Overview

URLwww.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
IP 194.105.131.44 (Russia)
ASN#44014 Ooo Npo Vmi
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 13:04:24 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
banner.consultant.ru (30) 436747 2012-05-24T16:13:27Z 2023-03-29T07:08:02Z 17874 188004 194.105.131.42
ocsp.globalsign.com (3) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 1079 4701 104.18.21.226
storage.consultant.ru (1) 0 2017-11-08T09:11:27Z 2023-03-26T13:02:08Z 438 230090 194.105.131.20
ocsp.pki.goog (7) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 2401 4897 216.58.211.3
top-fwz1.mail.ru (5) 8936 2013-04-18T13:48:22Z 2022-05-19T16:25:42Z 4009 19811 95.163.52.67
stats.g.doubleclick.net (1) 96 2013-06-10T22:21:11Z 2023-03-29T09:08:31Z 604 595 209.85.233.156
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5881 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
mc.yandex.ru (9) 2672 2012-05-21T11:38:30Z 2023-03-29T14:40:55Z 12636 75828 87.250.251.119
counter.yadro.ru (2) 7275 2014-09-09T20:41:17Z 2023-03-29T08:31:10Z 1224 906 88.212.202.52
ocsp2.globalsign.com (1) 1544 2012-05-23T20:10:04Z 2023-03-29T05:20:49Z 357 1897 104.18.20.226
www.google.com (1) 7 2015-05-10T13:11:19Z 2023-03-29T05:55:56Z 514 578 216.58.207.228
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 2704 7091 23.33.119.27
www.google.no (1) 25607 2016-04-05T21:50:59Z 2023-03-29T09:59:29Z 513 578 216.58.207.227
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3246 49825 34.120.237.76
www.consultant.ru (18) 222148 2012-05-24T12:18:00Z 2023-03-29T16:47:14Z 9284 328762 194.105.131.45
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2374 35.241.9.150
www.google-analytics.com (2) 40 2012-10-03T03:04:21Z 2023-03-29T06:01:47Z 1265 21062 216.239.32.178
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 52.43.157.124

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 13:04:23 UTC medium Client IP Internal IP ET INFO URL Shortening Service Domain in DNS Lookup (vk .com) 
2023-03-23 13:04:23 UTC medium Client IP Internal IP ET INFO URL Shortening Service Domain in DNS Lookup (vk .com) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 194.105.131.44
Date UQ / IDS / BL URL IP
2023-05-05 22:22:41 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_42840 (...) 194.105.131.44
2023-05-05 11:22:08 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_16332 (...) 194.105.131.44
2023-05-03 14:01:07 UTC 0 - 4 - 0 www.consultant.ru/document/cons_doc_LAW_10699 (...) 194.105.131.44
2023-05-03 02:45:10 UTC 0 - 2 - 0 www.consultant.ru/document/cons_doc_LAW_72806 (...) 194.105.131.44
2023-04-28 04:51:41 UTC 0 - 2 - 0 www.consultant.ru/document/cons_doc_LAW_389271/ 194.105.131.44


Last 5 reports on ASN: Ooo Npo Vmi
Date UQ / IDS / BL URL IP
2023-05-31 05:53:02 UTC 0 - 2 - 0 banner.consultant.ru/files/html/6584/?ban_id= (...) 194.105.131.42
2023-05-05 22:22:41 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_42840 (...) 194.105.131.44
2023-05-05 22:22:36 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_42840 (...) 194.105.131.45
2023-05-05 16:26:10 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_94185 (...) 194.105.131.45
2023-05-05 11:22:08 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_16332 (...) 194.105.131.44


Last 5 reports on domain: consultant.ru
Date UQ / IDS / BL URL IP
2023-05-31 05:53:02 UTC 0 - 2 - 0 banner.consultant.ru/files/html/6584/?ban_id= (...) 194.105.131.42
2023-05-05 22:22:41 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_42840 (...) 194.105.131.44
2023-05-05 22:22:36 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_42840 (...) 194.105.131.45
2023-05-05 16:26:10 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_94185 (...) 194.105.131.45
2023-05-05 11:22:08 UTC 0 - 8 - 0 www.consultant.ru/document/cons_doc_LAW_16332 (...) 194.105.131.44


No other reports with similar screenshot

JavaScript

Executed Scripts (24)

Executed Evals (4)
#1 JavaScript::Eval (size: 81) - SHA256: 05f1ead082c767866f5ff956788cac3625bdef2a790615f4c17787bdf4e35f2e
(function() {
    return function(hypeDocument, element, event) {
        clickURL();
    }
})();
#2 JavaScript::Eval (size: 80) - SHA256: 61c830ae82c0c13b6409bd8a1e38c88063dcf81cc7d17e668593e81b3b974ee3
(function() {
    return function(hypeDocument, element, event) {
        clickURL();

    }
})();
#3 JavaScript::Eval (size: 134) - SHA256: ce7e48afb08a9ea284ddde1050c263ff053cff13c90930241908e7c2f422b305
(function() {
    return function(hypeDocument, element, event) {
        closeBanner();
        window.top.postMessage('close_banner_144', '*');
    }
})();
#4 JavaScript::Eval (size: 84) - SHA256: f9be7d08ac30dfbefe4e8903b480195c52d50ab02a199a70952b4ac9f549cce1
(function() {
    return function(hypeDocument, element, event) {
        closeBanner();
    }
})();

Executed Writes (0)


HTTP Transactions (100)


Request Response
                                        
                                            GET /document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/ HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Set-Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; path=/; HttpOnly; SameSite=Lax CID=wmmDLWQcTk1Rd/ogJqQpAg==; expires=Fri, 22-Mar-24 13:04:13 GMT; domain=consultant.ru; path=/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2013), with CRLF, LF line terminators
Size:   10096
Md5:    4a7fba04b208e2a785984802eddfea31
Sha1:   569cf93ea0e8bb58f05ed6ffcd67edffe3581565
Sha256: adfa8cc9763cf76818270259bd19e55f5d6a77055ee87d431b978b3a005885c8
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8400
Expires: Thu, 23 Mar 2023 15:24:13 GMT
Date: Thu, 23 Mar 2023 13:04:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15949
Expires: Thu, 23 Mar 2023 17:30:02 GMT
Date: Thu, 23 Mar 2023 13:04:13 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 12:15:05 GMT
age: 2948
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13953
Expires: Thu, 23 Mar 2023 16:56:46 GMT
Date: Thu, 23 Mar 2023 13:04:13 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: Z8psencSTSzr+UgPddzt3X8eO8/QIR6U7pF3ZvQVNevsfr1gZLURUhmnMy5yVJ9vbreGOKIrAsY=
x-amz-request-id: 1H7M8NF4MRTKPFAW
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 12:54:03 GMT
age: 610
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 13:04:13 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /static/document/dist/document-612bcee96da444fc3aae510106629fce.css HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
Vary: Accept-Encoding
ETag: W/"641aaeae-7f97"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (32663), with no line terminators
Size:   6288
Md5:    7a3780a4e7efb111ac17f68aea917f2b
Sha1:   e5258fd818cfa98658451050cefb000a03373a3c
Sha256: 7f952acf59f94f49541aa2d4fba589e60d8b38d7d3df762107374d7730031bbd
                                        
