Report - dadata.ru/?ref=136886

Report Overview

Submitted URL
dadata.ru/?ref=136886
IP
185.129.103.75
ASN
#57724 Ddos-guard Ltd
Submitted
2023-01-29 06:25:27
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
vk.com	2243	2012-05-21T17:01:19Z	2023-03-13T05:16:25Z	357 B	447 B	87.240.132.67
stats.g.doubleclick.net	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	593 B	588 B	173.194.221.157
www.google.com	7	2015-05-10T13:11:19Z	2023-03-13T06:40:43Z	509 B	578 B	216.58.207.228
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
ocsp2.globalsign.com	1544	2012-05-23T20:10:04Z	2023-03-13T05:14:17Z	367 B	1.9 kB	104.18.21.226
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-13T05:09:19Z	720 B	3.3 kB	104.18.21.226
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	2.4 kB	4.9 kB	216.58.211.3
www.google-analytics.com	40	2012-10-03T03:04:21Z	2023-03-13T07:36:03Z	366 B	21 kB	142.250.74.46
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	44.226.190.180
www.google.no	25607	2016-04-05T21:50:59Z	2023-03-13T06:26:15Z	508 B	578 B	142.250.74.163
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	52 kB	34.120.237.76
dadata.ru	205701	2013-12-24T16:42:56Z	2023-03-13T05:30:04Z	14 kB	913 kB	185.129.103.75
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.7 kB	7.1 kB	23.36.77.32
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
mc.yandex.ru	2672	2012-05-21T11:38:30Z	2023-03-13T08:16:45Z	9.6 kB	84 kB	87.250.250.119

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-29 06:25:24	medium	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (vk .com)
2023-01-29 06:25:24	medium	Client IP	87.240.132.67	ET INFO Observed URL Shortening Service Domain (vk .com in TLS SNI)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	vk.com/js/api/openapi.js?169	106 kB	2023-03-08	2023-12-03
Pretty URL vk.com/js/api/openapi.js?169 IP 87.240.132.67 ASN #47541 VKontakte Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:36:43 Last Seen2023-12-03 16:12:46 Times Seen1261 Hash 6aba827f31cd3750ef56b691f9b5a139 e541e9196dcb954a26bfc211fab774f4cf12365c 2f7760ee2b81f4659c6f34ada0f7a7d263c2ce6035c2b5f4b082fac60802897e Loading...

	dadata.ru/static/CACHE/23.1.3/js/vendor.js	304 kB	2023-03-09	2023-04-17
Pretty URL dadata.ru/static/CACHE/23.1.3/js/vendor.js IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:05:14 Last Seen2023-04-17 20:45:53 Times Seen44 Hash 35edefe879b07070754ba9f7932fa502 a7bc67059722282ec46da5484c16ecbf0865a6ed 90a7c08a5d2ab1e3e6f1fc2df805ceadf151f53cf0e327d535b3c988c95f1e36 Loading...

	dadata.ru/?ref=136886	1.0 kB	2023-03-13	2023-03-13
Pretty URL dadata.ru/?ref=136886 IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 10:49:02 Last Seen2023-03-13 10:49:02 Times Seen1 Hash 5f2d6f1be240cb275cd4e83ed52c6aa1 251e8e4658c6bf2c197998ba6901b9ae5c2c7cdb 855edb93f62e5f6d77651e433da11b12e9dde7a3d87e2ee7968ffd3880f7828f Loading...

	dadata.ru/?ref=136886	694 B	2023-03-09	2023-04-17
Pretty URL dadata.ru/?ref=136886 IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:05:13 Last Seen2023-04-17 20:45:53 Times Seen55 Hash c5db5b8862cd7b4815f2176ad301a307 a1895af4a6e3e0503c136c199524defe9c7c7b87 78228100cef10864ed28ad9c5a63d7278b1f229049a048edc7c4e9eba0737161 Loading...

	dadata.ru/?ref=136886	456 B	2023-03-09	2023-04-17
Pretty URL dadata.ru/?ref=136886 IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:05:13 Last Seen2023-04-17 20:45:53 Times Seen54 Hash b8c0258965f2564fe566e77f9ae54ad3 300ae43af09298cf94640d49e5b3d211cb428cf1 86e44901f8630dac26e12760cf2dd12aa4a334c7814d457755befda86a7e62b9 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-12	2024-04-15
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.46 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 21:46:21 Last Seen2024-04-15 18:54:35 Times Seen35101 Hash 54e51056211dda674100cc5b323a58ad 26dc5034cb6c7f3bbe061edd37c7fc6006cb835b 5971b095cff574a66d35ada016d4c077c86e2dea62e9c0f14cf7c94b258619de Loading...

	unknown	0 B	2023-03-07	2024-05-10
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-10 18:13:30 Times Seen37515477 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	dadata.ru/?ref=136886	387 B	2023-03-09	2023-04-17
Pretty URL dadata.ru/?ref=136886 IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:05:13 Last Seen2023-04-17 20:45:53 Times Seen53 Hash 68e302fec3887a25f646aab59e4e15f6 6ccf8a62ad4f7a4be5a2e50dd951a0d8eca64dd6 b4e026ab93cde4fd6ab7fbc40d0005c730bf4a8d9f74b08572b4b4b444b724b3 Loading...

	dadata.ru/static/CACHE/23.1.3/js/pages/home.js	4.3 kB	2023-03-13	2023-03-13
Pretty URL dadata.ru/static/CACHE/23.1.3/js/pages/home.js IP 185.129.103.75 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 09:03:37 Last Seen2023-03-13 18:13:47 Times Seen1 Hash 1169b49d83aea7012c22bc73f3ad274e 1edcabe8fe4827fd6b9b7d2265db1ee5bb28bac2 034e7a36c633bf18112b2c230b21952af85324f0e02499dcf133e161cff968d0 Loading...

