d2abdb1c5878923e6316f4e7a
4bb825480384d01c8b683b36730b33d064b7f3d9
7b75daaf53b0d091c1fc541ce7d00fac27e55f8a4f433997b9a8b721cea48216
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/3.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:47 GMT
Content-Type: image/png
Content-Length: 251527
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-3d687"
Expires: Wed, 20 Dec 2023 22:23:47 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74445
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/icon/social/fb.svg
200 OK 433 B URL GET HTTP/1.1 rubos.my1.ru/.s/img/icon/social/fb.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash d178cc46dcbcf2b6f19445674fe3fe58
26f9747489d9e796926f7bbe11817c420afda3af
a9265d79c9ff74d4deeab5dce9643ed838018a6b4346605e002867858534f4bf
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/fb.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:28:29 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
ETag: W/"5950f318-263"
Expires: Wed, 20 Dec 2023 20:28:29 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 81363
Content-Length: 433
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/28.png
989 B URL rubos.my1.ru/.s/t/786/28.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash db1389fc48122d29c627a890f5e048f4
e83243c1e21621d41ae06d3bf7d1aca75a7be462
5c2fc345e3dd68dbe2b2cf6110a26327be60e9de83dc124dad783b1fddbff982
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/28.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:48 GMT
Content-Type: image/png
Content-Length: 989
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-3dd"
Expires: Wed, 20 Dec 2023 22:23:48 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 74444
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/icon/social/vk.svg
498 B URL rubos.my1.ru/.s/img/icon/social/vk.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7c4eb8cae0b565c023c4406add5f8041
079ce5d3277df672b57a73476a28d0bf0b1c1fe2
05a3f8587400860aa87bb18c9a9cd5b22a45ca4fc4a37a7922d29e48549b2fc9
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/vk.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 22:23:47 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
ETag: W/"5950f318-304"
Expires: Wed, 20 Dec 2023 22:23:47 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 74445
Content-Length: 498
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo
200 OK 799 B URL GET HTTP/1.1 rubos.my1.ru/?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 563a1ff4a3ad45e7950e8cd102d57d46
69865fa2bbfcb720bd252e7305b3d04a3f9f5657
7f3d17701a8e1cfd118ad5d334cd1d51220fc627ac3301484328a32361f56cbe
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:31 GMT
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
Transfer-Encoding: chunked
rubos.my1.ru/.s/img/icon/social/ok.svg
1.1 kB URL rubos.my1.ru/.s/img/icon/social/ok.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 08bbc2fa9b08463b0d061041d62b408e
370c53ccc3edd296cd35fb9e3de20dabfdae78d9
e1369586f1d82834ecc0ccab2f5f1a6f7565f2c715243d956bd7eb1404c8fba9
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/icon/social/ok.svg HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/social.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:28:29 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
ETag: W/"5950f318-742"
Expires: Wed, 20 Dec 2023 20:28:29 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 81363
Content-Length: 1061
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/26.png
989 B URL rubos.my1.ru/.s/t/786/26.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e8c1078d71770d2b9c151ff46867eb0
fce0356f2f22b70bee2c587e36068acacc01032d
5aba93480b8b19ef8b66be9bb0a78f98f563aec77142535c704343ba6e0ad00b
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/26.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:36 GMT
Content-Type: image/png
Content-Length: 989
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-3dd"
Expires: Wed, 20 Dec 2023 20:52:36 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79916
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/27.png
997 B URL rubos.my1.ru/.s/t/786/27.png
IP
File type PNG image data, 1 x 3, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e093912b1fac5a24efe03f3645912cd
b8c80699b4a0377f5dfd521a9fc8fcd6949a27d7
fde066e40a8cd6758d62feeb12bc1cf3008cbacc4efbc43c3419464193b0a893
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/27.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 997
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-3e5"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/img/stars/3/12.png
200 OK 1.2 kB URL GET HTTP/1.1 rubos.my1.ru/.s/img/stars/3/12.png
IP
File type PNG image data, 12 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 350693463200bbe9388eec7d1a208289
9a310a7dd3c068636b224d253e0df9ce09784df2
aa22bfd07d6d73ee1e2fc304bf81625c716e83f81e1dfc044560b54595bdec28
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/img/stars/3/12.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 1161
Last-Modified: Wed, 01 Nov 2023 11:43:38 GMT
ETag: "654239ea-489"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
rubos.my1.ru/.s/t/786/4.png
6.9 kB URL rubos.my1.ru/.s/t/786/4.png
IP
File type PNG image data, 953 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 6c32fb34da214705eed52045f28305e6
04cc57ff91ffecb9e28ab98b4d07538b8ef35be5
326cc600748be9f75fb54285e56377225f5df7b4857b31861663807310551ce9
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /.s/t/786/4.png HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/.s/src/css/786.css
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Thu, 30 Nov 2023 20:52:37 GMT
Content-Type: image/png
Content-Length: 6850
Last-Modified: Tue, 23 Feb 2016 13:24:52 GMT
ETag: "56cc5da4-1ac2"
Expires: Wed, 20 Dec 2023 20:52:37 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Age: 79915
DDG-Cache-Status: HIT,HIT
cchdbond.com/gh4237y8.js
200 OK 20 kB IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
File type gzip compressed data, from Unix\012- data
Hash 408cae556596fdf90e05104e033da7b7
11aa7e82c385257119db263b5fee7c962959ae5b
afa5e7223cab4387a0ceb1d0641705789f7f761dfdbb71bbb1e560f4bef53ada
GET /gh4237y8.js HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:32 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 09:23:54 GMT
vary: Accept-Encoding
etag: W/"655f1a2a-57ad"
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-player.css
200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-player.css
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 18f844aa571ef66c0f165fe56a2f0821
849c61720b741db03f689c461e8e4eedd3c4ce21
436743ad0889ad9399a1f33edb65d8bf1c71cfbce1b0fce549769e7705c9ceec
GET /s/player/31e0b6d9/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/AubDkzJ0N08
39 kB URL www.youtube.com/embed/AubDkzJ0N08
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58148)
Hash 7fabfc7635961ff7a6e780431c77f639
132d8794c2d0cfb76442c445a39c614df4bdd5be
b29728729c277c534708915255bd91b5b280d26867f2020a61d210eb3e0d1451
GET /embed/AubDkzJ0N08 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';script-src 'nonce-fMrToA50Vegfpche7vk_5w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=aUhgg4wL0UA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=A35TgJa1xfE; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIEEgAgQg%3D%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+903; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rubos.my1.ru/stat/795243295?11
483 B URL rubos.my1.ru/stat/795243295?11
IP
File type GIF image data, version 87a, 88 x 31\012- data
Hash 0f55afb21250be615d69f15a27fbb926
4989b1d40bdff4f691c60157365c8f6fd42104ca
f39572cdf88cc4db40f8821ed3f55b58bab131547e4c4bd851e99fc3247342c0
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /stat/795243295?11 HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://rubos.my1.ru/
DNT: 1
Connection: keep-alive
Cookie: 5rubosucnid=UxI5A1pojn; __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1; kdSspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 19:04:32 GMT
Content-Type: image/gif
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ucvid=rcM5525uUc; domain=my1.ru; path=/; expires=Sat, 30-Nov-2024 19:04:32 GMT
Age: 1
DDG-Cache-Status: MISS,MISS
Transfer-Encoding: chunked
www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
2.1 kB URL www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
IP
File type ASCII text, with very long lines (922)
Hash 4960957a9ec9816c10b529f390c1a0ce
f9db8fe6f8b09b27bf814bbe4aa61f1aec46fcb0
935eecd9f5eb645f8e86fb6c4fcb5f6ea7b645e51f8012bcb30af73d0b1dacc1
GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 01 Dec 2023 19:04:31 GMT
date: Fri, 01 Dec 2023 19:04:31 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push-sdk.com/event?z=929379
200 OK 0 B URL POST HTTP/2 push-sdk.com/event?z=929379
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectpush-sdk.com
Fingerprint2A:09:CB:A4:E2:90:D0:12:40:A4:C6:1C:8B:33:09:C2:C5:8C:77:FE
ValidityFri, 20 Oct 2023 03:31:18 GMT - Thu, 18 Jan 2024 03:31:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event?z=929379 HTTP/1.1
Host: push-sdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 82
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:33 GMT
content-length: 0
access-control-allow-origin: http://rubos.my1.ru
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
s7.ucoz.net/adv/dummy/000/img/ucoz-logo.png
4.6 kB URL s7.ucoz.net/adv/dummy/000/img/ucoz-logo.png
IP
File type PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash 14d37a3409afc2c450c62b97bc8019da
43fc12bf16a292d6d10b17ab7d1e37785288858c
fc4f998c5fcacc6cf161f1bedf46ec55e56273670ecce8b59e947b68d3c5bdb2
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1
Host: s7.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1_=GNxHrh63XMB2lksEiejR; Domain=.ucoz.net; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:33 GMT
Date: Thu, 30 Nov 2023 21:49:11 GMT
Content-Type: image/png
Content-Length: 4585
Last-Modified: Tue, 26 Mar 2019 14:28:10 GMT
ETag: "5c9a36fa-11e9"
Accept-Ranges: bytes
Age: 76522
DDG-Cache-Status: HIT,HIT
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/DPIbnlDF7ng
55 kB URL www.youtube.com/embed/DPIbnlDF7ng
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Hash 52c7ae3ff7f2db1ad71c42aeec53e22d
e65e908994e9c04dbd90e9f20855baa3545126e7
211010e74d8315ac8e4e85e1ccda9f359d932542bff942d64011d995ccb5b8ea
GET /embed/DPIbnlDF7ng HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=V165D1zeB2Q; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=5vPPR7cBH8s; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+204; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
usocial.pro/usocial/css/uscl.css?v=7.1.5
35 kB URL usocial.pro/usocial/css/uscl.css?v=7.1.5
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3c2ccd7124441532949c9dcb49e6e349
a3ffd1b8d2ecc0085f17055924f7459f63d1bb60
1a875e0abd8b4a044ca48094a7e067a52388c0d022efbe77d995af2f1b26bce8
GET /usocial/css/uscl.css?v=7.1.5 HTTP/1.1
Host: usocial.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=en7pcOgXfCgYWRE5D8Nh; Domain=.usocial.pro; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:33 GMT
date: Fri, 01 Dec 2023 19:04:33 GMT
content-type: text/css
last-modified: Tue, 04 Feb 2020 13:54:50 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=300, public
content-encoding: gzip