                                            GET /static/client/dist/fonts/f2c2442761a05d538011f514f5be8c34.woff2 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Content-Length: 62784
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-f540"
Expires: Thu, 30 Mar 2023 13:04:13 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 62784, version 1.0\012- data
Size:   62784
Md5:    62c0aed1be3788af52079fc0d352394f
Sha1:   ae2e9856dac60afac4bc9f776a8a19d325a9d442
Sha256: c78783f9535b2b4fae6c9d11f914c7f04838225db83a51a7770301d984c2a603
                                        
                                            GET /static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
Vary: Accept-Encoding
ETag: W/"641aaeae-6536"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (25910), with no line terminators
Size:   6433
Md5:    4ed44e5781eb84ff0733e69772e3690d
Sha1:   260739f86d5a47baa14893d4dbe1685e69892bed
Sha256: 9c42b2e2762e9e04def7a98b8266fda9664e0c5f4a1cab047ca42ef472e2127a
                                        
                                            GET /static/document/dist/document-56a7d25489bc1f305322753bc59b63a1.js HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
Vary: Accept-Encoding
ETag: W/"641aaeae-508f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (20473), with no line terminators
Size:   6098
Md5:    e7202f4b840ba4151854ec107f846bae
Sha1:   08ad818bc835ecf13f832506082febfffb1fa8e6
Sha256: 4c13da0155552846ae0b9d2015165d8e176e58911c09ac602f1c901e57e9add3
                                        
                                            GET /static/document/dist/common-5a08acf2c67be5928e6af865700a292e.js HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
Vary: Accept-Encoding
ETag: W/"641aaeae-1002e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (42716), with NEL line terminators
Size:   22787
Md5:    3ac4189a7b62a0a9edd6818bae9a8028
Sha1:   a6295a6f6c59e92b0f34b861f4574861304b12ee
Sha256: 2b7c7b4d603841b952e69a57fb866e0528a33a8b971a7b64e1b6c71211622de3
                                        
                                            GET /static/document/dist/images/a6a95886a428ea448032310fec7f2d54.png HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Content-Length: 38717
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-973d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 792 x 184, 8-bit/color RGBA, non-interlaced\012- data
Size:   38717
Md5:    c054d370450bb86f4d45a4be9e701fc7
Sha1:   f65ef5a4b98ddf9409b02866cc2923b8ad0923d8
Sha256: 18ed5c67dfb4ba7187490a67f12613473d0a776e3ad6ade0c7391c8743375fa1
                                        
                                            GET /static/document/dist/images/5f3a711181f97cf258b3e198bf22c6e9.png HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:13 GMT
Content-Length: 6631
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-19e7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 276 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   6631
Md5:    70bc2a17b94160045cb350f98a5ae7a7
Sha1:   ea74b600a8b388b2854bc2976a088e90583d2ada
Sha256: f71dbb51415cfa6d08210228f0ed76febe8a8d11e1889db4312e185da287dd7f
                                        
                                            GET /static/document/dist/images/62428d026881515373e804960c6e2b54.png HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 4450
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-1162"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 240 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size:   4450
Md5:    d74b9c69964f609d605cf21db736ecc4
Sha1:   fae8d84719eb00ee1295b120ad40011cce599273
Sha256: f386376186835229360ff643a836bdada3f30556e8be88643891895c702bb6ef
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 12:17:23 GMT
age: 2811
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /ban/?init=1;flash=0;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F;obj=ban__145 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/
Cookie: CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/x-javascript;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: CID=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D; expires=Tue, 19-Sep-2023 13:04:10 GMT; Max-Age=15552000; path=/; domain=.consultant.ru
Pragma: no-cache
Expires: Thu, 23 Mar 2023 13:04:10 GMT
Cache-Control: max-age=0, no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1221), with no line terminators
Size:   600
Md5:    e4210768cbb99e70128c5fcd6d227ae6
Sha1:   1e03a1d5d60ae451e01aa864500f2e41b812a3b9
Sha256: a63948e817d1062d607e9449d02aa0c719fc41860559b86883eb8ab1fc58a11f
                                        
                                            GET /ban/?init=1;flash=0;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F;obj=ban__139 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/
Cookie: CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/x-javascript;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: CID=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D; expires=Tue, 19-Sep-2023 13:04:10 GMT; Max-Age=15552000; path=/; domain=.consultant.ru
Pragma: no-cache
Expires: Thu, 23 Mar 2023 13:04:10 GMT
Cache-Control: max-age=0, no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1221), with no line terminators
Size:   600
Md5:    b3e326b0fbdb5ef3b9eb970c2ab82c19
Sha1:   cbefd5167707b708d9b30ac598174e104833e89f
Sha256: 6202895b85ac6110384d8b4f635b34996b8d67f5ec07530e8ee304492ed65c89
                                        
                                            GET /static/document/dist/fonts/28140c50a81813628ed6c94d75c668b9.woff2 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 15520
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-3ca0"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15520, version 1.0\012- data
Size:   15520
Md5:    1aac9250b3925d443e13f8b01e451714
Sha1:   6944ce7e8683721d8b28323c51ac4c50379104ba
Sha256: 9abc282a3f0855250a733a942086d52cc35a434db8b31d5f61151fdddc2ee7c0
                                        