HTTP Transactions (68)

	URL	IP	Response	Size
	dadata.ru/?ref=136886	185.129.103.75	301 Moved Permanently	169 B
URL HTTP/1.1 dadata.ru/?ref=136886 IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 169 B (169 bytes) Hash 3f5eaacfded88f7275153d7bfa99de90 bbc09e4c048e8468e5f1b4866e1c50be5717d60d fe4fe74a0e4d27d5afc5275c4c5d7ade61746f3b4030aa68dadd36b3495c0eeb HTTP Headers `GET /?ref=136886 HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` `HTTP/1.1 301 Moved Permanently Server: ddos-guard Connection: keep-alive Keep-Alive: timeout=60 Set-Cookie: __ddg1_=llOAaUN65ExFVrrbA3MK; Domain=.dadata.ru; HttpOnly; Path=/; Expires=Mon, 29-Jan-2024 06:25:16 GMT Date: Sun, 29 Jan 2023 06:25:16 GMT Content-Type: text/html Content-Length: 169 Location: https://dadata.ru/?ref=136886`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a2104f935c638b4767ca5ae0d738ef23 85c6af15af749be0ceeae6de17c36925b750f166 5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9571 Expires: Sun, 29 Jan 2023 09:04:48 GMT Date: Sun, 29 Jan 2023 06:25:17 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 3eb88dea4fe00db1182370e72683c3ab ca520abf1e91bfd2aef40c6a1270a911071e8922 d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7" Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11665 Expires: Sun, 29 Jan 2023 09:39:42 GMT Date: Sun, 29 Jan 2023 06:25:17 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash dcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 29 Jan 2023 05:35:34 GMT content-type: application/json age: 2983 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 302c7548412192add063ad6c8b99cf3b e5d178931a27db036ce8daae302594d3ff7050b8 fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D" Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4656 Expires: Sun, 29 Jan 2023 07:42:53 GMT Date: Sun, 29 Jan 2023 06:25:17 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: Efl1No6eahjjhB8Ith33fLuPGw9KsveXE3p/rImpNINXzqZfSu43qcmp2wVpyMc5F/gFGzQGYCI= x-amz-request-id: VR2BGYW0477HVQA0 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 29 Jan 2023 05:50:12 GMT age: 2105 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Sun, 29 Jan 2023 06:25:17 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.globalsign.com/gsgccr3dvtlsca2020	104.18.21.226	200 OK	1.4 kB
URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020 IP 104.18.21.226:0 ASN #13335 CLOUDFLARENET File type data Size 1.4 kB (1414 bytes) Hash e005fa5fba5505edb0246d04c7b83770 5a6c6825c59b2876269f3be89cde40519fcc1410 4e930c137f5e94ddb55e115958d8ef49d9b6c49727e7b50f2295945ba33033a8 HTTP Headers `POST /gsgccr3dvtlsca2020 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 29 Jan 2023 06:25:17 GMT Content-Type: application/ocsp-response Content-Length: 1414 Connection: keep-alive Expires: Thu, 02 Feb 2023 03:23:59 GMT ETag: "5a6c6825c59b2876269f3be89cde40519fcc1410" Last-Modified: Sun, 29 Jan 2023 03:24:00 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 790fe3c328b1b529-OSL`