content-length: 34869
ddg-cache-status: MISS,HIT
etag: "5e3977aa-6335e"
age: 0
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.ccsyncuuid.net/match/1/?cb_url=https%3A%2F%2Fcchdbond.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent=
0 B URL s.ccsyncuuid.net/match/1/?cb_url=https%3A%2F%2Fcchdbond.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/1/?cb_url=https%3A%2F%2Fcchdbond.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent= HTTP/1.1
Host: s.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 19:04:33 GMT
content-length: 0
location: https://cchdbond.com/setuid?8r954XCT6d8YR9mD9o4p
set-cookie: jcsuuid=8r954XCT6d8YR9mD9o4p; expires=Sat, 30 Nov 2024 19:04:33 GMT; domain=ccsyncuuid.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/Gm9stLobTro
200 OK 54 kB URL GET HTTP/2 www.youtube.com/embed/Gm9stLobTro
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Hash 22e7cc225257e947fecdc5f7f2f7bef8
75142549df3e12cb6966e0b0eb6ac4b0f1a2e9f8
0e8c2d5d4b132a6368319408304152b688b819f47f22b590bd198701dd6f5123
GET /embed/Gm9stLobTro HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=1n1JfgQLnFY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=Q0eSXC-yWUc; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+782; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/H8g5jo9edNc
200 OK 37 kB URL GET HTTP/2 www.youtube.com/embed/H8g5jo9edNc
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58133)
Hash b3894962c782d80b6855267a79564adf
dbff218a3eb9e8ad79d18f3499bec3a3afdab24c
56986286027dff5c88a78eb58b09cc302cc9a3b7c2023c260e77c667da8a540a
GET /embed/H8g5jo9edNc HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';script-src 'nonce-XiGpPiEpKBuToHNUPClf0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline';report-uri /cspreport
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Np61d4S654E; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=xfTxexT4ouA; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+823; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rot.spotsniper.ru/?src=ujs6&s_subid=btn
200 OK 1 B URL GET HTTP/1.1 rot.spotsniper.ru/?src=ujs6&s_subid=btn
IP
ASN #44066 diva-e Datacenters GmbH
Requested by http://rubos.my1.ru/?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo
Certificate IssuerLet's Encrypt
Subjectrot.spotsniper.ru
Fingerprint80:07:73:37:C2:43:FB:27:46:9D:82:67:A3:D6:35:E0:42:A5:E4:49
ValidityMon, 02 Oct 2023 09:21:45 GMT - Sun, 31 Dec 2023 09:21:44 GMT
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6&s_subid=btn HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 19:04:33 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/9FHIG_yUHVo
137 kB URL www.youtube.com/embed/9FHIG_yUHVo
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Size 137 kB (137161 bytes)
Hash 2ac60a300a7f9d4ce64cbcb36d46e6c4
6c7fb84e318312140f02929d5e559f98c30335d1
554a0bf47989cd593e0027ab7c97bdf21c295c63e8f2d07cc86e5efa37d3cca5
GET /embed/9FHIG_yUHVo HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=gQvV9Z5oS8A; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=9F1UQT8Ff8Y; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+959; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118826
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
60 kB URL themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: http://s7.ucoz.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 60332
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 30 Nov 2023 10:16:50 GMT
Expires: Fri, 29 Nov 2024 10:16:50 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
Vary: Accept-Encoding
Age: 118063
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118827
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118827
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__ru.js
194 kB URL www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__ru.js
IP
File type ASCII text, with very long lines (872)
Size 194 kB (194426 bytes)
Hash a454e55c6e6f1a7437cde9c3238bbe23
22721d187cff11bf3357b9f94d8b383972317f49
0dc6b4e4bee5d91095518ffbfd4c4efd2299201e11a651326371098b5cd1a038
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 194426
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 07:03:40 GMT
expires: Sat, 30 Nov 2024 07:03:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 43254
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 118827
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 113774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/9FHIG_yUHVo
824 kB URL www.youtube.com/embed/9FHIG_yUHVo
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Size 824 kB (823573 bytes)
Hash 71af69e8f48ebf0bc7440c61f24b1bb4
5b2ea5b608548dbca84236621ca312d637d1af7a
3f8f34e72d48b9078045a3b60a2365a26a28e7b5b0019b79e7c9ffa07f93351a
GET /embed/9FHIG_yUHVo HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=oX-_vNHqTMQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=r3vcf5kHZmA; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+970; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rubos.my1.ru/favicon.ico
406 B IP
File type MS Windows icon resource - 1 icon, 16x16\012- data
Hash a3a0510761359bcc2613a45c76546d42
c66b17eac9b5b07d4c3242448b079adc2949128e
e50d733849b9ff216b9cb7d884bffe006c908a71106455f7a25f297fce487f32
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /favicon.ico HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: __ddg1_=LeqLSL4efblD8sgejbew; 5rubosuzll=1701457470; 5rubospushi=1; kdSspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd; ucvid=rcM5525uUc
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Date: Fri, 01 Dec 2023 06:52:16 GMT
Content-Type: image/x-icon
Last-Modified: Thu, 28 Jan 2016 13:32:45 GMT
ETag: W/"56aa187d-37e"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 43938
Content-Length: 406
DDG-Cache-Status: HIT,HIT
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/Gm9stLobTro
200 OK 823 kB URL GET HTTP/2 www.youtube.com/embed/Gm9stLobTro
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Size 823 kB (822888 bytes)
Hash 35ec167bb16a2f2f739940dfe1bff916
b5c5f88e9dd22641debf453ed2cbc4abec72f305
e913e93556714e88a878f307764eab2124da1ba214e21397e96bfbaa5901162a
GET /embed/Gm9stLobTro HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=rT7Wz-7Xs1Q; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=rLf4HI11eD4; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+769; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/GEAsA0Ma60U
823 kB URL www.youtube.com/embed/GEAsA0Ma60U
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58109)
Size 823 kB (822848 bytes)
Hash 3ab7026c598f922a35c471936afa3e6c
674586e6bf45bdbf6b84def781a7b8527795a38b
623f66f4ba77525b2bbbb2a936e62072537015074327cd74b3aac3e527b8e476
GET /embed/GEAsA0Ma60U HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=ODfyjLBwT7o; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=X34WAWpoqLY; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIEEgAgPw%3D%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+328; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.printfriendly.com/printfriendly.js
200 OK 15 kB URL GET HTTP/1.1 cdn.printfriendly.com/printfriendly.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (359)
Hash e212b6a8d99493fed8520cda40318f78
cf769d1451781b136285c4de612f8009675797ee
f19ede7fb0cd2e7a4d3a871d37492487548efbf28063c2b83f38f01268ef4af0
GET /printfriendly.js HTTP/1.1
Host: cdn.printfriendly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 19:04:35 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: BunnyCDN-NO1-830
CDN-PullZone: 29989
CDN-Uid: c46cf0ce-de12-43ee-84e2-564af22e66fd
CDN-RequestCountryCode: NO
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Age: 29
Cache-Control: public, max-age=300
Content-Encoding: gzip
ETag: "e37425e530b37c2e6a3e57248e5e8e24"
Expires: Tue, 31 Oct 2023 19:14:48 GMT
Last-Modified: Mon, 16 Oct 2023 20:38:01 GMT
X-GUploader-UploadID: ABPtcPr3VffxhOMHWKTGc1eEXJW8ltZTX8ffVvWK2FV4VfgVqlABZLUkcdyl-awrTchnlDXCyqjuYHWZ3VfZaO1SoH66uGlMjnIR
x-goog-generation: 1697488681803134
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 14558
x-goog-hash: crc32c=j257Uw==, md5=43Ql5TCzfC5qPlckjl6OJA==
x-goog-storage-class: STANDARD
CDN-ProxyVer: 1.04
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 10/31/2023 19:10:17
CDN-EdgeStorageId: 830
CDN-Status: 200
CDN-RequestId: afeed918bc72208306834d4677a526a2
CDN-Cache: HIT
usocial.pro/usocial/fonts/uscl.woff2?n2tjsc
200 OK 6.8 kB URL GET HTTP/2 usocial.pro/usocial/fonts/uscl.woff2?n2tjsc
IP
Certificate IssuerGoGetSSL
Subjectusocial.pro
Fingerprint4C:5E:B2:E4:97:D1:C1:FC:DA:2E:5C:09:B7:6D:4B:D6:FB:CD:3B:41
ValidityThu, 16 Feb 2023 00:00:00 GMT - Sun, 17 Mar 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 6816, version 1.6554\012- data
Hash ced30c64206cd636c9c094923d88046b
d01eef47b5303aacb4bcf8fd7fbb672feca3d58a
485e3c6dee567f7280fa8a0224612e00bfb502cc239e175deda45147339aba40
GET /usocial/fonts/uscl.woff2?n2tjsc HTTP/1.1
Host: usocial.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: https://usocial.pro/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=tvQK6WZZojlr6i0ZuRD6; Domain=.usocial.pro; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:35 GMT
date: Fri, 01 Dec 2023 19:02:53 GMT
content-type: font/woff2
content-length: 6816
last-modified: Mon, 29 Mar 2021 13:57:09 GMT
etag: "6061dcb5-1aa0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=300, public
accept-ranges: bytes
age: 102
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
cchdbond.com/setuid?8r954XCT6d8YR9mD9o4p
74 B URL cchdbond.com/setuid?8r954XCT6d8YR9mD9o4p
IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /setuid?8r954XCT6d8YR9mD9o4p HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rubos.my1.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: image/png
content-length: 74
set-cookie: dmpUid=8r954XCT6d8YR9mD9o4p; expires=Sun, 01 Dec 2024 19:04:35 GMT; domain=cchdbond.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
90 kB URL cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (561)
Hash 0eaad06a0cdf223623b69c31fbe04890
230e489085c9cb924a2dfb6fca168409eb8bc618
421ac1688d59265c51cba69feb6a852c7c3cd9c9a2cf84d1ab643a7466f3d202
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.301.0
x-jsd-version-type: version
etag: W/"35c77-Iw5IkIXJy5JKLftvyhaECeuLxhg"
content-encoding: br
accept-ranges: bytes
date: Fri, 01 Dec 2023 19:04:35 GMT
age: 7015
x-served-by: cache-fra-eddf8230100-FRA, cache-bma1643-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 90069
X-Firefox-Spdy: h2
cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
200 OK 0 B URL OPTIONS HTTP/2 cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-length: 0
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://rubos.my1.ru
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
0 B URL cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-length: 0
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://rubos.my1.ru
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
s7.ucoz.net/adv/dummy/000/img/bg.gif
1.3 kB URL s7.ucoz.net/adv/dummy/000/img/bg.gif
IP
File type GIF image data, version 89a, 485 x 3\012- data
Hash b19967d808ed7c42b41316d6c8474f55
18d80748bd4041b13a3373a429281ec65347a0e2
16c9962c4ecd52efc16d9d639d52fc60b9e427b6e454190d162f1aa1d220ad50
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /adv/dummy/000/img/bg.gif HTTP/1.1
