r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2472
Expires: Tue, 13 Sep 2022 12:36:19 GMT
Date: Tue, 13 Sep 2022 11:55:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 11:08:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YCONBsqYQHkuYVyj67YmT4pMNHDLYavVd5x_oMyRdR8snlHlPTvOIQ==
Age: 2784
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DgnbdPlTUcfAGTNVFtGbEwnSo0WGIQYaZDLQb8XlyPpVMGrFKHterQ==
age: 26393
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 11:55:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 13 Sep 2022 11:03:22 GMT
Expires: Tue, 13 Sep 2022 11:50:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2UtdhNw454WAyrCYMJFZ-nhdJ1p9VvbnoSZFvT0EQC6Tp9OIPgZ8Bg==
Age: 3105
goo-gl.me/P9MDI
200 OK 62 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (53608), with CRLF, LF line terminators
Hash 3ed1cd827bb24879a6787d5cdfba7a0f
3db185c9ea72fda7b618552d139d1ff73e89d60e
f9a15460a38b614903f614cc8d488f9066078063d5e5a974e17d87fb9d741efc
GET /P9MDI HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.25
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; expires=Tue, 13-Sep-2022 13:55:07 GMT; Max-Age=7200; path=/
url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D; expires=Tue, 13-Sep-2022 13:55:07 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goo-gl.me/client/runtime-es2015.13795c7f3e844d72e902.js
200 OK 3.2 kB URL HTTP/1.1 goo-gl.me/client/runtime-es2015.13795c7f3e844d72e902.js
IP
File type ASCII text, with very long lines (3131), with CRLF line terminators
Hash 815eaf75a41e11dd3bdb3ca9d5745994
c8fb594da88b2dc604c365827ea7ebdb94afe10f
63d4ffc17d5e7911c76769cf896e88bca050eba775209386e061ce3dd169f32a
GET /client/runtime-es2015.13795c7f3e844d72e902.js HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:07 GMT
Content-Type: application/javascript
Content-Length: 3196
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Wed, 22 Jun 2022 23:36:35 GMT
ETag: "c7c-5e211ced05a9a"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5413
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Last-Modified: Tue, 13 Sep 2022 10:24:55 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
goo-gl.me/client/polyfills-es2015.706b2530f9a3f6416e7a.js
200 OK 49 kB URL HTTP/1.1 goo-gl.me/client/polyfills-es2015.706b2530f9a3f6416e7a.js
IP
File type ASCII text, with very long lines (49234)
Hash 37e53259a581e8aaebdb0b04348e1ece
242a1f5af13bcb7e2bd50b2bb74f4745c488c09b
8731c5a14f2ecd46e3ac33fbd7602191b235a9694a39b813b50d9da2988d0035
GET /client/polyfills-es2015.706b2530f9a3f6416e7a.js HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:07 GMT
Content-Type: application/javascript
Content-Length: 49300
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:40 GMT
ETag: "c094-5d5d74ecb4608"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rotarb.bid/1k2xb.min.js?f0e649a
200 OK 19 kB URL HTTP/1.1 rotarb.bid/1k2xb.min.js?f0e649a
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63129), with no line terminators
Hash 853c3403e14933290eebd3e0fa055dad
0059fce0a27058ff01b7c6d9f7db457f3df03028
7f223b53015d8f05b8e8fee41acb90d652e9209e75e0739580c09d7c3b76a709
Analyzer Verdict Alert quad9 Sinkholed
GET /1k2xb.min.js?f0e649a HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Cache-Control: max-age=300
Expires: Tue, 13-Sep-2022 15:00:08 EEST
Duration: 326563
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap
200 OK 719 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap
IP
Hash ab4c88fc91b251be3579bb1dd692db86
78b6fefd31ec6d4e85095b64552b4a6d5ae2c73a
62dcaa24f318e703f947e45f7ea2918aea5f490429a5a8d037eb3ea57e991caf
GET /css?family=Roboto:300,400,500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 13 Sep 2022 11:55:08 GMT
date: Tue, 13 Sep 2022 11:55:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
goo-gl.me/client/main-es2015.e541ab260a1110e5aaf1.js
200 OK 1.2 MB URL HTTP/1.1 goo-gl.me/client/main-es2015.e541ab260a1110e5aaf1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.2 MB (1222230 bytes)
Hash 2d5a9cc885acefd464858cb3dd99c25d
2d42943d9ba172476a8241de975ec53bb0aa6c8e
b9576e9195dc73e95a72058acdd68381ab03b652c99602ec5baa1a1c8990ac4b
GET /client/main-es2015.e541ab260a1110e5aaf1.js HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: application/javascript
Content-Length: 1222230
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:40 GMT
ETag: "12a656-5d5d74ed04212"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 490860
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rotarb.bid/1k2xb.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 688b9b521f79a88030a50fb961ef8c14
38d1f3385151a9d388d27d6fba1ee04f109758b9
9d2cd62930a150c607fa333a3d48691464d5ad73bbc6c45f20d76f0cf4899856
Analyzer Verdict Alert quad9 Sinkholed
POST /1k2xb.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 145
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: apJqFOeLy295Zmqdk/7nPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zeK9udKlLQFOG91UzR2z2ml4vV0=
goo-gl.me/client/assets/icons/merged.svg?v4
200 OK 50 kB URL HTTP/1.1 goo-gl.me/client/assets/icons/merged.svg?v4
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (50310), with no line terminators
Hash f686ae40030ecd402cc6deeb2940f7ec
2340bb8d6be252277cd5a7e950f94ef70d2e9032
6d628e3bc371352e5b2de66a9f20aab1b82d5e423600048dce8df7f40b47b6bd
GET /client/assets/icons/merged.svg?v4 HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D; theme=light
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 50310
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:40 GMT
ETag: "c486-5d5d74ecbd542"
Accept-Ranges: bytes
goo-gl.me/storage/branding_media/KEqKYBA5N985BB7yZgC4AJChlJQXpVajrSs8luyR.png
200 OK 5.1 kB URL HTTP/1.1 goo-gl.me/storage/branding_media/KEqKYBA5N985BB7yZgC4AJChlJQXpVajrSs8luyR.png
IP
File type PNG image data, 300 x 70, 8-bit colormap, non-interlaced\012- data
Hash 678b247e85067b91a054a01fba42ae29
6322a23acdc274a957b38278f0501dab0e8eb02d
842d0fda4c25dba5d3069f3f4e5c32297d5f29c02f39525133435bd83ea80606
GET /storage/branding_media/KEqKYBA5N985BB7yZgC4AJChlJQXpVajrSs8luyR.png HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D; theme=light
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: image/png
Content-Length: 5128
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:43 GMT
ETag: "1408-5d5d74ef7fb58"
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 02:02:22 GMT
expires: Sun, 10 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 294766
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash 7b08b9e11fc6b8a8a1398b357e874144
4b5fb5790fae1c96655aaa7a426b697f5ab986d0
3728fbdd191d75bad5b83a838dfe2fc15f84c2aaa36ffa573321275847db31a9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:56 GMT
expires: Thu, 07 Sep 2023 19:34:56 GMT
cache-control: public, max-age=31536000
age: 490812
last-modified: Wed, 11 May 2022 19:24:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:21 GMT
expires: Thu, 07 Sep 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 490847
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9576, version 1.0\012- data
Hash 9b9ec29522d1bf8924ccc2d917e1807b
1df345651c653bba476ab6b8546351ec7f4f018a
47aa3bfad6cb9e2d63abdd58f4e6ce4f7b9fd2704b2b15193c71874035fe025d
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 21:55:09 GMT
expires: Tue, 12 Sep 2023 21:55:09 GMT
cache-control: public, max-age=31536000
age: 50399
last-modified: Wed, 11 May 2022 19:24:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://goo-gl.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 06:19:49 GMT
expires: Fri, 08 Sep 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 452119
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68aeb46076360f6b9c0a4204fbdc53c3
24c755a5d343736c5c466721d1c4daec1d50944c
5677248342593cf49f89b1db6d97251d5d4161f9137d54dae35d341519d693fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5677248342593CF49F89B1DB6D97251D5D4161F9137D54DAE35D341519D693FD"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12217
Expires: Tue, 13 Sep 2022 15:18:45 GMT
Date: Tue, 13 Sep 2022 11:55:08 GMT
Connection: keep-alive
goo-gl.me/P9MDI/img
403 Forbidden 2.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash a296aff77e4d41ee2f2c73f315256b81
c3e7651a64726961e52895d73dcd28409525dca5
bbe260f1d48628380ac7618818f61edf8a3d21d422bfea29524f6e2967bba39f
GET /P9MDI/img HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D; theme=light
HTTP/1.1 403 Forbidden
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.25
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjY4ZmZ1cU9lRVdKdm9QWjE1MnpwWFE9PSIsInZhbHVlIjoiM0U2eWZhUUMvLzl1OGJ2ay9FZzVWNkxnRlJLcVRKKzVQTUZCSTNURHA0c1lnTnp2d0tRNW5MUUVPN3hVTzh0SU1OMnhwUWUvYVpFYWtXTktxV1B1MU5JMFlUaUNObjAvTnVlRktaTGxTZzZ5cjBTK3hzTUwyTGYzd2lqUTN6eVQiLCJtYWMiOiI0MWZkMmUwYjEyZmY5MzZiZTU1ZThmOTBjNzI3NTk5NDFjNWFjZTZkMGYyMzNjZjA4NmQ2MDY1ZDVlNDlkYWI0In0%3D; expires=Tue, 13-Sep-2022 13:55:08 GMT; Max-Age=7200; path=/
url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IlhhRDNpNlF2RC9FZWNRQkxSSE5PU1E9PSIsInZhbHVlIjoiNFQxQ0xsTkhFNXFvZVNySUxIQ2o4QmdyaThoaFBkS2xUU0pCMllGMk4yZy9uOVNkTFc4ZmpKdGVQNUQ5K1RadkRXUGZKekpidWcxR25yVFFjaW9wUUp1aW0ybHRoME5xZ3Ztb1dGaGRrNERFSVV5QzU5Smt6NnVpNHZBYXV6eVAiLCJtYWMiOiJiNTk5YjkxZGFlYmIzYTg3NGIxNzIyM2I3NGFjYzIzY2NjNWM5MTc3MDc4OTEzMDdmNjI4ZTNiYTNkYjc3ZjUxIn0%3D; expires=Tue, 13-Sep-2022 13:55:08 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20006
Date: Tue, 13 Sep 2022 10:20:38 GMT
Expires: Tue, 13 Sep 2022 12:20:38 GMT
Cache-Control: public, max-age=7200
Age: 5670
Last-Modified: Wed, 13 Apr 2022 21:02:38 GMT
Content-Type: text/javascript
goo-gl.me/client/favicon/icon-144x144.png
200 OK 12 kB URL HTTP/1.1 goo-gl.me/client/favicon/icon-144x144.png
IP
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash 497a22e492bb2a0a9a78ee4a53075d8f
a479acd29b4aa960e8ae398c3015fd38a27271ef
18732cfc923ddd22fad6b8dea837a2f9fc260488b560df6698d694fa1e527a7e
GET /client/favicon/icon-144x144.png HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjY4ZmZ1cU9lRVdKdm9QWjE1MnpwWFE9PSIsInZhbHVlIjoiM0U2eWZhUUMvLzl1OGJ2ay9FZzVWNkxnRlJLcVRKKzVQTUZCSTNURHA0c1lnTnp2d0tRNW5MUUVPN3hVTzh0SU1OMnhwUWUvYVpFYWtXTktxV1B1MU5JMFlUaUNObjAvTnVlRktaTGxTZzZ5cjBTK3hzTUwyTGYzd2lqUTN6eVQiLCJtYWMiOiI0MWZkMmUwYjEyZmY5MzZiZTU1ZThmOTBjNzI3NTk5NDFjNWFjZTZkMGYyMzNjZjA4NmQ2MDY1ZDVlNDlkYWI0In0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IlhhRDNpNlF2RC9FZWNRQkxSSE5PU1E9PSIsInZhbHVlIjoiNFQxQ0xsTkhFNXFvZVNySUxIQ2o4QmdyaThoaFBkS2xUU0pCMllGMk4yZy9uOVNkTFc4ZmpKdGVQNUQ5K1RadkRXUGZKekpidWcxR25yVFFjaW9wUUp1aW0ybHRoME5xZ3Ztb1dGaGRrNERFSVV5QzU5Smt6NnVpNHZBYXV6eVAiLCJtYWMiOiJiNTk5YjkxZGFlYmIzYTg3NGIxNzIyM2I3NGFjYzIzY2NjNWM5MTc3MDc4OTEzMDdmNjI4ZTNiYTNkYjc3ZjUxIn0%3D; theme=light