	dadata.ru/static/i/dadata-logo.svg	185.129.103.75	200 OK	2.7 kB
URL HTTP/2 dadata.ru/static/i/dadata-logo.svg IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2713), with no line terminators Size 2.7 kB (2713 bytes) Hash 7b1d9d8ab239517a297f01aed0ed1c37 86137c2e6bed4a48854b9dca8d5744afdc632fc9 1b291d825a30f02b21a856f9d1cec028e3298e11c6b93d8a284c260bf14b3877 HTTP Headers GET /static/i/dadata-logo.svg HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/svg+xml content-length: 2713 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-a99" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/sk_ru.png	185.129.103.75	200 OK	6.9 kB
URL HTTP/2 dadata.ru/static/i/sk_ru.png IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 175 x 125, 8-bit/color RGBA, non-interlaced\012- data Size 6.9 kB (6928 bytes) Hash bce3fa3c3b05b3203452ad42a253d7ee 2097e1b4b7145a49df1e2a89116447811af78d6e f126f556505be7e6f27e8f4e3fc4c3e6e50364dabceb73191aaa3059422dc769 HTTP Headers GET /static/i/sk_ru.png HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/png content-length: 6928 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-1b10" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/spinner.gif	185.129.103.75	200 OK	9.7 kB
URL HTTP/2 dadata.ru/static/i/spinner.gif IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type GIF image data, version 89a, 100 x 100\012- data Size 9.7 kB (9685 bytes) Hash daf7f7ddf606cd3b78d091d27243db04 2ac64b0b8c0c8c8caf1141b71150158af3678992 3f642d342aeb7d4491d4ff7152a8e3c3ee6677ec4f2eac0c4c541c99864363f5 HTTP Headers GET /static/i/spinner.gif HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/gif content-length: 9685 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-25d5" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/video-cover.png	185.129.103.75	200 OK	78 kB
URL HTTP/2 dadata.ru/static/i/video-cover.png IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced\012- data Size 78 kB (78142 bytes) Hash 63de161364f35c3e7993b6b4232cf9c9 0775dd679042588b6891acdb431a3143f0a3d19c 0a02944939431ad028715ec19528c3fb41290abdf656b40069aa2b5ee0163ef1 HTTP Headers GET /static/i/video-cover.png HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/png content-length: 78142 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-1313e" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/CACHE/23.1.3/js/common.js	185.129.103.75	200 OK	14 kB
URL HTTP/2 dadata.ru/static/CACHE/23.1.3/js/common.js IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type data Size 14 kB (13614 bytes) Hash e020ca44bbea6928c83ba0bdc3efedc5 4f292c3ca783ea8e053dd7667fc9423d94e908bd 7bc2c3a3d71117cd16f336380ff1ac1506a25a5b2665275a82697a997816faaa HTTP Headers GET /static/CACHE/23.1.3/js/common.js HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 25 Jan 2023 07:33:38 GMT vary: Accept-Encoding etag: W/"63d0db52-8a78" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/suggestions/suggestions-features.png?238ad95a27ff	185.129.103.75	200 OK	11 kB
URL HTTP/2 dadata.ru/static/i/suggestions/suggestions-features.png?238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 904 x 123, 8-bit/color RGB, non-interlaced\012- data Size 11 kB (10963 bytes) Hash e748055a9068d6ae2cb5708e4e4f9d6a c5abbad618ddb03ed16b39ae075b60cd771d460d 3e66d2027becf8649440dbd275bdbe01103d2ad04239af4219b098ed6dc40ae6 HTTP Headers GET /static/i/suggestions/suggestions-features.png?238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/png content-length: 10963 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-2ad3" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/CACHE/23.1.3/js/vendor.js	185.129.103.75	200 OK	123 kB
URL HTTP/2 dadata.ru/static/CACHE/23.1.3/js/vendor.js IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type data Size 123 kB (122874 bytes) Hash 7fa0a56273e1edf9e75f229e27586b86 4dbe3cc4cfb3e8e2d16d75bc21c8fbda97444404 bbc422bdaf6a8ef2b300e487e37843bb2256a5defdf1e6f24cfd8093f10f17d9 HTTP Headers GET /static/CACHE/23.1.3/js/vendor.js HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 25 Jan 2023 07:33:37 GMT vary: Accept-Encoding etag: W/"63d0db51-4a2fe" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/fontawesome-webfont.woff2?v=4.7.0&238ad95a27ff	185.129.103.75	200 OK	77 kB
URL HTTP/2 dadata.ru/static/fonts/fontawesome-webfont.woff2?v=4.7.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Size 77 kB (77160 bytes) Hash af7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe HTTP Headers GET /static/fonts/fontawesome-webfont.woff2?v=4.7.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 77160 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-12d68" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/Roboto-Medium.woff2?v=1.1.0&238ad95a27ff	185.129.103.75	200 OK	64 kB
URL HTTP/2 dadata.ru/static/fonts/Roboto-Medium.woff2?v=1.1.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 63788, version 2.0\012- data Size 64 kB (63788 bytes) Hash 77c6e1606d99099a72efb51e2f5f679f 8ba4228923bd5e5c24035f1261ed20b6a7d8fc35 5efafd26d85f9d6c3340aa7b81aff0a4d9fe27d8f9ec9885565afb9fa2097d91 HTTP Headers GET /static/fonts/Roboto-Medium.woff2?v=1.1.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 63788 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-f92c" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/Roboto-Regular.woff2?v=1.1.0&238ad95a27ff	185.129.103.75	200 OK	63 kB
URL HTTP/2 dadata.ru/static/fonts/Roboto-Regular.woff2?v=1.1.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 63412, version 2.0\012- data Size 63 kB (63412 bytes) Hash bde1ca6a5d7cefc8108c75fdaad29ed6 1e042848a06b43a9369952c636bca41f95cfc316 cc7b26ac53700f78f8a452be6d14f14943e88dceb14edf64cddceba6e66f3f5e HTTP Headers GET /static/fonts/Roboto-Regular.woff2?v=1.1.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 63412 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-f7b4" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/index/header.png?484111079d2b	185.129.103.75	200 OK	161 kB
URL HTTP/2 dadata.ru/static/i/index/header.png?484111079d2b IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 552 x 455, 8-bit/color RGBA, non-interlaced\012- data Size 161 kB (160755 bytes) Hash c3d26b1dd91337b29ac30fe5776b7e46 2587ee9a2073bcd858171feda56646baa2c68cff 35e2e4adfcc02274eacae474722ca87f5ee3442f6d4c8e352548843b79138359 HTTP Headers GET /static/i/index/header.png?484111079d2b HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/png content-length: 160755 last-modified: Fri, 27 Jan 2023 07:41:26 GMT etag: "63d38026-273f3" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 16a7b6a7128312e2f985d30df18c4487 6017bff79ffb525d9c7f9f32b999b74b5dc69602 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16" Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10478 Expires: Sun, 29 Jan 2023 09:19:55 GMT Date: Sun, 29 Jan 2023 06:25:17 GMT Connection: keep-alive`

	dadata.ru/static/fonts/Roboto-Italic.woff2?v=1.1.0&238ad95a27ff	185.129.103.75	200 OK	67 kB
URL HTTP/2 dadata.ru/static/fonts/Roboto-Italic.woff2?v=1.1.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 66856, version 2.0\012- data Size 67 kB (66856 bytes) Hash 7b1a8d394d529defa8bcfe384ff52bd4 2a4161831b41f03d37e745df601cf3bf2229ac20 e46d0f770fe49fddc1572dd48866a8bcb9dc819796b46802f98b600580b68eb0 HTTP Headers GET /static/fonts/Roboto-Italic.woff2?v=1.1.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 66856 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-10528" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/Roboto-LightItalic.woff2?v=1.1.0&238ad95a27ff	185.129.103.75	200 OK	69 kB
URL HTTP/2 dadata.ru/static/fonts/Roboto-LightItalic.woff2?v=1.1.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 68688, version 2.0\012- data Size 69 kB (68688 bytes) Hash 338ea68905348fc921355cca0bf2cdac ba7fd7bfd75621000acc9bafa86aec8addd30230 69ccb8f8ce75298efce2123c67fe292a9545ce4008afb12fd1005ad819391b1f HTTP Headers GET /static/fonts/Roboto-LightItalic.woff2?v=1.1.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 68688 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-10c50" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/Play-Regular.woff?2ec1a4d0e4e7	185.129.103.75	200 OK	91 kB
URL HTTP/2 dadata.ru/static/fonts/Play-Regular.woff?2ec1a4d0e4e7 IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format, TrueType, length 90804, version 2.101\012- data Size 91 kB (90804 bytes) Hash 88263b1eb04d57b62b3289c477dd7746 dbc87f17e0112fe1900edb628ad4477faddf82f7 2e3e020cadcc22601f472f24d6f5f1d16239830d33e5ae7ce67650d8c1f419f9 HTTP Headers GET /static/fonts/Play-Regular.woff?2ec1a4d0e4e7 HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff content-length: 90804 last-modified: Fri, 04 Nov 2022 11:14:09 GMT etag: "6364f401-162b4" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/fonts/Roboto-Bold.woff2?v=1.1.0&238ad95a27ff	185.129.103.75	200 OK	63 kB
URL HTTP/2 dadata.ru/static/fonts/Roboto-Bold.woff2?v=1.1.0&238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Web Open Font Format (Version 2), TrueType, length 63320, version 2.0\012- data Size 63 kB (63320 bytes) Hash 7a7f7b407423d5fb3c16b26231e11619 cf974b72c694b8ceb310d1aef6f36b2711705d99 761c95dd192a81733d024d9f644d9b531c358f0f0ea83e9fd6211b6bd424873d HTTP Headers GET /static/fonts/Roboto-Bold.woff2?v=1.1.0&238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: font/woff2 content-length: 63320 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-f758" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 29 Jan 2023 05:49:04 GMT age: 2174 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	dadata.ru/static/apple-touch-icon.png	185.129.103.75	200 OK	1.9 kB
URL HTTP/2 dadata.ru/static/apple-touch-icon.png IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data Size 1.9 kB (1937 bytes) Hash 7d244ed16e8aed688f76049cc2dbad9d 34bb501fb694bbc01fbe81f7e5fc08db9af2bad9 f179363d1d968e03241ad1bf569422a46a55ed048770c0ce7effd8fe347b3c48 HTTP Headers GET /static/apple-touch-icon.png HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:18 GMT content-type: image/png content-length: 1937 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-791" expires: Sun, 05 Feb 2023 06:25:18 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/favicon-16x16.png	185.129.103.75	200 OK	700 B
URL HTTP/2 dadata.ru/static/favicon-16x16.png IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Size 700 B (700 bytes) Hash 34df80a29a040fc90e1b28037fe191f3 c81c78b1a15a822ad681fedae5e65f1a6d30fc5e b4e568782d007a1ff318173380c031f536bd3b953edc6395a36b745f3b6712da HTTP Headers GET /static/favicon-16x16.png HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:18 GMT content-type: image/png content-length: 700 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-2bc" expires: Sun, 05 Feb 2023 06:25:18 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	ocsp.globalsign.com/gseccovsslca2018	104.18.21.226	200 OK	940 B
URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018 IP 104.18.21.226:0 ASN #13335 CLOUDFLARENET File type data Size 940 B (940 bytes) Hash 0c6c29d17e17831986067b06c8b4a7b4 3d3c11da36c756205370d03ba6d6a643215b8416 86e8f2a613d75aac7f8228629267a185ee32e88c1d32bd3bf0d0007608287cd8 HTTP Headers `POST /gseccovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 29 Jan 2023 06:25:18 GMT Content-Type: application/ocsp-response Content-Length: 940 Connection: keep-alive Expires: Thu, 02 Feb 2023 04:12:34 GMT ETag: "3d3c11da36c756205370d03ba6d6a643215b8416" Last-Modified: Sun, 29 Jan 2023 04:12:35 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1487 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 790fe3c86b17b529-OSL`

	ocsp2.globalsign.com/gsorganizationvalsha2g2	104.18.21.226	200 OK	1.5 kB
URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2 IP 104.18.21.226:0 ASN #13335 CLOUDFLARENET File type data Size 1.5 kB (1459 bytes) Hash 4541f4e3f17f3be8e736d517ab65fee3 24cc213291ac945a2d5521f7121bbacc662c2343 11638b50843571049ed0ba4f900ca235026f9d32728d82d7bc3d6e98aa9e8bda HTTP Headers `POST /gsorganizationvalsha2g2 HTTP/1.1 Host: ocsp2.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 29 Jan 2023 06:25:18 GMT Content-Type: application/ocsp-response Content-Length: 1459 Connection: keep-alive Expires: Thu, 02 Feb 2023 05:49:25 GMT ETag: "24cc213291ac945a2d5521f7121bbacc662c2343" Last-Modified: Sun, 29 Jan 2023 05:49:26 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 744 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 790fe3c89b3fb4eb-OSL`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash bab8a4c1e6bb2e6c9cc00222eef1235d 1a5dd108e9f9aaf33bc048b0097a9f510d295cad fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.google-analytics.com/analytics.js	142.250.74.46	200 OK	20 kB
URL HTTP/2 www.google-analytics.com/analytics.js IP 142.250.74.46:0 ASN #15169 GOOGLE File type ASCII text, with very long lines (1490) Size 20 kB (20085 bytes) Hash ca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db HTTP Headers `GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20085 date: Sun, 29 Jan 2023 05:45:20 GMT expires: Sun, 29 Jan 2023 07:45:20 GMT cache-control: public, max-age=7200 age: 2398 last-modified: Tue, 10 Jan 2023 21:29:14 GMT content-type: text/javascript alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	push.services.mozilla.com/	44.226.190.180	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 44.226.190.180:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: V5cDdZBC0yx/JtnGV5SWAA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 3/8a9UcXPxfWFpJISk3zKX2WmdU=`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash bab8a4c1e6bb2e6c9cc00222eef1235d 1a5dd108e9f9aaf33bc048b0097a9f510d295cad fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	mc.yandex.ru/metrika/tag.js	87.250.250.119	200 OK	74 kB
URL HTTP/2 mc.yandex.ru/metrika/tag.js IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type Unicode text, UTF-8 (with BOM) text, with very long lines (659) Size 74 kB (73769 bytes) Hash a236c7014c1f1a1e52d356f59e5d665a b66c638eb2346287364c37725819bbab1f409d66 ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2 HTTP Headers `GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-length: 73769 date: Sun, 29 Jan 2023 06:25:18 GMT access-control-allow-origin: * etag: "63c93a4b-12029" expires: Sun, 29 Jan 2023 07:25:18 GMT last-modified: Thu, 19 Jan 2023 15:40:43 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: max-age=3600 content-type: application/javascript content-encoding: br strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	dadata.ru/blog/wp-json/wp/v2/posts?after=2023-01-22T06%3A25%3A24.072Z	185.129.103.75	200 OK	26 B
URL HTTP/2 dadata.ru/blog/wp-json/wp/v2/posts?after=2023-01-22T06%3A25%3A24.072Z IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type data Size 26 B (26 bytes) Hash 7c37fac9c7515a143b789a1f6aedac3b 44cb12a20e1a4f6076330b58dbf2b231b77feca8 69fdf73e4f7a262e5cd872474d4f3e2259704e202db1881aa9cf1b75f597f887 HTTP Headers GET /blog/wp-json/wp/v2/posts?after=2023-01-22T06%3A25%3A24.072Z HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://dadata.ru/?ref=136886 Connection: keep-alive Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:18 GMT content-type: application/json; charset=UTF-8 x-powered-by: PHP/7.2.24 x-robots-tag: noindex link: <https://dadata.ru/blog/wp-json/>; rel="https://api.w.org/" access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type x-wp-total: 0 x-wp-totalpages: 0 allow: GET vary: Accept-Encoding, Origin x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block; content-encoding: gzip X-Firefox-Spdy: h2

	vk.com/js/api/openapi.js?169	87.240.132.67	200 OK	65 B
URL HTTP/2 vk.com/js/api/openapi.js?169 IP 87.240.132.67:0 ASN #47541 VKontakte Ltd File type data Size 65 B (65 bytes) Hash ec4341fe3a8b2c4880fbfe0ef9cde34f a0947414eb426b2939ca1a05fc870763f6bfc63f 01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463 HTTP Headers `GET /js/api/openapi.js?169 HTTP/1.1 Host: vk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: kittenx date: Sun, 29 Jan 2023 06:25:18 GMT content-type: application/x-javascript content-length: 23318 last-modified: Fri, 02 Dec 2022 07:14:40 GMT etag: "6389a5e0-5b16" content-encoding: br expires: Thu, 02 Feb 2023 06:25:18 GMT cache-control: max-age=345600 x-frontend: front220007 access-control-expose-headers: X-Frontend X-Firefox-Spdy: h2`