Host: s7.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://s7.ucoz.net/adv/dummy/000/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1_=dXjjzGXnshDtrWoZEnhu; Domain=.ucoz.net; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:35 GMT
Date: Thu, 30 Nov 2023 21:49:11 GMT
Content-Type: image/gif
Content-Length: 1268
Last-Modified: Tue, 26 Mar 2019 14:28:10 GMT
ETag: "5c9a36fa-4f4"
Accept-Ranges: bytes
Age: 76524
DDG-Cache-Status: HIT,HIT
cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
9.6 kB URL cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
File type gzip compressed data, from Unix\012- data
Hash 43622911cfdfc1b118389484e4cd6bbb
6e787bdef1b075870193bcd4eeef9b4033282ae4
91187997ab6a719f230767d229ab065025b28753357e11efc4a1aa60e3fc9c64
GET /get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=442&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Cookie: dmpUid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://rubos.my1.ru
content-encoding: gzip
X-Firefox-Spdy: h2
usocial.pro/data/shares?providers=fb,twi,lj,lin,telegram,vi,wa&url=http://rubos.my1.ru/
1.7 kB URL usocial.pro/data/shares?providers=fb,twi,lj,lin,telegram,vi,wa&url=http://rubos.my1.ru/
IP
File type gzip compressed data, from Unix\012- data
Hash 8d00e73b2750aa0d4f6231326065ce73
37b42a0d0cb11ab68517532d35c34a5b02ab4a6f
ccd36f3778b507bdb3f8cc820064a744120760eb1a9f1bff15d756ba480bdffa
GET /data/shares?providers=fb,twi,lj,lin,telegram,vi,wa&url=http://rubos.my1.ru/ HTTP/1.1
Host: usocial.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=5qX5NNh1v3ZP9SpEmIPh; Domain=.usocial.pro; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:35 GMT
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.24
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=268&r=https://d.ccsyncuuid.net/match/14/?remote_uid=${USER_ID}
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?dp=268&r=https://d.ccsyncuuid.net/match/14/?remote_uid=${USER_ID}
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=268&r=https://d.ccsyncuuid.net/match/14/?remote_uid=${USER_ID} HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html
content-length: 154
location: /rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=268&tc=1
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Fri, 01-Dec-23 19:14:35 GMT
aid=fwAAAWVqLkOxTwcSpfPeAkf1e9ZJETz8RFue9clh69LnvP3J; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
200 OK 13 kB URL OPTIONS HTTP/2 cchdbond.com/get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd
IP
Certificate IssuerLet's Encrypt
Subjectcchdbond.com
FingerprintF7:C2:51:A6:55:38:07:B6:6F:A6:58:FC:B7:55:64:37:80:23:97:55
ValidityMon, 13 Nov 2023 06:08:20 GMT - Sun, 11 Feb 2024 06:08:19 GMT
File type gzip compressed data, from Unix\012- data
Hash 6e0ef6e6bad288ff785dd92db11e2b57
f08600048489baa202cc9f0c5c6300e124bc5777
97eff28e071a7b88e1752a90551b9314368977964518ddad5d30ce906f2634b5
GET /get_data?v=default&page=http%253A%252F%252Frubos.my1.ru%252F&domain=rubos.my1.ru&blockID=443&width=690&height=5088&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=a69a28a7-c62f-47f1-bf28-ed3c544a65bd HTTP/1.1
Host: cchdbond.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Cookie: dmpUid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://rubos.my1.ru
content-encoding: gzip
X-Firefox-Spdy: h2
api.tumblr.com/v2/share/stats?url=http%3A%2F%2Frubos.my1.ru%2F&callback=uSocialShare.uShare.CallbackRegistry.cb004595
1.2 kB URL api.tumblr.com/v2/share/stats?url=http%3A%2F%2Frubos.my1.ru%2F&callback=uSocialShare.uShare.CallbackRegistry.cb004595
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (331)
Hash 50c4d25b0eaaba8d45f5ec14e6ba368c
9f2663a9d14b666bf254a8d9f0452d4d5508ff90
604112784abcff75f05d5eb3196827148ee2e38e4a081330fcf609a7154c8bd0
GET /v2/share/stats?url=http%3A%2F%2Frubos.my1.ru%2F&callback=uSocialShare.uShare.CallbackRegistry.cb004595 HTTP/1.1
Host: api.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 01 Dec 2023 19:04:35 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 1185
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Rid: 26168fae66a7abc860a4b75f32d51086
P3p: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; preload
sync.bumlam.com/?src=ccloud1&uid=8r954XCT6d8YR9mD9o4p
0 B URL sync.bumlam.com/?src=ccloud1&uid=8r954XCT6d8YR9mD9o4p
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=ccloud1&uid=8r954XCT6d8YR9mD9o4p HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 01 Dec 2023 19:04:35 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ3N2ZiYTNmYS05MDdjLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 19:04:35 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=ccloud1&s_data=CAIQARjD3KirBmIUOHI5NTRYQ1Q2ZDhZUjltRDlvNHCiARB3-6P6kHwR7obgACWQwGR8
ETag: 77fba3fa-907c-11ee-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
www.printfriendly.com/api/v3/domain_settings/a?callback=pfMod.saveDSSettings&hostname=rubos.my1.ru&client_version=client
265 B URL www.printfriendly.com/api/v3/domain_settings/a?callback=pfMod.saveDSSettings&hostname=rubos.my1.ru&client_version=client
IP
File type gzip compressed data, last modified: Fri Dec 1 19:04:35 2023, from Unix\012- data
Hash b60bf398e58b968056e7cab2d8e6a26e
af98020acb018b0a8aa1936cd8af75036e186d42
b1a31ad62a02ffdcdbf12cf377a81baaddd55de652f9f1775f402db9b917ee72
GET /api/v3/domain_settings/a?callback=pfMod.saveDSSettings&hostname=rubos.my1.ru&client_version=client HTTP/1.1
Host: www.printfriendly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: max-age=3600, public
vary: Accept-Encoding
etag: W/"7be848887c7101dd022775e3c09684c2"
x-request-id: 3a7c497b-edc6-4d30-a7c5-9fcdd018c008
x-runtime: 0.016776
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:35 GMT
server: Google Frontend
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/10/?remote_uid=${UUID}
117 B URL exchange.buzzoola.com/cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/10/?remote_uid=${UUID}
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 2af541e3ad12356d2581afe53f4c9c07
1c9b230f18bdfc4e339ef8a9f22e79127f0743c0
19411d9566fce287ba2eed541f50f0a560615c1588c4de4f37c93aa8dafb5546
GET /cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/10/?remote_uid=${UUID} HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html; charset=utf-8
content-length: 117
location: https://d.ccsyncuuid.net/match/10/?remote_uid=2576152b-6ca8-4d50-7199-c87083ab978f
serverid: TODO
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/dh39YzPS6jI/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHOBYACgAqKAgwIABABGH8gFSgbMA8=&rs=AOn4CLBtIlmE94Q4JRdvvvT_0EtKvGlw-g
200 OK 22 kB URL GET HTTP/2 i.ytimg.com/vi/dh39YzPS6jI/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHOBYACgAqKAgwIABABGH8gFSgbMA8=&rs=AOn4CLBtIlmE94Q4JRdvvvT_0EtKvGlw-g
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 8552aa661c9f246dffb9f98155f0265a
52cab4f2a49bab0b1af3194562ee214c6580825f
450fd5d06497c9b3bb89dd7194ccdfe328909a2f01494d6d0168633cfcf0546e
GET /vi/dh39YzPS6jI/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHOBYACgAqKAgwIABABGH8gFSgbMA8=&rs=AOn4CLBtIlmE94Q4JRdvvvT_0EtKvGlw-g HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 21942
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:57 GMT
expires: Fri, 01 Dec 2023 21:02:57 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 98
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 2152585e9c8570ab8a41ffcc828ab6d0
0ad69f048030edbd438ad28f23b4bf360f59c954
cbbe4ddf16a53b5994bcf335c9b49138975b2dd4cbe03525ad04a19cfc86e0ba
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:35 GMT
server: ESF
cache-control: private
content-length: 33064
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/clickcloud2
307 Temporary Redirect 0 B URL GET HTTP/1.1 kimberlite.io/rtb/sync/clickcloud2
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/clickcloud2 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Fri, 01 Dec 2023 19:04:35 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZWouQ05ei1g~Y7Tdd4nM32lRO9QA_pY9NwdmSpw; path=/; max-age=7776000; samesite=none; httponly; secure
as=-WrUeGVqLkM; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F18%2F%3Fremote_uid%3DZWouQ05ei1g; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0002
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188753
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
kimberlite.io/rtb/sync/clickcloud
0 B URL kimberlite.io/rtb/sync/clickcloud
IP
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/clickcloud HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Fri, 01 Dec 2023 19:04:35 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZWouQ09rMLc~FLqdYbM-hnRntal4tMKmyYhJJBU; path=/; max-age=7776000; samesite=none; httponly; secure
as=-WrUeGVqLkM; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F17%2F%3Fremote_uid%3DZWouQ09rMLc; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0002
s.vivacocc.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=
200 OK 74 B URL GET HTTP/2 s.vivacocc.com/w/1/ozihu7srizmx673cp53uczigpvqxc3t3ijafgachinhwgfnfdc2wmwdtfrmeaczipzxfurkfmqchu3l5mbn4w5scylmnhsvlr62zdolnpcp6zlvznj5ey3sycjzawxrns667bdobqor5ftdtccj2zywfiaonbh5bxnzblnka3rexs62sfzdxdunuyfcwxo6yjunhuklqjjxem3cqxn3oc5to3jevj6cdokjtp7xa2w7eljdusd5citmqkfsjw3gtr7jh6v5ytvjoeslj7bbxb2zxeseekxm3odd37gg2ogmfdquxytxg7ockjkjxm3qydukmcqdtkm3e2wcex56nw53bmattbscsvdopbu3lsjeutklvasmeuvuqiby3gngj2of5mrh3ozvauf2lj43be7cw2zxvhu2k353m2sjt7zfuhq2qh32vxcf37rylkypyt3gxtidts7qodssswnfal73jexmfexg2o5jjmsm3td76q56fm3bnru6k7nd7e2u67lhn4tvrooiszesslr5ac2qdpeaaoa3vcvgtwycld46gsh36d3tgsupdjrqmk2cjdibqu===
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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= HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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====
74 B URL s.vivacocc.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====
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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==== HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
i.cdnfimgs.com/auto/200x150/image/tesr/7597/597/rect_651c3770bdc02t1696348016r1454.jpg
200 OK 13 kB URL GET HTTP/2 i.cdnfimgs.com/auto/200x150/image/tesr/7597/597/rect_651c3770bdc02t1696348016r1454.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint50:B0:FA:3F:9A:2B:85:52:F9:72:1F:8A:39:52:DE:5F:DA:B9:B6:B2
ValiditySun, 26 Nov 2023 03:00:55 GMT - Sat, 24 Feb 2024 03:00:54 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash ada22f3b446ed96b00f0a6fee1c640e4
ebe32f3ffe8a2d6e5913ead51751d5a13c42c109
6450b87e2f0c60c34df6fd1372231f5b7875ab181a39a286a73957e94411b9ed
GET /auto/200x150/image/tesr/7597/597/rect_651c3770bdc02t1696348016r1454.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/jpeg
content-length: 12769
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: MISS
expires: Fri, 15 Dec 2023 19:04:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
s.vivacocc.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==
200 OK 74 B URL GET HTTP/2 s.vivacocc.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==