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: image/png
Content-Length: 12412
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:40 GMT
ETag: "307c-5d5d74ed17a92"
Accept-Ranges: bytes
goo-gl.me/client/styles.db54477ffe0eec7f25fa.css
200 OK 13 kB URL HTTP/1.1 goo-gl.me/client/styles.db54477ffe0eec7f25fa.css
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a9043ac24932db2798fafb6cd70aa931
f4d93f476db0ec21eef1dceb17b553f688a48b66
ceeddb05abf4baa7c3a7b6b30deeb67845b3b568b0db06fb4318fa48b5040a10
GET /client/styles.db54477ffe0eec7f25fa.css HTTP/1.1
Host: goo-gl.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/P9MDI
Cookie: XSRF-TOKEN=eyJpdiI6IjhmRlV1azZmSjVGb3BKOU1DeVpnMmc9PSIsInZhbHVlIjoiNlBSanB2TlMyVzQyYlZuMWRmOUdvMTlscmFGVzBiR3RzYUovUXJrREhhQlAxUnM1OC8wbDlOYlRmVEtjRlVrdmxsV1FIK1k5RG5TL3UvM20wWFlQQTUrRjROK1hmUTBqVFo2NXlrY3BkU0lFQkFJSEJUVi9pMkRvUG4yZE41ZUsiLCJtYWMiOiJlMjI4NWVmNmUzYWZiMzNlYjlmODQ4NGIwNjdjMjBmMTA5MDkyYTgzZmMxNzViMmQwMDc2ZTk3ZGQxYTk1M2VlIn0%3D; url_shortener_goo_glme_sokrashhatel_ssylok_session=eyJpdiI6IithVVBNTXBOTzV2SFFVZjdRQ2VudkE9PSIsInZhbHVlIjoiZXQ2UWJSZnB4d0huZndzZk9lVWRsUGQvekNBbnVZZ1dVVjFmdG8zMDd0ZDU3cE9JMkprVmNpbWFRRC95NDVvNHBuWUNHYWVCQVpzSUN0VmZSMW0ybElLanMvUHY2ZmVxMzJMaGdqbEdWcmd0TXdoSkdWNUpWanVmRmhkaEhqeDkiLCJtYWMiOiI1ZmE1ZjE1ZDAzNjYyOGM3ZmQ5ZWI5NWU1MzZmYjY3Yzg5MTEyMzNjOTAxZTRiYzBjZjI5M2ZmNDRiYzQ5NWZjIn0%3D
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Tue, 13 Sep 2022 11:55:08 GMT
Content-Type: text/css
Content-Length: 113190
Connection: keep-alive
Keep-Alive: timeout=30
Last-Modified: Tue, 18 Jan 2022 08:46:40 GMT
ETag: "1ba26-5d5d74ed4fd02"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c85e22b75dd559a6c65736bae63c5bd
eb57470991666108a01b8ee0adf707e1c1dc8642
bd05cc5dfc5ddd554cc9ac5395035ce302b0b74343d199a64b2dbdcac0070944
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c85e22b75dd559a6c65736bae63c5bd
eb57470991666108a01b8ee0adf707e1c1dc8642
bd05cc5dfc5ddd554cc9ac5395035ce302b0b74343d199a64b2dbdcac0070944
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s10.histats.com/js15_as.js
200 OK 4.5 kB URL HTTP/1.1 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash eb34f61c512a19197043aa91983468a6
007bf5d74944f142685aab958578c6e86f6420e6
b8e2392f1ecb4a54de0d33135916d59327fa34c5527cd27b30a30ce321ddf0e9
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
date: Tue, 13 Sep 2022 11:53:17 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 478052404
content-type: text/javascript
content-length: 4547
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:2B5D_2E69C9F0:0050_63206F9C_32B7D:9CCA
x-iplb-instance: 28229
mediapush1.com/?ma=mu3tkmlbmq5ha3ddf4zdkojy
200 OK 58 kB URL HTTP/2 mediapush1.com/?ma=mu3tkmlbmq5ha3ddf4zdkojy
IP
ASN #39572 DataWeb Global Group B.V.
Hash dbae2d33de8b3534b52c20ddc47d93bb
7449a7ec281400796a2f9dceeaacfdf29ad142bb
2e08337bd3bbce59f0b14544eee7371764090e102a4738605cfa856c772d291e
GET /?ma=mu3tkmlbmq5ha3ddf4zdkojy HTTP/1.1
Host: mediapush1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 11:55:07 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=dded592e-3aa1-4adf-b66e-709c25cdffe8; expires=Thu, 13-Oct-2022 11:55:08 GMT; Max-Age=2592000; path=/; SameSite=None; domain=mediapush1.com; secure
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1686601706460678
200 OK 58 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1686601706460678
IP
File type ASCII text, with very long lines (2903)
Hash fd76ecb0f4609ef07d0728d10f71604c
fa482bfb504dc187780859c75c33aded7c584547
3516f926742e3658965257d35ebcadfa85a9b316ffe59a3208ffd5bace205006
GET /pagead/js/adsbygoogle.js?client=ca-pub-1686601706460678 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Tue, 13 Sep 2022 11:55:08 GMT
expires: Tue, 13 Sep 2022 11:55:08 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 12915610127628416810
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 57547
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c85e22b75dd559a6c65736bae63c5bd
eb57470991666108a01b8ee0adf707e1c1dc8642
bd05cc5dfc5ddd554cc9ac5395035ce302b0b74343d199a64b2dbdcac0070944
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j96&a=1454310955&t=pageview&_s=1&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAAC~&jid=1807721510&gjid=521641290&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&_r=1&_slc=1&z=662359699
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=1454310955&t=pageview&_s=1&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAAC~&jid=1807721510&gjid=521641290&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&_r=1&_slc=1&z=662359699
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j96&a=1454310955&t=pageview&_s=1&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAAC~&jid=1807721510&gjid=521641290&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&_r=1&_slc=1&z=662359699 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://goo-gl.me
date: Tue, 13 Sep 2022 11:55:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j96&a=1454310955&t=pageview&_s=2&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&dp=%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=&gjid=&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&z=1038148057
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j96&a=1454310955&t=pageview&_s=2&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&dp=%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=&gjid=&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&z=1038148057
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j96&a=1454310955&t=pageview&_s=2&dl=http%3A%2F%2Fgoo-gl.me%2FP9MDI&dp=%2FP9MDI&ul=en-us&de=UTF-8&dt=USS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=&gjid=&cid=1512742004.1663070096&tid=UA-152622157-2&_gid=1884361576.1663070096&z=1038148057 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Tue, 13 Sep 2022 08:55:17 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 10792
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 75bed4d80cb3dab43e249f315bde2c7d
5fcb3cc68a361891777674cde60b99507dadcddb
1990f16373a47dee14e19f0852866afe4086bc8c8ab66e38b7ee36a4dcd983b0
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 17 Sep 2022 09:41:33 GMT
ETag: "5fcb3cc68a361891777674cde60b99507dadcddb"
Last-Modified: Tue, 13 Sep 2022 09:41:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2779
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b1356fe8b521-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec7a5bb8e310f5c9c992cf85832d5445
e32b8e200a79da9008985e8e6c272f35b02581c5
6391e4c68631e272509ade559b8f568b03dd88be1956906332ae584f9faee00a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 8e83c4e7f7de0362221e1e56ec17ca4a
366cef891173479b1df5b21a1af321cd19f764bf
9fc4b5bcd5fe175d62f4e2c78145656f5fa5fe2b1cf3ad69681050ee3509b8a8
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 17 Sep 2022 09:51:45 GMT
ETag: "366cef891173479b1df5b21a1af321cd19f764bf"
Last-Modified: Tue, 13 Sep 2022 09:51:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2713
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b1356936b51e-OSL
googleads.g.doubleclick.net/pagead/html/r20220908/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220908/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 09a8bd805dba1307ae0bd76a0c9ca73d
bdc16e7610abae944da47ff3a0e5fea818241fb0
e3978f36e9c5f0b909ed64015db629e2c64b46e75d165c6d1d146fcb792cdbde
GET /pagead/html/r20220908/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4412
x-xss-protection: 0
date: Tue, 13 Sep 2022 01:15:52 GMT
expires: Tue, 27 Sep 2022 01:15:52 GMT
cache-control: public, max-age=1209600
age: 38357
etag: 8616628553774171045
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e80e25cd2f62776337af6df560b95fd
588d000c658214820cc9063d118b60437bc03152
41afd36104d30803eb2fae472a09e0254312557f37bb65216a46139b1365ce59
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41AFD36104D30803EB2FAE472A09E0254312557F37BB65216A46139B1365CE59"
Last-Modified: Sun, 11 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21494
Expires: Tue, 13 Sep 2022 17:53:23 GMT
Date: Tue, 13 Sep 2022 11:55:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 741400b574ef7f9f3236164e28e58c51
811018b86fd196da2faf32b044905e1130002a90
efb8e915e207a776018a5319e449e47a105b1d8692e08317c2b3014135b01418
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fd53df42280409cd83e9f2cbd753bb6
c7879abb078bdc6dfd363f72509d1f36e5a8a622
c6eecc725ec5cf4376f99fafaf029eaa6f207dceefb09c09f1e8aaaa1fa1b5f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (674)
Hash f948ad97d8bcc64c1eee91e4e703f3f5
b5c35b5c139ddec32fe96bf89863fcf0845262bf
0d2dc3bdec9010c5375ac3fab62d3f33c2a3f961c6c974f2c0da8d584ed441e1
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72380
date: Tue, 13 Sep 2022 11:55:09 GMT
access-control-allow-origin: *
etag: "631f3e5d-11abc"
expires: Tue, 13 Sep 2022 12:55:09 GMT
last-modified: Mon, 12 Sep 2022 17:12:45 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad439cab56126bcc402ee9f92365a209
a4b48a9a733c53cbc7020e190b8c787e1f80f55a
d0e2e52b66a8dec8c57092ec332f452a7348941d778d7b4686ca32696aabd065
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=goo-gl.me&callback=_gfp_s_&client=ca-pub-1686601706460678
200 OK 198 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=goo-gl.me&callback=_gfp_s_&client=ca-pub-1686601706460678
IP
File type ASCII text, with no line terminators
Hash c6e1ee078fe7d55e8c8d700a1510804c
c67bb92eea7bfac411157fbb29d5c21c1bdbd310
2750b6e5f8d06a6542771a46bdb10958f348ed746ec792d0c5a7d8a6abe5fbd4
GET /gampad/cookie.js?domain=goo-gl.me&callback=_gfp_s_&client=ca-pub-1686601706460678 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 13 Sep 2022 11:55:09 GMT
server: cafe
cache-control: private
content-length: 198
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=goo-gl.me
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=goo-gl.me
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=goo-gl.me HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 13 Sep 2022 11:55:09 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=goo-gl.me
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=goo-gl.me
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=goo-gl.me HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 13 Sep 2022 11:55:09 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 741400b574ef7f9f3236164e28e58c51
811018b86fd196da2faf32b044905e1130002a90
efb8e915e207a776018a5319e449e47a105b1d8692e08317c2b3014135b01418
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fd53df42280409cd83e9f2cbd753bb6
c7879abb078bdc6dfd363f72509d1f36e5a8a622
c6eecc725ec5cf4376f99fafaf029eaa6f207dceefb09c09f1e8aaaa1fa1b5f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad439cab56126bcc402ee9f92365a209
a4b48a9a733c53cbc7020e190b8c787e1f80f55a
d0e2e52b66a8dec8c57092ec332f452a7348941d778d7b4686ca32696aabd065
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s4.histats.com/stats/0.php?4667977&@f16&@g1&@h1&@i1&@j1663070096036&@k0&@l1&@mUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:37472676&@b3:1663070096&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fgoo-gl.me%2FP9MDI&@w
200 OK 51 B URL HTTP/1.1 s4.histats.com/stats/0.php?4667977&@f16&@g1&@h1&@i1&@j1663070096036&@k0&@l1&@mUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:37472676&@b3:1663070096&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fgoo-gl.me%2FP9MDI&@w
IP
File type ASCII text, with no line terminators
Hash 9d1f892368e5ae381a72a58a293f0413
08c8281a90072e20060424b2f529029619e5833b
2d27e226c25b8f3c13fcd2b001ed51806e4f8365738b64f589cad1b8ede6329a
GET /stats/0.php?4667977&@f16&@g1&@h1&@i1&@j1663070096036&@k0&@l1&@mUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:37472676&@b3:1663070096&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fgoo-gl.me%2FP9MDI&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 51
Connection: close
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 88b985f6c9d63561e582239a89878aa4
e671fd7385624718b55856bdeebbf1babbd53364
53a521245acd86d21ee0e3e89314969309803f96e369d565af9cfb6f985b7fc7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 17 Sep 2022 09:22:59 GMT
ETag: "e671fd7385624718b55856bdeebbf1babbd53364"
Last-Modified: Tue, 13 Sep 2022 09:23:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 953
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b1389b9db521-OSL
yandex.ru/ads/system/context.js
200 OK 82 kB URL HTTP/2 yandex.ru/ads/system/context.js
IP
File type Unicode text, UTF-8 text, with very long lines (65464), with no line terminators
Hash f220007f196528965469c722957f0e33
26155c063d5e900f589009eaee3bd5a1ef17607b
106b4098cf4b946f1e993fa0c297cc6215e5ee46c174226e95a75aaf2719ae4f
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=vXPj+TGIXwKhLATwL4T0sq5CJtwOzwSZjNTlDhpqerosdYltb0pqibN42u6KwTlrzBgfbrJlkCk7T2b6g5YbohGMDeU=; Path=/; Domain=.yandex.ru; Expires=Thu, 12-Sep-2024 11:55:09 GMT; SameSite=None; Secure; HttpOnly
expires: Tue, 13 Sep 2022 12:55:09 GMT
x-yandex-req-id: 1663070109111383-15155302287653400352-vla1-3705-vla-l7-balancer-8080-BAL-5393
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 88b985f6c9d63561e582239a89878aa4
e671fd7385624718b55856bdeebbf1babbd53364
53a521245acd86d21ee0e3e89314969309803f96e369d565af9cfb6f985b7fc7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 17 Sep 2022 09:22:59 GMT
ETag: "e671fd7385624718b55856bdeebbf1babbd53364"
Last-Modified: Tue, 13 Sep 2022 09:23:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 953
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b138abb4b521-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 88b985f6c9d63561e582239a89878aa4
e671fd7385624718b55856bdeebbf1babbd53364
53a521245acd86d21ee0e3e89314969309803f96e369d565af9cfb6f985b7fc7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 17 Sep 2022 09:22:59 GMT
ETag: "e671fd7385624718b55856bdeebbf1babbd53364"
Last-Modified: Tue, 13 Sep 2022 09:23:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 953
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b138bfacb4ee-OSL
yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
200 OK 26 kB URL HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Hash 7f0cdaf91230f9789ca4162aedff612e
965de571aa794dab64076c3cc64dc8894b843f23
033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Wed, 13 Sep 2023 17:39:22 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: c9c75f3fd8b0cf7a
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/648543/9fade99670dde18f802b.js
200 OK 19 kB URL HTTP/2 yastatic.net/partner-code-bundles/648543/9fade99670dde18f802b.js
IP
File type ASCII text, with very long lines (65494)
Hash 10e32e6afd77d9f444e384982b538c65
4385f73b6794a2dd32593f3605dadfa75c1b300e
dcb1d5bd0fef9eb6b12d82cb8014b6bb02668fd4c0043c7d9a249a3649ab5149
GET /partner-code-bundles/648543/9fade99670dde18f802b.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 18628
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "10e32e6afd77d9f444e384982b538c65"
expires: Thu, 12 Sep 2052 18:28:44 GMT
last-modified: Tue, 13 Sep 2022 08:44:07 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/648543/e8c3f9297c33b49d537f.js
200 OK 4.5 kB URL HTTP/2 yastatic.net/partner-code-bundles/648543/e8c3f9297c33b49d537f.js
IP
File type ASCII text, with very long lines (13535)
Hash 83f4494349df3ff30cabc1cfa38ed5c3
6ef54a950e527ccc9ebbd71c128212643042e9cb
9cc2b8ab1395d8416b90213dbb9496c9ed77208912efff65f24fd30e3309c3b4
GET /partner-code-bundles/648543/e8c3f9297c33b49d537f.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 4467
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "83f4494349df3ff30cabc1cfa38ed5c3"
expires: Thu, 12 Sep 2052 18:28:44 GMT
last-modified: Tue, 13 Sep 2022 08:44:07 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 8.9 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
File type ASCII text, with very long lines (33703), with no line terminators
Hash f80882bf67cf261aa08d636da095149a
3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Thu, 12 Sep 2052 18:27:31 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/648543/b351c402d14bfe389767.js
200 OK 111 kB URL HTTP/2 yastatic.net/partner-code-bundles/648543/b351c402d14bfe389767.js
IP
File type ASCII text, with very long lines (65497)
Size 111 kB (110822 bytes)
Hash d2a485e24d48b1c2003a7c7f521bafa3
3e7f9169f853d76223b402f9e0e3b4276018d7ea
481051501dc3ac25400b339c7b4fc581120541eb7b8682da7a064314cb4b663d
GET /partner-code-bundles/648543/b351c402d14bfe389767.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 110822
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "d2a485e24d48b1c2003a7c7f521bafa3"
expires: Thu, 12 Sep 2052 18:28:44 GMT
last-modified: Tue, 13 Sep 2022 08:44:07 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/67531507/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/67531507/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 796d95f091c24467a7275e8211211f83
8b20b009a4db44e031638780e57f949001978d6b
c8abfb6d619d3957a1bf59c68f4d6225f82851e998446e5b52bd27fa871cc990
GET /watch/67531507/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Referer: http://goo-gl.me/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 13 Sep 2022 11:55:09 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:09 GMT
last-modified: Tue, 13-Sep-2022 11:55:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20174
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 11:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20174
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 11:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20174
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 11:55:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 838f709437b2dfbede4ee15307afe217
2ab2ee20e720b78be6deb55f967ac0d8b7dad048
a3b47ce595b475f2aab6f7378888d15ba3e98453d6c8a3d88946efc5d65eedba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10849
x-amzn-requestid: 722d8d75-0911-4b59-af65-2b408bc09d80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXbx6E9-oAMFT8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa672-74ea9343619d4a1865e34818;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4rpwcrZLDlgcwBtH7wpoHMOb8hhFbKbZSQpjWqUqbt_Sl4ud3dm9Vg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:18 GMT
age: 51171
etag: "2ab2ee20e720b78be6deb55f967ac0d8b7dad048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8245683fe462ff0393ab02b56ea18789
2d11d7d4547ded348f9e32cd946877e16ad587ae
992f87a9da550b8dbd14cdcd7c5f11903a2bef58db7ced55f456d29d339bf94b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10824
x-amzn-requestid: 6c1f4a34-e245-4b3b-a5ba-fcf0cdd68830
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUxaqELPIAMFmjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e95dd-0ef865e80de591f27515d35f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 02:13:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UngASNEgeiacesJ_cxd4nvDatNrjsx3081wzpW7A3xPPgB1drnAEBA==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 03:38:19 GMT
age: 29810
etag: "2d11d7d4547ded348f9e32cd946877e16ad587ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ab2ec10c79b91d15edb1d1e3dc763c
744fee4a0baa22ba3aa352d60620a916972b47dd
f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 51169
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9409173701eda139bbd4973992e9d3a
f1949f2e307eadc6069d2b0b8c624f674a228f34
958dff56b8ba2a6aae1ca37b62610b3d1cca8eae708ee37ca7a51186e3dc9737
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6894
x-amzn-requestid: c9abf0bf-45a9-4f56-8f34-ff3da8544a28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIyGEfzoAMFzDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54da-40b81c960d413d682389a407;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzvx5h9IiakUjvtFfshDcy4bZMmNCTmEZmlKeQ4pQHcUJV6Vt4g2mA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:50:29 GMT
age: 50680
etag: "f1949f2e307eadc6069d2b0b8c624f674a228f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c1314c7778ea0d32e8c69dae0c38b6d
c4772b9b182f9f905fead84f3761fe296073ca65
5fc8dc23f9b4d150b834aa69b358edd9f9f5f449607df07d579df66098d8aac6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10366
x-amzn-requestid: c66a0e06-d45c-4d16-ba0c-bf6a2368cfc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVQPkH2RoAMFX2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ec730-5174741f2d86d3ea018e452f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 05:44:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0ieBLVDdyIQuPO5pdM8wzjY2XwaMhLJhJWAUtsLfgiWTKVBTOws1tQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:58:04 GMT
etag: "c4772b9b182f9f905fead84f3761fe296073ca65"
content-type: image/jpeg
age: 50225
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23d4b64c-6112-465a-8c57-47176235f38c.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23d4b64c-6112-465a-8c57-47176235f38c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 00203b01614ba1204d46986be83342ab
0b431fbd0f7382cb7648335f7e8390a37394771e
cc9bf1aa5f9858440300b8bac4f4069c5b4af1f91ee2c066324db81a57399765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23d4b64c-6112-465a-8c57-47176235f38c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7399
x-amzn-requestid: 3f1c5097-3db7-40a7-821f-75341226b56b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxzHh-IAMFcFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d8-3346061d670aa4d46eec144f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e6Nj5wxUpqqs9WSyJv-lhtnucvwLaR2B3h3uNNZv5HgH510ficVnEw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 22:06:08 GMT
age: 49741
etag: "0b431fbd0f7382cb7648335f7e8390a37394771e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/67531507/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&hittoken=1663070109_7291a836b86540dd5e781705ae7261b9503227b0a3852d9305c6e74561901c45&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A448376719%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/67531507/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&hittoken=1663070109_7291a836b86540dd5e781705ae7261b9503227b0a3852d9305c6e74561901c45&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A448376719%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/67531507/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&hittoken=1663070109_7291a836b86540dd5e781705ae7261b9503227b0a3852d9305c6e74561901c45&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A448376719%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:09 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:09 GMT
last-modified: Tue, 13-Sep-2022 11:55:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:09 GMT
access-control-allow-origin: *
etag: "631f3e5d-2b"
expires: Tue, 13 Sep 2022 12:55:09 GMT
accept-ranges: bytes
last-modified: Mon, 12 Sep 2022 17:12:45 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yastatic.net/s3/games-static/favicons/icon-192.png
200 OK 24 kB URL HTTP/2 yastatic.net/s3/games-static/favicons/icon-192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7819c957eaa80af5bf14f760d49b64a7
93b670523acd14f884c3a538d59d408da0888a6c
ca78c114bba40b141a59c55a9d3fb6db7672bc3effd4337f2b1ce512b4d06c9e
GET /s3/games-static/favicons/icon-192.png HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:09 GMT
content-type: image/png
content-length: 24134
access-control-allow-origin: *
cache-control: public, max-age=216013
etag: "7819c957eaa80af5bf14f760d49b64a7"
expires: Thu, 15 Sep 2022 23:51:17 GMT
last-modified: Thu, 14 Apr 2022 12:22:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: ed9ad6e81b4a0848
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
200 OK 6.3 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Hash eb77de48712912aadc9aa8171ac75ede
f375e4ed6b585c4e30b2d56f4f41c3beed909349
437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:10 GMT
content-type: text/html
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Thu, 12 Sep 2052 18:27:13 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/67531507?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 939 B URL HTTP/2 mc.yandex.ru/watch/67531507?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
Hash d05306f7a18f2bae01f008c67b3248fb
efdce5284bfb7c96d7652c284dcd0aa598bcd325
ab37d7a07359a269ffbfe6f799155ce3c2120d940b944d2213a9fe8463f9d53e
GET /watch/67531507?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/67531507/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A640300591309%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A926372087%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663070094332%3Aco%3A0%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C%2C%2C%2C1476%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 13 Sep 2022 11:55:09 GMT
access-control-allow-origin: http://goo-gl.me
set-cookie: yandexuid=4669456751663070109; Expires=Wed, 13-Sep-2023 11:55:09 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4669456751663070109; Expires=Wed, 13-Sep-2023 11:55:09 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=411783671663070109; Path=/; SameSite=None; Secure
i=hVZt/nVse7GSt/NHC2syABlykUfzpRnXrp59OA86WJ4xM4ZQYup9j1SuSJcpIXLUfXZd97ZJYJ010vlUPvP4irJSwko=; Expires=Fri, 10-Sep-2032 11:55:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694606109.yrts.1663070109#1694606109.yrtsi.1663070109; Expires=Wed, 13-Sep-2023 11:55:09 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:09 GMT
last-modified: Tue, 13-Sep-2022 11:55:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash d05306f7a18f2bae01f008c67b3248fb
efdce5284bfb7c96d7652c284dcd0aa598bcd325
ab37d7a07359a269ffbfe6f799155ce3c2120d940b944d2213a9fe8463f9d53e
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 17 Sep 2022 10:23:18 GMT
ETag: "efdce5284bfb7c96d7652c284dcd0aa598bcd325"
Last-Modified: Tue, 13 Sep 2022 10:23:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 886
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13baf3fb521-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c276053da96f3d26845fa3acbb5ce8d9
9aa7d9ae43506675ada8942336b490ab272ce94e
60aabde201fd371ba0d239a9f6833ff6a93d4cb0d88ea01a2aa3992b615e2736
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 17 Sep 2022 11:03:06 GMT
ETag: "9aa7d9ae43506675ada8942336b490ab272ce94e"
Last-Modified: Tue, 13 Sep 2022 11:03:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 541
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13bfc5db4ee-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c276053da96f3d26845fa3acbb5ce8d9
9aa7d9ae43506675ada8942336b490ab272ce94e
60aabde201fd371ba0d239a9f6833ff6a93d4cb0d88ea01a2aa3992b615e2736
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 17 Sep 2022 11:03:06 GMT
ETag: "9aa7d9ae43506675ada8942336b490ab272ce94e"
Last-Modified: Tue, 13 Sep 2022 11:03:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 541
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13c1b0eb51e-OSL
mc.yandex.ru/watch/1455988/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 236 B URL HTTP/2 mc.yandex.ru/watch/1455988/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9fbcde4d49599e41223801024eda4587
453506f4d55985d25c22eacccd77bd88f54c6859
f7b4e6a59dbf5bda5cd4f8b72e088fb721d03982cc2869aad94039ee71356ae7
GET /watch/1455988/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Referer: http://goo-gl.me/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 236
date: Tue, 13 Sep 2022 11:55:10 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:10 GMT
last-modified: Tue, 13-Sep-2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 3ab661589543d0a39ee3792d6687637e
95786b5033d7abb976353ab5c79ba6fed617697a
d8138443aa8f59df40ea6c19d43d52b8bac0233bcb5bf9134fd465a01dfb821c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 08:18:22 GMT
ETag: "95786b5033d7abb976353ab5c79ba6fed617697a"
Last-Modified: Tue, 13 Sep 2022 08:18:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3434
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13c7866b521-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 3ab661589543d0a39ee3792d6687637e
95786b5033d7abb976353ab5c79ba6fed617697a
d8138443aa8f59df40ea6c19d43d52b8bac0233bcb5bf9134fd465a01dfb821c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 08:18:22 GMT
ETag: "95786b5033d7abb976353ab5c79ba6fed617697a"
Last-Modified: Tue, 13 Sep 2022 08:18:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3434
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13c7cf9b4ee-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 3ab661589543d0a39ee3792d6687637e
95786b5033d7abb976353ab5c79ba6fed617697a
d8138443aa8f59df40ea6c19d43d52b8bac0233bcb5bf9134fd465a01dfb821c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 08:18:22 GMT
ETag: "95786b5033d7abb976353ab5c79ba6fed617697a"
Last-Modified: Tue, 13 Sep 2022 08:18:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3434
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13c8dc41c0a-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 3ab661589543d0a39ee3792d6687637e
95786b5033d7abb976353ab5c79ba6fed617697a
d8138443aa8f59df40ea6c19d43d52b8bac0233bcb5bf9134fd465a01dfb821c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 08:18:22 GMT
ETag: "95786b5033d7abb976353ab5c79ba6fed617697a"
Last-Modified: Tue, 13 Sep 2022 08:18:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3434
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13c7b89b51e-OSL
favicon.yandex.net/favicon/dogeguard.org?size=32&stub=1
200 Ok 2.6 kB URL HTTP/1.1 favicon.yandex.net/favicon/dogeguard.org?size=32&stub=1
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 492246f89dceb5a9e3e2049491eb2115
95c10109fdb898f8c7eef191e05047368f2fb818
556859adcfa331cb10bdeb3a0d5499c038a9312064cb45b89f98bd83c7ba6f6f
GET /favicon/dogeguard.org?size=32&stub=1 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
favicon.yandex.net/favicon/octobrowser.net?size=32&stub=1
200 Ok 2.6 kB URL HTTP/1.1 favicon.yandex.net/favicon/octobrowser.net?size=32&stub=1
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fe4410ec5f0116b5242c7ef07237405e
f9f7977bf238e658994b585372f0ba065c4f475d
e440e5b3c59bc9a01b748f14dbe46dc5721b95a0e0bfc2673e511eec15c2615e
GET /favicon/octobrowser.net?size=32&stub=1 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 9875e93c19af8af738113ad8e67b7b95
1af0ab1a3badcf6e6d42587452dbb31b25d1c1e7
9930f0a3a7eb5ed0d85a9d6aaeaccdc6270af0eb4219acd0f11357be93985c95
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 17 Sep 2022 10:20:06 GMT
ETag: "1af0ab1a3badcf6e6d42587452dbb31b25d1c1e7"
Last-Modified: Tue, 13 Sep 2022 10:20:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2861
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a0b13cf95fb521-OSL
avatars.mds.yandex.net/get-direct/4902855/9CRvFBoE82PcyyDiOkXm-w/y300
200 OK 13 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/4902855/9CRvFBoE82PcyyDiOkXm-w/y300
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45f654dd821fa1a42eda5e0b4a8f3fb2
52814cf4b1e8acf6312dec673ef01a0b732c38d8
6a3bae641604a72f8822244fd975c5a48a79b38c33373121ebf326d2371c7c1b
GET /get-direct/4902855/9CRvFBoE82PcyyDiOkXm-w/y300 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 11:55:10 GMT
content-type: image/webp
content-length: 13398
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Wed, 07 Sep 2022 08:42:27 GMT
cache-control: max-age=31536000,immutable
x-request-id: 567046d9540b4ab0
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5219238/H-YrvDPxOT6l_Y3HM3ZmEQ/y300
200 OK 40 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5219238/H-YrvDPxOT6l_Y3HM3ZmEQ/y300
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ef71792cd993bc522bdad37a22d991e
dfff7d3bbe2cafc10edd04a94751a3a7fdb3f675
dc57ab06864923e48c6e7fdaa9bd5d9456a5f12c32a80cdfff5d40838c5b2d24
GET /get-direct/5219238/H-YrvDPxOT6l_Y3HM3ZmEQ/y300 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 11:55:10 GMT
content-type: image/webp
content-length: 40342
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Sun, 06 Feb 2022 17:06:47 GMT
cache-control: max-age=31536000,immutable
x-request-id: f385477e917c8ecd
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
200 Ok 95 B URL HTTP/1.1 ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 60cf42b4d05caf10cf8bb15c0817a7b4
bd269860bb508aebcb6f08fe7289d5f117830383
18c327afa903633f86c3efcf12b77f098077eacaa8be101bb007846fd74f8b93
GET /static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes HTTP/1.1
Host: ysa-static.passport.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Server: nginx/1.14.2
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: image/png
Content-Length: 95
Connection: close
Cache-Control: private
Expires: Wed, 14 Sep 2022 11:55:10 GMT
X-RT-IQ: 0.0001
X-RT-IH: 0.0001
Strict-Transport-Security: max-age=315360000; includeSubDomains
favicon.yandex.net/favicon/lineage-world.com?size=32&stub=1
200 Ok 1.5 kB URL HTTP/1.1 favicon.yandex.net/favicon/lineage-world.com?size=32&stub=1
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fc4ad9eca1c9ca140fa73de9defcf58
d88c8874ce4e94295b8bc62682245ce8b007edce
29373eb40f858f145d150fd0f6d0c1822a8fd50e0745267b252721ea2076a6bb
GET /favicon/lineage-world.com?size=32&stub=1 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
yandex.ru/ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=10&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=79846510&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A145%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B2647629093701%5D
200 OK 68 kB URL HTTP/2 yandex.ru/ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=10&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=79846510&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A145%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B2647629093701%5D
IP
Hash 3a458e5edf909f1047ad82a7406d5632
3837ec9c83f21de63e49e260186df0d262125265
888c3bbeecda95ee1e52253d84943ab4e8f7fc1068b0d0d309b35b5f0c77dddd
GET /ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=10&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=79846510&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A145%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B2647629093701%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://goo-gl.me
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1663070109538561-15592074827594583630-vla1-3705-vla-l7-balancer-8080-BAL-9769
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
last-modified: Tue, 13 Sep 2022 11:55:09 GMT
date: Tue, 13 Sep 2022 11:55:09 GMT
set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Tue, 20-Sep-2022 11:55:09 GMT
i=8X2kPbSC+u9vwenD76KTvIQn0pNxnlUOPGT+9kB7flf43ndw+dPxBfmgXtY5oAMLE9jUZqMDocJ9fzpFGc5pncWF8gM=; Path=/; Domain=.yandex.ru; Expires=Thu, 12-Sep-2024 11:55:09 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
ssr: true
expires: Tue, 13 Sep 2022 11:55:09 GMT
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/4011424/9ZWY0X_Do8AX03lvkizjCA/y300
200 OK 30 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/4011424/9ZWY0X_Do8AX03lvkizjCA/y300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 71097f67902937bf16197a2a096b5d35
3fb2aa8565e9a36ff404615f53126cdd3d1817e1
ff13f507addeb14274f1436afc3e9efea8e5f2ad728224a69ea42c63a3f029aa
GET /get-direct/4011424/9ZWY0X_Do8AX03lvkizjCA/y300 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 11:55:10 GMT
content-type: image/webp
content-length: 29552
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 17 Feb 2022 11:04:50 GMT
cache-control: max-age=31536000,immutable
x-request-id: 3b1b8c0d3dde91d6
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
rotarb.bid/1k2xb.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 79b9772a48eb0c948e25a4ff818824fd
e08ec948ac45f5b6e6f754c8a0409955f342103c
0fddac93d54fbd343b02db405c0dd94859da0ae6744321e2f4e48779ddddb8f0
Analyzer Verdict Alert quad9 Sinkholed
POST /1k2xb.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 142
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 13 Sep 2022 11:55:10 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220908&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220908&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14678), with no line terminators
Hash b139ae48daf042724f626f9ab25d8f0d
13e7ac78f79a36ace619063dcf312351633c3392
45bb7382a408b4bf7e7d64e306fa4cdbe9ba0307b9ab7c90ed62ed3f86ac7812
GET /getconfig/sodar?sv=200&tid=gda&tv=r20220908&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 13 Sep 2022 11:55:10 GMT
server: cafe
cache-control: private
content-length: 11147
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A590285731%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C3159%2C3159%2C2%2C1476%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A590285731%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C3159%2C3159%2C2%2C1476%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A1459%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A590285731%3Arqn%3A1%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Ads%3A2%2C38%2C561%2C0%2C-5%2C0%2C%2C280%2C1%2C3159%2C3159%2C2%2C1476%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:10 GMT
last-modified: Tue, 13-Sep-2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Referer: http://goo-gl.me/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:10 GMT
last-modified: Tue, 13-Sep-2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/an/rtbcount/1Iw4oKgf0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZ21DLy7aNKO66GQ6luopc1WOvZA1H9OodM9cO5ZBz0l8Filq7mXUCGbuR6JsohdBm12-GdPzxmjMXhzCp20dC8DCxsNc1v9JcK6QvpApWQnbPc9G0DdAif5vaywiWdgxnuKdcUUgop4S_20OSHMiyYwO_CdiuCGFSJJBeuXxODOAbWFp6JUmCEvWOJx0mdY1vSprUoSchPlL9NwJ1UAN3_OFMKmwFCsZWg_PlsK1-MW1A-z9rfZvd63f2wmD3GqiDrddLZUyousnqFlA2l941ri3omosAuU35x1rxzcyeVNlcVrbAzbWnXnWypZ1nlo8ZTVDqSdApT8bESJ3BTdy9HlCmfzmraHsnrVIHmrUlBQVnSvcPc9XQcAyWPrf1plB2NQH1-mF3rmzsVdYtSIi7-my0Fnpayu0?confirmTime=-1&confirmRatio=1000000&test-tag=192964290674690&format-type=118&actual-format=14&rnd=1502237000964&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&width=1140&height=600
200 OK 521 B URL HTTP/2 yandex.ru/an/rtbcount/1Iw4oKgf0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZ21DLy7aNKO66GQ6luopc1WOvZA1H9OodM9cO5ZBz0l8Filq7mXUCGbuR6JsohdBm12-GdPzxmjMXhzCp20dC8DCxsNc1v9JcK6QvpApWQnbPc9G0DdAif5vaywiWdgxnuKdcUUgop4S_20OSHMiyYwO_CdiuCGFSJJBeuXxODOAbWFp6JUmCEvWOJx0mdY1vSprUoSchPlL9NwJ1UAN3_OFMKmwFCsZWg_PlsK1-MW1A-z9rfZvd63f2wmD3GqiDrddLZUyousnqFlA2l941ri3omosAuU35x1rxzcyeVNlcVrbAzbWnXnWypZ1nlo8ZTVDqSdApT8bESJ3BTdy9HlCmfzmraHsnrVIHmrUlBQVnSvcPc9XQcAyWPrf1plB2NQH1-mF3rmzsVdYtSIi7-my0Fnpayu0?confirmTime=-1&confirmRatio=1000000&test-tag=192964290674690&format-type=118&actual-format=14&rnd=1502237000964&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&width=1140&height=600
IP
Hash 9beb8a7b25837e1c8071433452a2cd02
a13b4ed1eb63dd4c8d3439f2dca4c133cdd5e1df
84aab8a8847bf20a15b7bebb03f8c5cb47b9ad4b1228a80d8afe4e805a7a9aff
GET /an/rtbcount/1Iw4oKgf0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZ21DLy7aNKO66GQ6luopc1WOvZA1H9OodM9cO5ZBz0l8Filq7mXUCGbuR6JsohdBm12-GdPzxmjMXhzCp20dC8DCxsNc1v9JcK6QvpApWQnbPc9G0DdAif5vaywiWdgxnuKdcUUgop4S_20OSHMiyYwO_CdiuCGFSJJBeuXxODOAbWFp6JUmCEvWOJx0mdY1vSprUoSchPlL9NwJ1UAN3_OFMKmwFCsZWg_PlsK1-MW1A-z9rfZvd63f2wmD3GqiDrddLZUyousnqFlA2l941ri3omosAuU35x1rxzcyeVNlcVrbAzbWnXnWypZ1nlo8ZTVDqSdApT8bESJ3BTdy9HlCmfzmraHsnrVIHmrUlBQVnSvcPc9XQcAyWPrf1plB2NQH1-mF3rmzsVdYtSIi7-my0Fnpayu0?confirmTime=-1&confirmRatio=1000000&test-tag=192964290674690&format-type=118&actual-format=14&rnd=1502237000964&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&width=1140&height=600 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
set-cookie: i=+wUdrbvA4ip2Leteq4X9/E1UdVQdJQZx0s5VhXXAYrJj3N7ZvXvbM3StcTRu3oY7A6u+T382yx1cZBd5KMDvE25bTJk=; Expires=Thu, 12-Sep-2024 11:55:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-type: image/gif
X-Firefox-Spdy: h2
yandex.ru/an/count/WMOejI_zODO0vGe0z15AgFnK2C02V0K0rW4GmO200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WIGejI_zO400rGW0r0yJaRtZG04GW8200OIw_gBgX-2DcG600UJYkVtC_Eot2uW1Z9tgrfW1a06MjUJQte20W0AO0PQrvDfUk07Uzlgp9TW1qhd-gG7W0PQLhva1w0640VW1_9ZUlW6W0exwXG6m0xS9Y0MhemMG1R7N6x05xeG7k0NkX0Uhw0Ae1ku1gGTitSoce01MIk07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCcmQO4O7v9gWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHQO5vUrj2ou5m705xNM0Q0PxW6u6V___m616l__uq7J6HBQg1u1i1y11m1irs3rYlo2uG2Gm-n1v3VZVRrAwMoCRM8E~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0
200 OK 6.4 kB URL HTTP/2 yandex.ru/an/count/WMOejI_zODO0vGe0z15AgFnK2C02V0K0rW4GmO200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WIGejI_zO400rGW0r0yJaRtZG04GW8200OIw_gBgX-2DcG600UJYkVtC_Eot2uW1Z9tgrfW1a06MjUJQte20W0AO0PQrvDfUk07Uzlgp9TW1qhd-gG7W0PQLhva1w0640VW1_9ZUlW6W0exwXG6m0xS9Y0MhemMG1R7N6x05xeG7k0NkX0Uhw0Ae1ku1gGTitSoce01MIk07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCcmQO4O7v9gWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHQO5vUrj2ou5m705xNM0Q0PxW6u6V___m616l__uq7J6HBQg1u1i1y11m1irs3rYlo2uG2Gm-n1v3VZVRrAwMoCRM8E~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash a9131ba264d43ea1c1cd1c0ea8cb3d04
296726e6b05da84770c0dc83361303d311b40343
f4ab78c2d363ccec7bf2d9a986dc30d627bff46c6b2d7dbdb410aa091e48aba6
GET /an/count/WMOejI_zODO0vGe0z15AgFnK2C02V0K0rW4GmO200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WIGejI_zO400rGW0r0yJaRtZG04GW8200OIw_gBgX-2DcG600UJYkVtC_Eot2uW1Z9tgrfW1a06MjUJQte20W0AO0PQrvDfUk07Uzlgp9TW1qhd-gG7W0PQLhva1w0640VW1_9ZUlW6W0exwXG6m0xS9Y0MhemMG1R7N6x05xeG7k0NkX0Uhw0Ae1ku1gGTitSoce01MIk07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCcmQO4O7v9gWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHQO5vUrj2ou5m705xNM0Q0PxW6u6V___m616l__uq7J6HBQg1u1i1y11m1irs3rYlo2uG2Gm-n1v3VZVRrAwMoCRM8E~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Content-Type: application/x-www-form-urlencoded
Referer: http://goo-gl.me/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
set-cookie: i=gGkHJhjCeStFtkhcJ/UOAiAx9j2t92Nt7vE7Ew9alpHjdHwwfcvWS7fqTPiWoi2oR1YAHhqMyCvZ9RvDxUnwCWrTUlE=; Expires=Thu, 12-Sep-2024 11:55:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-type: image/gif
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 07:47:45 GMT
expires: Fri, 08 Sep 2023 07:47:45 GMT
cache-control: public, max-age=31536000
age: 446845
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7faa6a78f896de4528c8cc9ed35bfa11
199ad87495595163d7d16b1eddb9506c8ddb4918
7effc4afbb7417799d0ecbb32fce2a94cba732e488fd4ce81ba5a77f4d7c13ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 515 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 31993e0cb0e98f05d7f1bc1b8423a918
fa6f454adf21055a2631f620a38216933b04c7e9
f90affc717a4600fd07b8c9be38b7391d3fc0af194249111a68e53a34ff1767c
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://goo-gl.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 13 Sep 2022 11:55:10 GMT
date: Tue, 13 Sep 2022 11:55:10 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-66kZxMRoHQQy2WzWywWNDQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 515
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yandex.ru/an/count/WMOejI_zODO0vGe0z15AgFnKgmnlFGK0rW4GW8200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WHyejI_zO3i0hGW0X0-4eW_OEm64klwYweVWZPa1W07auhdzpFpijmk80OoTwjQO0P01bhNasjw0W802c06MjUJQNhW1tlRwioNO0TAv_ga1u06MbQ-P0UW1X07u0VoOthu1e0AE-eK1i0Et2OW5gwC5a0Mnrnkm1Uw41xW5xeG7g-W2g0Rk0Qa7RDtCfg00LahW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6c161-IQe4ypNtiYIhfgA5u0KW8201EWKZ0AO5f2ZjvW6e1RmWk6O1iaMc1UNjRGik1S1m1UrrW6W6Uu1k1d___y1WHh__-D1qnaIsgWU0R0V0GS0OjTWzOgyWU40yCBiGTytutsfIkbiWcq23W00~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0
302 Found 62 B URL HTTP/2 yandex.ru/an/count/WMOejI_zODO0vGe0z15AgFnKgmnlFGK0rW4GW8200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WHyejI_zO3i0hGW0X0-4eW_OEm64klwYweVWZPa1W07auhdzpFpijmk80OoTwjQO0P01bhNasjw0W802c06MjUJQNhW1tlRwioNO0TAv_ga1u06MbQ-P0UW1X07u0VoOthu1e0AE-eK1i0Et2OW5gwC5a0Mnrnkm1Uw41xW5xeG7g-W2g0Rk0Qa7RDtCfg00LahW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6c161-IQe4ypNtiYIhfgA5u0KW8201EWKZ0AO5f2ZjvW6e1RmWk6O1iaMc1UNjRGik1S1m1UrrW6W6Uu1k1d___y1WHh__-D1qnaIsgWU0R0V0GS0OjTWzOgyWU40yCBiGTytutsfIkbiWcq23W00~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
GET /an/count/WMOejI_zODO0vGe0z15AgFnKgmnlFGK0rW4GW8200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WHyejI_zO3i0hGW0X0-4eW_OEm64klwYweVWZPa1W07auhdzpFpijmk80OoTwjQO0P01bhNasjw0W802c06MjUJQNhW1tlRwioNO0TAv_ga1u06MbQ-P0UW1X07u0VoOthu1e0AE-eK1i0Et2OW5gwC5a0Mnrnkm1Uw41xW5xeG7g-W2g0Rk0Qa7RDtCfg00LahW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39i6c161-IQe4ypNtiYIhfgA5u0KW8201EWKZ0AO5f2ZjvW6e1RmWk6O1iaMc1UNjRGik1S1m1UrrW6W6Uu1k1d___y1WHh__-D1qnaIsgWU0R0V0GS0OjTWzOgyWU40yCBiGTytutsfIkbiWcq23W00~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
timing-allow-origin: *
location: https://yandex.ru/an/count/WMOejI_zODO0vGe0z15AgFnK2C02V0K0rW4GmO200J6TRo1Z000003ZetR41Y08AkGBoDQ4sGGab-_02rxdc9V0hy0K1e0Rk0Sa6dP-oqhtELpMf1spTpAQW05PA-1Ig2n18iGDARDq005Ue7Q-Dw860W8281AWFxBg3fOkKWAjAa13mxickeElOgXp0njYUDWBW507m5S6AzkoZZxpyOvWMaAEtc0QW5l22uPW6oHRmFzWMWHUe5mtG60_u6CRkuFd1wDIf7O0PYHbSdma000000BWP____0S0PdVU1zDwDbvmkqXaIUM5YSrzpPN9sPN8lSZSoC2qnw1dq2F0PMfWQrCDJi1j8k1i3WXmDHa52EaOvH6DKI4PZD-aSW1t_Vu0W0eWW1D0X____0H80CWDbc149F3dpEsWc58j36k2LR34nEE2kMFDJxr5P091Ar-7HB_1gvqIJg2QcmX-5fUuS9Gi-bh4z~1=WJyejI_zO4m0hGa0L14Q4bwQJ06aoPQDqEkcjhe1W07mtDMdaOIOhhy1Y07vkgBWc06G0PJLd-RUW8200fW1bDMVvbwu0Sw9nRKbs07uWicd0U01higzdW7e0R03e0AKm_0Oe0C8i0Ey2uW5gi81a0N-tG6m1QrTk0MjNS05iBe2o0MQX07G1SaMg0Rk0Qa7RDtCfg00LahW1v0Dme201k08og6u3EW91u0A0UWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHO00F0_c1VQYyejk1S1m1UrrW6W6Uu1k1d___y1WHh__pUPH3mlCQWU0R0V190Yygada2BpgIUG8lIf9v0YzQad201SrxI3y0E60uZ2N1x9dGTqbTBPawGmdK-mJS01~1=WKGejI_zO5S0rGa0r17DTYcNLm6muvwAzvZBeQa1W06tghUfslQ5l4g80PMCzusM0P01gEEibjs0W802c06euwoMNQ01fgW1fhW1X8I0aYNO0VJ3rgW1u06kvDYc0UW1hWJu0T2athu1e0AswRuPe0C6i0C2w0JV38W5mjW1a0N6vG6m1Quwk0MkEi05nBG1o0NpBT05gnUe1ku1gGTitSoce01MIk07XiA0W0RW2Dkqtmpe2GU02W7u2e2r6EWCcmQO4O7v9g4HD3CpCpCpuwWJpDVUo9AkceeNw1IC0fWMaAEtc0QW5l22uPW6oHQO5zUoXo-u5m705xNM0Q0PxW6u6V___m616l__v-3-U5lhg1u1i1y3a2BogIUG8lEf9v0YzAada2BrgIS807BNOCSGn2aC1tY9kJpuP9W6M2SroGws2JW0~1=WLKejI_zO6C0NGe011DGsp0DOm64klwYweVWZPa1W06Y_wVQluU6jV81Y06ZaEpyXW6G0RAFefhNW8200fW1ie-YcbUW0RxsvOtNW8200gW1llRbZLUu0Tgiu-mZs06oqeIZ0U01bfMlcG7e0SO3e0AqZGAW0mIm0ym8Y0MnaWAG1TV41R05bhG1k0MMj0701P_w3iW5rkO3q0M8IAW6xW6f1spTpAQW05PAu0U62j08keY0WSA0W0RW2Dg60UW91u0A0VWAWBKOw0oR1fWHWVaceH4qCpCpCpFZg1FCrzx8agwQYXU05820W0Je58m2c1QGexUO1g0My8BXc0R95W00y3-O5vUrj2ou5m705xNM0Q0PxW6u6Vy1WHh__zUrNaQU3wWU0R0V0f0Yygada2BpgIUG8lIf9v0YzQad1m1nr0x2QnWE45VCnVnAwToR_7ta4smJS000~1=WIGejI_zO400rGW0r0yJaRtZG04GW8200OIw_gBgX-2DcG600UJYkVtC_Eot2uW1Z9tgrfW1a06MjUJQte20W0AO0PQrvDfUk07Uzlgp9TW1qhd-gG7W0PQLhva1w0640VW1_9ZUlW6W0exwXG6m0xS9Y0MhemMG1R7N6x05xeG7k0NkX0Uhw0Ae1ku1gGTitSoce01MIk07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCcmQO4O7v9gWJpDVUo9AkceeNW1I0W804w1IC0fWMaAEtc0QW5l22uPW6oHQO5vUrj2ou5m705xNM0Q0PxW6u6V___m616l__uq7J6HBQg1u1i1y11m1irs3rYlo2uG2Gm-n1v3VZVRrAwMoCRM8E~1?stat-id=10&test-tag=192964290730561&banner-sizes=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjI4MXg2MDAiLCI3MjA1NzYwNTc0MjQxMjc2MSI6IjI4MXg2MDAiLCI3MjA1NzYwNjU0MzYxMjExNiI6IjI4MXg2MDAiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjI4MXg2MDAifQ%3D%3D&format-type=118&actual-format=14&pcodever=648543&banner-test-tags=eyI3MjA1NzYwNjc0OTU4ODgxMSI6IjU3MzkzIiwiNzIwNTc2MDU3NDI0MTI3NjEiOiI1NzM5NCIsIjcyMDU3NjA2NTQzNjEyMTE2IjoiNTczOTUiLCI3MjA1NzYwNjc2MTYwODUyMiI6IjQyNTE3MDAifQ%3D%3D&width=1140&height=600&confirmTime=-1&confirmRatio=1000000&wmode=0
date: Tue, 13 Sep 2022 11:55:10 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
set-cookie: yandexuid=9218902181663070110; Path=/; Domain=.yandex.ru; Expires=Fri, 10-Sep-2032 11:55:10 GMT; SameSite=None; Secure
i=FKjw77XXZ6CnJEUOl+moj/nXJp32oXBnZSuDJIIYi4EZWvkXuNFWEmfbFnAc/xFf2z/Lr/9G3nGuZmu6JT7N8aMgNKw=; Expires=Thu, 12-Sep-2024 11:55:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4d5b81170c4ad9f75db8f1419b39a4f8
02a515422968914bc71662f192bad8c8261dbee6
7911c3255763eaa9e307c2e6287d4da75a33eccd90fe7c561365ec9a39363e6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4d5b81170c4ad9f75db8f1419b39a4f8
02a515422968914bc71662f192bad8c8261dbee6
7911c3255763eaa9e307c2e6287d4da75a33eccd90fe7c561365ec9a39363e6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4d5b81170c4ad9f75db8f1419b39a4f8
02a515422968914bc71662f192bad8c8261dbee6
7911c3255763eaa9e307c2e6287d4da75a33eccd90fe7c561365ec9a39363e6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4d5b81170c4ad9f75db8f1419b39a4f8
02a515422968914bc71662f192bad8c8261dbee6
7911c3255763eaa9e307c2e6287d4da75a33eccd90fe7c561365ec9a39363e6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 11:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/watch.js
200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (557)
Hash 1d55754e516a64479901a61dc8a0d136
7c47529b53f613bb2ffac7a32530e8fd594c194b
b4e7cd831347d3faeebe62c6e8595fc01804895f0bb5e30a5ceae7b400318649
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 57251
date: Tue, 13 Sep 2022 11:55:11 GMT
access-control-allow-origin: *
etag: "631f3e5d-dfa3"
expires: Tue, 13 Sep 2022 12:55:11 GMT
last-modified: Mon, 12 Sep 2022 17:12:45 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 62 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://goo-gl.me/
Origin: http://goo-gl.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-max-age: 1728000
access-control-allow-headers: content-type
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1663070099208&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=1352375987&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1663070099208&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=1352375987&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1663070099208&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=1352375987&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=2030215587&crd=CJqqsQI&is_vtc=1&random=1399433635&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=2030215587&crd=CJqqsQI&is_vtc=1&random=1399433635&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=2030215587&crd=CJqqsQI&is_vtc=1&random=1399433635&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1663070099200&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=214573710&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1663070099200&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=214573710&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1663070099200&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=214573710&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=WEA-COCjoGMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1631311424&crd=&is_vtc=1&random=2365489522&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=WEA-COCjoGMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1631311424&crd=&is_vtc=1&random=2365489522&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=WEA-COCjoGMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1631311424&crd=&is_vtc=1&random=2365489522&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/693627671/?random=1663070099203&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2295670677&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1663070099203&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2295670677&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1663070099203&cv=9&fst=1663066800000&num=1&guid=ON&eid=592230570&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2295670677&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/693627671/?random=1663070099211&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2207732283&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1663070099211&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2207732283&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1663070099211&cv=9&fst=1663066800000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dlinux%3Bbrowser%3Dfirefox%3Bwinxp%3D%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fgoo-gl.me%2F&async=1&fmt=3&is_vtc=1&random=2207732283&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 11:55:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29
200 OK 236 B URL HTTP/2 mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3b69af4a4a0e9c4f6aff471889ad4891
5f495e20df5cc4343deb4645e4751901098c16f4
e94503dcf27d8aedb6cd1279ee0dc5804e4afd663d960acb7e7e1a70a71613c6
GET /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 236
date: Tue, 13 Sep 2022 11:55:12 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:12 GMT
last-modified: Tue, 13-Sep-2022 11:55:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22linux%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A320073410483%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070100%3Arn%3A219138428%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Apri%3A1%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070100%3At%3A&t=gdpr(6)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22linux%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A320073410483%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070100%3Arn%3A219138428%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Apri%3A1%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070100%3At%3A&t=gdpr(6)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash f7ec0a2d0ac32a857631e9ed43a41ef1
208897ac385856f25297ed5002fe9876f5c8b7cb
ccdef0da19447ea9ae2b206e1ad8ade2d64d004653010ed954475401bb333325
GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22linux%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A320073410483%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070100%3Arn%3A219138428%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Apri%3A1%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070100%3At%3A&t=gdpr(6)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22linux%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Agdpr%3A6%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A320073410483%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070100%3Arn%3A219138428%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Apri%3A1%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070100%3At%3A&t=gdpr%286%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 13 Sep 2022 11:55:12 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yandexuid=4033648421663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4033648421663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2144267231663070112; Path=/; SameSite=None; Secure
i=fMpe5iFnQRw3lRNzc61L27VTceDaFTzKRmtuGBQJYDxkvIMbnn2OD697bp+pWDSRmBrEJKuBQzukb6QXgA2OZTIc25E=; Expires=Fri, 10-Sep-2032 11:55:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694606112.yrts.1663070112#1694606112.yrtsi.1663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:12 GMT
last-modified: Tue, 13-Sep-2022 11:55:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=481492180&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070099%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070099&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=481492180&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070099%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070099&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=481492180&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070099%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070099&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 286370
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:12 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:12 GMT
last-modified: Tue, 13-Sep-2022 11:55:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=777387134&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663070100%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070100&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=777387134&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663070100%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070100&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/67531507?wmode=0&wv-part=1&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=777387134&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663070100%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115459%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070100&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:12 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:12 GMT
last-modified: Tue, 13-Sep-2022 11:55:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 63 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash 6275c3a33a322606dd1b018e6364e820
28a6d3fe9f4eabde8a8cb2e3f885bd154dc5992c
9c15b4f94b7e7e5cb5df7a56f98c2852b9aa222006ced95f8f44719e6ad5a1fd
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 317
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=3&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=430836560&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070103%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115503%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070103&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/67531507?wmode=0&wv-part=3&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=430836560&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070103%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115503%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070103&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/67531507?wmode=0&wv-part=3&wv-hit=372478230&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&rn=430836560&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663070103%3Aw%3A1268x939%3Av%3A893%3Az%3A0%3Ai%3A20220913115503%3Au%3A1663070097148193740%3Avf%3A62hjjpdks93ktul5nsnaw%3Awe%3A1%3Ast%3A1663070103&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 68
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Sep 2022 11:55:16 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:16 GMT
last-modified: Tue, 13-Sep-2022 11:55:16 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1455988?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/1455988?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/1455988?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/1455988/1?page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&cnt-class=1&hittoken=1663070110_4ec3ff08200bc1ca378607ff994322c306bdfc00ab827617d6455aa05dede946&browser-info=pv%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115457%3Aet%3A1663070097%3Ac%3A1%3Arn%3A360160383%3Arqn%3A2%3Au%3A1663070097148193740%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070098%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-2-h-1%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
set-cookie: yandexuid=8819408481663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8819408481663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1619790771663070110; Path=/; SameSite=None; Secure
i=U72eoIJKu3Zzw9SYGeF2m8AOr2qLmGCxVxApc4k4HNdeTaXpmVAVEvkrbUwEXsMVYGrM6/oJccpK6jw0nM5ozDcATmc=; Expires=Fri, 10-Sep-2032 11:55:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694606110.yrts.1663070110#1694606110.yrtsi.1663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:10 GMT
last-modified: Tue, 13-Sep-2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=9&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=29821582&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&skip-token=yabs.NzIwNTc2MDY3NDk1ODg4MTEKNzIwNTc2MDU3NDI0MTI3NjEKNzIwNTc2MDY1NDM2MTIxMTYKNzIwNTc2MDY3NjE2MDg1MjI%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A562%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A4%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B5291017032338%5D
200 OK 0 B URL HTTP/2 yandex.ru/ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=9&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=29821582&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&skip-token=yabs.NzIwNTc2MDY3NDk1ODg4MTEKNzIwNTc2MDU3NDI0MTI3NjEKNzIwNTc2MDY1NDM2MTIxMTYKNzIwNTc2MDY3NjE2MDg1MjI%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A562%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A4%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B5291017032338%5D
IP
GET /ads/meta/1455988?target-ref=http%3A%2F%2Fgoo-gl.me%2FP9MDI&charset=utf-8&pcode-test-ids=607492%2C0%2C85%3B644960%2C0%2C77&pcode-flags-map=eJytWFtv3EQY%2FSvRPhfk%2B6Vvs%2Fbs7ii2x50Z72aL0KjQIJAihCAFpKoSIIR4QEL8kz5QqdDLb9j8I87Y3s3aSWaTksds5jvzXc93xs8nbF5xQXXJpKS5zokiuiaClFLPuNBLllOuWaUzXk755OEnzyffPzl7djp5ODn98ZvJg8n56Xfn7Cn%2BDFMnCMPJi08fTJZEalqRaUF1RuqaVXM9Xeucr6qCVccDECUauo8SuW6UeDYUKpmAo1OmBFH0LmCCPmqoVHpZklrPBC81yeUBgNhLnB1AzWFdk0ZSLXhR6IKS3Q%2BSZrwawUXOAMz3QgtYF2pu92cIUXDkhJ4gmILM9bIWuhaMC6bWekYyxcUAzB0hRVHSInUecKVpQUtaKQ3kJZNsygqDJAuubHWP%2FDgKk51POZNtyZaMrkgPQSo01ooiSNQsOzaVLHk%2BrJ2kOMSrYq2bij0ah506TroXNsn1XOC0liUBak1FBsftqQsC1%2Fd3GDBfo3hEsUwvqZCMVwPzOLAbI2nyEkGK7C6Xtxln84Ua59kMGqkPYvmuu8NiXC%2BQX2S8wDigpZAIsT6EkCTBDgExtAW7JgtREMVxNLRNorTrQNTJVIKKlihIWe%2Bbnn%2F77HTPLPASf2tmhkWKNtShzbiz9oxQcElppflUUgFPh2ZfP%2Fns7HRg6UdeGreWM3YCbqv0grYJr5T9yiD00y65GW8wC4rrk4WwmiRx4nXZXKMQ9ESLBlxXElZZ6dKJPT%2FqijDgWD1rikJmAuFa7V3f851diFPBj5EfhIfuZLndMg6T6FqHzfQqwaZWc891oi7ex7TyWnf1iuVqoVlJ5tRqG7hBz1%2Bt7ZYsplyYPhIkZ408uiXCmhi%2FO4c1KVZkLe2WftyXNp%2FVWAay5hV6UbGS8mZIHp7jOEPbwPG7mOsMzIVKwbSy8mIYhIDpu3fGkWXaEld%2Fn%2BFtu3kQx95VczbD1tIrM7eHOuQGhK0DS1I0g2r5zk3WmDjFMHlo0hnXV5b4%2BOLQgRRoTbEhRQWyh8BYEsHIKGXe2Kwv0GgiBFYJGiS%2F7WgAaVstIlDikkLU7ApOhQBfFXy%2BjxEO7BMn6Cq326dQHmaj1VzYix7FW3o0x3XFsR6wKVg5t5rFHuxaMylryJ1sQY2H12021xmUKQ7dtIs1x%2F5WVIMNkKmVgGRCwXrau4OMS8CdXRVA61nvxmiuR%2BweJokXdr2ynegcIi1TOpNW7gxTN072uIRJxI7yQINkJm5puzT1w34Pbm1b%2FpEgI7UwDV6TPIfWsIMEYV%2Fqlu%2BRMbWuqfbtXoPzw73BKkW2t8nt16VxdKOlUTRZwTL7dF1ilE2h2JRUFdzGNp4xFJ6ZIKD%2B7DycJl4c7%2FnRg3Rtgp0HmqgLsp5CrRmuU0ahjrfuSAY6XuB3PTAXZOrZz4JcnMuzWrLHA39D13Ns56%2FhbDe8waILkFWmh02CBTWRGSZjlcn5TpJicA44HYbRoN8WtJU%2FeI7gUTK3clLkhl7UOVQKwm5LZXiAOEnXahXoRNAZaGxhZpJldjuMcdD3NSIVpWEwAY3dy7Va0KldJoAFnJ4ItkMN6SaQRcgi8BM64zIGKDrrNovc1A12%2Fkhm3GBcGn7MFnYvosCLd8KRyX6LmWXQveBQXfvzBLu860shdN7UmC8I5bx9M8mO3QQfKh7nY8cZvZYct%2FditJqMU716af2RVKkx51x1yfPdrqglzRlpQTpdcUfzm53ppNQH%2BaTm%2FF49yumMgKi2nnUfF24JZ5oe3FhMOQTAQZteDl92JXagqfAcAdi703PTcNdk0%2BMrhHT1OuxJZzAcC6baydq7HrRwrLh9MPzY8%2FybUocpRfZnICmmigMOAad7hW%2B%2FmbQoPe8REEDWSIVuaKG0oidDIbP5a%2FN%2B8%2Bbij4vfN6%2BONq837y5%2B3by%2F%2BGnzdvPy4jf8%2Ffpo827z8uji583LzT8Xv%2BAQ%2Fvlq8%2B%2FmDX54C9u%2FcRA%2FA%2BPPuzk2cOOHr86%2F%2FOjp6RdPnp2dH4CpS92ND5KNV%2FiyfVbac5T6%2Fdthh5H9bwxaob1MVMMPGu7g0exg47ZGUyJpTfBWqtpn0wJdgkpQUZFC5wc4NHCjnoRk0TIo2oNAZB3mwMBNnWuV9V6ztluxdagVJAfaLfDD%2FvUqsTw70ST4ymiHBRTzY2gGUhxAiLy9mesESEGqeXPgEQnLOBm0wiioLeH0Kx5jhA0vFwc%2BYwWhE0VjArl9hsMkvPzA0ze3hPg%2FXm9fuUP%2B6lXVUGHEQepZArtKLQdi%2FPz8bPThJ42c212geJMt7hleNmJJ13etywFQiLF7dhNFL1lT3jPqmux%2B%2BZDwX%2FwHdtgGUw%3D%3D&pcode-icookie=xD6o%2BBVDkXjfQzRU90TwR0LYC1gc2BD2E%2F3pKNHzNT8sTZeMCFzkUsjgnJqvSKlh10lIMfsAMFUslvoC7G7NXiiXWbQ%3D&duid=MTY2MzA3MDA5NzE0ODE5Mzc0MA%3D%3D&imp-id=9&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=192964290674690&ad-session-id=8206471663070096562&target-id=29821582&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fgoo-gl.me&top-ancestor-undetermined=0&pcode-version=648543&pcodever=648543&flash-ver=0&available-width=1140&available-height=90&skip-token=yabs.NzIwNTc2MDY3NDk1ODg4MTEKNzIwNTc2MDU3NDI0MTI3NjEKNzIwNTc2MDY1NDM2MTIxMTYKNzIwNTc2MDY3NjE2MDg1MjI%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1140%2C%22h%22%3A600%2C%22width%22%3A1140%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A49%2C%22left%22%3A70%2C%22top%22%3A562%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A4%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=1404&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo5MX0KWqm0kCS570EEqPN746U_y5L-Qi77fV_3dSVPntgWhrpxO3rW0U5EbVJdeDu-bemJnt83VpcuCStUFaVJYyc1oKcBXDHR1hQe14mu9qNuNIaDDDKcWmARET18UJ_spvUwu9i1rz3-Kx502L0sKXxKKtAe-IdFTP5Edm_lzIUQPhxS0hAOOTUZKLSUGYjM12EsCjVzM-ZnlCz4jLXAfB24pXgZ7XXoWZDRdLyn9e0isTzfvul4fhnFOg-A_fcDLbMvuTLfnJKjUDpX3TaMMrqpfLebW1solBmw_QdhXwl0YDN_X-4tHXs_Lgg3g88Q9sfT_oIR_jY16pA1NzI6-7Ey8PxA81DeHaHnT8MIW-_F861hEoZGO9E4gtDulUNaDWtWe_2f5dqYVmhOkXw2z3eGSKWtLpWeEw4zFNdrIcFwpLcV0_OrMc13N3-lUG7-UC4upZshQdtA15ReBnwPApx56xxe9ALKImD7QSrcWxOBuSHtjGvAzGOpC-hfDeIblQKLr9OJ-3OCTaeq04elGxGqMgV31GXZu9uUHoBXyDU7pVqneYuIV7GfITjbLqoDr6B65NU5WRC4W8qLokNbk-OssbHjgYy-KCbzSPGLwUk6TFkPy-Hv0hkoHTfV8iO9bvEz6mfu2hhr4fCSYRJi1BBuhOV9SpC2XqdjAIyNmGblvw7M9nPjmpqCJwIdSorOW2lXqzK4lHVh-BlTjb-6S_MrzSkOV4ex8rt_uZrNURcZI31OuVHjVZzfKOCTR1irfNCpPwMa4wCihUVPnTFK6kpnMrgUitX2WUATa5JL60cs0qCn4Nz4KxqXrRO8RbkxnrrJRoKoXQdzT5pRx9WhRle2BWd71NRbn8ZHSz7HkXRo6VtG2aYdHzu6gcb4IyZmYc18aj8wmCSbjsDL-6qvBIm0J04tW059HGl1xTX1Sc4UI9U6TY1J2hBNV_gk3RquEMzcX-uAfU1Sv8ue6JpouIdYfQY6bbXTCpDlLwuYdYX5HCJ_4C4bmW6piIWBRwIyncABm4UvzalzuyFsQ2qXl41WS-h2S-k9XGQiBZVCQfPwLOuJE0x94lvmKDrnWfKxsGqmn6Y0rGW25XFbWc7ZhYFcZYacRC1JZNJBjKRFyD8YWTaSLF4T1zqmSbecmRGxKLhKyownB2DHcgM2pso662qj3OouoZJhNY4e9k44LjR7Wd1mLpNcrVN6Sg_E-8XeX2urX_r3xWMkA4T7Osq9TGy6CU-Z1ijCn6bzRuui4dwLu_gJRrG_2PfyW-k2-m4vt-4Pf7nVONM9ao7o0tmA_GYzn6y3i-qNICyfFCQk0zA6xDyFRmn4QBABFQP0&uniformat=true&callback=Ya%5B5291017032338%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://goo-gl.me
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1663070109924950-7785874812563529843-vla1-3705-vla-l7-balancer-8080-BAL-5127
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
date: Tue, 13 Sep 2022 11:55:10 GMT
set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Tue, 20-Sep-2022 11:55:09 GMT
i=D2NcLNhR1/ohddg294qQm+WeioS7jZ1VxT9vPcIg1rXvbjnWVdFrKHvldlppXUOk3hNUPs39m6QNB+fR7CGGF/zFomw=; Path=/; Domain=.yandex.ru; Expires=Thu, 12-Sep-2024 11:55:09 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
ssr: true
expires: Tue, 13 Sep 2022 11:55:10 GMT
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 316
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
freegeoip.app/json/
301 Moved Permanently 0 B IP
GET /json/ HTTP/1.1
Host: freegeoip.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 13 Sep 2022 11:55:08 GMT
location: https://api.ipbase.com/v1/json/
cache-control: max-age=3600
expires: Tue, 13 Sep 2022 12:55:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IUiGoPkX6XG8lRiNe3hzZxYoCbTRcHaHjKD24w3BDWy2PBnAT%2BwUYBli15jQ6SUgXU0nJDatAueLkhwqGEitWIuNNZkbZtE%2FZ02S6G87IMKw%2B8At0YXQ0o7J3n7Zhk%2Bc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a0b132ef9cfabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1455988?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/1455988?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/1455988?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20(Total%20%2410)%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/1455988/1?wmode=7&page-url=http%3A%2F%2Fgoo-gl.me%2FP9MDI&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A2%3Adp%3A0%3Als%3A216585859301%3Ahid%3A372478230%3Az%3A0%3Ai%3A20220913115456%3Aet%3A1663070097%3Ac%3A1%3Arn%3A449132139%3Au%3A1663070097148193740%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663070094332%3Aco%3A0%3Apri%3A1%3Awv%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663070097%3At%3AUSS%20%245%20Meal%20Voucher%20x%202%20%28Total%20%2410%29%20%7C%20URL%20Shortener%20-%20GOO-GL.ME&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
set-cookie: yandexuid=8913666331663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8913666331663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=711661701663070110; Path=/; SameSite=None; Secure
i=c/BV8Mkbx4/C893tBwmelau2yG48/c5dOLw6mlfVAG3ngGywbazJ1wRBX2JuQi0o6wVuztHwSgN0XH7y6OVsHXdOsHI=; Expires=Fri, 10-Sep-2032 11:55:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694606110.yrts.1663070110#1694606110.yrtsi.1663070110; Expires=Wed, 13-Sep-2023 11:55:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:10 GMT
last-modified: Tue, 13-Sep-2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc(0-0-0)aw(1)rqnt(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc(0-0-0)aw(1)rqnt(1)ti(2)
IP
GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc(0-0-0)aw(1)rqnt(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fgoo-gl.me%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1566423312032%3Ahid%3A234810140%3Az%3A0%3Ai%3A20220913115459%3Aet%3A1663070099%3Arn%3A894617632%3Arqn%3A1%3Au%3A1663070099362810512%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1663070097068%3Aco%3A0%3Ads%3A0%2C0%2C26%2C0%2C%2C0%2C%2C22%2C0%2C52%2C52%2C1%2C51%3Ast%3A1663070099&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29
date: Tue, 13 Sep 2022 11:55:12 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yandexuid=9169995591663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9169995591663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=295894571663070112; Path=/; SameSite=None; Secure
i=L8sEaxQccD5maDUUHBb7387T2Q3m3HzDlCneATtcJQCp0IK3P1ilNYCTsOuZrMTLECWvElMrURgYag8nTyQG/M3pcIs=; Expires=Fri, 10-Sep-2032 11:55:12 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694606112.yrts.1663070112#1694606112.yrtsi.1663070112; Expires=Wed, 13-Sep-2023 11:55:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Sep-2022 11:55:12 GMT
last-modified: Tue, 13-Sep-2022 11:55:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/an/rtbcount/1NwHlGAg0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZCn0aQkC8Art6Hba61Z-CivYOc2OomGIMSfq2YYzbkaNa7sMwJyGl68IyDZ8x9Lpbu4XV8Ni-juNh0n_cK16j3A3JEzbvWUIKvb1ckSoiu6iPMPYK03PohAHUPFEh89wkyU59vddgiin7FmW674LhF8kcFp9xE343t4qowE8Us3M2fO3ynati33kO64-mC9uWUNCzNid9gsRrIL-amNYbm_s3rbCEZpDeuAlsRzb0Vbe0IllITQO-PnWwGki3GqDB3TPvrOtlCkDiT3xoWhoH0TR0yiCjYk7WnUmTU_PlA7rxvdzPIlPOCOSOFCumSRyY8tNpT79oitI9Jd4motP_2KRpCAVSDP4TiTNqaSDNhosdyNEPcPYOMfYl86TQGSxombsaGVi3mzSFTdvujt4h1_iF03_FPFG
200 OK 0 B URL HTTP/2 yandex.ru/an/rtbcount/1NwHlGAg0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZCn0aQkC8Art6Hba61Z-CivYOc2OomGIMSfq2YYzbkaNa7sMwJyGl68IyDZ8x9Lpbu4XV8Ni-juNh0n_cK16j3A3JEzbvWUIKvb1ckSoiu6iPMPYK03PohAHUPFEh89wkyU59vddgiin7FmW674LhF8kcFp9xE343t4qowE8Us3M2fO3ynati33kO64-mC9uWUNCzNid9gsRrIL-amNYbm_s3rbCEZpDeuAlsRzb0Vbe0IllITQO-PnWwGki3GqDB3TPvrOtlCkDiT3xoWhoH0TR0yiCjYk7WnUmTU_PlA7rxvdzPIlPOCOSOFCumSRyY8tNpT79oitI9Jd4motP_2KRpCAVSDP4TiTNqaSDNhosdyNEPcPYOMfYl86TQGSxombsaGVi3mzSFTdvujt4h1_iF03_FPFG
IP
GET /an/rtbcount/1NwHlGAg0US100000000U9nJd3j_qwMzvy9D3NFkBjYoW27Cot9kla8o0n1umaH2G_wiy8ejCHTZI6K4YcVct3sp32HUoWNarPO3YLP64Da9aWK29eQPZ0Vy8Uo5Z1C48AoLZCTP8QozZ3dHKWn7mVopZCn0aQkC8Art6Hba61Z-CivYOc2OomGIMSfq2YYzbkaNa7sMwJyGl68IyDZ8x9Lpbu4XV8Ni-juNh0n_cK16j3A3JEzbvWUIKvb1ckSoiu6iPMPYK03PohAHUPFEh89wkyU59vddgiin7FmW674LhF8kcFp9xE343t4qowE8Us3M2fO3ynati33kO64-mC9uWUNCzNid9gsRrIL-amNYbm_s3rbCEZpDeuAlsRzb0Vbe0IllITQO-PnWwGki3GqDB3TPvrOtlCkDiT3xoWhoH0TR0yiCjYk7WnUmTU_PlA7rxvdzPIlPOCOSOFCumSRyY8tNpT79oitI9Jd4motP_2KRpCAVSDP4TiTNqaSDNhosdyNEPcPYOMfYl86TQGSxombsaGVi3mzSFTdvujt4h1_iF03_FPFG HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: http://goo-gl.me
set-cookie: i=NKyhq4ucuGmzY/4SZcENNRXX/YU6Hrk+SF7SoWyXp161a7V2K81c9R7GfU3uT6zFp+UOWnRaGLE5TEf5cSJJcyQJPLg=; Expires=Thu, 12-Sep-2024 11:55:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
content-type: image/gif
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 342
Origin: http://goo-gl.me
Connection: keep-alive
Referer: http://goo-gl.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 13 Sep 2022 11:55:10 GMT
access-control-allow-origin: http://goo-gl.me
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13 Sep 2022 11:55:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 13 Sep 2022 11:55:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yastatic.net/q/set/s/rsya-tag-users/bundle.js
200 OK 0 B URL HTTP/2 yastatic.net/q/set/s/rsya-tag-users/bundle.js
IP
GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 13 Sep 2022 11:55:11 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31556952
content-encoding: br
etag: W/"82bdc8db563d3e71c35534315f8a9fd5"
expires: Thu, 15 Sep 2022 23:50:32 GMT
last-modified: Fri, 29 Oct 2021 11:19:01 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: ee6ec295a7bd5e86
X-Firefox-Spdy: h2
87.236.16.125
143.204.55.49
192.99.8.34
46.105.201.240
95.216.65.102
104.18.20.226
95.101.11.115
93.184.220.29