	mc.yandex.ru/metrika/advert.gif	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/metrika/advert.gif IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers `GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:18 GMT access-control-allow-origin: * etag: "63c93a4b-2b" expires: Sun, 29 Jan 2023 07:25:18 GMT accept-ranges: bytes last-modified: Thu, 19 Jan 2023 15:40:43 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: max-age=3600 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	mc.yandex.ru/watch/22515688/1?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29	87.250.250.119	200 OK	452 B
URL HTTP/2 mc.yandex.ru/watch/22515688/1?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type JSON data\012- , ASCII text, with very long lines (452), with no line terminators Size 452 B (452 bytes) Hash 072e05d448365e3d4b85ecfc91fee851 5606c9899233eac8ee1c88a70c63762d3e71bbba 005b6c0a5093f18527779c4822ac912e25c8fc7297f4f43d110e1d3de74d7f7b HTTP Headers GET /watch/22515688/1?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://dadata.ru Referer: https://dadata.ru/ Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-length: 452 date: Sun, 29 Jan 2023 06:25:18 GMT x-content-type-options: nosniff access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:18 GMT last-modified: Sun, 29-Jan-2023 06:25:18 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ed8a8c45dceab588456b222e04775919 0242859712655caa3c3e9b936878c7c7874b7b5a 669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&gjid=763804600&_gid=1580173460.1674973524&_u=IEBAAAAAAAAAACAAI~&z=1028289260	173.194.221.157	200 OK	4 B
URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&gjid=763804600&_gid=1580173460.1674973524&_u=IEBAAAAAAAAAACAAI~&z=1028289260 IP 173.194.221.157:0 ASN #15169 GOOGLE File type ASCII text, with no line terminators Size 4 B (4 bytes) Hash 48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a HTTP Headers POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&gjid=763804600&_gid=1580173460.1674973524&_u=IEBAAAAAAAAAACAAI~&z=1028289260 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 0 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK access-control-allow-origin: https://dadata.ru strict-transport-security: max-age=10886400; includeSubDomains; preload date: Sun, 29 Jan 2023 06:25:18 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate last-modified: Sun, 17 May 1998 03:00:00 GMT access-control-allow-credentials: true x-content-type-options: nosniff content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 4 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	mc.yandex.ru/watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A69014250%3Arqn%3A2%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1717%2C1717%2C3%2C%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A69014250%3Arqn%3A2%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1717%2C1717%2C3%2C%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A69014250%3Arqn%3A2%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1717%2C1717%2C3%2C%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 43 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:18 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:18 GMT last-modified: Sun, 29-Jan-2023 06:25:18 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	mc.yandex.ru/watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A1072293041%3Arqn%3A3%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(3)aw(1)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A1072293041%3Arqn%3A3%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(3)aw(1)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /watch/22515688/1?page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&hittoken=1674973518_520b4862777357fbf5f631ed5bed199553ac23e793a3c1169933a14c54959d09&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A1072293041%3Arqn%3A3%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674973522928%3Aadb%3A2%3Ast%3A1674973525&t=gdpr(14)mc(p-2-ci-1-up-1)clc(0-0-0)rqnt(3)aw(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 79 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:18 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:18 GMT last-modified: Sun, 29-Jan-2023 06:25:18 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ed8a8c45dceab588456b222e04775919 0242859712655caa3c3e9b936878c7c7874b7b5a 669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash b7da7d1d3e5880d5d4e313ac7fcf2a83 60a1e887ccb7c7cdae0035c65ef7df9908547fef af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	mc.yandex.ru/watch/22515688?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)	87.250.250.119	302 Found	471 B
URL HTTP/2 mc.yandex.ru/watch/22515688?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type data Size 471 B (471 bytes) Hash 86352d15c37831cf9bf1e41325029224 ac8b28bcc1e6dd026e1f62d1ef8b9f80a42eee21 154f5f5e116df41f5d3bd414c671138b2afc198071529a0f3573109277566cd8 HTTP Headers GET /watch/22515688?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 302 Found location: /watch/22515688/1?wmode=7&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1056%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1340204687616%3Ahid%3A472811441%3Az%3A0%3Ai%3A20230129062524%3Aet%3A1674973525%3Ac%3A1%3Arn%3A182100711%3Arqn%3A1%3Au%3A1674973525113516992%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C284%2C46%2C0%2C389%2C0%2C%2C417%2C6%2C%2C%2C%2C1157%3Aco%3A0%3Ans%3A1674973522928%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674973525%3At%3ADaData%20%E2%80%94%20%D0%BD%D0%B0%D0%B2%D0%BE%D0%B4%D0%B8%D0%BC%20%D0%BF%D0%BE%D1%80%D1%8F%D0%B4%D0%BE%D0%BA%20%D0%B2%20%D0%B4%D0%B0%D0%BD%D0%BD%D1%8B%D1%85&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 date: Sun, 29 Jan 2023 06:25:18 GMT access-control-allow-origin: https://dadata.ru set-cookie: yabs-sid=1723086571674973518; Path=/; SameSite=None; Secure i=lxYmuTVpuaeUn289cZdg1d1ET9zDh0tGBJ+Jf8TbrjyV6AyMUqGYwAn98M+jLvCOpDsjK/ISkOmVkqkEVL8Pmydr9UY=; Expires=Wed, 26-Jan-2033 06:25:17 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=5299400211674973518; Expires=Mon, 29-Jan-2024 06:25:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=5299400211674973518; Expires=Mon, 29-Jan-2024 06:25:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1706509518.yc.1674973518#1706509518.yrts.1674973518#1706509518.yrtsi.1674973518; Expires=Mon, 29-Jan-2024 06:25:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:18 GMT last-modified: Sun, 29-Jan-2023 06:25:18 GMT accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633	142.250.74.163	200 OK	42 B
URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633 IP 142.250.74.163:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Sun, 29 Jan 2023 06:25:18 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633	216.58.207.228	200 OK	42 B
URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633 IP 216.58.207.228:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-39399831-1&cid=409101159.1674973524&jid=1449151870&_u=IEBAAAAAAAAAACAAI~&z=985416633 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Sun, 29 Jan 2023 06:25:18 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash b7da7d1d3e5880d5d4e313ac7fcf2a83 60a1e887ccb7c7cdae0035c65ef7df9908547fef af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ef589be52a3e55b643978f17949a73da 74545de6f144282252ff92c751f97cc835c80341 7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 29 Jan 2023 06:25:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2815 Expires: Sun, 29 Jan 2023 07:12:14 GMT Date: Sun, 29 Jan 2023 06:25:19 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2815 Expires: Sun, 29 Jan 2023 07:12:14 GMT Date: Sun, 29 Jan 2023 06:25:19 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2815 Expires: Sun, 29 Jan 2023 07:12:14 GMT Date: Sun, 29 Jan 2023 06:25:19 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2815 Expires: Sun, 29 Jan 2023 07:12:14 GMT Date: Sun, 29 Jan 2023 06:25:19 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg	34.120.237.76	200 OK	6.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.2 kB (6158 bytes) Hash 2cbbc57c4e469baec1bda006407877cc e988f007b1f9ec2327e7817f38cf56202096aeae 5237a8a8a7aa1fe59548582abf726fe77ad9e1fad8535bb5f88519dc6e779a86 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6158 x-amzn-requestid: 034023e1-bd96-4c41-aa48-cccf5fa7b366 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: feLdTEXToAMF5Ow= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d58c54-5390c17952d82d9108bdd3f8;Sampled=0 x-amzn-remapped-date: Sat, 28 Jan 2023 20:57:56 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ACe_e899vrvXgDH3SKhGkebo6EgwW3c97aiFsr_p0g0cyWhl0XmjIg== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 00:04:06 GMT etag: "e988f007b1f9ec2327e7817f38cf56202096aeae" content-type: image/jpeg age: 22873 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg	34.120.237.76	200 OK	4.