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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== HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.com/w/1/ozihu7srizmx673cp53uczadorvhozt2i5gfkbkcjjawfv2eowqwmwd5obiemclzpbtvurkfmyaxuylwmvn4u5scylmnhsvlr62zdolnpcp6zlvznj5ey3sycjzawxrns667bdobqor5ftdtccj2zywfiaonbh5bxnzblnka3rexs62sfzdxcdp5saufazx3junhuklqjjxem3cqxn3oc5tm3jevj6cdokjtpjmu43bujjdujejtuteqkfsjw3apy2bre3dfxzjoeslj7bbxb2zxeseekxm3odd37gg2ogmfdquxytxg7ockjkjxm3qydukmcqdtkm3e2wcex56nw53bmattbscsvdopbu3lsjeutklvasmeuvuqiby3gngj2of5mrh3ozvais2dje2eg6s72zxvhu2k353m2sjt7zfuhq2qh32vxcf37rylkypyt3gxtidts7qodssswnfal73jexmfexg2o5jjmsm3td76q56fm3bnru6k5nd7e2u67lhn4tvrooiczesslr5ac2qdpeaaoa3vcvgtwycld46gsh36d3tgsupdjrqmk2cjdibqu===
74 B URL s.vivacocc.com/w/1/ozihu7srizmx673cp53uczadorvhozt2i5gfkbkcjjawfv2eowqwmwd5obiemclzpbtvurkfmyaxuylwmvn4u5scylmnhsvlr62zdolnpcp6zlvznj5ey3sycjzawxrns667bdobqor5ftdtccj2zywfiaonbh5bxnzblnka3rexs62sfzdxcdp5saufazx3junhuklqjjxem3cqxn3oc5tm3jevj6cdokjtpjmu43bujjdujejtuteqkfsjw3apy2bre3dfxzjoeslj7bbxb2zxeseekxm3odd37gg2ogmfdquxytxg7ockjkjxm3qydukmcqdtkm3e2wcex56nw53bmattbscsvdopbu3lsjeutklvasmeuvuqiby3gngj2of5mrh3ozvais2dje2eg6s72zxvhu2k353m2sjt7zfuhq2qh32vxcf37rylkypyt3gxtidts7qodssswnfal73jexmfexg2o5jjmsm3td76q56fm3bnru6k5nd7e2u67lhn4tvrooiczesslr5ac2qdpeaaoa3vcvgtwycld46gsh36d3tgsupdjrqmk2cjdibqu===
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /w/1/ozihu7srizmx673cp53uczadorvhozt2i5gfkbkcjjawfv2eowqwmwd5obiemclzpbtvurkfmyaxuylwmvn4u5scylmnhsvlr62zdolnpcp6zlvznj5ey3sycjzawxrns667bdobqor5ftdtccj2zywfiaonbh5bxnzblnka3rexs62sfzdxcdp5saufazx3junhuklqjjxem3cqxn3oc5tm3jevj6cdokjtpjmu43bujjdujejtuteqkfsjw3apy2bre3dfxzjoeslj7bbxb2zxeseekxm3odd37gg2ogmfdquxytxg7ockjkjxm3qydukmcqdtkm3e2wcex56nw53bmattbscsvdopbu3lsjeutklvasmeuvuqiby3gngj2of5mrh3ozvais2dje2eg6s72zxvhu2k353m2sjt7zfuhq2qh32vxcf37rylkypyt3gxtidts7qodssswnfal73jexmfexg2o5jjmsm3td76q56fm3bnru6k5nd7e2u67lhn4tvrooiczesslr5ac2qdpeaaoa3vcvgtwycld46gsh36d3tgsupdjrqmk2cjdibqu=== HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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=
200 OK 74 B URL GET HTTP/2 s.vivacocc.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=
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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= HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.com/w/1/ozihu7srizmx673cp53uczigpvqxc3t3ijafocscinewqotx4frgmwdtfrmeaczipzxfurkfmuhhq3dvmnn4w5scylmnhsvlr62zdolnpcp6zlvznj5ey3sycjzawxrns667bdobqor5ftdtccj2zywfiaonbh5bxnzblnka3rexs62sfzdxdcpgrx2jpto5junhuklqjjxem3cqxn3oc5tp3jevj6cdokjtp5eerpqufjduozgq6tmqkfsjw3el3wpm5k6otbjoeslj7bbxb2zxeseekxm3odd37gg2ogmfdquxytxg7ockjkjxm3qydukmcqdtkm3e2wcex56nw53bmattbscsvdopbu3lsjeutklvasmeuvuqiby3gngj2of5mrh3ozvauf2lj43be7cw2zxvhu2k353m2sjt7zfuhq2qh32vxcf37rylkypyt3gxtidts7qodssswnfal73jexmfexg2o5jjmsm3td76q56fm3bnru6k7nd7e2u67lhn4tvrooiszesslr5ac2qdpeaaoa3vcvgtwycld46gsh36d3tgsupdjrqmk2cjdibqu===
74 B URL s.vivacocc.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=
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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= HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=rtw&id=8r954XCT6d8YR9mD9o4p
302 Found 0 B URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=rtw&id=8r954XCT6d8YR9mD9o4p
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectad.ad-blast.ru
FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34
ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=rtw&id=8r954XCT6d8YR9mD9o4p HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.1
Date: Fri, 01 Dec 2023 19:04:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
Location: https://match.new-programmatic.com/userbind?src=yandex&pbf=1&gi=1
i.cdnfimgs.com/auto/200x150/image/tesr/7057/57/rect_6404ebc2a9d7bt1678044098r3751.jpeg
12 kB URL i.cdnfimgs.com/auto/200x150/image/tesr/7057/57/rect_6404ebc2a9d7bt1678044098r3751.jpeg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint50:B0:FA:3F:9A:2B:85:52:F9:72:1F:8A:39:52:DE:5F:DA:B9:B6:B2
ValiditySun, 26 Nov 2023 03:00:55 GMT - Sat, 24 Feb 2024 03:00:54 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash 7954b111f93efc8da6e5078ef5ed6f15
e57dfe720eeaeac4285d81f6786bc5ab8889558d
9768ea63dbe4828d952a414bc6ed5e30d7822f2ff9b4d50b11febda8227db5ae
GET /auto/200x150/image/tesr/7057/57/rect_6404ebc2a9d7bt1678044098r3751.jpeg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/jpeg
content-length: 12415
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: HIT
expires: Fri, 15 Dec 2023 19:04:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.cdnfimgs.com/auto/200x150/image/tesr/7922/922/rect_64b7bc5990659t1689762905r5150.jpg
200 OK 17 kB URL GET HTTP/2 i.cdnfimgs.com/auto/200x150/image/tesr/7922/922/rect_64b7bc5990659t1689762905r5150.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint50:B0:FA:3F:9A:2B:85:52:F9:72:1F:8A:39:52:DE:5F:DA:B9:B6:B2
ValiditySun, 26 Nov 2023 03:00:55 GMT - Sat, 24 Feb 2024 03:00:54 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash a0154d2cee094ad376fb823f8c5cc15e
87548d19b45505961de38a61f2fe5361d888b619
4e84a684f1c8efd8190f6cff60525b050f3a269ca0e12541857dd2e49ad449ba
GET /auto/200x150/image/tesr/7922/922/rect_64b7bc5990659t1689762905r5150.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/jpeg
content-length: 17292
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: MISS
expires: Fri, 15 Dec 2023 19:04:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.cdnfimgs.com/auto/200x150/image/tesr/5414/414/rect_65008896dee1dt1694533782r9075.jpg
16 kB URL i.cdnfimgs.com/auto/200x150/image/tesr/5414/414/rect_65008896dee1dt1694533782r9075.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint50:B0:FA:3F:9A:2B:85:52:F9:72:1F:8A:39:52:DE:5F:DA:B9:B6:B2
ValiditySun, 26 Nov 2023 03:00:55 GMT - Sat, 24 Feb 2024 03:00:54 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash df91b5d5899698b62e4f4f4129660c14
610943b4dc310ee4bb6dc4ef31246ebc2846ad26
0457c6dbacf2e6699ec3a9f09a31a05143e0055a4b6aa2d3e95adbde063615ca
GET /auto/200x150/image/tesr/5414/414/rect_65008896dee1dt1694533782r9075.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/jpeg
content-length: 15721
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: MISS
expires: Fri, 15 Dec 2023 19:04:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.cdnfimgs.com/auto/200x150/image/tesr/627/627/rect_650aa904eb3a5t1695197444r3050.jpg
200 OK 22 kB URL GET HTTP/2 i.cdnfimgs.com/auto/200x150/image/tesr/627/627/rect_650aa904eb3a5t1695197444r3050.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint50:B0:FA:3F:9A:2B:85:52:F9:72:1F:8A:39:52:DE:5F:DA:B9:B6:B2
ValiditySun, 26 Nov 2023 03:00:55 GMT - Sat, 24 Feb 2024 03:00:54 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash 7f8548d669531816a22a5961d05efd65
42fbda88ae11fe0ef7b2716992fb13e2c4ddab80
8a6d36d8fbf8182ac20e8ee375c3a6538c5ff50f5d78e658f7cd6c5ccf575a19
GET /auto/200x150/image/tesr/627/627/rect_650aa904eb3a5t1695197444r3050.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/jpeg
content-length: 22117
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: MISS
expires: Fri, 15 Dec 2023 19:04:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.acint.net/rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=268&tc=1
154 B URL www.acint.net/rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=268&tc=1
IP
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=268&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqLkOxSQcRBxT0An7K00dMpXMtKHUD968NGqS+UseM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fd.ccsyncuuid.net%252Fmatch%252F14%252F%253Fremote_uid%253D$%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701457476; expires=Sun, 31-Dec-23 19:04:36 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Slab&display=swap
34 kB URL fonts.googleapis.com/css2?family=Roboto+Slab&display=swap
IP
File type ASCII text, with very long lines (63049)
Hash be7c5e62954000f874474aad6ea42fd2
33727ebaa112c92948ab25212b6f5a336e026c14
2ad928245e43d3a7f50385e6eb763148cf4344cb40c90dfc3513fe2cf46343b8
GET /css2?family=Roboto+Slab&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 19:04:35 GMT
date: Fri, 01 Dec 2023 19:04:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync.bumlam.com/?src=ccloud1&s_data=CAIQARjD3KirBmIUOHI5NTRYQ1Q2ZDhZUjltRDlvNHCiARB3-6P6kHwR7obgACWQwGR8
200 OK 43 B URL GET HTTP/1.1 sync.bumlam.com/?src=ccloud1&s_data=CAIQARjD3KirBmIUOHI5NTRYQ1Q2ZDhZUjltRDlvNHCiARB3-6P6kHwR7obgACWQwGR8
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /?src=ccloud1&s_data=CAIQARjD3KirBmIUOHI5NTRYQ1Q2ZDhZUjltRDlvNHCiARB3-6P6kHwR7obgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ3N2ZiYTNmYS05MDdjLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 19:04:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: suuid3=IiQ3N2ZiYTNmYS05MDdjLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 19:04:36 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
i.ytimg.com/vi/DPIbnlDF7ng/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGEIgQSh_MA8=&rs=AOn4CLBs4LdU_on4cl5IqphO_8SVeoMnNQ
22 kB URL i.ytimg.com/vi/DPIbnlDF7ng/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGEIgQSh_MA8=&rs=AOn4CLBs4LdU_on4cl5IqphO_8SVeoMnNQ
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash ce8d370cdeb4151a1c18b1cf104f7da6
ac4a21d58c78a78249cbea538f1664cafcb7ee4c
ac11bbed4d568cb29de97f38194479246bd9b283377c67eba87a31c757caefa8
GET /vi/DPIbnlDF7ng/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGEIgQSh_MA8=&rs=AOn4CLBs4LdU_on4cl5IqphO_8SVeoMnNQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 21786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:57 GMT
expires: Fri, 01 Dec 2023 21:02:57 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 99
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d.ccsyncuuid.net/match/9/?remote_uid=19b1ee60-b8e0-4945-53a1-f35887080b5b
74 B URL d.ccsyncuuid.net/match/9/?remote_uid=19b1ee60-b8e0-4945-53a1-f35887080b5b
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/9/?remote_uid=19b1ee60-b8e0-4945-53a1-f35887080b5b HTTP/1.1
Host: d.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: jcsuuid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
www.acint.net/rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F13%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=80&tc=1
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F13%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=80&tc=1
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F13%2F%3Fremote_uid%3D$%7BUSER_ID%7D&dp=80&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqLkOxSQcRBxT0An7K00dMpXMtKHUD968NGqS+UseM; cSyncDp14v4=1701457476
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: text/html
content-length: 154
location: https://d.ccsyncuuid.net/match/13/?remote_uid=0100007F432E6A65110749B102F41407
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
d.ccsyncuuid.net/match/10/?remote_uid=2576152b-6ca8-4d50-7199-c87083ab978f
74 B URL d.ccsyncuuid.net/match/10/?remote_uid=2576152b-6ca8-4d50-7199-c87083ab978f
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/10/?remote_uid=2576152b-6ca8-4d50-7199-c87083ab978f HTTP/1.1
Host: d.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: jcsuuid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2
200 OK 14 kB URL GET HTTP/2 fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 13992, version 1.0\012- data
Hash 2777148aac2c795e90547d37d27d7ef6
081706e57acfd5778f3aceb81e1c7b32e52ae2a5
438099da1cf057f5b48133f7a74b2d506751fb1b2e888d22ca397fa1983a8f9a
GET /s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13992
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:22:09 GMT
expires: Fri, 29 Nov 2024 23:22:09 GMT
cache-control: public, max-age=31536000
age: 70947
last-modified: Tue, 24 Oct 2023 01:50:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISma2RjRdE.woff2
8.6 kB URL fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISma2RjRdE.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 8636, version 1.0\012- data
Hash c98b995a09fa8bbef6961e00c4bfa21b
d94f586400393ea674ae9e4b284db3abd2a6d06a
0f391f424122a51079c497724054598464b26f2d72235a9b0b19301d8ff66511
GET /s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISma2RjRdE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8636
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:57 GMT
expires: Fri, 29 Nov 2024 04:53:57 GMT
cache-control: public, max-age=31536000
age: 137439
last-modified: Tue, 24 Oct 2023 01:47:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188753
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.vivacocc.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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
74 B URL s.vivacocc.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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE} HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=yandex&pbf=1&gi=1
302 Found 0 B URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=yandex&pbf=1&gi=1
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectad.ad-blast.ru
FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34
ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=yandex&pbf=1&gi=1 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.1
Date: Fri, 01 Dec 2023 19:04:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
Location: https://an.yandex.ru/mapuid/targetrtbis/
s.vivacocc.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
74 B URL s.vivacocc.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
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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 HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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====?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
200 OK 74 B URL GET HTTP/2 s.vivacocc.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====?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /n/1/orihu7srizmx673cp53uczadorvhozt2i5gfmbchjoxfr4s4mrhfu2l2pacuixl3ljix45kdmmah63245rafdboispaitb5pr62w63vy6wciozshnfzfqbsjdinth6nu76fopnnqsxodggvrut4nwta6y24lrekmdgeglqcjnvaeg22zd7zfus74gkh3gxk2oafxqudqjjxenhdpzneghz3mjd4fosmcokvznseeikbef7egkugju43mqfzpk3cjy4q3ld264vwpstr6hq3agiammj3to6jvdaoauqyicujh4ezfanuqe732ofluaqrfgi7san2eebcciirjf52umrqbijducdjtbivquki6eyrsmgydl4rx2mjofuitawrehirtalysi4deegaib46qols3fehdslreainroorkei7doajykaqcsib7ofbacfk7caoeuoa5hymskbzseu5rmbyohatwimrgdq7eejr6gywxaaytdndryfiaeect4hznaurdcoaocyns2kjfeiybyjcbguuc4orjdrarcsyidmfceezedvzv6nb5eqhecbz5h4thwlihffdtwprfhizekbanljaaeez2baurwkqcmu7cagafdysselbagmddmvzcfuydg4ixdyjvqhaxb4zuk6iahydgg7recioay7jghqwdqczyjq7sy4rseeabsf2eiqir4iqdhykdywlgei6feqy3hewdgljqce3voizro47cqriyazmbkrqzmmlsgbzqby6t4iaxieesa6rzh4srynsgei3dojr3afdbmryicepwgezbaqwauijtezjbybrafmrcamsbe5csgkzagi5amqswlefqieztiuxao4ygfj7swcyhl54sumzroyawkab7ea2wciaiabkvyaaujmsqm6aceugsikjncfcr2jrkguxc2gteaa5g4lbgoadbce2cd4iqwnyuhvmc6gbue4yq4h27e47wip3ui4qfijrceezcmrkhczkuaraph4jdubzpbjtsk7ieiead2orrhmyqmn2he4zdymroiijqgxidamptgrlzaawamnjne4hbgwd5ei6ccmihmfhhq3bqhnyb6ryjaqpqqabviq7boliimj4s2gkec47tupbmfikgaurcnz3cemqcamkvqhqwbarbqlawfqdsslrecmiaojjcma4swetblysdeijaeakaceifbaiq6z2efedscabvgmqfeh27eatcmobdai6qcnloeerdsfqwbjdakcsmmrcsyhjbaq3xy7qjcindqp3egitbypscey7xcirvaeorqsa6auosmbrjamxqezjgfygaawrgeq4s4jicerccepzvmf3amaqyijaqgeb2dysqymydhy5x4da2b4ttqpr7gyfdkuryebyseli2dynfogcabmsuojqnffmckpzeb4daqkjsgavsceralqugymr7ouiemb22aidq6okfhuecywjvpuqbkhapf4wteibljzxaw4r3gesx4vioenttcjrrd47bklithyba4bzcfyigykr7fr7vokdxdanrahqmh4vdeyb3ge6s3wclkh3g2u7tjaeko3casbl7vh6z7m222wpwrlu5s5ukgnyya6kteipszt3okbfusylxnwrhp7ckieqqm5h5lkomdxpeokqdam2ty5jh7yi7xcvg6ysgem6c3h3ws53qg7arpugy26uwpqqhkyrsojzhricpgpiuiy73hk32oshmjndriaycuzw7o4wrivmacorvw4glgtnqkimzq3cgwrjetkld6ptilskryjaxwzipprusazdtidswcmpkohdfducjcxxg6up3jju463ugutuutatqthnpewnukspp7uwegcfhchgaorppmqtn6bhyvpo7yzgpquvy5djoddl24bai7vpp4bs6e5upd2fhixswgrkwk7yreirvwltqb4nhwhqxb4rgynhxizyn2zztyb3xwarfba======?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE} HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
200 OK 74 B URL GET HTTP/2 s.vivacocc.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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE} HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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====
200 OK 74 B URL GET HTTP/2 s.vivacocc.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====
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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==== HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.vivacocc.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
74 B URL s.vivacocc.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
IP
Certificate IssuerLet's Encrypt
Subjectvivacocc.com
Fingerprint6A:3F:09:50:8A:8F:3C:49:8B:2B:49:D0:29:D3:1D:59:5C:D3:CC:03
ValidityMon, 13 Nov 2023 06:15:46 GMT - Sun, 11 Feb 2024 06:15:45 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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 HTTP/1.1
Host: s.vivacocc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
d.ccsyncuuid.net/match/13/?remote_uid=0100007F432E6A65110749B102F41407
74 B URL d.ccsyncuuid.net/match/13/?remote_uid=0100007F432E6A65110749B102F41407
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/13/?remote_uid=0100007F432E6A65110749B102F41407 HTTP/1.1
Host: d.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: jcsuuid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fd.ccsyncuuid.net%252Fmatch%252F14%252F%253Fremote_uid%253D$%257BUSER_ID%257D&dp=14
142 B URL ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fd.ccsyncuuid.net%252Fmatch%252F14%252F%253Fremote_uid%253D$%257BUSER_ID%257D&dp=14
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fd.ccsyncuuid.net%252Fmatch%252F14%252F%253Fremote_uid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 19:04:36 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=3403420A442E6A651C000C2D0228916A&r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDNGVqLkQtDAAcapEoAiVylY5ZEgqBSYPw86ljoPpgI2IS; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
acint.net/rmatch?dp=14&euid=3403420A442E6A651C000C2D0228916A&r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D
302 Found 154 B URL GET HTTP/2 acint.net/rmatch?dp=14&euid=3403420A442E6A651C000C2D0228916A&r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D
IP
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=14&euid=3403420A442E6A651C000C2D0228916A&r=https%3A%2F%2Fd.ccsyncuuid.net%2Fmatch%2F14%2F%3Fremote_uid%3D$%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqLkOxSQcRBxT0An7K00dMpXMtKHUD968NGqS+UseM; cSyncDp14v4=1701457476
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: text/html
content-length: 154
location: https://d.ccsyncuuid.net/match/14/?remote_uid=0100007F432E6A65110749B102F41407
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.webvisor.org/watch/73418029/1?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr%2814%2C14%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
200 OK 438 B URL GET HTTP/2 mc.webvisor.org/watch/73418029/1?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr%2814%2C14%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
IP
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint8C:DC:3A:FE:CF:6E:FA:0A:BD:5A:8E:C8:BC:AB:7D:64:7C:5A:E4:20
ValidityThu, 09 Nov 2023 21:01:19 GMT - Thu, 02 May 2024 20:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (438), with no line terminators
Hash cab0f60e4e0126c2dd0c8830ceb15026
d3e81756c7def25a79fc1c031dd6cd0fdb0d7b8f
9ca3cacda3a09f7fd537186ee5783ac0c242e31f5c704191429c7fb3364eecf5
GET /watch/73418029/1?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr%2814%2C14%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1 HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rubos.my1.ru
Referer: http://rubos.my1.ru/
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1316481401701457476; i=9dLu23K8jqhZCqqWoJ2V5HrNSimu/JVSgjCeeXKe+PgWDyjlVo2r3s/EFfphIKt3d/Fv3dN9dOTAAWkvK4uP96U1FZU=; yandexuid=1842569261701457476; yuidss=1842569261701457476; ymex=1732993476.yrts.1701457476#1732993476.yrtsi.1701457476
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 438
date: Fri, 01 Dec 2023 19:04:36 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://rubos.my1.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 01-Dec-2023 19:04:36 GMT
last-modified: Fri, 01-Dec-2023 19:04:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
d.ccsyncuuid.net/match/14/?remote_uid=0100007F432E6A65110749B102F41407
74 B URL d.ccsyncuuid.net/match/14/?remote_uid=0100007F432E6A65110749B102F41407
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/14/?remote_uid=0100007F432E6A65110749B102F41407 HTTP/1.1
Host: d.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ccsyncuuid.net/
DNT: 1
Connection: keep-alive
Cookie: jcsuuid=8r954XCT6d8YR9mD9o4p
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:36 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
mc.webvisor.org/watch/53858797?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A1%3Adp%3A0%3Als%3A30159353647%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457480%3Ac%3A1%3Arn%3A920820136%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
457 B URL mc.webvisor.org/watch/53858797?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A1%3Adp%3A0%3Als%3A30159353647%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457480%3Ac%3A1%3Arn%3A920820136%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
IP
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint8C:DC:3A:FE:CF:6E:FA:0A:BD:5A:8E:C8:BC:AB:7D:64:7C:5A:E4:20
ValidityThu, 09 Nov 2023 21:01:19 GMT - Thu, 02 May 2024 20:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (457), with no line terminators
Hash 8b49a8384b04a55490cf355e29696106
7815c115d0cfcc70242046d0fd2832639a2f8b79
e341f4335af83f1e874bb22193f659cd65e03658e021bba9f27cadbef93d77e4
GET /watch/53858797?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A1%3Adp%3A0%3Als%3A30159353647%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457480%3Ac%3A1%3Arn%3A920820136%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rubos.my1.ru/
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: /watch/53858797/1?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A1%3Adp%3A0%3Als%3A30159353647%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457480%3Ac%3A1%3Arn%3A920820136%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
date: Fri, 01 Dec 2023 19:04:36 GMT
access-control-allow-origin: http://rubos.my1.ru
set-cookie: yabs-sid=274311401701457476; Path=/; SameSite=None; Secure
i=0HRypHN3YOaNxzl2PY5xgvb3vxEq+mqi0x/6qRTFDKFMl27/ctZvKDZZ4Q1Zkiw+vboWYhXPU36fnbMJnyfBWV4HohQ=; Expires=Mon, 28-Nov-2033 19:04:30 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2887414381701457476; Expires=Mon, 28-Nov-2033 19:04:30 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None
yuidss=2887414381701457476; Expires=Sat, 30-Nov-2024 19:04:36 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
ymex=1732993476.yrts.1701457476#1732993476.yrtsi.1701457476; Expires=Sat, 30-Nov-2024 19:04:36 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 01-Dec-2023 19:04:36 GMT
last-modified: Fri, 01-Dec-2023 19:04:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
60 kB URL themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Referer: http://s7.ucoz.net/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 60332
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 30 Nov 2023 10:16:50 GMT
Expires: Fri, 29 Nov 2024 10:16:50 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
Vary: Accept-Encoding
Age: 118067
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e9985e731fa3106c2ff0bef23a3ae5fc
69dd4fefb780a535f1000ad601d98e24147b485f
38a1a3a7f9eec88156567a2f796156ee88af425e09f4737fc77f9e39173a9cef
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:37 GMT
server: ESF
cache-control: private
content-length: 32702
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/GEAsA0Ma60U/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gKygaMA8=&rs=AOn4CLC-sSScklTA2S_9xAuqUM2GudPKfQ
200 OK 16 kB URL GET HTTP/3 i.ytimg.com/vi/GEAsA0Ma60U/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gKygaMA8=&rs=AOn4CLC-sSScklTA2S_9xAuqUM2GudPKfQ
IP
Requested by https://www.youtube.com/embed/GEAsA0Ma60U
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 4ea3fec4fc7d3a1bee32d0b4f37b0c62
409d2ed2618440ca4a37ef09a24fb4899ed961b5
75ab4fe7815fd58aa7814f87facded2ee22f64d1a9bc304738a8264af8a3d0cf
GET /vi/GEAsA0Ma60U/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gKygaMA8=&rs=AOn4CLC-sSScklTA2S_9xAuqUM2GudPKfQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 16351
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Fri, 01 Dec 2023 21:02:56 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 06a04339e50407fb27b8806df45f4360
549e07149173df6be03296886a2e5a630589305c
471d7bf294a8ed1611b533a8e64155b2790b265481144e69791ca8f2e30cf114
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:37 GMT
server: ESF
cache-control: private
content-length: 32969
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw
20 kB URL i.ytimg.com/vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 77a40d76e1e7ba466f0993e0e2421877
bfdf721c125658440262997a2de35a760122b242
196d3bc2b103c99cf486ba9bbddb048f266b818617048a04db58174c984a6eb7
GET /vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 19714
date: Fri, 01 Dec 2023 19:04:37 GMT
expires: Fri, 01 Dec 2023 21:04:37 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137893
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ
15 kB URL i.ytimg.com/vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 587bb06eae26e827177ec4166e10a45b
d134e035867d6d690e580dcc3334fcaa07791ae5
045dd14ef47ab9ee15d0e0b081c2e0df45f57f48d409fa555bbdc343b4e1f4c9
GET /vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 15136
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Fri, 01 Dec 2023 21:02:56 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188754
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5835f75b4e49699374083534bbc72aa1
6435864d18c8394d0df88d88327c6a2dc3a2c186
c236e447c63dbab53d77bc446d7c74d41c5fc08c3dec7a35c5d6ee66add440c5
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:37 GMT
server: ESF
cache-control: private
content-length: 32765
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 01 Dec 2023 19:04:38 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3f519c1c82ce62fbd668792053164655
04645d6a2037150b2d0267c76ea504c601598ec1
b3386eafe470583a52149bddb96032f37c9b1563f675b0410236b3f2b6b84d2b
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 930
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:38 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e2d5d68fd888806789c058a4a2b0e9b2
546259ff1143b6be7b6d5f2550104f36d7efca9c
f62dcd87ae05cfadf2bbb228a396fa13cc9f0fcb7de37979014162c7049e4562
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 960
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:38 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ee9331857d6969d376b1e7faf65bf2d
7ab84abf768c155f0a5dcd8d84aaedec21a5b105
f5747a77ef98cc8e31b6eeac3715c8ea742053706a1668a2287632092d6395e3
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1334
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:38 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5212a5b8c26abf14943844748acb4046
7bc0b98b3754e8f5267d7f11f469611a6b5742c3
5afd4cf6a6374b3d5d0d4b1c6b6dd1162f3e54b3e827e560ec826057975593b2
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1002
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:38 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?oxuPSQ
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?oxuPSQ
IP
Requested by https://www.youtube.com/embed/dh39YzPS6jI
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?oxuPSQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 925af129c133ee872832ccb61bd80353
67dc180929facc93ebbbf2fa717c8b1cd2677e78
6f554a9d9d79891594446089649c96b066b6be64bae84966b7a425f2bce67980
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1334
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:39 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d0d0c76f9e656079fe44e860401be3e0
2a120f9e39d244720fb734101a0a14712b496373
5609b1096e24245087027f851f08ddac296efcdc68dc29209ae7cf529dc3138a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:39 GMT
server: ESF
cache-control: private
content-length: 32831
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw
20 kB URL i.ytimg.com/vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 77a40d76e1e7ba466f0993e0e2421877
bfdf721c125658440262997a2de35a760122b242
196d3bc2b103c99cf486ba9bbddb048f266b818617048a04db58174c984a6eb7
GET /vi/Gm9stLobTro/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg2MA8=&rs=AOn4CLDLJJMKNSqzFZxShqbrX3hM8QzzGw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 19714
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:04:37 GMT
expires: Fri, 01 Dec 2023 21:04:37 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 29c9bf6d062d5f95b93e0737c65772b8
83fc372b7484c7c6bfac978aacfdc015a2e6d25c
e2412d30fa2d4230bdfbb283653fa7a897786687525b49c82601aa3fbaff02fe
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:39 GMT
server: ESF
cache-control: private
content-length: 32924
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ
15 kB URL i.ytimg.com/vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 587bb06eae26e827177ec4166e10a45b
d134e035867d6d690e580dcc3334fcaa07791ae5
045dd14ef47ab9ee15d0e0b081c2e0df45f57f48d409fa555bbdc343b4e1f4c9
GET /vi/9FHIG_yUHVo/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gNyg2MA8=&rs=AOn4CLBKMYZsa6G4sZMoG2xgP8_ydmcVFQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 15136
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Fri, 01 Dec 2023 21:02:56 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137895
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 40c55ba9d889fbf1c30759bfbcde5fdb
a34d0f1ef97a7aae3462fde8a1625d9d862d303b
d3f5ec168d611b0e5aac6137c956349b04433ca1ebb4dded30e57e4d97df0004
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 898
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:39 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash b9e9ffad6d80169e691689550302730f
be11cfb252809433459623bb5300e3116e2438ce
82cecea5d5922376668f4357a87d929eeed82643fecddf7e590523d83c187c99
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:39 GMT
server: ESF
cache-control: private
content-length: 32950
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/H8g5jo9edNc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gGygUMA8=&rs=AOn4CLDy19gdomMG2Zna2zY1aRehOCflYw
17 kB URL i.ytimg.com/vi/H8g5jo9edNc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gGygUMA8=&rs=AOn4CLDy19gdomMG2Zna2zY1aRehOCflYw
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 66020666dde8b443de7c916b1a4396c2
9ea93a0da8c890bcc8e9f99ef33218efab868133
8a719825d159c6b8e1722bcdb85b050ff58b34981bc52b09e8b42b9e9bd036e3
GET /vi/H8g5jo9edNc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gGygUMA8=&rs=AOn4CLDy19gdomMG2Zna2zY1aRehOCflYw HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 17035
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Fri, 01 Dec 2023 21:02:56 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137895
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c37e8de725723f1cf8173eae74c0cbde
fc5efc70da25803b66f3bb550680c24fefdf0be9
cd2034a3cf8fdfcdba3758f038050b8961cc11870492690250414beef95751e2
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1250
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188757
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/dq4k6tutqTc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg5MA8=&rs=AOn4CLAcbvED9H8S9gXn1WB2pxkaw2dxDQ
19 kB URL i.ytimg.com/vi/dq4k6tutqTc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg5MA8=&rs=AOn4CLAcbvED9H8S9gXn1WB2pxkaw2dxDQ
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash a6548aea410e538d5fe2071677f16d4e
8a11dddb83828344acfc9d4d4990d2b667885bcb
d18d3087ec3b8b78c2e4e6ceceb1aa1cf5bf0d951c08a67dd67dcc518327e469
GET /vi/dq4k6tutqTc/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gOSg5MA8=&rs=AOn4CLAcbvED9H8S9gXn1WB2pxkaw2dxDQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 18700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:58 GMT
expires: Fri, 01 Dec 2023 21:02:58 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 102
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 2623648f015602eb167a9cb979744826
c180e041c398bec762ee046d6db20138e8f32994
e26552f393681d65932cd88eb241ceef4b38c21b1ce82b8284155eb0b08e386b
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 32610
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b2552476044e15a27c5f367e58d7cca3
ba21ee3d6e5051fdeb943e3d10d367b992911514
65f86f46a54d5420e86b88b170856229f06d9803a41d946ca0d5123bb3ecf41f
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1116
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 33 kB URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 110ed044637d3b7e7297f55b70001a1f
867a0d2109d57c2d84585ce2140633559029f3c2
4faf392f01612870bbc8709116f4e606af13f7d4d62214647e2542b93b8e1ceb
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 32811
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/dq4k6tutqTc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:21 GMT
expires: Fri, 29 Nov 2024 04:32:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 138739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188757
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/AubDkzJ0N08/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gIygkMA8=&rs=AOn4CLAFq7oZROUAPnO0sIZT9myIe1ca2A
14 kB URL i.ytimg.com/vi/AubDkzJ0N08/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gIygkMA8=&rs=AOn4CLAFq7oZROUAPnO0sIZT9myIe1ca2A
IP
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 02c18a9c04d4b3101fe6ee04df3766b0
138aac84f096138ea82301ca1ac96c235c0d9433
3fb81b78e24a4c92f31e10eacd1e0dc07ab77092a94085cd9b70552f536a3fcd
GET /vi/AubDkzJ0N08/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AGUA4AC0AWKAgwIABABGH8gIygkMA8=&rs=AOn4CLAFq7oZROUAPnO0sIZT9myIe1ca2A HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 13617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:59 GMT
expires: Fri, 01 Dec 2023 21:02:59 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6809aed4198f55574bd4db26751502c8
26f9eb00e9bc704c21943b92e50e6ec8d26d3384
33ac18eb0b0d2020224302a30472c7037f426a6915b3908b61a184e4ad21c8d2
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1338
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 104
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137896
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457485568
Content-Type: application/json
X-Goog-Visitor-Id: CgtYMzRXQVdwb3FMWSjA3KirBjIKCgJOTxIEEgAgPw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478923&flash=0&frm=2&u_tz&u_his=3&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 15124
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:40 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+667; expires=Sun, 30-Nov-2025 19:04:40 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:40 GMT
cache-control: private
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/AubDkzJ0N08
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b4ea82ab9e287d1cc3a2214cf72a206
ea627b9b47f407c61a26f26d3dc3753debd6f56a
a2993a01748661796c004ff75c32c11acaf66130a287f40a7c637f9cab57b225
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1351
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 19:04:40 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?yR0YJQ
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?yR0YJQ
IP
Requested by https://www.youtube.com/embed/DPIbnlDF7ng
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?yR0YJQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457486035
Content-Type: application/json
X-Goog-Visitor-Id: Cgs5RjFVUVQ4RmY4WSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479112&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 15972
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:41 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+204; expires=Sun, 30-Nov-2025 19:04:41 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:41 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457486062
Content-Type: application/json
X-Goog-Visitor-Id: CgtGLXluS01FbjlzNCjA3KirBjIKCgJOTxIEEgAgXA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478726&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 15461
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:41 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+243; expires=Sun, 30-Nov-2025 19:04:41 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:41 GMT
cache-control: private
www.youtube.com/generate_204?5s-UaQ
0 B URL www.youtube.com/generate_204?5s-UaQ
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?5s-UaQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457486218
Content-Type: application/json
X-Goog-Visitor-Id: Cgs1dlBQUjdjQkg4cyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478985&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 15164
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:41 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+684; expires=Sun, 30-Nov-2025 19:04:41 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:41 GMT
cache-control: private
www.youtube.com/generate_204?nGz0wA
0 B URL www.youtube.com/generate_204?nGz0wA
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?nGz0wA HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?7ocxpQ
0 B URL www.youtube.com/generate_204?7ocxpQ
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?7ocxpQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?5AsIwQ
0 B URL www.youtube.com/generate_204?5AsIwQ
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?5AsIwQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:41 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?U3nL0A
0 B URL www.youtube.com/generate_204?U3nL0A
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?U3nL0A HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?UXa4zg
0 B URL www.youtube.com/generate_204?UXa4zg
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?UXa4zg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?7wXMKA
0 B URL www.youtube.com/generate_204?7wXMKA
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?7wXMKA HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?mZ5I5Q
0 B URL www.youtube.com/generate_204?mZ5I5Q
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?mZ5I5Q HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 19:04:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
mc.webvisor.org/watch/73418029?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14%2C14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
9.8 kB URL mc.webvisor.org/watch/73418029?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14%2C14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1)
IP
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint8C:DC:3A:FE:CF:6E:FA:0A:BD:5A:8E:C8:BC:AB:7D:64:7C:5A:E4:20
ValidityThu, 09 Nov 2023 21:01:19 GMT - Thu, 02 May 2024 20:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /watch/73418029?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr(14%2C14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rubos.my1.ru/
Origin: http://rubos.my1.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: /watch/73418029/1?wmode=7&page-url=http%3A%2F%2Frubos.my1.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A3akmpckruryr72ly1stmj07z%3Afp%3A1120%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1170%3Acn%3A2%3Adp%3A0%3Als%3A1381799876113%3Ahid%3A936919597%3Az%3A0%3Ai%3A20231201190440%3Aet%3A1701457481%3Ac%3A1%3Arn%3A469032469%3Arqn%3A1%3Au%3A1701457480359498862%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C21%2C176%2C1%2C350%2C0%2C%2C625%2C20%2C%2C%2C%2C1214%3Aco%3A0%3Acpf%3A1%3Ans%3A1701457475664%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1701457481%3At%3AWorld%20Center%20Seikyo%20Daido-ryu%20aiki%20ju-jutsu%20-%20%D0%93%D0%9B%D0%90%D0%92%D0%9D%D0%90%D0%AF&t=gdpr%2814%2C14%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%281%29&redirnss=1
date: Fri, 01 Dec 2023 19:04:36 GMT
access-control-allow-origin: http://rubos.my1.ru
set-cookie: yabs-sid=1316481401701457476; Path=/; SameSite=None; Secure
i=9dLu23K8jqhZCqqWoJ2V5HrNSimu/JVSgjCeeXKe+PgWDyjlVo2r3s/EFfphIKt3d/Fv3dN9dOTAAWkvK4uP96U1FZU=; Expires=Mon, 28-Nov-2033 19:04:36 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1842569261701457476; Expires=Mon, 28-Nov-2033 19:04:36 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None
yuidss=1842569261701457476; Expires=Sat, 30-Nov-2024 19:04:36 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
ymex=1732993476.yrts.1701457476#1732993476.yrtsi.1701457476; Expires=Sat, 30-Nov-2024 19:04:36 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 01-Dec-2023 19:04:36 GMT
last-modified: Fri, 01-Dec-2023 19:04:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457487632
Content-Type: application/json
X-Goog-Visitor-Id: CgtRMGVTWEMteVdVYyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479068&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 15098
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:42 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+932; expires=Sun, 30-Nov-2025 19:04:42 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:42 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457487978
Content-Type: application/json
X-Goog-Visitor-Id: CgtZSmh5SldpY3UtayjA3KirBjIKCgJOTxIEEgAgNw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457481983&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16265
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:43 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+252; expires=Sun, 30-Nov-2025 19:04:43 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:43 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457488021
Content-Type: application/json
X-Goog-Visitor-Id: CgtyTGY0SEkxMWVENCjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478827&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 17017
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:43 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+341; expires=Sun, 30-Nov-2025 19:04:43 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:43 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457488080
Content-Type: application/json
X-Goog-Visitor-Id: CgtyM3ZjZjVrSFptQSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479367&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16823
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:43 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+762; expires=Sun, 30-Nov-2025 19:04:43 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:43 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457488101
Content-Type: application/json
X-Goog-Visitor-Id: Cgt4ZlR4ZXhUNG91QSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479419&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16832
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:43 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+733; expires=Sun, 30-Nov-2025 19:04:43 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:43 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457488129
Content-Type: application/json
X-Goog-Visitor-Id: CgtBMzVUZ0phMXhmRSjA3KirBjIKCgJOTxIEEgAgQg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479392&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16860
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:43 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+313; expires=Sun, 30-Nov-2025 19:04:43 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:43 GMT
cache-control: private
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137900
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 108
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/dq4k6tutqTc
39 kB URL www.youtube.com/embed/dq4k6tutqTc
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58154)
Hash c939be70ef2822216b3660b161e34429
5d37a8ccd2c7aa569908a145f792f10422c4d43d
63a62a1540649ef4a6fb08e1bf60c2c4da62b682124d7ce26466d035aaa843df
GET /embed/dq4k6tutqTc HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 19:04:32 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Gh6BIWeMJtU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=YJhyJWicu-k; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIEEgAgNw%3D%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 19:04:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+093; expires=Sun, 30-Nov-2025 19:04:32 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137902
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457491632
Content-Type: application/json
X-Goog-Visitor-Id: Cgs1dlBQUjdjQkg4cyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457480226&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1538
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:46 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+717; expires=Sun, 30-Nov-2025 19:04:46 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:46 GMT
cache-control: private
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 112
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137904
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457493653
Content-Type: application/json
X-Goog-Visitor-Id: CgtYMzRXQVdwb3FMWSjA3KirBjIKCgJOTxIEEgAgPw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457481128&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1537
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:48 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+137; expires=Sun, 30-Nov-2025 19:04:48 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:48 GMT
cache-control: private
rubos.my1.ru/?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo
200 OK 799 B URL GET HTTP/1.1 rubos.my1.ru/?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 563a1ff4a3ad45e7950e8cd102d57d46
69865fa2bbfcb720bd252e7305b3d04a3f9f5657
7f3d17701a8e1cfd118ad5d334cd1d51220fc627ac3301484328a32361f56cbe
NIDS Severity Alert suricata medium ET HUNTING DDoS-Guard Hosted Content
suricata medium ET HUNTING DDoS-Guard Hosted Content
GET /?59wTYOrwwlr%5EqNMCZ6dp5zWKIiwqA3uWHa9mYm7T%3BJMd2fUnJp1DE%3BCt8ggBL%5E7r1D%5EvnFPZJxPH7fkOJIEo HTTP/1.1
Host: rubos.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1_=i8NM3c7eAveij5P1s9yC; Domain=.my1.ru; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 19:04:49 GMT
Date: Fri, 01 Dec 2023 19:04:48 GMT
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
Transfer-Encoding: chunked
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 114
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137906
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457495656
Content-Type: application/json
X-Goog-Visitor-Id: Cgs5RjFVUVQ4RmY4WSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457481431&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1530
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:50 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+698; expires=Sun, 30-Nov-2025 19:04:50 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:50 GMT
cache-control: private
yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
200 OK 4.5 kB URL GET HTTP/3 yt3.ggpht.com/ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/H8g5jo9edNc
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash eba9910e316da42603a74d0ff98e2aab
fdc9ddb4914abaeb1ba32ddf63864f97cc0f59f0
4b8d053b05ade969384d70e97496c53e5bfea9ee1c790182289aa9e663cf46e0
GET /ytc/APkrFKYFwmwant_D0ZsUucYjb-Du-894xfp8Bp1Op8eMcA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4465
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:02:56 GMT
expires: Sat, 02 Dec 2023 19:02:56 GMT
cache-control: public, max-age=86400, no-transform
etag: "v45f"
content-type: image/jpeg
vary: Origin
age: 116
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.youtube.com/embed/Gm9stLobTro
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 137908
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457497642
Content-Type: application/json
X-Goog-Visitor-Id: CgtRMGVTWEMteVdVYyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457481626&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1524
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:04:52 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+929; expires=Sun, 30-Nov-2025 19:04:52 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:04:52 GMT
cache-control: private
services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org&lang=en-US
82 B URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org&lang=en-US
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f822d39c269d2c47e3174b6c6bad3b7
d56bd07959c766e9c18faa9cf1070548f9236b65
cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 82
allow: GET, HEAD, OPTIONS
content-security-policy: connect-src 'self' https://*.google-analytics.com; style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; frame-src https://www.recaptcha.net/recaptcha/; media-src https://videos.cdn.mozilla.net; form-action 'self'; object-src 'none'; font-src 'self' https://addons.mozilla.org/static-server/; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/; script-src https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; default-src 'none'; child-src https://www.recaptcha.net/recaptcha/; report-uri /__cspreport__
cross-origin-opener-policy: same-origin
public-key-pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
referrer-policy: same-origin
server: nginx
strict-transport-security: max-age=31536000
x-amo-request-id: 39e26b23c4d84d6e8f50eba72905b317
x-content-type-options: nosniff
x-frame-options: DENY
cache-control: max-age=180
date: Fri, 01 Dec 2023 19:02:04 GMT
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
vary: origin,X-Country-Code,Accept-Language
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rgHvx2-JRghQi8v3qBFS5RLRfSmYFGdP5RXqU4FFSmOjnM-dN6flqw==
age: 175
X-Firefox-Spdy: h2
aus5.mozilla.org/update/3/SystemAddons/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
42 B URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash f8f24fa0c857d8f2ee493e131b85ab62
cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6
e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
via: 1.1 google
date: Fri, 01 Dec 2023 19:03:45 GMT
content-type: text/xml; charset=utf-8
age: 74
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457507631
Content-Type: application/json
X-Goog-Visitor-Id: CgtZSmh5SldpY3UtayjA3KirBjIKCgJOTxIEEgAgNw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457481983&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1247
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:02 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+629; expires=Sun, 30-Nov-2025 19:05:02 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:02 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457508994
Content-Type: application/json
X-Goog-Visitor-Id: Cgt4ZlR4ZXhUNG91QSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479419&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 835
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/H8g5jo9edNc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+465; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509002
Content-Type: application/json
X-Goog-Visitor-Id: CgtyM3ZjZjVrSFptQSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479367&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 828
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+278; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509009
Content-Type: application/json
X-Goog-Visitor-Id: CgtyTGY0SEkxMWVENCjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478827&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 831
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+773; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509015
Content-Type: application/json
X-Goog-Visitor-Id: CgtBMzVUZ0phMXhmRSjA3KirBjIKCgJOTxIEEgAgQg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479392&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 979
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/AubDkzJ0N08
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+465; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509023
Content-Type: application/json
X-Goog-Visitor-Id: CgtZSmh5SldpY3UtayjA3KirBjIKCgJOTxIEEgAgNw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479045&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 827
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dq4k6tutqTc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+658; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509030
Content-Type: application/json
X-Goog-Visitor-Id: Cgs5RjFVUVQ4RmY4WSjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479112&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 818
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9FHIG_yUHVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+124; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509036
Content-Type: application/json
X-Goog-Visitor-Id: CgtRMGVTWEMteVdVYyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457479068&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 808
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/Gm9stLobTro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+400; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509044
Content-Type: application/json
X-Goog-Visitor-Id: CgtYMzRXQVdwb3FMWSjA3KirBjIKCgJOTxIEEgAgPw%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478923&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 826
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/GEAsA0Ma60U
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+665; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509050
Content-Type: application/json
X-Goog-Visitor-Id: Cgs1dlBQUjdjQkg4cyjA3KirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478985&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 827
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/DPIbnlDF7ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+880; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/9FHIG_yUHVo
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701457509058
Content-Type: application/json
X-Goog-Visitor-Id: CgtGLXluS01FbjlzNCjA3KirBjIKCgJOTxIEEgAgXA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701457478726&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 827
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/dh39YzPS6jI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 19:05:04 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+035; expires=Sun, 30-Nov-2025 19:05:04 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 19:05:04 GMT
cache-control: private
s.uuidksinc.net/match/1867/?remote_uid=8r954XCT6d8YR9mD9o4p
200 OK 74 B URL GET HTTP/2 s.uuidksinc.net/match/1867/?remote_uid=8r954XCT6d8YR9mD9o4p
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99
ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /match/1867/?remote_uid=8r954XCT6d8YR9mD9o4p HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: image/png
content-length: 74
set-cookie: jcsuuid=GuP9udiU6jdRkpnffq0b; expires=Sat, 30 Nov 2024 19:04:35 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
200 OK 3.4 kB URL GET HTTP/2 ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
IP
Certificate IssuerLet's Encrypt
Subjectccsyncuuid.net
Fingerprint05:93:D2:3F:39:41:DF:CE:18:E5:65:94:78:1D:8A:7F:24:58:17:98
ValidityMon, 13 Nov 2023 06:10:33 GMT - Sun, 11 Feb 2024 06:10:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3509), with no line terminators
Hash 461461de9c1b78c831b8043938896bfc
c3fc1f4d31537e090c199597d92e38856ffacb1d
5370b2e889248d7ee061ab696c9227b50a93677c1881808f079b25404d15b9ae
GET /matchx?gdpr=0&gdpr_consent= HTTP/1.1
Host: ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rubos.my1.ru/
Cookie: jcsuuid=8r954XCT6d8YR9mD9o4p
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/9/?remote_uid=${UUID}
301 Moved Permanently 74 B URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/9/?remote_uid=${UUID}
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ccsyncuuid.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerSectigo Limited
Subject*.buzzoola.com
FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesync/redirect?redirect_url=https://d.ccsyncuuid.net/match/9/?remote_uid=${UUID} HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ccsyncuuid.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 01 Dec 2023 19:04:35 GMT
content-type: text/html; charset=utf-8
content-length: 116
location: https://d.ccsyncuuid.net/match/9/?remote_uid=19b1ee60-b8e0-4945-53a1-f35887080b5b
serverid: TODO
X-Firefox-Spdy: h2
195.216.243.12
142.250.74.78
31.172.81.172
31.220.27.135
194.242.11.186
0.0.0.0