                                            GET /ban/?init=1;flash=0;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F;obj=ban__144 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/
Cookie: CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/x-javascript;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: CID=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D; expires=Tue, 19-Sep-2023 13:04:10 GMT; Max-Age=15552000; path=/; domain=.consultant.ru
Pragma: no-cache
Expires: Thu, 23 Mar 2023 13:04:10 GMT
Cache-Control: max-age=0, no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1224), with no line terminators
Size:   601
Md5:    d90afcbf26a7f3ec4da04eaa77557a3d
Sha1:   cb21158bf3d401b6396694a2437aad6a2c343fe0
Sha256: d9f23c5122dac7e15c0ea60091eae45e2f4acaaef345c4616fdf74c485db183d
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 27 Mar 2023 10:15:48 GMT
ETag: "b9cd11bf98be21fdfd7426d6d371b0d739e01232"
Last-Modified: Thu, 23 Mar 2023 10:15:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac6e1087dab1c12-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    13d3d4af92b5e7cffe98f5aef5275d79
Sha1:   b9cd11bf98be21fdfd7426d6d371b0d739e01232
Sha256: bd70770a6c39334ff2033e8c2482ca600c6bce59aca0c88508ab4408bb308bfc
                                        
                                            GET /files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/
Cookie: CID=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D
Upgrade-Insecure-Requests: 1

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-a9f"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Set-Cookie: CID=wmmDKmQcTk4CH+9jbqRpAg==; expires=Fri, 22-Mar-24 13:04:14 GMT; domain=consultant.ru; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1216
Md5:    92c71b8b32dff5d17a9e3d22bb1247a8
Sha1:   3b4fc96836dae14d77592e75c91ec20d589ea8e0
Sha256: 19fedde7daf86f9024fc41ff85f147c5d6c9e3ca8874d54d8acf5a378bd5fe5f
                                        
                                            GET /files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/
Cookie: CID=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D
Upgrade-Insecure-Requests: 1

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:22 GMT
ETag: W/"63c9044e-a4d"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Set-Cookie: CID=wmmDKmQcTk4T/O9pRmIFAg==; expires=Fri, 22-Mar-24 13:04:14 GMT; domain=consultant.ru; path=/
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1176
Md5:    d22c36cb64d3e29d3fe9c37d7514c100
Sha1:   3ea939c742ebf6e56f491fa2dd5f48ac1ef53685
Sha256: f1ffcc46831772b946e2ec66f2f997818c249380ec0ab61e783f50648c10fb41
                                        
                                            GET /static/document/dist/fonts/45a7a985242d0d9483ac086c12cb2773.woff2 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 18704
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-4910"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 18704, version 2.196\012- data
Size:   18704
Md5:    b4d9988f6ad1f5ce4193c0262ff765ae
Sha1:   1c38443cf8b83ef68a47768874df5b12394c84ef
Sha256: ac6e49ad2df115576863f638372e7f1db35ac598d9977132010e63cf764141eb
                                        
                                            GET /static/document/dist/fonts/ba2760cb6624d2e2d6d692f9b22a32e3.woff2 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 54324
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-d434"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 54324, version 1.0\012- data
Size:   54324
Md5:    25a02210c8de7d14ab6ab8d8efe33fcb
Sha1:   211f1721bf9838a05fc08bdf75b2997fe659b699
Sha256: 9d91065f8e41988c6d28a7cd99a447e4d4bbe59620dc8e41ac678936ad56c04f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10196
Expires: Thu, 23 Mar 2023 15:54:10 GMT
Date: Thu, 23 Mar 2023 13:04:14 GMT
Connection: keep-alive

                                        
                                            GET /static/document/dist/fonts/f2c2442761a05d538011f514f5be8c34.woff2 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/common-de8b0c62f0b2ac5ed49f0394e3cfbc9f.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 62784
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-f540"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 62784, version 1.0\012- data
Size:   62784
Md5:    62c0aed1be3788af52079fc0d352394f
Sha1:   ae2e9856dac60afac4bc9f776a8a19d325a9d442
Sha256: c78783f9535b2b4fae6c9d11f914c7f04838225db83a51a7770301d984c2a603
                                        
                                            GET /files/html/6548/index.hyperesources/index_hype_generated_script.js?94415 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDKmQcTk4T/O9pRmIFAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-163de"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (63256)
Size:   8050
Md5:    d367ec72ecb10b39d25287958e53aede
Sha1:   9ee76dd5154d9a98fe7309d20458c7098424a834
Sha256: d45737516501fff32cd063370b791a52e5baa3f12ee5fe1fb94521075543dd26
                                        
                                            GET /files/html/6574/index.hyperesources/index_hype_generated_script.js?25550 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDKmQcTk4T/O9pRmIFAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-1972"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4028)
Size:   2250
Md5:    94925c012bb2820e08bd8ff9be096376
Sha1:   da95ac52f86776abb3f3a95f4633be59355f3a96
Sha256: 66c40394f9e03302c1583dead69ec78641a3a98912eee5ee703a668ba7c95c8b
                                        
                                            GET /static/document/dist/images/6f737bc749d79b65b99f9a1dd46f6678.svg HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/document-612bcee96da444fc3aae510106629fce.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
Vary: Accept-Encoding
ETag: W/"641aaeae-3e2"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (922)
Size:   565
Md5:    7624225cb358cb00853b566f7cca75f9
Sha1:   b9a7354c560d1fe687045274cefe601a280635f9
Sha256: 3a07f59e84a4f027a763acfc09a9027525f3be15a5aad82e2f9f59a1371fb5c6
                                        
                                            GET /static/document/dist/images/4ce29a581ca9bf96d8eabf5334809793.svg HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/static/document/dist/document-612bcee96da444fc3aae510106629fce.css
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 284
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:30:54 GMT
ETag: "641aaeae-11c"
Expires: Thu, 30 Mar 2023 13:04:14 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   284
Md5:    42a50c523c5795be160202efa08029fd
Sha1:   a6ecb12b7264fa6cb6636d38d1f00acf6a44f105
Sha256: 83443df0de0bf93f811f3e051c6cce9e669c6a05fa20485f9f8c182099645e6e
                                        
                                            GET /files/html/6574/index.hyperesources/HYPE-748.thin.min.js HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDKmQcTk4T/O9pRmIFAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-de41"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3286)
Size:   25174
Md5:    ea0c7ee8a9e18af14a44e6753a5ffe45
Sha1:   eceef105248456561285538341ed091d4673a847
Sha256: 73040816716dfa3df31fe7625cd3e152d70dfefc3638041563015b891ad820af
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/

                                        
                                             216.239.32.178
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Thu, 23 Mar 2023 12:05:11 GMT
Expires: Thu, 23 Mar 2023 14:05:11 GMT
Cache-Control: public, max-age=7200
Age: 3543
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            GET /adds/counter.js?c=1&t=1679576662022&u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/&r=&cd=24&w=1280&h=1024&j=0&fl=0 HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDLWQcTk1Rd/ogJqQpAg==