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.2 kB (4202 bytes) Hash 61dd48155b70501a72ec13f79745433d 4efc3d15f04a290a590b54122822d55a9d3fa1ca 9345056c111439b34aff08323fc99a2d315fa91293039dc5acf67affb50636d3 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4202 x-amzn-requestid: d33bee10-9642-4138-8dde-3486ec7f6535 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa9ABFFvIAMFbqQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d441ff-3b3a99db469e3f8c068d553c;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:28:31 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: RIvTaBE3RpB7sP9Bb1Ku1ItsiaCFKNmyHArESR1FuqDIHXt2uOLG6A== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Sat, 28 Jan 2023 06:41:58 GMT age: 85401 etag: "4efc3d15f04a290a590b54122822d55a9d3fa1ca" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg	34.120.237.76	200 OK	9.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.4 kB (9398 bytes) Hash e59316e1b1333c42d9d120fa88619bc2 669cdc8dfeba9d64f93f260adbb5f493a5649bb0 c4e78ec96322f1f151b07f9a45d51e6ca3fd46613472cf627f53bf399193a533 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9398 x-amzn-requestid: 5083c66c-ad64-4f73-b915-d29ddabcdb4e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fIf6XEc1IAMFsbQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cce042-0779693a5da31eae195989d1;Sampled=0 x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 2MPzkEPg3JESo6g5D7E2LN53G-zYF__aFQmDg9DzSRxg0E19j1Iwkw== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 03:32:41 GMT age: 10358 etag: "669cdc8dfeba9d64f93f260adbb5f493a5649bb0" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg	34.120.237.76	200 OK	7.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.4 kB (7417 bytes) Hash 6af6f32397882f56d14d22348e44a9f1 5a626376807e7507fa3a204c4e4e9e44aa074a37 478f32e98c0a1f0d62fa337795ca88b7927e14b684b681f7629b648bc2d709a5 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7417 x-amzn-requestid: 8dca6752-c548-4526-ae81-4626843ade3e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fYbDjGREoAMFxiw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d33ee3-1c097c131b91c34b4e7df1be;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 03:02:59 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: i8JJruxoRfordb6WFNf67-GLWrA_Q930x3GCCQoUmDwXrfZtBXvsZg== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 03:34:32 GMT age: 10247 etag: "5a626376807e7507fa3a204c4e4e9e44aa074a37" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ff5857c-39d4-4978-9668-8754096c365b.jpeg	34.120.237.76	200 OK	9.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ff5857c-39d4-4978-9668-8754096c365b.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.0 kB (8995 bytes) Hash 17da02bed84fa533c12b4e833f54ec69 e0862b84c3b449722536d8c7d1373af6ad32b7c5 742b05f0d88b86d1890bca55d3cbbd4a746546ab969b866bc4f69f4e2bc8ae38 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ff5857c-39d4-4978-9668-8754096c365b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8995 x-amzn-requestid: a0fb430c-1ec7-4dfe-80f9-db99bda894f3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fR6A_F2doAMFnbg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d0a39f-2bcbc4972b45dede227848f8;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 03:35:59 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: PaMo9WW4hNvSRMhaoezhhoJIlDom9wVxbgjpQimXux_JJgeWQ28TNg== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google date: Sat, 28 Jan 2023 10:29:29 GMT age: 71750 etag: "e0862b84c3b449722536d8c7d1373af6ad32b7c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg	34.120.237.76	200 OK	9.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.2 kB (9167 bytes) Hash 3be81f83687ddb6c93d3ff3c09a9dba2 50a48e737310d3f31840db4301b25927fbcc12c5 e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9167 x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fPF9YEBmIAMF0kQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0 x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sat, 28 Jan 2023 17:35:56 GMT age: 46163 etag: "50a48e737310d3f31840db4301b25927fbcc12c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=685170941&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=685170941&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=685170941&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 111081 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers `HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:21 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:21 GMT last-modified: Sun, 29-Jan-2023 06:25:21 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=486123952&wv-type=3&browser-info=we%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=486123952&wv-type=3&browser-info=we%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /webvisor/22515688?wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=486123952&wv-type=3&browser-info=we%3A1%3Aet%3A1674973528%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062527%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973528&t=gdpr(14)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 54 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers `HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:21 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:21 GMT last-modified: Sun, 29-Jan-2023 06:25:21 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	mc.yandex.ru/webvisor/22515688?wv-check=58202&wv-type=0&wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=388230083&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/webvisor/22515688?wv-check=58202&wv-type=0&wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=388230083&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /webvisor/22515688?wv-check=58202&wv-type=0&wmode=0&wv-part=1&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=388230083&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 44 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers `HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:25 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:25 GMT last-modified: Sun, 29-Jan-2023 06:25:25 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=1044724669&wv-type=3&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=1044724669&wv-type=3&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=1044724669&wv-type=3&browser-info=we%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 21 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers `HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:25 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:25 GMT last-modified: Sun, 29-Jan-2023 06:25:25 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=684965068&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2)	87.250.250.119	200 OK	43 B
URL HTTP/2 mc.yandex.ru/webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=684965068&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) IP 87.250.250.119:0 ASN #13238 YANDEX LLC File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers POST /webvisor/22515688?wmode=0&wv-part=2&wv-hit=472811441&page-url=https%3A%2F%2Fdadata.ru%2F%3Fref%3D136886&rn=684965068&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1674973532%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230129062531%3Au%3A1674973525113516992%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1674973532&t=gdpr(14)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 15 Origin: https://dadata.ru Connection: keep-alive Referer: https://dadata.ru/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers `HTTP/2 200 OK content-length: 43 date: Sun, 29 Jan 2023 06:25:25 GMT access-control-allow-origin: https://dadata.ru access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 29-Jan-2023 06:25:25 GMT last-modified: Sun, 29-Jan-2023 06:25:25 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: image/gif strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	dadata.ru/static/CACHE/css/output.2f60d83e50a1.css	185.129.103.75	200 OK	0 B
URL HTTP/2 dadata.ru/static/CACHE/css/output.2f60d83e50a1.css IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Size 0 B (0 bytes) Hash HTTP Headers GET /static/CACHE/css/output.2f60d83e50a1.css HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: text/css last-modified: Fri, 27 Jan 2023 14:40:57 GMT vary: Accept-Encoding etag: W/"63d3e279-1a4b8" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/CACHE/23.1.3/js/pages/home.js	185.129.103.75	200 OK	0 B
URL HTTP/2 dadata.ru/static/CACHE/23.1.3/js/pages/home.js IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Size 0 B (0 bytes) Hash HTTP Headers GET /static/CACHE/23.1.3/js/pages/home.js HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/?ref=136886 Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 25 Jan 2023 07:33:38 GMT vary: Accept-Encoding etag: W/"63d0db52-10af" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/static/i/index.png?238ad95a27ff	185.129.103.75	200 OK	0 B
URL HTTP/2 dadata.ru/static/i/index.png?238ad95a27ff IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Size 0 B (0 bytes) Hash HTTP Headers GET /static/i/index.png?238ad95a27ff HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dadata.ru/static/CACHE/css/output.2f60d83e50a1.css Cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: image/png content-length: 160012 last-modified: Thu, 05 Aug 2021 19:18:20 GMT etag: "610c397c-2710c" expires: Sun, 05 Feb 2023 06:25:17 GMT pragma: public cache-control: max-age=604800, public, must-revalidate, proxy-revalidate accept-ranges: bytes x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2`

	dadata.ru/?ref=136886	185.129.103.75	200 OK	0 B
URL HTTP/2 dadata.ru/?ref=136886 IP 185.129.103.75:0 ASN #57724 Ddos-guard Ltd File type Size 0 B (0 bytes) Hash HTTP Headers `GET /?ref=136886 HTTP/1.1 Host: dadata.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/2 200 OK server: ddos-guard date: Sun, 29 Jan 2023 06:25:17 GMT content-type: text/html; charset=utf-8 access-control-allow-origin: * access-control-allow-methods: POST,GET,OPTIONS access-control-allow-headers: Authorization,Content-Type,X-Checksum,X-CSRFToken vary: Accept-Encoding, Cookie, Accept-Language content-language: ru set-cookie: __ddg1_=PltvUEwdl4VRqiTeNEPD; Domain=.dadata.ru; HttpOnly; Path=/; Expires=Mon, 29-Jan-2024 06:25:17 GMT csrftoken=keojTnekUePCW8hDYd7ENSyOtrEdFuXtZ8fZ1J3hLDP6Yet3fLivkbg5wvg11IXh; expires=Sun, 28 Jan 2024 05:45:43 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure sessionid=snt9y0j2lc26vfg45pr962rzrbzsjsyt; expires=Sun, 12 Feb 2023 05:45:43 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure x-frame-options: SAMEORIGIN x-cache-status: HIT content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block; X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL