www.linkhell.ru.com/uxorbrjhvp/kewsa876974shpa/ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
172.67.150.158200 OK 539 B URL HTTP/1.1 www.linkhell.ru.com/uxorbrjhvp/kewsa876974shpa/ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4db6c74768451e3fa4cf0b2be1aef5cb
8288765c58d5369b255bc0af9d7c0bbb0f4850a1
3e846c49fd98ded9874b158f7dcb3b51be4f0535789d332b21b196d98a0c455b
Analyzer Verdict Alert fortinet Malware
GET /uxorbrjhvp/kewsa876974shpa/ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VE%2ByS6Z2692I%2BDxLqpzPNxd%2BF0C54UGRprqVTqSbrZuWy3HndSLs95kCcVr7bFpiBp0Mm3nGV%2FiMCf2Bjmh5cZ9vOr3xZXYK8t6%2BPuOA0LlglUOGi8CeBf3v7oX0xVBQZAQQTbk6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7562acc56c610afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
54.230.111.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EI8Yc5_EbIxMU2RDI1iviCjl6jmn0MzPMSwGBqYSl0nX4_wSVMlj0g==
Age: 119326
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2593
Expires: Fri, 07 Oct 2022 01:39:17 GMT
Date: Fri, 07 Oct 2022 00:56:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Fri, 07 Oct 2022 01:36:45 GMT
Date: Fri, 07 Oct 2022 00:56:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hvhfMYA+WZHTSost8zto3aXMzOmtfdgPvcTWzGkacy+DOEONwdWKX03Q6MQs9zPQHMTXMH/8Qo8=
x-amz-request-id: K8A8GCQ5BK64BN8W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 00:30:59 GMT
age: 1506
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 00:56:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-22484186-3
142.250.74.168200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP 142.250.74.168:0
File type ASCII text, with very long lines (2039)
Hash 23f52983df025274dc1244c78eeccfb7
0c4aeed7b8887f844772ebfd8ab685e7a5e0b80e
b61baeac4cb45eba19f9ecf97eedb9092ac21cd8389071e93049f64ad3f9488a
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 00:56:05 GMT
expires: Fri, 07 Oct 2022 00:56:05 GMT
cache-control: private, max-age=900
last-modified: Fri, 07 Oct 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42430
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkhell.ru.com/jquery-1.11.0.min.js
172.67.150.158200 OK 33 kB URL HTTP/1.1 www.linkhell.ru.com/jquery-1.11.0.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/uxorbrjhvp/kewsa876974shpa/ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FzKZjDfbqE3ATxSo%2Fnw7IPBE7mebMlxCB%2FM1jx4S0Zy0wrkOAeVTiz4%2FSz48jI4rkBTb8H8lSzk6WQfTLu7YEn9AaqEIQ1rdWjwKuvLTsPjISjZfcZzFzAoMKDHlavyQwCXpEuNb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acc80d670afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 07 Oct 2022 00:29:41 GMT
Expires: Fri, 07 Oct 2022 01:08:45 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9mdIK2wqPst1JvprQ-YK7OR372ejpwExaHTEZ5t2NeGuZjJGJqP76g==
Age: 1584
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 924eedca9e4378a673b984506daa2909
33f74c1d90aec86783569bb9f2990878950710a1
d6700c66268c84cefb098e588c68b758df61b95108fc06cc183a11a7a1c74c24
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D6700C66268C84CEFB098E588C68B758DF61B95108FC06CC183A11A7A1C74C24"
Last-Modified: Wed, 05 Oct 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Fri, 07 Oct 2022 06:55:57 GMT
Date: Fri, 07 Oct 2022 00:56:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4546
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:05 GMT
Last-Modified: Thu, 06 Oct 2022 23:40:19 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 924eedca9e4378a673b984506daa2909
33f74c1d90aec86783569bb9f2990878950710a1
d6700c66268c84cefb098e588c68b758df61b95108fc06cc183a11a7a1c74c24
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D6700C66268C84CEFB098E588C68B758DF61B95108FC06CC183A11A7A1C74C24"
Last-Modified: Wed, 05 Oct 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Fri, 07 Oct 2022 06:55:57 GMT
Date: Fri, 07 Oct 2022 00:56:05 GMT
Connection: keep-alive
www.linkhell.ru.com/clicks/LiveGuard360_files/wp-emoji-release.min.js
172.67.150.158200 OK 5.0 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/wp-emoji-release.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (15660)
Hash bbb097231c0fb01c0d2f6b36ed6671f8
c816b9446535131259db1107069b5096354f993b
aca781b166c02a50a9de1f82c51f0ebbd808b59e58e6dfe5f29ae84c881926c5
GET /clicks/LiveGuard360_files/wp-emoji-release.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:31 GMT
ETag: W/"633d13a7-48b9"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01sPrI9B1AOq3CcsvyrzLPnnAihkaecOyyn2EkN8nqZDqtEJLtPIP3fM9jZ4naMrEAAl4xUozhKE%2Bfz%2B%2FOcIMA0X0ZOyDrhKMopooa7F4QlQ%2BOPpd8BS7dJSyhxsHOrCoSw8zD5d"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accc8b19b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/elementor-icons.min.css
172.67.150.158200 OK 3.8 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/elementor-icons.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (19233)
Hash 8ff9a7b769f1dd6a22e37d3e77c538f1
3c904f8b42df2e2a0a566c18c19d6793b26d37bf
cbb4376f0b776b633543bbea816811a257d3ea9b44c5e632d531513638d46fa6
GET /clicks/LiveGuard360_files/elementor-icons.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:05 GMT
ETag: W/"633d138d-4b4f"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4hZQg7dmcjFmWfGbjkcD%2FOoiJ1yUy8Rsd4ypLByyLiszHGBJowGFK8QzU1iBEomDTQVua8JKM7yH5PxW%2ByL0nPQIEFhLg28OL8nXbzo5ddWCv9Go8lzziJry5wSiio4ahkyhNDdf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accc8d7cb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
52.42.148.177101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.148.177:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W/Q061IZzF8QWmb8eWTD0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: O36L9Q903knq45K9miDomxpVb1M=
www.linkhell.ru.com/offer.php?id=450&sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
104.21.30.57200 OK 657 B URL HTTP/2 www.linkhell.ru.com/offer.php?id=450&sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
IP 104.21.30.57:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3f0da921cfe1ad0434ac29d95c42470a
e45e395a84af72f14e262792330b755df98a6f0a
4540ee160b92bed197a13e930619359cb66d3e0403835423829289b3fa7d6577
GET /offer.php?id=450&sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 00:56:05 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.25
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tVAH1%2BM%2BDD7NaJ3y7RXKEh0p1I%2F8CJSm3YUvYlttiM39CqqjfVGhStuXZfaJyyoO27clbIpP8wjFQlQD2Ta07fveKheb2gRRS5hCDoeigXyCU4IWPMW4sylBf47MUi2%2BhkWoxjcv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7562acca9b060afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
172.67.150.158200 OK 16 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6924), with CRLF line terminators
Hash c14ac852a536d26d182cf9b686f49664
c1a6b9fb1a52bcd0dd404ad91434130da1790de4
7ccff495b6c611ee2016ee23c35d47101d16a3eb893697dfe3a81d3cd7e1085a
GET /clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2BwYKbDtW98ZnBSiSu90%2FIiyPL1Zs8J3teFC%2Fx1LcQd8xugl2x4%2FUQAxNOw632ufU8uBARnNRdW%2B0N04rziBANxgqwaFBz5L6JyuFaYtPa8VlAaLSzpmB8WWaEKR8StYfVLNGFIx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7562accc1e640afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend-legacy.min.css
172.67.150.158200 OK 841 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend-legacy.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (13766)
Hash 8635cde74fae4ac8166120ffc040925e
1d9ad269febee67dadec10e5db297c017b2ca6df
53bd2c6ee632c0086629a5b4d047a3b0527a5886fbfe2a190c107f135bd8b21a
GET /clicks/LiveGuard360_files/frontend-legacy.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:07 GMT
ETag: W/"633d138f-35ed"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1yT9puexyQcDJkLY7%2B166x7XHrRjJYmLsn2mnKwALXqEQk9DpVfx%2F6KdiikMV8QHsBXM3nOSs2T9kBUscB4FBiEG1Uai62EiOeqJ0%2FxoBxUcMipxKAEvJb375jYCenB9Yv3MjU5g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accc8e22b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/post-440.css
172.67.150.158200 OK 423 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/post-440.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (1308), with no line terminators
Hash 3903cd164176b91fdafa4c8575c5b125
cfb5de3d8a3baaceef71e945bdc4d818bf4a68ae
16f53e4a2c801e099f81c15b67b807254eb38a79f4765e7dadcb744ac88fb999
GET /clicks/LiveGuard360_files/post-440.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:22 GMT
ETag: W/"633d139e-51c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BdQLPreuKwDPgnB6sor9fGg9yWZsiIxSN4x8ZKAYIobhLNvx0c6KEvN1v1BcCJjaoQc5sDmG7XN6QqRNfWA8MINI3FGLDj8t3cAiADM1a1xoKL%2FrcaQ%2BMFf4N6AWNJbaOaxZ1Ih%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accd9b7db527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/gtm.js
172.67.150.158200 OK 57 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/gtm.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (9115)
Hash 59d94b3b0d43d5d576dad6291434ec88
f6a62f8a212270d2ba822011001de6421d158961
a95a7d8b467b07787da0646481a9d588146783be54330e2c6959dd7bff857833
GET /clicks/LiveGuard360_files/gtm.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:11 GMT
ETag: W/"633d1393-248ba"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3YkjNn1RoHe6%2FlbouJNfyInqJ%2F4WrrHhfY5u4NG5jreFu%2BTjV6fxXgR2dV0mySbUs35sbww0e1usFVqYp%2FEiPuJYVqY90vVsPkfGoGepzhR9CsH90wf1okZmKxMvpcgxMHphmqB3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accc8ed5b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/post-522.css
172.67.150.158200 OK 2.9 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/post-522.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (24493), with CRLF, LF line terminators
Hash 18c628e0a7c7757fec4bcc002f904203
0878e12827db59f512dbd5cde4e73022127f418e
006cab8a683081c1284c2694c139d0f3d08e76bee130678c5d3fd64a2873c6fc
GET /clicks/LiveGuard360_files/post-522.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:23 GMT
ETag: W/"633d139f-7086"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c7DDl0LxmZT%2BNzZwyLBOscQMCLTH%2BGl5ssbscPiD2m2nfhTRZK94KD8Cd17gQA58shvBOy9voMlvgsMdpsO9pNDGtlkRVvMtD%2FXt62wG0raV5O4MzmhV%2BIWFFHZnndDjEX952mZI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acce4ee4b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3767d2188bc9045a63b6bb4cec57ae1b
3c578e9b8e922bd6ce2d022dc90a112327142939
f0290db97eb41497a5196f7b814239aaa86a47a73b46ed00a0a539ab82200dc9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "F0290DB97EB41497A5196F7B814239AAA86A47A73B46ED00A0A539AB82200DC9"
Last-Modified: Thu, 06 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 07 Oct 2022 06:56:06 GMT
Date: Fri, 07 Oct 2022 00:56:06 GMT
Connection: keep-alive
www.linkhell.ru.com/clicks/LiveGuard360_files/css.css
172.67.150.158200 OK 1.1 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/css.css
IP 172.67.150.158:0
Hash 2445b60ea63040a91641c2a0a2a41574
bfee5efc17a883317eb482ded53bc31da58cbff9
f174a98426d6ce699f689d0ef3a7d4b2898f2ca57b87d727744330c8dacbd477
GET /clicks/LiveGuard360_files/css.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:04 GMT
ETag: W/"633d138c-683e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4V37oLAnJroMtXXpZuNxIBq7PgQHL00XA3x0xFHCWPYKTFMouE9N8WCaxkeTFLQUMIs61meEtRA3pL5qLW%2Brn2UEa1FO1rM6YZuK699pQnS%2Fu5NpQDRAfSP4E15tVFSE3Dh7JtOX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acce9be7b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min_002.css
172.67.150.158200 OK 20 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min_002.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (65497)
Hash 412a3f23f2565ca57258169d6aca3f56
e9f237752f1816a10247ea2e357c167dcf46d5ad
f48e4cc875138fae9811c0f6b707a2fe04d05166458d635a8b0232638b544e79
GET /clicks/LiveGuard360_files/frontend.min_002.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:09 GMT
ETag: W/"633d1391-28726"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C1a649yS6JlE1PBxU3V0EHolgrrh6Yl6w55Wcj%2BLL69k%2FoP%2B%2Fdb92b5SQe%2FOuyXupxLD4U33bATYdKnkmyPCw5cy3Ng9TFufJeO9ioWOXYH3WpdsyzEaUf%2FNnHko7uEMu1p3ewHB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accc9b710b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/global.css
172.67.150.158200 OK 2.7 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/global.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (14692)
Hash 22d3258e386dbbdf95db8ab2ba7e423d
0dedc3fb838491f2a04cfc3f549472371412dc00
b0b68fb219665b2c2bd80632f53e90675e3dda3ffa6d7e31a559ffe24741314d
GET /clicks/LiveGuard360_files/global.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:10 GMT
ETag: W/"633d1392-9b5c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nmZgxnzX7KDMjBhnWLu4aqGUYpSbYppQFVpweWgJGgopdoi9kPwbGN75Peeor%2FbVir7DFA71lp0T31JaVtBpE9HbuzCorGz%2BJTm%2Fa8ZG8zZIcA62Ox5KB31dOCY%2BrC8oSXG3c3Ci"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acce4ef00afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min.css
172.67.150.158200 OK 41 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (65493)
Hash e27a62bb8f58306d0fbccb775e1e85c3
30b057ffa32903e1e5ffd7d3be52d10e6836bfe2
e6d5b285d10319a83b78691cecf58a6595e7dd50b3906faad283e290e12d0b06
GET /clicks/LiveGuard360_files/frontend.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:08 GMT
ETag: W/"633d1390-75771"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N5HOQ9o1eRVy1nNdqdrRGsko92kqBgDSEXB1GES%2Fmr044XWoA6HC7PBI1wLr5aTZhoiOs%2BrZEea%2Fr66WdC%2FFu3ht0%2BYRJwX4OHw%2Bc5OU854CsySbWe3TzuJTS2vbd5bHgooFaLBN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accdadecb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/brands.min.css
172.67.150.158200 OK 312 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/brands.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (489)
Hash 6a022b68e443848e247029d92bc6ecdc
c11c6feabf7997fa9d1b08eb2c36476f9352d4de
bf7945206dad7cb2c0b38023fe794ce553791a43664c32c39fd2f6b44aff5951
GET /clicks/LiveGuard360_files/brands.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:02 GMT
ETag: W/"633d138a-2a3"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yHN1Q6fGja7Ykn6ikXegUi0dxLIb%2F4xSsWZR7MJ4UAvSwq%2BGP0nQjJKaEfIRcHIMqmwMu7AvMUJo9ZcvyzcBHd8Sqw9aRQTlTdqBwUgPiS0rtAU3WDTJHRtcmufuDh56evxaD73K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accf8f9db4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/solid.min.css
172.67.150.158200 OK 311 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/solid.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (483)
Hash 217be86c62c0f0465c8766bdc869d10a
9e43286e9b4f012b1e00a722af7f299946af47e5
13f78c579d9ac42e0ecacf5a61c41b8e16c6a93e34c22e967927aa41016ed0d4
GET /clicks/LiveGuard360_files/solid.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:26 GMT
ETag: W/"633d13a2-29d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BBiYDYLUVnsPY8dDs8TzLiFwZGH21WhhKGenCHMZeodsNw6d8ZbE0dc5wnjMZNWCu%2BdnBmoW8%2BOnja%2BBGSAmW%2FF2ex38R%2BxTtEm4u8eB9Wddb6ylwjB6gRmWCINU7dcZqlmCS9ql"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562accfac4cb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/style.css
172.67.150.158200 OK 1.0 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/style.css
IP 172.67.150.158:0
Hash e99b51ef4084cd73f88cb7a91d894af9
d092923bdf3e3625fb1c7d5447825afe0ead22a1
b04c604b656626b3f8952e397e0516851e219d246f8838337b7a7b1235285e91
GET /clicks/LiveGuard360_files/style.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:26 GMT
ETag: W/"633d13a2-99c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vOSi9RYDhk6hkTAQ5IMIZUmg3Sr12eGZh8Io%2BdPYVmn%2BL9fRXYR5vForz7aZoanTBLGENyh1Oss9gABN1NCg633d2e5PVE1fm9tPGikCofnM1nNWYB7M3PH%2ByfCy8BCW59ELZCsf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd02f830afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/ru4kdekmyyogchov6tyiigwqwwdasd8i
172.67.150.158200 OK 24 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/ru4kdekmyyogchov6tyiigwqwwdasd8i
IP 172.67.150.158:0
File type ASCII text, with very long lines (17814)
Hash 56c4fdeadf142489c949210989b5a52e
646e558de48312bbe8c52e581414111b46afbe13
dd6bffeae6c5016c6d4c55efa5b4e0fa98d7e4f9799433274351be60493208ce
GET /clicks/LiveGuard360_files/ru4kdekmyyogchov6tyiigwqwwdasd8i HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/octet-stream
Content-Length: 23813
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:25 GMT
ETag: "633d13a1-5d05"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=psnrIoWhHBWbY%2BeobWQEm3wp12UE59cA3dchWD%2FI1sdvVOqMG0KG2hradcthmZA%2BEO5uIQ9BoHdDgHyzG0OUkzVbAYNyrlAXpqtXRHS4LZ5dfoGnLMqg7UvVde3E5nonm9KCKR7P"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7562acd04edbb51d-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/fontawesome.min.css
172.67.150.158200 OK 12 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/fontawesome.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (57726)
Hash 17fd94d9f0bb4766d4ef7a40e9b72c6d
209efb50dd482437e0d7f4dee1a42e8525c5b203
bdc3f617f541d996de0579bbd01ecb9b643a4968ce2d5b0bea3aedfc73417755
GET /clicks/LiveGuard360_files/fontawesome.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:06 GMT
ETag: W/"633d138e-e238"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U2eFrtAlEZ4K6I047SrkagbVNolQdB%2FxScvAPkKLMlXnSRInTT%2FNwztf%2BISSyhkA8ibAAR2kxx664xMk32zndEZDtmO66HZslRJiCS9226kqHebrfZf18NIJvL2pGSBdNlzggtlb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acceafc6b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/bootstrap.min.js
172.67.150.158200 OK 9.8 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/bootstrap.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (32003)
Hash 58d37dee3da217a04a9928284dd6e09a
412d316bc6cc79694772c5a86405cac30b00e2d8
d38e60ffa16dcdc8904f412aa9a74d96d637ddd2eec98a338cff900fa9d5283c
GET /clicks/LiveGuard360_files/bootstrap.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:00 GMT
ETag: W/"633d1388-9004"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vSVIVhxBOxlc%2BOPvLd6DutzWZYmkdPYkFapkAuC%2BnjnPkb5jcf41adWpFEL8Z%2FfLHsMFOX8iR7vaLP3Hd5%2F0IU7XVqqR1VMh11oerG5%2BbMBf0AK283AiB0FyJn7VTj2u7jkYuGVE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd14f59b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/pixel.css
172.67.150.158200 OK 4.3 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/pixel.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (37009), with no line terminators
Hash d5c9aec222b3a3a036b730d852d8d903
628fedf50d0323eee05b654ce3255266f11f780b
3a9e93bd578cfa13882ffd877ec522841f15206e0be3ef3642b14bb447645512
GET /clicks/LiveGuard360_files/pixel.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:22 GMT
ETag: W/"633d139e-9091"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jubb%2B2zeT70W2qCNRUmNlTQIfSHGK7uM7fT4KZ4Cj5l3CWnFg0vS1xX9rdTNjxHGbBPSUex5639d2LGjGwNpniPHgbqC2DKmgmLBBiBFSDBmQkGleeao9E6ObfBFvYvbegrj8Fi8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd06fffb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/animations.min.css
172.67.150.158200 OK 2.6 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/animations.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (10019)
Hash 4c70bb5ced8549969c4fd5763e3ac298
20cb3c388b2e002b67b3d0f3b4be087b16d19976
f28829988ee5fda24ab97ab7f0a729e5d1a11a047c39f2947905f0d33ebc217f
GET /clicks/LiveGuard360_files/animations.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:17:59 GMT
ETag: W/"633d1387-4824"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGAdcqGgFnHCb20NAK6U3G3IofjpntaTHvzG1HCrdPGTRASYtjmBBZg%2FNYSIQT7d0YiKTLMob0IBxTnOVtg5I6sULdOeASawb1vBr6yflNUuOV2eIeRF1XkmzT1piSBCUZoA%2BiDq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd08c9cb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/main.js
172.67.150.158200 OK 17 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/main.js
IP 172.67.150.158:0
File type ASCII text, with no line terminators
Hash a932bc38777af90144148f9db9e3a6d6
1e5066d4bca2ce414111ee89b7aa4caf2564720e
8e9b2258b5383cd80acc415960b62c979d06f45af9ea4d59ee328ed76e8a69ab
GET /clicks/LiveGuard360_files/main.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Content-Length: 17
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:21 GMT
ETag: "633d139d-11"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8U54wEcznRhFja6aV4nXk1pu1Ey74y8A6TL%2BDMG4uI%2FW0mXQ1MKRIver9C1C1A6sIlXiAKnE03Cr0nzlfY%2B7Gr25erH1BuqTZfaHhNxxMy2NvUcgAH3dO9ARUHNQXULggXOuTVW9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd1c8efb529-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/webpack-pro.runtime.min.js
172.67.150.158200 OK 2.4 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/webpack-pro.runtime.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (5141)
Hash 49c522ebe69a8d85619a3a60aa78d562
37743816f501f08c2163cbf6996881ef39e61c85
b9224fcb11cba687dd8621091200235a4f813319bdc16e1a1ae8aa2e5ab16108
GET /clicks/LiveGuard360_files/webpack-pro.runtime.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:29 GMT
ETag: W/"633d13a5-1440"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifNvroO%2Fmyk%2Bg83D8zRYnYByILkrh8mtY25NrIF6AwQ%2BMkj4RWQPQkh58AYXySjKkw6Elp22pLwO2uO6eP9TNS1p%2B1fabtVBz8jL7nsn3joXNRHYPi1nOolYES8U%2BBCS5eCeGb%2BX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd1ff9cb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/webpack.runtime.min.js
172.67.150.158200 OK 2.2 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/webpack.runtime.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (4918)
Hash 42b03682cbe33fdcc4a6d9f757beaa11
b4959eb046d2ae017c88e3c99519d8c844c11ca3
e18ab3b2a2738eda167be02200ea854b2c58e0f1aafb5c2ed2f13f8b28e2c271
GET /clicks/LiveGuard360_files/webpack.runtime.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:30 GMT
ETag: W/"633d13a6-135d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b79XJWORoXImfuFibxpIxXsGh7SmVZEV7J56v6sGNa8v4CeHYNL6zDW6nrKEARACcvr%2FX5jrD9A6iNy1L%2FqdEA%2BgdWcq86vFSqvFV8xcc8YbldDOWxofYG2Dss8kOkGx2Q7wLQcT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd218f1b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend-modules.min.js
172.67.150.158200 OK 11 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend-modules.min.js
IP 172.67.150.158:0
File type Unicode text, UTF-8 text, with very long lines (32889)
Hash 94821e7203b53cd112a497ce8e136937
93fe290cfa53a0c593aeaaac8cd315c42d35550e
e7890697662bd1449d065e6b2cb25ee1c31ff988ff278423e2fa379f7c6e1824
GET /clicks/LiveGuard360_files/frontend-modules.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:07 GMT
ETag: W/"633d138f-80a1"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w1vNfQEDkXu6b5do%2Fb%2FypoXlAb%2BH6OK63DmALT0oFsQfSyD2nxQh9C%2FW5aiYX56xCxON2DY0k9Y2eUHLvUcK6UFs63H6mgwCbl1gwKrkybq2QdKxoT7QpnAJFcYiVANTd6bgVJdJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd25d62b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/jquery.min.js
172.67.150.158200 OK 33 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/jquery.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (32038)
Hash 547b3badf1de846ed84032ca9d4a0518
b0c929871427f06e26f7080ad8467965419d3ec5
bd2472fc89b5bf1d67c5b0b65801e4719f169a155430898d2e8848d281ca3661
GET /clicks/LiveGuard360_files/jquery.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:12 GMT
ETag: W/"633d1394-176f8"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7vdWuuo18jAiJxMnRIKeP8oo3KFEy7nI9HV1GF%2FR8TaLEYtB2tPwQT5%2BNHjg%2FELJUUiNbS%2FFYkGwSOF1vUvatbHaM6p7BY1euQBA%2F4Re2Xmlg3kc51OKDqRojnW4FJwSxA6NE69n"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd13fd80afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/regenerator-runtime.min.js
172.67.150.158200 OK 2.4 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/regenerator-runtime.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (6475), with no line terminators
Hash 6b0c5288bb5f4619cd7d10c077b2858b
f5fa1550d81a04d13d0d7273c32005722b910022
69c224d56ae4f660970896b60da2cabeb296fd95673a8ea23519db8f4f285b24
GET /clicks/LiveGuard360_files/regenerator-runtime.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:24 GMT
ETag: W/"633d13a0-194b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FWybXqkjbE9BTJjsUFfImjIDU8JEWFLr0%2B7cH4PtErCTBhgC%2FW7UEVkIg38GfakT%2F7zIowGVuNV5sT6bvEBKQrbBi%2FtfFBX6UjKwrQck9ba3VYS2c093KXLL5L9XrGgzCx28y51O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd2b93fb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/hooks.min.js
172.67.150.158200 OK 1.7 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/hooks.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (4875)
Hash b7fad5256cf7aca9fd70a62bb93844c6
903085b7db8cb10da60739104d2b8b500d7bdf57
d35186efbbda488c7ad9e5b7c44d5d340e96c7823e609d791ef0d4bd29b4afd6
GET /clicks/LiveGuard360_files/hooks.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:11 GMT
ETag: W/"633d1393-132e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wU%2FAsMa4vXJB%2BVLrpbPsxc8s6WIjqBo536jW25m3Y2QW0iTRwkKv8DSMU4xwW2kNa%2FdJF5nJ%2BFAPXoN0xgYUYOFNOrvZ2xQNEVyGmF7Mz%2FF1gliaNYOXBFv1HY8vDg5RgkNkf6Mt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd2f942b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/wp-polyfill.min.js
172.67.150.158200 OK 7.1 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/wp-polyfill.min.js
IP 172.67.150.158:0
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash eaee4dc80ca00588e937b1d91255d62f
a6c0d7c8e0d3250c07a2c4863611db3db1adea48
28fe5891dbd0e4bb5729dc8ee7c324ae1a1f62d9a1482d90d455a0a4aa6c984a
GET /clicks/LiveGuard360_files/wp-polyfill.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:31 GMT
ETag: W/"633d13a7-4ac6"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0YuBITLoSrlMKpWU2xEBvGTFY9%2FxyqLOVR48h5RxpZky3xggWtvP%2FmpA%2FEyj4e%2Bcc0DGtcudfVCp%2F2vnD6uUDCzlJMg2pqJpQm4dcOtMQELHJey0RTGPEwqpw4fCcooKm2USfewb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd2e806b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min.js
172.67.150.158200 OK 5.7 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (21374)
Hash f289865aa3d10dd718f1eed84c53a2ae
151f043e5b57163156e7c7e468d29b8f7ed8c49e
f8911b88aa482f9887cab1d92943c20ac69f77b06a431115ca8cc6c28262b961
GET /clicks/LiveGuard360_files/frontend.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:08 GMT
ETag: W/"633d1390-53a9"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZANQffEEoqxWJJiIatuKc8SgovVDo6fr3RuvbuTw4AL49ZX6i83hb1P3yeQmHlHKVa12tNnJDsg7WQbb9P9b1ro9TSH8LlLRULcslfKWhPAChqzDUbRmCCplVmWFHjiXRtWsJsSi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd3688f0afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Fri, 07 Oct 2022 01:39:18 GMT
Date: Fri, 07 Oct 2022 00:56:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Fri, 07 Oct 2022 01:39:18 GMT
Date: Fri, 07 Oct 2022 00:56:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Fri, 07 Oct 2022 01:39:18 GMT
Date: Fri, 07 Oct 2022 00:56:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Fri, 07 Oct 2022 01:39:18 GMT
Date: Fri, 07 Oct 2022 00:56:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Fri, 07 Oct 2022 01:39:18 GMT
Date: Fri, 07 Oct 2022 00:56:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd58f1191-b279-4341-98b0-b5853ac04100.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd58f1191-b279-4341-98b0-b5853ac04100.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90f323a3b73cab85abdce9b6631e8d93
36e42d12a193c90fbc03a7d13a1711f24bf6f2a2
259aecd4212d5c91c4eeb930d99e28ce420af50d987e93d99974f6db1127ff28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd58f1191-b279-4341-98b0-b5853ac04100.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 8e8e58e6-a6d5-41ef-8246-bb276b882852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmihYGo2oAMFXYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4ad5-06b81112046a7b2b3b898a3d;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ij3kvy3mw4m1fxe_qzZi8-zbw8raIqJB21wPBd6rqmmFLDWar9C3KQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:06:09 GMT
age: 10198
etag: "36e42d12a193c90fbc03a7d13a1711f24bf6f2a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0611d96a8a76ee2b104a70372860f979
579dea2edcf3f3fa3e18530d1f254132589a2f6b
70996e9eb0aac2a5befff12fd63c57c5120f59e061af60b60c975694307a6be3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8050
x-amzn-requestid: 7332406c-4a06-4c0d-a4c3-d59e089b511d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJw3jHaooAMF6bQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333c830-4513d4852dc064a812c23cea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 04:06:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ytF_TxhiRg0wYUJod7-t0FEv_p7EkIXJNe2rygTGxW6TnebbTy8DCw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:02 GMT
age: 10085
etag: "579dea2edcf3f3fa3e18530d1f254132589a2f6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36097bf9-dd7a-4dde-af42-0e23e000e84a.jpeg
34.120.237.76200 OK 2.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36097bf9-dd7a-4dde-af42-0e23e000e84a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e9646987c0395eec23e32dc00954d386
5545b691aeefcd31bbc6b6cad6726234773e9d74
900a2bfbe3984db79056d38764b1986399d827a7f54d1c54d4fd3b06c7981385
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36097bf9-dd7a-4dde-af42-0e23e000e84a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2732
x-amzn-requestid: 004a85ab-b33b-4b7f-86f2-9762e6cd2f0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkQGWgoAMF7mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494e-473458094dc2ded55a681505;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eJltrBVIRbJ-_OUHZjw8mtfK6Ivb9C51B6lC1C11eaq_O4Psd7evRg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:46:38 GMT
age: 11369
etag: "5545b691aeefcd31bbc6b6cad6726234773e9d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: iClOZEPMiFmpeprT8McJ2HI0dCmyxkhEdfYr0qP0YK3U_Pcd9N0Fhg==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 11:10:12 GMT
age: 49555
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4d23ef36836d4691f44e51885513cc3
10fc52375fd8946bfd468eb96e4aaf592c239663
fb3d2d52e1dbbe4225c3df920b36eeb73dc52a1010db52018bc1eb5c5bfbd028
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6063
x-amzn-requestid: e4067d2e-5fe8-4c80-ab2c-15e98605d458
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQw32GbTIAMFx0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633694fe-5d650b9433007db41ea51a35;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 07:04:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: a8Wrtvoc1hKrYtCETPZXyOZJbdNZxPq71SJ6fy1iLDyRPqXGALgyzA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 23:09:03 GMT
age: 6424
etag: "10fc52375fd8946bfd468eb96e4aaf592c239663"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff362ea4b-2913-4401-9322-7a70f223e2a9.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff362ea4b-2913-4401-9322-7a70f223e2a9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5cf80f9e9e5aabf650c561b5939acf1c
6a66ddb2c8c77cbd27101b8705a34492aa998b98
9aff5e0564805bbf83edb94b2d0462f76e09b5b67a39f3ab65aee66a24a192da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff362ea4b-2913-4401-9322-7a70f223e2a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9160
x-amzn-requestid: 3064ca86-5e0e-4bff-ad0c-6dcce9fa1404
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkaGIGoAMFZzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494f-06a55ad9421678605d12a4a6;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: 1uTAUuD8oF_Y8yRT9Fh30YuIJMN-iKXQiXwDfq7NgCnPeyM5pV9BKQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:01:45 GMT
age: 10462
etag: "6a66ddb2c8c77cbd27101b8705a34492aa998b98"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.linkhell.ru.com/clicks/LiveGuard360_files/i18n.min.js
172.67.150.158200 OK 3.9 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/i18n.min.js
IP 172.67.150.158:0
Hash da7121743acd9ffa813fcbef8e223f03
5740b113da3812e8a40490a4b69a0e70bbef9759
844b5ff19f6cdcd7d60fd4a5ed3b4d1a4358b0e0eb2cabe4397f9e1436549431
GET /clicks/LiveGuard360_files/i18n.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:12 GMT
ETag: W/"633d1394-27ee"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2QQXrO9ezgQxNUuojgltm%2FJV8M0iK1yzP00S%2FWogHQv7o8EnwkkGeNQqLH57yHFa4RaOd9swDT86CDQGWjG65E7YB3Fm5Vpp2VRRYbAbMMSayELan5XWJXzMJQGGhZmJdr%2BrFg76"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd36dccb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/core.min.js
172.67.150.158200 OK 6.9 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/core.min.js
IP 172.67.150.158:0
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 6dbe7088a74f01a5a1c308f23a081133
1ef143312c29ac49ec286f88b473109a98c5ace5
86ff9bdeb82540f56f4a808ebf771d08a15663658b89bb337d44a386223e322d
GET /clicks/LiveGuard360_files/core.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:04 GMT
ETag: W/"633d138c-50eb"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wkK6iFFS5c7bCtIUvq4SedpI1YLsVu2H6bkffcbTnZbDxXpA0b31yaJattN%2BVRmV2BZyWHxJqrExOacfuAQIO1XZuE2OvY3PaTRySWgGKbhLt%2BRrvPlUXEtjA%2BinBs0pgs3etjOq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd439d1b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/share-link.min.js
172.67.150.158200 OK 1.1 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/share-link.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (2620), with no line terminators
Hash 04137bf1c2687485f57ecf53a3d1f9da
2e441c6f91e26322802ac93a57b18dc58dc745cc
de19aff59e33bd5997352345f978568eb24971ce0aac1f3842b981049f224855
GET /clicks/LiveGuard360_files/share-link.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:25 GMT
ETag: W/"633d13a1-a3c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fljgX7RzRBJyahnpVY8CpDXf7EV6nKfmfeRHCwUq2%2BbiZwYGKWTPmoVjF87YJJxzqJqltF8BmmUapLnBsjJpH3XyT4xktMLq6xAjbgCmopL%2FZruehPWZkvX9pZiN0jzVwN5%2Fc7Xq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd4b9120afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/waypoints.min.js
172.67.150.158200 OK 3.0 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/waypoints.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (12198), with no line terminators
Hash c0db6d5c401074694c0330081ea8fffe
6a7474cbdd8d9f96165eb43a2d0e26840061a7fc
45cb1f190f039721a49a08310c0d932c469c9cb470786b34d6a904e20ffa8c93
GET /clicks/LiveGuard360_files/waypoints.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:29 GMT
ETag: W/"633d13a5-2fa6"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fQbhlqarZ0Za%2FpCEkMGyF6eGJTGIW9uc0Ebvpx8lm%2FnAnrArLDM53Vuklih8P3QJXZfOCWx07d6oZs%2F67ueqGkq0pSfopfrbGlNlPmVbjfY4UrCKRIMxIDJRBw0ocEDHoJzx515I"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd3c994b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/dialog.min.js
172.67.150.158200 OK 3.4 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/dialog.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (10544)
Hash 1816af5b3ee327cd6a73773fdac161fb
8cd583eb2a709d5e67cd9afae3764791e6238339
1fa80d69fe6acdcf2a119d33cd7521b43b0a0e0b776e1f9284d5df29dcd98f4c
GET /clicks/LiveGuard360_files/dialog.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:05 GMT
ETag: W/"633d138d-29ba"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Mp%2Fk5iLzaLNliflzKQj984GPHUnYRybs%2BJwOZMLRi54C33B8hqKQJv8aeGQTP2mdy%2BKkAksbP70VuJN5%2BPg3my6SwGv9AQF7nWfVPvN73lII%2F3kNJBvReKtBG46av8gen%2Fql%2Bb3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd55e89b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/bootstrap.min.css
172.67.150.158200 OK 20 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/bootstrap.min.css
IP 172.67.150.158:0
File type ASCII text, with very long lines (65371)
Hash 989805476e91c69067f09b5cd302a063
b304cca15ecd1c8e0afca179ef50c970addf4f73
f90dedab7e9bc8eb19d5844b65263b6fe49bf3b1b4bc66a8c80b5194fb0faedf
GET /clicks/LiveGuard360_files/bootstrap.min.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:01 GMT
ETag: W/"633d1389-1d9ac"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YM6xvV1Wg6l%2BcyQvr81ndjIv6xtVJvBEGk9vf6j%2FkwM9jMBM9mK%2BlbZAnoiO5BXCb6p1LQVp4z7x0PUp%2F4Zde18p08TCwLmQCB17vevXYp8dlHJc80EnLA3r7TwTLZRjuAcXEoK5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd02c7e0b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=G-BSNGSVZ6P5&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=G-BSNGSVZ6P5&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a64ad7d1f12dcffa0a9e9f94b56c2fb5
3e164c33c1a9a90b852397082464ee721ecc11cd
c4e0d5a61687ae83bfe43fb03b98c25a50582ba98a889ec185c6881537a6a06c
GET /gtag/js?id=G-BSNGSVZ6P5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=G-BSNGSVZ6P5&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.linkhell.ru.com/clicks/LiveGuard360_files/swiper.min.js
172.67.150.158200 OK 35 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/swiper.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (65280)
Hash c52f5df023eba51e4ec35d3b781c9720
9e6368361ed9627ee355654b6a709212960dcaf8
099f87704891ccf1300cf3ce4bd3af8a217540e8412d89b9228f6b9eeb084a01
GET /clicks/LiveGuard360_files/swiper.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:27 GMT
ETag: W/"633d13a3-21f91"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=79rEV7sWDfx%2BkljekalWr%2FZ7MKwaT1anlLH2MHFbQPg5bM1gOS%2FGJqVbYL5qJxMSkA%2FwEPX%2B7BgVhN9oZ%2BaCzDQ%2Bki4UQs10UpmkeVyVFQ3ubgKe9NPXx%2BZ9MFXpyZvupxpP02Tg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd48884b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/jquery.sticky.min.js
172.67.150.158200 OK 1.6 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/jquery.sticky.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (3703)
Hash f81fd6ca08a44fe13ee107c0298ad600
5e87769c1fee743ddf6624948928851103e4671c
c9d4a0ce00dc8f6e46852042450a0fdfdabd4900f97f29c16163cc30e06a5b71
GET /clicks/LiveGuard360_files/jquery.sticky.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:13 GMT
ETag: W/"633d1395-e78"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mSwle%2F4Kqur7LBkh%2F0O7cxvBsg0ls1PKvT2%2B7iJDlx5OvJk3DZ%2BFQMi8j%2Fpd%2F3RcKse%2B0Zizo69yrG6cjDaFL%2BNJ6kV3VdDKwwsQQv7vFFHl4Kb1rJyEipUVvzT1QSRzXqvFxiNZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd60ee5b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min_002.js
172.67.150.158200 OK 12 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/frontend.min_002.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (40474)
Hash b84f6c9245f50baf2aa441ee7976ef02
d860ae21022ce29fd401bdbde2a32239f9738bcd
f6d7bed9964f3006a78cb05fa45f800b0c90351fb1dfb11b3cee1940b62bffdd
GET /clicks/LiveGuard360_files/frontend.min_002.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:09 GMT
ETag: W/"633d1391-9e41"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aQT1u4WGaRzPU8XACKiDQlwBVWt9YY4%2BYaDIl0y7wKbtsCX4BYeadF6mawxDRosUwPIjpRyDhq9x%2F49SNnEnjXKsDVIalPVCZ7AAXWcJpf2Utuxd49Yl1Jt40Ydoi7aoLVhDuJmt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd55a49b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/preloaded-elements-handlers.min.js
172.67.150.158200 OK 31 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/preloaded-elements-handlers.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (65493)
Hash e4e7f055ff951fec2c57198fe73ddcd3
c8d0287321e275cdb71cba39b610493a97fe1346
31df942b52cb899bfab884d579b2f819fc8de74aece18179fd86b4ed8eec7405
GET /clicks/LiveGuard360_files/preloaded-elements-handlers.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:23 GMT
ETag: W/"633d139f-20de6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Epd%2FynjAuKdU4Xs0OKMETvrVyReBre167MMKIFpsgSwb1QKDAjiGhTdRDttOm%2Bbap3f2vryUTukHxeimMqmEGZv2LuT%2BfqCwvplGVm1np97NQq52nODSweqcm0JpZCW3cYBF%2FTOx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd5c9750afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkhell.ru.com/clicks/LiveGuard360_files/2705.svg
172.67.150.158200 OK 312 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/2705.svg
IP 172.67.150.158:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (482), with no line terminators
Hash 574a44c9d32cdca37cfb9dde06130aba
34545de4485e3bcf43d26d9eed0a45f7bb63a813
83d3239e23dc1a2cda3cb39fc36192b9e227b88e1672e8db387a0d6c9461cd48
GET /clicks/LiveGuard360_files/2705.svg HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:17:57 GMT
ETag: W/"633d1385-1e2"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SPjdYM4xg0XUkG4RVMex69SnkyGWps7F1E%2B%2FFlyln%2BNHqLzkuHG21r1aAon%2Bi2%2F4444c7g2wTPyc8VD%2FcDq%2FLhTv4fim4DgbO1CZkR33cNeEjdUe5Ww03aC%2FbGcqEMvXnoXX5nQ%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd68e560b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:26:57 GMT
expires: Thu, 05 Oct 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 106150
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkhell.ru.com/clicks/webfonts/fa-brands-400.woff2
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-brands-400.woff2
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/brands.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8w0%2F0BStCT32Q%2FBDlh2hI4aG1jGBLbM2opEKUAdc7aQ07X5HcW3E56h%2Fq2do5ytp4amixQ2Y631CD9BF4sws5qEMkJoe5IfqckJ4jOtMt9uSUeg2XYbiWQ29wjL%2FPvAkRlfhLKK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd75a400afe-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/sourcesanspro/v21/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12580, version 1.0\012- data
Hash eaf55d1d3b7c4a30203d2d5226c49b6d
11b63b740965603ef544f261ef036d24e6bb1fb5
e286a9ef7d2064a4cf7026449941a557c7123aa84ef2a17cf79a38820f5474bc
GET /s/sourcesanspro/v21/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:28:16 GMT
expires: Thu, 05 Oct 2023 19:28:16 GMT
cache-control: public, max-age=31536000
age: 106071
last-modified: Wed, 27 Apr 2022 16:19:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12924, version 1.0\012- data
Hash 4610010f425c140b99c88b6819ce1c02
a7e839aa0452ceeb6228de7c15062fe82cc6d1c3
7348a2eb48c9a681d6178433394c7037144d85b57ee33a11339d3a33fa1001a4
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:26:57 GMT
expires: Thu, 05 Oct 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 106150
last-modified: Wed, 27 Apr 2022 16:02:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkhell.ru.com/clicks/fonts/eicons.woff2?5.16.0
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/fonts/eicons.woff2?5.16.0
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/fonts/eicons.woff2?5.16.0 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/elementor-icons.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RdMpZFSyOwe58X5YQEVBC7YuraXcBCeRYzXbbZCZxRPOj%2BFErU3TlXQL0NXv8iIYclynhad8huxaameZJ4rhRnPjhnkYC68ltjU4b%2FSQhGm1RnEBVms88o%2FNCa8l2PpjDjhpWbVG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd72b09b4fa-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3601-pvc1da8y2d4bohxwunyttp8eex2bfelypi6io5p9a4.png
172.67.150.158200 OK 11 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3601-pvc1da8y2d4bohxwunyttp8eex2bfelypi6io5p9a4.png
IP 172.67.150.158:0
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash a40328119685437f820c329a1ddfbc44
a678cc3b80f4b6759592c1e0e6a9b6071d50d48a
ec96335758b3707950a8cf3c41b1cabb817607dbe4b0d5890e32380506561596
GET /clicks/LiveGuard360_files/liveguard3601-pvc1da8y2d4bohxwunyttp8eex2bfelypi6io5p9a4.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: image/png
Content-Length: 10707
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:17 GMT
ETag: "633d1399-29d3"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ssQ4tOnEeDymumZ%2Bdz0aa7CHXliVKy%2BpwY%2BrW0i%2FNTQwsgtVx8fe0syw3AIzQ93lof%2FmpjmbXlnq21sHrehgl%2B7t1pG2DLvqLlkXny0UU%2Bd0%2Fqbz4nJyUfGMovm3Uq%2B%2Fmkvq%2Fuwu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd6f99ab51d-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12612, version 1.0\012- data
Hash f4934b69e6bb17ca4c535a3bd24aebad
c78fc43d5127e032dc536eec0faf67e59b96def8
ce6b49ca9fc6bce7548c2f246f67d66f98722c0c626c2256a40473c79f817c1a
GET /s/sourcesanspro/v21/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:29:51 GMT
expires: Thu, 05 Oct 2023 19:29:51 GMT
cache-control: public, max-age=31536000
age: 105976
last-modified: Wed, 27 Apr 2022 17:08:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12408, version 1.0\012- data
Hash 6e30c013adbc4eba0b94d5431119ea87
9d2a987240fc5b46a3135e8836ee435c5feff333
080e18a8c761c3d30b7ec08aa65f87109a0228367eafd0a12fcefda58d10e8ad
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 23:36:41 GMT
expires: Sat, 30 Sep 2023 23:36:41 GMT
cache-control: public, max-age=31536000
age: 523166
last-modified: Wed, 27 Apr 2022 16:54:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:26:57 GMT
expires: Thu, 05 Oct 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 106150
last-modified: Wed, 27 Apr 2022 16:09:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkhell.ru.com/clicks/LiveGuard360_files/preloaded-modules.min.js
172.67.150.158200 OK 13 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/preloaded-modules.min.js
IP 172.67.150.158:0
File type ASCII text, with very long lines (43101)
Hash fc2572245772fb60b81ad56ead03aabe
f37d4e2b21427272dce16b33f0d8b739bb29c18e
e9c7db8654e455bf7c603a2208e5783271738a0457b0467ffed18d47db43304d
GET /clicks/LiveGuard360_files/preloaded-modules.min.js HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:24 GMT
ETag: W/"633d13a0-a884"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LHcDbOXFOYLoljANCaQfVDgHPkUivlLs0QIun%2FjY3UbM5LhTlx3FZjseG5hMHG1XHlM3lnCHBDQljhB0BoAlLqYZePLfbgVdwCgIoNWvCFLHRDsNLjs2drpx1dVR3Zbbrd7v1SZY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd5da57b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3602-pvc1db6s975m03wjp6dge6zv0axon3pp1mu05fnv3w.png
172.67.150.158200 OK 8.5 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3602-pvc1db6s975m03wjp6dge6zv0axon3pp1mu05fnv3w.png
IP 172.67.150.158:0
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 119b09628960f0184ef00e7755525f45
95e918971a71aaa62b43f841e9f2005f0cbf0f85
0550e43ecb2b60b9cd429520237b08dabfa403a1c95ac66e5212b38b56830e04
GET /clicks/LiveGuard360_files/liveguard3602-pvc1db6s975m03wjp6dge6zv0axon3pp1mu05fnv3w.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: image/png
Content-Length: 8528
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:18 GMT
ETag: "633d139a-2150"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RBAOquASmpQT1x4RHzu8HO55VIuxGapJhHujLYKP2p5u2eHfsd%2B%2BwOg5rCEy5a99dLCau%2BDF5aiB%2F%2BgwYe%2BScuQ7ct9s01eac6dmVQC7uvA%2BKdzKKksLpXXCmGcrhGaSzEMcI7a9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd70f63b527-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/webfonts/fa-brands-400.woff
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-brands-400.woff
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/webfonts/fa-brands-400.woff HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/brands.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6dzt1EDxRRdHde34%2B3c2pdgBTtFQIRNf98T%2FAiCQnMwi7R9sjY4QewmbRGOi68n9o6egxwrIhl6K6bCYbBco5LMOmGJ7oalUJg%2BckDxJEMFA5fURfuDfu9Hjwn1Upu8zE2rJxW9H"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd99acfb51d-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/webfonts/fa-solid-900.woff2
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-solid-900.woff2
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/solid.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RRGUhTL%2BQVK9%2FfWYPwy1m2hLNzjM4PJQ5uVUfKPp0RCq5GmmcvXy2PKZls89UU3a%2FhoynQXIuwVQLKE1fbTnNPsHMaov7J%2Fvqh3OoRMGmKBygV3SlSQOuBF0ywQn7Rv8KBha%2FoV4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd99f3c0b61-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/giphy.gif
172.67.150.158200 OK 1.3 MB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/giphy.gif
IP 172.67.150.158:0
File type GIF image data, version 89a, 480 x 480\012- data
Size 1.3 MB (1264565 bytes)
Hash 89c530406161bdd36830edf18f05a633
a34f3af6920329a3bc0fdb6a74532cfb9fc03cd8
0c7391a5083217351fde02ccdfed12079489dcd78cb855adc27e2b0cd972b4dc
GET /clicks/LiveGuard360_files/giphy.gif HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: image/gif
Content-Length: 1264565
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:10 GMT
ETag: "633d1392-134bb5"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vY2%2FR3AhEm1h0Le1z8PDlppU8IAhAh4RuoIq51Y83DcSow8dScJB1gkuVLIB%2Bb9aH1n7PxcvZCV9vNtWa8vfaeTt4WHJjbo7Fqnu1406DXkWuD0A%2Bh8rKVfdgdPb7CzNgqRo1f3R"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd99b100afe-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/logo-5.png
172.67.150.158200 OK 11 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/logo-5.png
IP 172.67.150.158:0
File type PNG image data, 260 x 95, 8-bit/color RGBA, non-interlaced\012- data
Hash f99e77df91b96c51e5091fe48391ea05
641b00983bc11dacea6c51eec03746bf5566e1e4
340f5d6f0218fe3036dd41e90969a7c4e94f2adf06281bb916dfce2bdca07314
GET /clicks/LiveGuard360_files/logo-5.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: image/png
Content-Length: 10792
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:21 GMT
ETag: "633d139d-2a28"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2BTJTi04XocemuKkkpgC6Zom70CM7RIVC221H3eE26TxX%2BcjoNXvlg2NNa1l6%2BGrtEeWoFsvT1bSegZxq%2FGY3gGHyfeC7D2CiyBeLyQBu%2B1IKJ4c%2FyPLmAPNWj1ZbS%2FQ7j6UKSsn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd9d875b527-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/webfonts/fa-brands-400.ttf
172.67.150.158404 Not Found 116 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-brands-400.ttf
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/webfonts/fa-brands-400.ttf HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/brands.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sCe0x0CX88P1vCLMMrXZTjkEDOvfOGktFa9SbaBTokgElsH%2BMcJVTt6w78OJTiKR9cJ88eZmeo3UcfGuYXQ2jQqaX5Hk5fHGp2DEbGlvoHzEFlrDAmY4l9iugZVqrYF8MkxqkttM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acda2fb20b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/world.png
172.67.150.158200 OK 1.0 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/world.png
IP 172.67.150.158:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b3ba1d9f660667bc7002b473ff998c8e
ed63077f13aca413f9e50a25c207711444a54322
7250cf579c74e9677165c2bdc2dd5a180d632b6f8780c09dc2231c28e1fe88de
GET /clicks/LiveGuard360_files/world.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: image/png
Content-Length: 1024
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:30 GMT
ETag: "633d13a6-400"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fdbu1h5IFcfphPA4F5cXwOmZ17tOo18LF8trIMmaUMR6O6kWh5rmSRmQoRHkZiIKj%2Ftpmmd9yd0%2BhfPGnTSVhRE0XTdkMjiW%2BDUpQ1mY5gMgVvrJ6%2BiQ9L2lzmbMAD%2B7Tp24MmuT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd9faf9b51d-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/webfonts/fa-solid-900.woff
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-solid-900.woff
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/webfonts/fa-solid-900.woff HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/solid.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sxPUQSIoyjmocFdrNPs5pBK5Q9eUakJ6bndi806%2B%2FaU9Imy9YbAEzguPsUX0saoOrTmmN5yR3k34LzhNL7pegr9PINe5sRDy%2Bq8psBBw8N3x3a5P%2FF2zMK3idJj0jNDxz%2FGcoy%2Fd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acda8b610afe-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3603-pvc1d9b3vj31cvza05k797gxtj6y7pi8ddj16vqngc.png
172.67.150.158200 OK 11 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard3603-pvc1d9b3vj31cvza05k797gxtj6y7pi8ddj16vqngc.png
IP 172.67.150.158:0
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d2f42737cc068bf2a773906e7190bcd
b2025eaa21f39b63e0126c51cb6e5b8eac795c7f
c67e434ca21ffcb7657cab5a75f9e480d2d26047791ac0f2a8406ecc12b3b68f
GET /clicks/LiveGuard360_files/liveguard3603-pvc1d9b3vj31cvza05k797gxtj6y7pi8ddj16vqngc.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: image/png
Content-Length: 10663
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:18 GMT
ETag: "633d139a-29a7"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZji1qQqLGIPotJ9Xcm7P2WztoNrS6PXhfqpPQrKOVXlk3fjAPGOjyD%2Fv3Kb9%2F8S8%2B1JjppXXqEieiArPMHNRKvRB%2FOZCx1NTNdpxKAcXQX6u0NWBCWIYwFFvquDjp5JnqwRte7J"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acdaafc90b61-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/fonts/eicons.woff?5.16.0
172.67.150.158404 Not Found 153 B URL HTTP/1.1 www.linkhell.ru.com/clicks/fonts/eicons.woff?5.16.0
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/fonts/eicons.woff?5.16.0 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/elementor-icons.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rj7%2FAAQX9Z37q2prrQdKC8mWyJrqYXipy2SNyq%2FNdyqkd1cSERTC%2Fk9qo68yUsvRR9uZvUoQRUBVkaemu5Yb%2BpkjUzV88VXbR5FL0kXoSpaiuFJ%2FhNXSM4ZEnHX%2FCceTE3kEh2tI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd99ba4b529-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/fonts/eicons.ttf?5.16.0
172.67.150.158404 Not Found 116 B URL HTTP/1.1 www.linkhell.ru.com/clicks/fonts/eicons.ttf?5.16.0
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/fonts/eicons.ttf?5.16.0 HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/elementor-icons.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9z1tufiOZiGMGLsvIyvStopgdqIxccBFTYq8KTlVMqQB2goJIRVeUGAyaahtiN7G936UzbWCQrQa9ydOonmQvEOdSusEF3RWKaGEhnAMYi3iywymcG5z545YbVerNtYPfmDy%2BEHL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acdc1caab529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/webfonts/fa-solid-900.ttf
172.67.150.158404 Not Found 116 B URL HTTP/1.1 www.linkhell.ru.com/clicks/webfonts/fa-solid-900.ttf
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/webfonts/fa-solid-900.ttf HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/solid.min.css
HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nu7QmI9uZKLMlOm4LgNrzC8jZaoqJvoLo05b0Oo87qMDCOMSrcCpioEfBf%2F288MDx0AWdjmbQX900pYT5y4SCmJUXysjlQ1yxGCmIbLdK1kXvFIs9Ua6bXZNBXpjwRUu7dkBQj%2B6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acdb2b56b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard-4.jpg
172.67.150.158200 OK 66 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/liveguard-4.jpg
IP 172.67.150.158:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 731x350, components 3\012- data
Hash 7d9d967d45a1d662346742c9b5d74112
7d96bac7e037b7d3c88830035cf41d66b25403b0
c91aa061a25451ba6e77fd455bbfdd4c4bddbedc1b5ad99fcd9bf96bffa8abd1
GET /clicks/LiveGuard360_files/liveguard-4.jpg HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:08 GMT
Content-Type: image/jpeg
Content-Length: 65908
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:14 GMT
ETag: "633d1396-10174"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HinS7mVFB2L8YX3JG88jOnp99M6Ja7N3KQC7mEbe%2BMdlkcClClbehG3xL37JRFDCRukmo13Y7vJBbxNdNqKfbptPxZG8syqt2wXsjGN5sZBtaKsJA7FJWj8ANEh4fWFkmdYkY73o"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acd99bd1b4fa-OSL
alt-svc: h2=":443"; ma=60
www.linkhell.ru.com/clicks/LiveGuard360_files/collage.png
172.67.150.158200 OK 392 kB URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/collage.png
IP 172.67.150.158:0
File type PNG image data, 731 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size 392 kB (392180 bytes)
Hash aac6aefc6e5cfeb73cbe60bf358cbd93
ceeb18cabb83e3a27958ae2b9e4e61e070b0d474
451714d411bb0f2414dcd813146b93fb7f6fb69c864129fcbd2644a214f8fa73
GET /clicks/LiveGuard360_files/collage.png HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:09 GMT
Content-Type: image/png
Content-Length: 392180
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:03 GMT
ETag: "633d138b-5fbf4"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cVFR1k6tSwSrBYuDKkiiKBWirL8k28PPTIHZwWSiE4efVb8sqo3rm7Q3dqdLUH9KqYNJ%2FGMw2IF0%2BuppJm34w4IecJtXmpI4NxVo975b4IWo6RcKQI275pgLttQF31urllGNODLw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562acda98c6b527-OSL
alt-svc: h2=":443"; ma=60
www.iplocate.io/api/lookup/false
104.26.11.85400 Bad Request 48 B URL HTTP/2 www.iplocate.io/api/lookup/false
IP 104.26.11.85:0
File type JSON data\012- , ASCII text, with no line terminators
Hash bcfe88a9e6a66a580550c510b0a4142a
0eec4186fb48d40fc7d9ad0965c01cb71f7f044d
4200ee1e5e81fd6ef95857f744035889678927d6893fa2a6e949d46da732de9c
GET /api/lookup/false HTTP/1.1
Host: www.iplocate.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
date: Fri, 07 Oct 2022 00:56:10 GMT
content-type: application/json; charset=utf-8
content-length: 48
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: x-ratelimit-limit, x-ratelimit-reset, x-ratelimit-remaining
access-control-max-age: 7200
cache-control: no-cache
referrer-policy: strict-origin-when-cross-origin
vary: Origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-ratelimit-client-id: 91.90.42.154
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
x-ratelimit-reset: 2022-10-08 00:00:00 +0000
x-request-id: de85f8af-cf98-4167-b22c-10b3a7de1d77
x-runtime: 0.004048
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OD3HRjKdNlVm5eYKw76%2FxPG3T3qVEzOGW8iTCGW7xQDxKfKAJJ0Kp9LhPkl7kaW6PHmSN3ZWE1sAfyDTFmYgVt0C1rwMv%2F%2FPqGvKwEEmieDOHuD1%2F39nuJTNYOpGLx9EpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7562ace65fd4b51d-OSL
X-Firefox-Spdy: h2
nxt.buyliveguard360.com/tracking/universalJSRequest.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1672765024192183801|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
104.21.71.61301 Moved Permanently 0 B URL HTTP/1.1 nxt.buyliveguard360.com/tracking/universalJSRequest.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1672765024192183801|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
IP 104.21.71.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/universalJSRequest.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1672765024192183801|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_ HTTP/1.1
Host: nxt.buyliveguard360.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 00:56:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 07 Oct 2022 01:56:10 GMT
Location: https://nxt.buyliveguard360.com/tracking/universalJSRequest.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&ffq=set|ff|flux_url|ff|http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56|ff|set|ff|flux_ref|ff||ff|set|ff|flux_f|ff|1672765024192183801|ff|set|ff|flux_inject|ff|%7B%22intoUrl%22%3Afalse%2C%22intoForms%22%3A%7B%22selector%22%3Anull%7D%2C%22intoLinks%22%3A%7B%22selector%22%3Anull%7D%2C%22tokens%22%3A%7B%7D%7D&frameId=_ffq_track_
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N%2BPZwqO81OjKSvGpnQEc2RD7S59NrrpEaY0EFtdpkedKusabJKrGYxkXeqXZ0aPJOVtcYxAyL1d58CCBb1v2HilnDVOO18iIS1Xklx3OGHUW3ZMv%2B1m7uqFzSC3kgIkihR8b%2B9FahXNpbg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562ace87ebeb4eb-OSL
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Fri, 07 Oct 2022 00:22:02 GMT
Expires: Fri, 07 Oct 2022 02:22:02 GMT
Cache-Control: public, max-age=7200
Age: 2048
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 07 Oct 2022 00:41:09 GMT
expires: Fri, 07 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 901
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38c8ed81c69d2af0003394c9fb9274c5
a71c6fb6d685275f8a8c7d9d87860df08a450038
fdff30d374603ecd62c6d244a1175731787725dba48777122802055969be28f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkhell.ru.com/clicks/LiveGuard360_files/blank.htm
172.67.150.158200 OK 548 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/blank.htm
IP 172.67.150.158:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Hash cd64b4aeec0a8560c0d6527312e2c806
3b84cb918c9cf6a06d81b2aee07f5fec52ec6878
7dc0902142b34ea216d209ad68f58687c2190ebb974b2f540f61cc64b2b22ef4
GET /clicks/LiveGuard360_files/blank.htm HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360.php?sid=995773&h=ESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk/Ef_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:17:59 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IeyfMeFtv%2FGHSB2BBfe9un4mYCDBOeAtSEFmMBI4F%2Bs7LXsyGOH7GoSU4jBP%2FOZpGWDmcVfYJUO6mn1gyVN57pafO498vXXsnvrkBymlusc00ayWgVzR7ggjkVNW%2BAzm%2FcD7MvMp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7562ace81e71b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
Hash 41b42206864c226626fc47e053bc81e7
8982f89e30f33f01e39ed85b781c63a5734d1b1f
d19de7dbb1b1aabb70c445ac777f136e4f138b004b3f60bef6f5d43d88800dcb
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 07 Oct 2022 00:56:10 GMT
expires: Fri, 07 Oct 2022 00:56:10 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkhell.ru.com/clicks/LiveGuard360_files/blank_data/inject.css
172.67.150.158200 OK 928 B URL HTTP/1.1 www.linkhell.ru.com/clicks/LiveGuard360_files/blank_data/inject.css
IP 172.67.150.158:0
File type ASCII text, with CRLF line terminators
Hash e1c22e631b7cce42e3ef13cd9bb02ff5
6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
GET /clicks/LiveGuard360_files/blank_data/inject.css HTTP/1.1
Host: www.linkhell.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/clicks/LiveGuard360_files/blank.htm
Cookie: _ga_BSNGSVZ6P5=GS1.1.1665104170.1.0.1665104170.0.0.0; _ga=GA1.1.1347254386.1665104170
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 05:18:35 GMT
ETag: W/"633d13ab-f28"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BE67F%2Fr86ra6xqyCdELyuKE206lL%2BSzhgU1TJMkUGvKQ2GLDKYdfhWNPsd0YD9L7uldNwhlifosoPHxsQ9XZ5ENVGLinfnujRukUDOV3sQSRY4%2FRw8xJ7UaD9HTqRaxnIMjk6uJx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7562ace93f3eb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
amplify.outbrain.com/cp/obtp.js
23.38.201.81200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 23.38.201.81:0
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Fri, 07 Oct 2022 01:16:10 GMT
Date: Fri, 07 Oct 2022 00:56:10 GMT
Content-Length: 3249
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/730905238/?random=1665104170427&cv=9&fst=1665104170427&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.66200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730905238/?random=1665104170427&cv=9&fst=1665104170427&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2692), with no line terminators
Hash d31f081b622f8c062f68bcad47e5c182
307477e4a09232b4f6e920dc8cefff0d8faf8cef
ebfef286d4f2c22afdd0e3bb7c5cc123c6dded561e77c4b5feb0823f63e1689c
GET /pagead/viewthroughconversion/730905238/?random=1665104170427&cv=9&fst=1665104170427&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1224
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 07-Oct-2022 01:11:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/730868448/?random=1665104170433&cv=9&fst=1665104170433&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.66200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730868448/?random=1665104170433&cv=9&fst=1665104170433&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2692), with no line terminators
Hash 97232c6e8aee3cb326df3734dca131ba
fa24f1c256b9771f3c37d5bc2779c74ce40b4906
4681c7a3c2453a505117a6d125300e0b5b4fd1d64bdb8e6031dde24b9883b335
GET /pagead/viewthroughconversion/730868448/?random=1665104170433&cv=9&fst=1665104170433&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1228
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 07-Oct-2022 01:11:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/730863180/?random=1665104170432&cv=9&fst=1665104170432&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.66200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/730863180/?random=1665104170432&cv=9&fst=1665104170432&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2690), with no line terminators
Hash 27ef8ba0cca9abecde51e983cc8cf358
6615fa14de1eb48a883f1b328f90bfa32c35866e
cd5052a8c4dd9f528aa07c493032913bf03ef818cc62083424009aac6c783af3
GET /pagead/viewthroughconversion/730863180/?random=1665104170432&cv=9&fst=1665104170432&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1225
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 07-Oct-2022 01:11:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ecc594c8ad8a58175abca6f74592cad0
bc3eb5409877f214ca5d45c39d39754fd80997ae
4376e30946f541ed958cbbff449d18b6acb24608aa48fa078440cb99291dc7d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4410
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Last-Modified: Thu, 06 Oct 2022 23:42:40 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 5.9 kB IP 188.125.94.206:0
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JNrC8n89882MfpQDekJ+wpUnlahqWFp+6RjhKrVb/vPmNlkesi97otZR7EuaLXyRVY+DgWPDTFo=
x-amz-request-id: W9KMPQNMPS43RMM5
date: Fri, 07 Oct 2022 00:54:53 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 78
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1169954/tfa.js
151.101.85.44200 OK 18 kB URL HTTP/1.1 cdn.taboola.com/libtrc/unip/1169954/tfa.js
IP 151.101.85.44:0
File type ASCII text, with very long lines (58492)
Hash 2cbcaab9a7778395349c9a35efb10b8c
7d5361b7bc3ef64c9a384ef222b49319502f4ee1
58e090e2110f1227a3bc1048d10e0d5bb20b4fdcb4520db705888b47eb0d9574
GET /libtrc/unip/1169954/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17948
x-amz-id-2: 9IWrk30tja6YBEYVjX+fckfHDe5XG9o7im1PaMVNAGJqOUaPZG+JCjAawnqqjketwFpSGqCOiKI=
x-amz-request-id: 8J8DJGZZS3P98RQ6
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 02 Oct 2022 11:35:14 GMT
ETag: "264656e880744542b59feba1c3883164"
x-amz-version-id: p9e9ZCN63zkwVJf8aH6xnNu80ZaOsLbS
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 07 Oct 2022 00:56:10 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1628-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1665104171.525805,VS0,VE226
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 97
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 3jOfa7ow23S+DBwn8rITH9KZQCa7UcyvQsxMc6LSzziqd71o+moS8Jb47PnHtclmxeQaxudtT1moO4+GtI+5cg==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1904183273
date: Fri, 07 Oct 2022 00:56:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/730868448/?random=1665104170433&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2521485079&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730868448/?random=1665104170433&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2521485079&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730868448/?random=1665104170433&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2521485079&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-242821332-1&cid=1347254386.1665104170&jid=1921710849&gjid=1447174848&_gid=1984018490.1665104170&_u=YADAAEAAAAAAACAAI~&z=1688800921
173.194.73.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-242821332-1&cid=1347254386.1665104170&jid=1921710849&gjid=1447174848&_gid=1984018490.1665104170&_u=YADAAEAAAAAAACAAI~&z=1688800921
IP 173.194.73.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-242821332-1&cid=1347254386.1665104170&jid=1921710849&gjid=1447174848&_gid=1984018490.1665104170&_u=YADAAEAAAAAAACAAI~&z=1688800921 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.linkhell.ru.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1347254386.1665104170&jid=947386007&gjid=1126980854&_gid=1984018490.1665104170&_u=YADAAUABAAAAACAAI~&z=1494988928
173.194.73.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1347254386.1665104170&jid=947386007&gjid=1126980854&_gid=1984018490.1665104170&_u=YADAAUABAAAAACAAI~&z=1494988928
IP 173.194.73.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1347254386.1665104170&jid=947386007&gjid=1126980854&_gid=1984018490.1665104170&_u=YADAAUABAAAAACAAI~&z=1494988928 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.linkhell.ru.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ecc594c8ad8a58175abca6f74592cad0
bc3eb5409877f214ca5d45c39d39754fd80997ae
4376e30946f541ed958cbbff449d18b6acb24608aa48fa078440cb99291dc7d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4410
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Last-Modified: Thu, 06 Oct 2022 23:42:40 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.google.no/pagead/1p-user-list/730863180/?random=1665104170432&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=754958837&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730863180/?random=1665104170432&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=754958837&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730863180/?random=1665104170432&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=754958837&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/730905238/?random=1665104170427&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2073121065&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/730905238/?random=1665104170427&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2073121065&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/730905238/?random=1665104170427&cv=9&fst=1665100800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&tiba=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&async=1&fmt=3&is_vtc=1&random=2073121065&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.outbrain.com/unifiedPixel?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&optOut=false&bust=08516114648594997&referrer=
70.42.32.255200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&optOut=false&bust=08516114648594997&referrer=
IP 70.42.32.255:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&optOut=false&bust=08516114648594997&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:10 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: bdff81f2b5774747a34d59d573ac94f7
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822
70.42.32.255200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822
IP 70.42.32.255:0
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=009b74c6dfb3aac732f2d9802baf74a036,00e2c33b6090597c1b3848a826695da780,009e68a101d91dfd675236075e2ec2f813,0093a19d58aada85afcae5de59e637c3c9,001fc32f7fd6e519dd56b7fcd6d9a30898,00cf42d5f381b62164a341f707f244ef5d,00644fb217ea4c849ca0b3ae5a5fe297b8,00ba3cf63ffe9cf8da7a27ecfaae06b79d,006bcc9a533bdfc7092ceed316275b6f58,00f406a1dc562af646d50fa16c6a6ae8c6,00f21a9a03d08e7f87b307712af6b2af0c,0031db15219907534e351750b78d00b030,005cd90848c2dfb6aee5062c9780487965,00f82a1f85fb38d26a4ac9c4a1858c3b46,0037632de48bd03c0c873b2943d8abafba,00d71dc4ebfcd358f2a8246d43d6d89025,00e032f122902760cc2c735a56c8e4ca6c,0000733900887b215a8a97a5adfd06cc61,002d8ee844a0668c44800efd526a4675b9,00d1ca56b6fb20c05a00ad0a19bb7af2b1,00ddf160acaf9d1b6e9ba0fffa42769704,00d0bb4e21b5c077af977e10bc02c17cc1,0067d2db8ecfac8dc6af7f7ddf28edd4d0,0078dcf48d8f90fd28af36474aa2f21cfd,00ca3fa2c8d43354b2c2a95f11659eabb2,000f2bacb3edb2d9b8cc4d5c9913ebf13a,00ddf09f747003bc0a25ada9986985ceee,00c6d76220f3a39c45604aab8b87d715ca,0054096d2b331cabfc9b7d6b557e24fda2,008a4cd63d0cdb0081dab7453ed1d0536e,0000aed81541e62bc42b337c93f512d374,0049491f7c3bfbabbdd12fc083b2943ec8,00089e651353284dd9c75784a8744b176d,00efe76b38216f21fb23950db8e6453936,000cf99b4e788e59717e24288c42edd477,0068251217c6e7641eae8fd901728b90e6,00fc06acb0547012d3dced376d10ecb9e9,000cf57065881cdf8614ef327b6eb69fcd,000459d769afb98b324df8df7626bc5206,00561696d3d96c237458ab0f284ae33956,00be43c78de04b25bc3b110557a6f8e6de,00b07e7a264ba9b15780f9e17cbf13ceb2,000f1ce016f9f08177eb15bec7134d3822 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:56:10 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 1260ed1257e26937f1fb717a28086e2b
content-encoding: gzip
s.yimg.com/wi/config/10141746.json
188.125.94.206200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10141746.json
IP 188.125.94.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 30ed61bd14cb90ac9fc0b14709d892b8
3b8b6d3e092bedca36158e4144c384b9d97bb94e
c5d3efce28e1e4b610068a3bbced4986ea0281028cc3fef3458a4b9c241c1da3
GET /wi/config/10141746.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: J6uT5Og8EtDuCj9a74xA31KcHHyaNmvqf8tElLsQJr4eHluHjV58XV2Ieoc5tVMsVStN4WDuTVo=
x-amz-request-id: 3JF4PHQB2TMRGVDS
date: Fri, 07 Oct 2022 00:56:11 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 13 Jul 2022 12:57:15 GMT
x-amz-expiration: expiry-date="Fri, 18 Aug 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "30ed61bd14cb90ac9fc0b14709d892b8"
x-amz-server-side-encryption: AES256
x-amz-version-id: rtrgFCJeOY7XeDJM.FhR8ZSfB9_GHv5M
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-BSNGSVZ6P5>m=2oea50&_p=196704498&cid=1347254386.1665104170&ul=en-us&sr=1280x1024&_s=1&sid=1665104170&sct=1&seg=0&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&dt=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-BSNGSVZ6P5>m=2oea50&_p=196704498&cid=1347254386.1665104170&ul=en-us&sr=1280x1024&_s=1&sid=1665104170&sct=1&seg=0&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&dt=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BSNGSVZ6P5>m=2oea50&_p=196704498&cid=1347254386.1665104170&ul=en-us&sr=1280x1024&_s=1&sid=1665104170&sct=1&seg=0&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&dt=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.linkhell.ru.com
date: Fri, 07 Oct 2022 00:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
23.36.79.17200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04d27156b757c64b15f1c2069f0d8848
e52eb5cc4f1984715c017809e22eaa2aba2f1a29
4185843b3c53fa552a08efc0c1b6971f41057c62fdc50f7f0931a7d621bdb081
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202210070056101C7720A313045F08DD7B
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60a2a61edc672d2b1437a8f456e7c356f1e86ea99beab4e95c2f1b2e27d1d364775c891a72ed5ad6f66404f9b37152b5905c560945dbd68e1854ba33a5f94429a51d8b28f9b2423765eae6ef75f1f99819
content-encoding: gzip
x-origin-response-time: 14,23.32.16.72
x-akamai-request-id: 287687d0.15c09f67
expires: Fri, 07 Oct 2022 00:56:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 07 Oct 2022 00:56:10 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-32-16-72.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=148, origin; dur=14, inner; dur=4
x-parent-response-time: 161,23.36.79.13
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
23.36.79.17200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 939
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Cookie: _ttp=2FmjUfFe9ilYRGtpQmSwQXklo8M
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202210070056115E01B362CD64420A7360
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b534f281a7694e1dbd136fadd86c50a0e52ec722008076d0d664e4bcea3434f1c56d9f397f6206041224f2cafffeae9dc2463e6193731e6cceeb0df901ecb13419
x-origin-response-time: 32,23.218.220.145
x-akamai-request-id: 14d32533.15c0a005
expires: Fri, 07 Oct 2022 00:56:11 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 07 Oct 2022 00:56:11 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-cache-remote: TCP_MISS from a23-218-220-145.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=121, origin; dur=32, inner; dur=23
x-parent-response-time: 149,23.36.79.13
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.42/clarity.js
13.107.213.53200 OK 23 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.42/clarity.js
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54141)
Hash f016daac053b80575e11e20b6644142b
bc23277b8eae567b77c3dfc3f03b91fb054feda7
ee91529c076bf5e87a26b3c045e0b6e63326e6aa871dafea1c1509f73454123d
GET /eus2/s/0.6.42/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 23382
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d8e58fdaa9d4"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0Knk/YwAAAACJ9lw7wkfeR5K/O44EFe08U1ZHMjBFREdFMDYxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 07 Oct 2022 00:56:10 GMT
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2007%20Oct%202022%2000%3A56%3A10%20GMT&n=0&b=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&.yp=10141746&f=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2007%20Oct%202022%2000%3A56%3A10%20GMT&n=0&b=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&.yp=10141746&f=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2007%20Oct%202022%2000%3A56%3A10%20GMT&n=0&b=LiveGuard360%20-%20Your%20Home%20Security%20Guaranteed!&.yp=10141746&f=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 00:56:11 GMT
expires: Fri, 07 Oct 2022 00:56:11 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBCt5P2MCECWjR9WMzm4KfGOpEfi6W7EFEgEBAQHKQGNJYwAAAAAA_eMAAA&S=AQAAApN-j6ItObWxVi6i_I6X6_0; Expires=Sat, 7 Oct 2023 06:56:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=204263710978995&ev=PageView&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&rl=&if=false&ts=1665104171175&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665104171173.955347523&it=1665104170808&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=204263710978995&ev=PageView&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&rl=&if=false&ts=1665104171175&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665104171173.955347523&it=1665104170808&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=204263710978995&ev=PageView&dl=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56&rl=&if=false&ts=1665104171175&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665104171173.955347523&it=1665104170808&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Fri, 07 Oct 2022 00:56:11 GMT
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/config.js?sdkid=C1M10MK1A94IMCA16570&hostname=www.linkhell.ru.com
23.36.79.17200 OK 20 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=C1M10MK1A94IMCA16570&hostname=www.linkhell.ru.com
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
File type C source, Unicode text, UTF-8 text, with very long lines (58149)
Hash 9a1b6c50b6b9d45a27c0515a8e8698e6
a5009e4674609a0bfaafa7ad10a63950738b13b0
3d36a6671f1cc8d5315755cf9ef5908549f02d0dac581a881fca9cef62e2d2e4
GET /i18n/pixel/config.js?sdkid=C1M10MK1A94IMCA16570&hostname=www.linkhell.ru.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221007005610A33C4294F9594C09EC50
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b53ba752fe12aa615a70debe1b650aa1964b67dbe9a68b4883bfb10f89c5b670056cefdc9bc794730fa4509edff7d5d739a8100c5e131048a29ddd4d0733a3b04c
content-encoding: gzip
x-origin-response-time: 9,23.218.220.146
x-akamai-request-id: bd28137.15c09f6a
expires: Fri, 07 Oct 2022 00:56:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 07 Oct 2022 00:56:10 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
set-cookie: _ttp=2FmjUfFe9ilYRGtpQmSwQXklo8M; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-220-146.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=9, inner; dur=5
x-parent-response-time: 111,23.36.79.13
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&RedC=c.clarity.ms&MXFR=00DB2CD11FD664A532943EE71BD66A14
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&RedC=c.clarity.ms&MXFR=00DB2CD11FD664A532943EE71BD66A14
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&RedC=c.clarity.ms&MXFR=00DB2CD11FD664A532943EE71BD66A14 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.linkhell.ru.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&MUID=39E6E4C1AE736B951C1EF6F7AF866AD4
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=39E6E4C1AE736B951C1EF6F7AF866AD4; domain=c.bing.com; expires=Wed, 01-Nov-2023 00:56:11 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C77653632FB640698C7D195FDBCF29B6 Ref B: OSL30EDGE0510 Ref C: 2022-10-07T00:56:11Z
date: Fri, 07 Oct 2022 00:56:10 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&MUID=39E6E4C1AE736B951C1EF6F7AF866AD4
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&MUID=39E6E4C1AE736B951C1EF6F7AF866AD4
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=43EB31E94FAE4A61B01D6880B4FC0CD9&MUID=39E6E4C1AE736B951C1EF6F7AF866AD4 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.linkhell.ru.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 07-Oct-2022 01:06:11 GMT; path=/; SameSite=None; Secure;
date: Fri, 07 Oct 2022 00:56:11 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 873
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://www.linkhell.ru.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 00:56:11 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 67116
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://www.linkhell.ru.com
access-control-allow-credentials: true
date: Fri, 07 Oct 2022 00:56:11 GMT
X-Firefox-Spdy: h2
trc-events.taboola.com/1169954/log/3/unip?en=pre_d_eng_tb&tos=1563&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172347&vi=1665104170782&ri=83a8d6eaddf7398485773d011b37a3ce&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1169954/log/3/unip?en=pre_d_eng_tb&tos=1563&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172347&vi=1665104170782&ri=83a8d6eaddf7398485773d011b37a3ce&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1169954/log/3/unip?en=pre_d_eng_tb&tos=1563&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172347&vi=1665104170782&ri=83a8d6eaddf7398485773d011b37a3ce&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 00:56:12 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.linkhell.ru.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1307114/log/3/unip?en=pre_d_eng_tb&tos=1564&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172348&vi=1665104170782&ri=79175ac2f71302d60eb2ad4f75742051&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1307114/log/3/unip?en=pre_d_eng_tb&tos=1564&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172348&vi=1665104170782&ri=79175ac2f71302d60eb2ad4f75742051&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1307114/log/3/unip?en=pre_d_eng_tb&tos=1564&scd=11&ssd=1&est=1665104170783&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1665104172348&vi=1665104170782&ri=79175ac2f71302d60eb2ad4f75742051&ref=null&cv=20221002-6-RELEASE&item-url=http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.linkhell.ru.com
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 00:56:12 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: http://www.linkhell.ru.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
www.buyliveguard360.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
104.21.71.61200 OK 0 B URL HTTP/2 www.buyliveguard360.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 104.21.71.61:0
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.buyliveguard360.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 00:56:06 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 26 Sep 2022 13:45:34 GMT
etag: W/"48b9-5e994bdf1db1b"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TAHI%2FHkyrotQdvrtV1ZDlM5NXjdmEOTzKtKViC22dNDTEQP3wNUki88IXxHmbWVSJWmHiIQEPRQIx1BJE%2FofvvaQK%2FTCZkmlr2BGLhQvAYZSkup7gmbbv9XnwSb0mBS3mSLahW9oMlAdLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7562acce1c21fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cffomo.com/themes/altum/assets/css/pixel.css
104.21.40.211200 OK 0 B URL HTTP/2 cffomo.com/themes/altum/assets/css/pixel.css
IP 104.21.40.211:0
GET /themes/altum/assets/css/pixel.css HTTP/1.1
Host: cffomo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 00:56:07 GMT
content-type: text/css
last-modified: Wed, 05 Aug 2020 20:24:57 GMT
etag: W/"9091-5ac272a5a41ad-gzip"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WP%2BXh6LvXY2scBzH0RXWn%2FBUb96QhGiCvxsZGnK7bhPt0xIzvRvg6ZI85vNLYpJYdNGw8q4atkNfoLmpL%2Fu%2F%2BtBEidTmjQosTQ8Iw1soCQGc5aQ198YOA7pBEnu%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7562acd7aca6b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C1M10MK1A94IMCA16570&lib=ttq
23.36.79.17200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C1M10MK1A94IMCA16570&lib=ttq
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
GET /i18n/pixel/events.js?sdkid=C1M10MK1A94IMCA16570&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221007005610B5A1EFFFDC5FBE0A1FFE
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b534f281a7694e1dbd136fadd86c50a0e5b3a7b6097afa1f6cc3634414274c7faf9dba13b06d40da2ddc4d83593b182a505519271631618f9f8cefda502da1d4c1
content-encoding: gzip
x-origin-response-time: 12,23.218.220.145
x-akamai-request-id: 14d32cdf.15c09e8a
expires: Fri, 07 Oct 2022 00:56:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 07 Oct 2022 00:56:10 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-218-220-145.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=124, origin; dur=12, inner; dur=3
x-parent-response-time: 126,23.36.79.13
X-Firefox-Spdy: h2
www.clarity.ms/tag/dtotcfyc61
13.107.213.53200 OK 0 B URL HTTP/2 www.clarity.ms/tag/dtotcfyc61
IP 13.107.213.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/dtotcfyc61 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=abb220c41e8d478abd958067e03943c1.20221007.20231007; expires=Sat, 07 Oct 2023 00:56:10 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:593e4080-f032-4d00-a652-e17f01252a9d
x-cache: CONFIG_NOCACHE
x-azure-ref: 0Knk/YwAAAAA7N3vE78Q2TKik8uLOoCpqU1ZHMjBFREdFMDYxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 07 Oct 2022 00:56:10 GMT
X-Firefox-Spdy: h2
trc.taboola.com/1169954/trc/3/json?tim=1665104170795&data=%7B%22id%22%3A946%2C%22ii%22%3A%22%2Fv1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1665104170782%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.buyliveguard360.com%2Fv1%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-network-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1665104170795%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A11%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.85.44200 OK 0 B URL HTTP/2 trc.taboola.com/1169954/trc/3/json?tim=1665104170795&data=%7B%22id%22%3A946%2C%22ii%22%3A%22%2Fv1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1665104170782%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.buyliveguard360.com%2Fv1%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-network-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1665104170795%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A11%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.85.44:0
GET /1169954/trc/3/json?tim=1665104170795&data=%7B%22id%22%3A946%2C%22ii%22%3A%22%2Fv1%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1665104170782%2C%22cv%22%3A%2220221002-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.buyliveguard360.com%2Fv1%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dcodefunnels-network-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1665104170795%2C%22ref%22%3Anull%2C%22item-url%22%3A%22http%3A%2F%2Fwww.linkhell.ru.com%2Fclicks%2FLiveGuard360.php%3Fsid%3D995773%26h%3DESO9zuBQmjsEikqieuhNXbzT_NOf5UyN5G58jMAhMhk%2FEf_QzSZ-9d3kVZOZgp1Fkk5YDG6yDD4KoIgA9CNcWkP8K37CT6chq_c1Vh9-Vaf0sRHA8iNpLlRTLSzwcrwK4L1aCCpnLBWT7uj8a60OMxmDRJOVLTWhTCHkAL1zqE56%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A11%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.linkhell.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 07 Oct 2022 00:56:11 GMT
via: 1.1 varnish
x-served-by: cache-bma1653-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1665104171.026446,VS0,VE93
vary: Accept-Encoding
x-vcl-time-ms: 93
X-Firefox-Spdy: h2