                                        
                                             194.105.131.45
HTTP/1.1 204 No Content
Content-Type: text/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 13:04:14 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: CP=wmmDLWQcTk1Rd%2FogJqQpAg%3D%3D; expires=Fri, 01-Jan-1971 05:48:46 GMT; Max-Age=0; path=/; domain=.consultant.ru

                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-1.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 775
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:22 GMT
ETag: "63c9044e-307"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   775
Md5:    81efc0d9a6dffbe653c7cee828b0a921
Sha1:   9eec42f213f910ae9a83e4414e9c4d857caf244e
Sha256: 9ac2899572692d1f4176488ac30ba1cb9f49b3c8f91d744590f9a871f1e49b2a
                                        
                                            GET /files/html/6548/index.hyperesources/HYPE-748.full.min.js HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDKmQcTk4T/O9pRmIFAg==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-16cf8"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (3014)
Size:   40919
Md5:    f6faf167fe933492789a772e62724a54
Sha1:   a4d56bb06c5062302f6f706bf55ece38d0619677
Sha256: 24e18d8a3f5f828714ed2d91dbf79af0320241d408230973386f8edd1c65b186
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 11:36:40 GMT
ETag: "6acf0434fbb53b9c4d670dc2cc583c5a96dcbf7e"
Last-Modified: Thu, 23 Mar 2023 11:36:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1612
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac6e10ad8541c12-OSL

                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-1a28"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   2349
Md5:    268c61f693e63a5ca334c572bd06abe9
Sha1:   410527d828820288280652d61313c9f7356bcd83
Sha256: c6ba3a45a5c09b70b745da658998eae76e27ad656cd442d99065e949292d69d0
                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-4.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 1674
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: "63c9044f-68a"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1674
Md5:    dd82675f7a0cdd265e092583648815fc
Sha1:   62716917f4d5c87364a9468c3afc2209b71d06ec
Sha256: d0b5f83a8b1c7980867351704de3b10c8174b68d53e771445072d821c88a05ed
                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-3.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-1a56"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   2383
Md5:    33f2216c2717cedfe2f74dac45f20304
Sha1:   330015fa52e5324ce2f0c07076006bd8ba01040c
Sha256: d56443a80c693dfbeb81b9b12f2abb22bc1ff651b55521fc595805c0847138bb
                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-5.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-1284"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1860
Md5:    1acc3641b1e327af1c2f6a4e26e74170
Sha1:   cd638586001fdbe053b06ca98cae3234be019a57
Sha256: 31b58d049232995afdb5d0b4866fdfdd7926b4868f2a0db56a8a37418385c961
                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-6.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-1429"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1885
Md5:    6e593209287566372bb11774e063d29d
Sha1:   959363549c5839a7052a3987c8a164a8aaa7fb51
Sha256: de2620c8c05ccc9e0f9f836461aeec6ea27a8d95d0da64155a4ded401b513bb4
                                        
                                            GET /files/html/6574/index.hyperesources/21221.png HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 2279
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: "63c9044f-8e7"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   2279
Md5:    2a0094e36551ee4900bde2c2cd3262cf
Sha1:   c66eacbc4f2ab2a5222e8bd089e7b6b6979448cc
Sha256: feb1363ae63fb4f7904ad424be870816ca82b69c25c3d836aa608c5a06385dc9
                                        
                                            GET /ondb/thumbs/202303/23/PSyXWpPT_0AW2In6QjuXnnkDrWDc97up.jpeg HTTP/1.1 
Host: storage.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             194.105.131.20
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 229674
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 08:51:17 GMT
ETag: "641c1305-3812a"
Expires: Sat, 22 Apr 2023 13:04:14 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Set-Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; expires=Fri, 22-Mar-24 13:04:14 GMT; domain=consultant.ru; path=/


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 867x566, components 3\012- data
Size:   229674
Md5:    26a6022c42c00265261cd1d56040f139
Sha1:   52f1dab0cfc4f796a7440f8d8bd831fa69dd11f8
Sha256: db674467f31e2c1056cfb71a6b7a228d565734a4c083494d8b67a1c8b0e13acf
                                        
                                            GET /files/html/6574/index.hyperesources/PastedVector-7.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6574/?ban_id=6574;zone=145;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jan 2023 08:50:23 GMT
ETag: W/"63c9044f-ac1"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1258
Md5:    b2b4b6e00fd55e31ac17c803baee79ea
Sha1:   8c53b21c5a91df090ebf423621720361146e666f
Sha256: 2a07675f3366aa22165e692fa3cbd5b3b0a80ba8afacb30eccbd017ac2555055
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-14b0"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text
Size:   1699
Md5:    b67fae78a88510c0e40c9445904070be
Sha1:   5d6cf238726d748067852368904e84fc335f07de
Sha256: 8c41efe6dca9402c63ecbe6fb7968de171c28e89f53b2a0e5a5b87778c34ca8d
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-3.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 623
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: "63aaff15-26f"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   623
Md5:    736c5a30227a96f60c79ae6e54a75f75
Sha1:   6c04f1fa2550bb9743bbab0c0d0af187f79e0f00
Sha256: 2405a867632e6a783dfb1f6ea55f2c606a9e4f86f6c29c8fbe06e361599b99ea
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IsOiFzhiTto++jP5f4JzPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.43.157.124
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5rj4QDodnWsC4UVoBY56tXOUpLI=

                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-1.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-f1b"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1524
Md5:    7a962dce3ad0637e1d0cacf148e5e42d
Sha1:   e6df34019550dc018b4a80355c93859ba9c0a772
Sha256: 56d2484fffaff5a1fe1a1ac1dfb356347921332178298e5c09a9de8bd296b8f0
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-4.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 762
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: "63aaff15-2fa"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   762
Md5:    ebc5b2361a38034f14c0a9fdba607276
Sha1:   f649b73b1797f6740d61841d74eea969c9445a6e
Sha256: 37ad8b07b9b8af6322d9461250b795ecb3c67c4fc2741c7db8a448d3787c9ca1
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-5.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-1236"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   1677
Md5:    ee31b9dcf1ec788f896e455647d36f27
Sha1:   71359314fe72dacaeeee4cd94440984848790cfe
Sha256: 24beb950638946ca78dbf2bd4205c7766a4d327817236032d3230dacc3240d66
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-6.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-1529"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (371)
Size:   1829
Md5:    d96cf4385e3bfcd960cab4c8768ff5d7
Sha1:   8531470ddcbed549a9fe9ab3504a5e7cbe9263cd
Sha256: 826094b6105ab383b361dc37c348975452b062086c746db1d7fd1f16b5d8e6b1
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://banner.consultant.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.251.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 58347
date: Thu, 23 Mar 2023 13:04:14 GMT
access-control-allow-origin: *
etag: "641965ea-e3eb"
expires: Thu, 23 Mar 2023 14:04:14 GMT
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (594)
Size:   58347
Md5:    11ae545171ff35a5600a4824211219de
Sha1:   00627a8fdbdef9254f36d2649de0f05a426e087f
Sha256: 7d67fdd5d2579c8b12147ba1ac97e50dd39ab5d25b56b0dfb28d2daa26054f1c
                                        
                                            GET /apple-touch-icon.png HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 5749
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:29:26 GMT
ETag: "641aae56-1675"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Size:   5749
Md5:    03c243e9a99b1c708c23afb96c2cac5b
Sha1:   037aafd9a42d8556a20e2f6b0fbd348c33f66295
Sha256: c26a658e108f4e1c4f5ca26a0d1e5ee7cebc460b1a2446957fa09d392e56887a
                                        
                                            GET /hit?r;s1280*1024*24;uhttp%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;h%u0421%u0442%u0430%u0442%u044C%u044F%205%20%5C%20%u041A%u043E%u043D%u0441%u0443%u043B%u044C%u0442%u0430%u043D%u0442%u041F%u043B%u044E%u0441;0.2662275315880194 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/

                                        
                                             88.212.202.52
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Server: 0W/0.8c
Location: https://counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;h%u0421%u0442%u0430%u0442%u044C%u044F%205%20%5C%20%u041A%u043E%u043D%u0441%u0443%u043B%u044C%u0442%u0430%u043D%u0442%u041F%u043B%u044E%u0441;0.2662275315880194
Content-Length: 32
Expires: Tue, 22 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /files/html/6548/index.hyperesources/PastedVector-2.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6548/?ban_id=6548;zone=139;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 14:20:05 GMT
ETag: W/"63aaff15-d0f"
Expires: Thu, 13 Apr 2023 13:04:10 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1378
Md5:    4d15a73f1d1565d325ac58234b3acba1
Sha1:   ae04f58a2452e9f55839ac6ffd27ac3223160877
Sha256: af31ea9e39a95882a266f4b449b161cccd7808011bc7928b405d0b38b5ca835c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?v=1&_v=j99&a=1301641336&t=pageview&_s=1&dl=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F&ul=en-us&de=UTF-8&dt=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=QCCAAAABAAAAAC~&jid=1605121822&gjid=1450540587&cid=328507563.1679576663&tid=UA-42995600-1&_gid=1305385487.1679576663&_r=1&_slc=1&cd1=328507563.1679576663&z=1324363270 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.consultant.ru
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.239.32.178
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://www.consultant.ru
date: Thu, 23 Mar 2023 13:04:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    9e92e190700c1af4539b40c2171320a9
Sha1:   209bcdb79e6067b51091ce8586d4b977f25b67d8
Sha256: aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
                                        
                                            GET /favicon-16x16.png HTTP/1.1 
Host: www.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/
Cookie: _csrf=RT-P4vnGcTvY2Npt8eJ9Kdezpnow4O_4; CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663

                                        
                                             194.105.131.45
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 649
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 07:29:26 GMT
ETag: "641aae56-289"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   649
Md5:    5deb7ec72cff44892458d94cdd496eee
Sha1:   145ad8ebfe441d1ad2d9dc9a56c1197379f85d04
Sha256: 9b5dfd990ef42ef162d480a1342262eb8c4c5d16fb4fcbabbb26b148af731148
                                        
                                            GET /js/code.js HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.consultant.ru/

                                        
                                             95.163.52.67
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:14 GMT
Last-Modified: Tue, 21 Mar 2023 13:41:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1RMYgQ0tkIIG:1679576654:0:::; path=/; expires=Sat, 23-Mar-24 13:04:14 GMT; domain=.mail.ru; HttpOnly; SameSite=None
ETag: W/"6419b411-85fb"
Expires: Thu, 23 Mar 2023 14:04:14 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: max-age=3600, private
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (729)
Size:   14143
Md5:    d5d800ef0690f2fadd5af5f2608a07b1
Sha1:   97b2a9655a4845532d1a110b20f5e534e8de8755
Sha256: ff5053925129510b87575c8c18adeb9211007330aa72eabb6da82ec7ee4c0425
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Mar 2023 11:28:32 GMT
ETag: "cf779672a53fcdc0252b0233bb61211cd7a99de3"
Last-Modified: Thu, 23 Mar 2023 11:28:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1935
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac6e10c7bffb4fd-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    14f3b7d6dcc1e61a605baad7490a6125
Sha1:   cf779672a53fcdc0252b0233bb61211cd7a99de3
Sha256: 2de7ba8cee5b6a9cf2e9b77f3691fe63e69d7810cbf78dba9e4a3f5b9370aa1b
                                        
                                            GET /hit?r;s1280*1024*24;uhttp%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;h%u0421%u0442%u0430%u0442%u044C%u044F%205%20%5C%20%u041A%u043E%u043D%u0441%u0443%u043B%u044C%u0442%u0430%u043D%u0442%u041F%u043B%u044E%u0441;0.2662275315880194 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             88.212.202.52
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.17.9
Date: Thu, 23 Mar 2023 13:04:14 GMT
Content-Length: 43
Connection: keep-alive
Expires: Tue, 22 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /watch/21509128?wmode=7&page-url=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afp%3A652%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A668231474891%3Ahid%3A70688214%3Az%3A0%3Ai%3A20230323130422%3Aet%3A1679576663%3Ac%3A1%3Arn%3A576161798%3Arqn%3A1%3Au%3A1679576663260941232%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A17%2C53%2C91%2C1%2C-4%2C0%2C%2C683%2C9%2C%2C%2C%2C845%3Aco%3A0%3Ans%3A1679576661178%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3A%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.consultant.ru
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 302 Found
                                            
location: /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afp%3A652%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A668231474891%3Ahid%3A70688214%3Az%3A0%3Ai%3A20230323130422%3Aet%3A1679576663%3Ac%3A1%3Arn%3A576161798%3Arqn%3A1%3Au%3A1679576663260941232%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A17%2C53%2C91%2C1%2C-4%2C0%2C%2C683%2C9%2C%2C%2C%2C845%3Aco%3A0%3Ans%3A1679576661178%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3A%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 13:04:14 GMT
access-control-allow-origin: http://www.consultant.ru
set-cookie: yabs-sid=1991461161679576654; Path=/; SameSite=None; Secure i=Q9KcT2MsTA/Ucl1GXxaUjSJibxbhHmOTgUHuwfuzbTETiGVVwUrZkY76Odc9atTijx3axxyFoGp3UnFksK1CBH2utc0=; Expires=Sun, 20-Mar-2033 13:04:12 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=2651228711679576654; Expires=Sun, 20-Mar-2033 13:04:12 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=2651228711679576654; Expires=Fri, 22-Mar-2024 13:04:14 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711112654.yc.1679576654#1711112654.yrts.1679576654#1711112654.yrtsi.1679576654; Expires=Fri, 22-Mar-2024 13:04:14 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:14 GMT
last-modified: Thu, 23-Mar-2023 13:04:14 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afp%3A652%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A668231474891%3Ahid%3A70688214%3Az%3A0%3Ai%3A20230323130422%3Aet%3A1679576663%3Ac%3A1%3Arn%3A576161798%3Arqn%3A1%3Au%3A1679576663260941232%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A17%2C53%2C91%2C1%2C-4%2C0%2C%2C683%2C9%2C%2C%2C%2C845%3Aco%3A0%3Ans%3A1679576661178%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3A%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.consultant.ru
Referer: http://www.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 419
date: Thu, 23 Mar 2023 13:04:15 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.consultant.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:15 GMT
last-modified: Thu, 23-Mar-2023 13:04:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    5bb07122ed9adfbd81bc15c406db9d38
Sha1:   7c785a9c45cadeb7ba706f051f4d239bc5b7cbbb
Sha256: 70098a93df9919c108f5c58ab0f0ab8de55f47dc38be1de033354093d240b8c3
                                        
                                            GET /watch/21509128?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6574%2F%3Fban_id%3D6574%3Bzone%3D145%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A996335471%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A276294730%3Au%3A1679576663260941232%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662222%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Connection: keep-alive
Referer: http://banner.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 302 Found
                                            
location: /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6574%2F%3Fban_id%3D6574%3Bzone%3D145%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A996335471%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A276294730%3Au%3A1679576663260941232%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662222%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 13:04:15 GMT
access-control-allow-origin: http://banner.consultant.ru
set-cookie: yabs-sid=2019311651679576655; Path=/; SameSite=None; Secure i=O9S9F4ikNZtCEJuULebIEHIBVhOMFxuO9ti1jlC4QjMWJo5bSMAAp8YmXWP2d6ojNXrD5hmXJddrdYzwHZEYS+WeMeo=; Expires=Sun, 20-Mar-2033 13:03:58 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=5691055061679576655; Expires=Sun, 20-Mar-2033 13:03:58 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=5691055061679576655; Expires=Fri, 22-Mar-2024 13:04:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711112655.yc.1679576655#1711112655.yrts.1679576655#1711112655.yrtsi.1679576655; Expires=Fri, 22-Mar-2024 13:04:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:15 GMT
last-modified: Thu, 23-Mar-2023 13:04:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

                                        
                                            GET /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6574%2F%3Fban_id%3D6574%3Bzone%3D145%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A996335471%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A276294730%3Au%3A1679576663260941232%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662222%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Referer: http://banner.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 419
date: Thu, 23 Mar 2023 13:04:15 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://banner.consultant.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:15 GMT
last-modified: Thu, 23-Mar-2023 13:04:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    c865f728b79bc187abf1ef2dfe058b07
Sha1:   e7bd6aff65f80bcbbe7a02632f648344b29544db
Sha256: eb4e7cc08d13448aad8354f1dc28596d9e41fc8a4b8f066d4b091016aee3b0ed
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-42995600-1&cid=328507563.1679576663&jid=1605121822&gjid=1450540587&_gid=1305385487.1679576663&_u=QCCAAAAAAAAAAC~&z=620917028 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.consultant.ru
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             209.85.233.156
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://www.consultant.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 23 Mar 2023 13:04:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6548%2F%3Fban_id%3D6548%3Bzone%3D139%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A747607878%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A951020118%3Au%3A1679576663260941232%3Aw%3A1200x92%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662223%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Referer: http://banner.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 419
date: Thu, 23 Mar 2023 13:04:15 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://banner.consultant.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:15 GMT
last-modified: Thu, 23-Mar-2023 13:04:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    6f2d71bfee02fa2998ba05b26f14250a
Sha1:   ea67816d7b54a72a1951dbf41454b7305331e882
Sha256: 2b7b91b0dd186514468c409ad41aab9af29ffc7440cff006e4d17095eae4c416
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Content-Length: 940
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:25:07 GMT
ETag: "3b2fc22ffd1453281daf86047c5cf00eea897cb0"
Last-Modified: Thu, 23 Mar 2023 09:25:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 435
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac6e10e7bf51c12-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /counter?js=13;id=186662;u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;st=1679576662022;title=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=fef486c55031750c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679576663016%3A1679576663031%3A1%3Ad99693fc2e8658f895e5c679a2743f00;opts=jst-ga;visible=true;_=0.7661376749684918 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.163.52.67
HTTP/2 302 Found
                                            
server: nginx
date: Thu, 23 Mar 2023 13:04:15 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=186662;u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;st=1679576662022;title=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=fef486c55031750c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679576663016%3A1679576663031%3A1%3Ad99693fc2e8658f895e5c679a2743f00;opts=jst-ga;visible=true;_=0.7661376749684918
set-cookie: FTID=1RMYgQ0tkIIG:1679576655:186662:::; path=/; expires=Sat, 23-Mar-24 13:04:15 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2

                                        
                                            GET /counter2?js=13;id=186662;u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;st=1679576662022;title=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=fef486c55031750c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679576663016%3A1679576663031%3A1%3Ad99693fc2e8658f895e5c679a2743f00;opts=jst-ga;visible=true;_=0.7661376749684918 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 13:04:15 GMT
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679576655:186662:::; path=/; expires=Sat, 23-Mar-24 13:04:15 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            GET /watch/21509128?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6548%2F%3Fban_id%3D6548%3Bzone%3D139%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A747607878%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A951020118%3Au%3A1679576663260941232%3Aw%3A1200x92%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662223%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Connection: keep-alive
Referer: http://banner.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 302 Found
                                            
location: /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6548%2F%3Fban_id%3D6548%3Bzone%3D139%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A747607878%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130423%3Aet%3A1679576663%3Ac%3A1%3Arn%3A951020118%3Au%3A1679576663260941232%3Aw%3A1200x92%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576662223%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576663%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 13:04:15 GMT
access-control-allow-origin: http://banner.consultant.ru
set-cookie: yabs-sid=2126976411679576655; Path=/; SameSite=None; Secure i=8LVxJfe2GZN7TO8FtKjU4iBx97+gWPGp+REYhiBB8Na0AncRUnrD8SLdiXXOnJ8YqQuQXaLkrBsUAbe+UAMKbEMKN6Q=; Expires=Sun, 20-Mar-2033 13:04:04 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=7646242371679576655; Expires=Sun, 20-Mar-2033 13:04:04 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=7646242371679576655; Expires=Fri, 22-Mar-2024 13:04:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711112655.yc.1679576655#1711112655.yrts.1679576655#1711112655.yrtsi.1679576655; Expires=Fri, 22-Mar-2024 13:04:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:15 GMT
last-modified: Thu, 23-Mar-2023 13:04:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   1162
Md5:    8a2b38363c3a6be2ed31fae24ed511d3
Sha1:   9a65fe34211d51874c475bf4bb10e16f1ca8bf80
Sha256: 8dcadb2ac7d89adb30573f91fb1d03e485d8f2a735e89e4b3e96a94549cc2c9a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-42995600-1&cid=328507563.1679576663&jid=1605121822&_u=QCCAAAAAAAAAAC~&z=1705058337 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 13:04:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-42995600-1&cid=328507563.1679576663&jid=1605121822&_u=QCCAAAAAAAAAAC~&z=1705058337 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 13:04:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /files/html/6446/index.hyperesources/index_hype_generated_script.js?75107 HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: W/"63908801-ce8"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1040)
Size:   1520
Md5:    a83f5d5e90ae3fb0d3ea9aa70d466ef5
Sha1:   2854bffa4cf561861ebed4d97bc89610b5ab2631
Sha256: be93ee7bdcae42aef4940709dcca59362ca1709de27f5a8b345c1f897243ebec
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 13:04:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /files/html/6446/index.hyperesources/HYPE-748.thin.min.js HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: W/"63908801-de41"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3286)
Size:   25174
Md5:    ea0c7ee8a9e18af14a44e6753a5ffe45
Sha1:   eceef105248456561285538341ed091d4673a847
Sha256: 73040816716dfa3df31fe7625cd3e152d70dfefc3638041563015b891ad820af
                                        
                                            GET /files/html/6446/index.hyperesources/PastedVector.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: W/"63908801-220c"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   2968
Md5:    c0c50b28dcfb9b8fe19c49d94829e48d
Sha1:   dd5355694429c686f7755e438747d0c926aa1904
Sha256: 374af5b984cc7cd7d6e89d6f9c260892839a1ca5a87cdc9d7e1cefef6c4bd216
                                        
                                            GET /files/html/6446/index.hyperesources/PastedVector-1.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Content-Length: 706
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: "63908801-2c2"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   706
Md5:    8bf29ff57c1f45347df70279377cd1de
Sha1:   c909dc0e459310d7501350289a4e19469c4f48b5
Sha256: 0ab4f53244b1ea227b128bceff54a2f2b34547f7b28da2a17de29ffa79381dd7
                                        
                                            GET /files/html/6446/index.hyperesources/PastedVector-3.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Content-Length: 535
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: "63908801-217"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text
Size:   535
Md5:    d618b58b054d87ee280ac4170c553fbf
Sha1:   2972fc3b526c5b53b32d85d11c7dddcb32072a24
Sha256: f2646b0f61935b71f23fdbb540e0a0bd46413610d2228cb613e5cbfbb40c4cd2
                                        
                                            GET /files/html/6446/index.hyperesources/PastedVector-2.svg HTTP/1.1 
Host: banner.consultant.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://banner.consultant.ru/files/html/6446/?ban_id=6446;zone=144;from=http%3A%2F%2Fwww.consultant.ru%2Fdocument%2Fcons_doc_LAW_323793%2F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%2F
Cookie: CID=wmmDFGQcTk4KTu9mhbD7Ag==; _ga=GA1.2.328507563.1679576663; _gid=GA1.2.1305385487.1679576663; _gat=1; _ym_uid=1679576663260941232; _ym_d=1679576663; tmr_lvid=d99693fc2e8658f895e5c679a2743f00; tmr_lvidTS=1679576663016; _ym_isad=2; _ym_visorc=b

                                        
                                             194.105.131.42
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 13:04:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 12:33:05 GMT
ETag: W/"63908801-d8ca"
Expires: Thu, 13 Apr 2023 13:04:11 GMT
Cache-Control: max-age=1814400, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text
Size:   42204
Md5:    49bcb11b64d3402a1440330731abf54d
Sha1:   cabec04954d69efdbdb021c3aea2a9a0e120f6bf
Sha256: 0539d9524648e31a567de675c696d792beb02e9c55179663de2a51e8bc10b11c
                                        
                                            GET /tracker?js=13;id=186662;u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;st=1679576662022;title=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=fef486c55031750c;ver=60.3.0;tz=0%2FUTC;nt=0/0/1679576661178/////-5/-5/13/13/66//71/160/161/353/844/845/854/2522/2522/;ni=;lvid=1679576663016%3A1679576663702%3A2%3Ad99693fc2e8658f895e5c679a2743f00;opts=jst-ga;visible=true;_=0.931282492282162;e=RT/load;et=1679576663701 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 13:04:15 GMT
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679576655:186662:::; path=/; expires=Sat, 23-Mar-24 13:04:15 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8914
Expires: Thu, 23 Mar 2023 15:32:49 GMT
Date: Thu, 23 Mar 2023 13:04:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8914
Expires: Thu, 23 Mar 2023 15:32:49 GMT
Date: Thu, 23 Mar 2023 13:04:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8914
Expires: Thu, 23 Mar 2023 15:32:49 GMT
Date: Thu, 23 Mar 2023 13:04:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8914
Expires: Thu, 23 Mar 2023 15:32:49 GMT
Date: Thu, 23 Mar 2023 13:04:15 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 05:35:55 GMT
age: 26900
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5556
Md5:    c831201ad81f55c63c1b101ce854a810
Sha1:   0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
Sha256: c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261caab9-983c-4eb1-9fca-fd73dc738e9e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10284
x-amzn-requestid: e4d2c324-d0b0-436d-9739-29269e62aed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM6hjEqtIAMFvXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b713c-5a5bd6b60c1f52ab580f1757;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:21:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Pv-MA9gQ4PmXuY3EWSC77_g2fn_C9-bYUQ4azcrxLNvtwY6CZZg1nA==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:55:01 GMT
age: 18554
etag: "5035ed41f497c97faefae9cdaf42dc07ab468557"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10284
Md5:    4e89d0b1281259e7399294fb5fa19d2b
Sha1:   5035ed41f497c97faefae9cdaf42dc07ab468557
Sha256: f404d286deab5b4759be6e554e6488faab3b4f7988a86eb57520dac4e0d6a192
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 18591
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7424
x-amzn-requestid: 9a2bd57a-40d2-4bc0-b4ca-183e9a928bdc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM-3aGPzoAMFj6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b782f-0dc56e4a7c4aaeb45b45c75b;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:50:39 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 8mTKClr9GKzzrm1TtEmMeBnOQfMLTO4dBuAO-fE4UEfV-SwrFbkjZQ==
via: 1.1 ec27e2bbc77d9805bead471453d2094c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:54:31 GMT
age: 36584
etag: "709b01a360624eceafb1876f56378824aa4936b3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7424
Md5:    05c7970e81559904d05b6e8cf693f085
Sha1:   709b01a360624eceafb1876f56378824aa4936b3
Sha256: a4fd80c9bdce27961560d7c31e216706e9e32d42d1edd883e283c149505b3db0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 54991
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc53a798-a34a-42ab-8422-1c44bdb2eb10.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8627
x-amzn-requestid: 80010893-2a19-4aba-840e-1f0ddf1a7ab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xYBHN7oAMFltQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64156299-627689412a2fd5ee55261a59;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:04:57 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DGi_Ac31LwjHE7_dHXLLgCJ7MxsdAjj5tr6t1jXZffKbGKQOOy1M7Q==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 20:21:35 GMT
age: 60160
etag: "53196f685136a144065ec98e3e14d0a7f43ceb8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8627
Md5:    7698afd0a4ca88c4243fc3aa2dd9a73d
Sha1:   53196f685136a144065ec98e3e14d0a7f43ceb8f
Sha256: 5afee347cacdbf5eedee36e2724daa66593d683cd8fb229e1f0630bbe69654ed
                                        
                                            GET /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6446%2F%3Fban_id%3D6446%3Bzone%3D144%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A432248175%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130426%3Aet%3A1679576667%3Ac%3A1%3Arn%3A153071289%3Au%3A1679576663260941232%3Aw%3A298x150%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576663238%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576667%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Referer: http://banner.consultant.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 419
date: Thu, 23 Mar 2023 13:04:18 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://banner.consultant.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:18 GMT
last-modified: Thu, 23-Mar-2023 13:04:18 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    88c9cf0b28a438af2777120674dda658
Sha1:   72cdfa39d2c0f605763410de0b21a25127aca755
Sha256: 1147519fc60eb809eeef9f7ea91d569ca66e84aa219e18c0dbb56097af347056
                                        
                                            GET /tracker?js=13;id=186662;u=http%3A//www.consultant.ru/document/cons_doc_LAW_323793/5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a/;st=1679576662022;title=%D0%A1%D1%82%D0%B0%D1%82%D1%8C%D1%8F%205%20%5C%20%D0%9A%D0%BE%D0%BD%D1%81%D1%83%D0%BB%D1%8C%D1%82%D0%B0%D0%BD%D1%82%D0%9F%D0%BB%D1%8E%D1%81;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=fef486c55031750c;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1679576663016%3A1679576670281%3A3%3Ad99693fc2e8658f895e5c679a2743f00;opts=jst-ga;visible=true;_=0.3463805676234264;e=RT/unload;et=1679576670279;pvt=8257;vtauto=7269 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.consultant.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             95.163.52.67
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 13:04:22 GMT
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679576662:186662:::; path=/; expires=Sat, 23-Mar-24 13:04:22 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            GET /watch/21509128?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6446%2F%3Fban_id%3D6446%3Bzone%3D144%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A432248175%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130426%3Aet%3A1679576667%3Ac%3A1%3Arn%3A153071289%3Au%3A1679576663260941232%3Aw%3A298x150%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576663238%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576667%3At%3Aindex&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://banner.consultant.ru
Connection: keep-alive
Referer: http://banner.consultant.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.119
HTTP/2 302 Found
                                            
location: /watch/21509128/1?wmode=7&page-url=http%3A%2F%2Fbanner.consultant.ru%2Ffiles%2Fhtml%2F6446%2F%3Fban_id%3D6446%3Bzone%3D144%3Bfrom%3Dhttp%253A%252F%252Fwww.consultant.ru%252Fdocument%252Fcons_doc_LAW_323793%252F5bdc78bf7e3015a0ea0c0ea5bef708a6c79e2f0a%252F&page-ref=http%3A%2F%2Fwww.consultant.ru%2F&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1010846834848%3Ahid%3A432248175%3Aphid%3A70688214%3Az%3A0%3Ai%3A20230323130426%3Aet%3A1679576667%3Ac%3A1%3Arn%3A153071289%3Au%3A1679576663260941232%3Aw%3A298x150%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Ans%3A1679576663238%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679576667%3At%3Aindex&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 13:04:18 GMT
access-control-allow-origin: http://banner.consultant.ru
set-cookie: yabs-sid=1860557621679576658; Path=/; SameSite=None; Secure i=ERQ7PPFJCbHBXbC0a7Iq8liBLBuHYUN7dmQCA4nyySLIo35iOkIv12by/YNh8BJFpJc8ob+b05VKE9D6TwpSfr8SebY=; Expires=Sun, 20-Mar-2033 13:04:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=2689150171679576658; Expires=Sun, 20-Mar-2033 13:04:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=2689150171679576658; Expires=Fri, 22-Mar-2024 13:04:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711112658.yc.1679576658#1711112658.yrts.1679576658#1711112658.yrtsi.1679576658; Expires=Fri, 22-Mar-2024 13:04:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 13:04:18 GMT
last-modified: Thu, 23-Mar-2023 13:04:18 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: