freesoftrus.ru/soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
81.177.140.243302 Moved Temporarily 154 B URL HTTP/1.1 freesoftrus.ru/soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
IP 81.177.140.243:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 14 Oct 2022 04:13:32 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://freesoftrus.ru/soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 14 Oct 2022 03:49:52 GMT
Expires: Fri, 14 Oct 2022 04:44:57 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Xp4baG7fTCpKBXjT4h8uZEsFaL2T-BBBEL09dVdAvUhCs12FVIfLbg==
Age: 1420
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1ef1ca48ca7fd21239a2a11fcfc6366b
ee44232c27fb39d25ac901df2247c3ffd2c5bcca
e9bad8be490429a84a567acd710f97a402bcf7b4ba4e47f2bed27cada418c439
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9BAD8BE490429A84A567ACD710F97A402BCF7B4BA4E47F2BED27CADA418C439"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9050
Expires: Fri, 14 Oct 2022 06:44:23 GMT
Date: Fri, 14 Oct 2022 04:13:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bce7a9c1ff7500c4cfad5c3a3581a939
74b8dadf6ead0ce5d1d72e40a2eac554c5f5430c
6c840089371a0e25d60d0d76d6400348b0cdfb5967876c7b88e2b4a2aaf01a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C840089371A0E25D60D0D76D6400348B0CDFB5967876C7B88E2B4A2AAF01A03"
Last-Modified: Wed, 12 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6726
Expires: Fri, 14 Oct 2022 06:05:39 GMT
Date: Fri, 14 Oct 2022 04:13:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ELQhIQAyAcEd114ZDB5YlfaV4LSi1LntiEfeYPuuTuDk8guDcsdUm4g2Kb8M/8oIVMc9QrgLlc8=
x-amz-request-id: VA9TKSJAEB1C941Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 14 Oct 2022 04:02:00 GMT
age: 693
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
freesoftrus.ru/soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
81.177.140.243302 Found 236 B URL HTTP/2 freesoftrus.ru/soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
IP 81.177.140.243:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6b83847278c7f6a2f80212c4cc594a4f
74e16e01cefe958e8a7b335c7bbab8656a527782
947d941c6cf3dc7f6b4a8a79a9de6977b67fa389ed16223558d30596821731ec
GET /soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: text/html
content-length: 236
location: http://freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
81.177.140.243302 Moved Temporarily 154 B URL HTTP/1.1 freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
IP 81.177.140.243:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
Analyzer Verdict Alert fortinet Malware
GET /Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 14 Oct 2022 04:13:33 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
81.177.140.243404 Not Found 417 B URL HTTP/2 freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
IP 81.177.140.243:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
Analyzer Verdict Alert fortinet Malware
GET /Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c5d38b29fdb9a1ea45f9d0f1e10be7a5
fea64036bb0958e7addec1d7ed9cdab1158bc4d3
3830e88becc6fce2deb13fe35f1cfe97957bddbc958a2869182e1560ab352b25
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3830E88BECC6FCE2DEB13FE35F1CFE97957BDDBC958A2869182E1560AB352B25"
Last-Modified: Tue, 11 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=724
Expires: Fri, 14 Oct 2022 04:25:37 GMT
Date: Fri, 14 Oct 2022 04:13:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 14 Oct 2022 04:07:43 GMT
Expires: Fri, 14 Oct 2022 04:30:56 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U56mK3P_69vnGKAP334tl_XXO1cgg2RBRHzvMdsNL8G7_FAK2eZEOA==
Age: 350
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3583e23195fad53de085f55b7ae476b8
1e1ee824f8b5706b0a32b269af82769bb44f5d0f
0c3d6dbcec45e2d28fe0b43d2ae2eaf8cbb05d435b981edc1da311ce356fe30d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5881
Cache-Control: max-age=106278
Content-Type: application/ocsp-response
Date: Fri, 14 Oct 2022 04:13:33 GMT
Etag: "6347c71a-1d7"
Expires: Sat, 15 Oct 2022 09:44:51 GMT
Last-Modified: Thu, 13 Oct 2022 08:06:50 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
parking-static.jino.ru/static/components/page/icons/page_404.svg
195.161.41.160200 OK 499 B URL HTTP/2 parking-static.jino.ru/static/components/page/icons/page_404.svg
IP 195.161.41.160:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (499), with no line terminators
Hash 8996f663cca5651b50c8b235ea453177
3dde8d05e8013485a77e2c86fdba92e2afb94e3e
7210e831cb2c104aa3943c2c12df6bcd92b0da8d799c1ab910ae978383c6c57d
GET /static/components/page/icons/page_404.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: image/svg+xml
content-length: 499
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-1f3"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8b7f25ff269e319a4af42f039b972f2b
ec2e70268b3b64119f22ea6154c50e95317481c7
64a46bbaa26f555fe46d15a1b68e49185d33aa0fba19a7a9f029744e5d9c3cb4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64A46BBAA26F555FE46D15A1B68E49185D33AA0FBA19A7A9F029744E5D9C3CB4"
Last-Modified: Wed, 12 Oct 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8254
Expires: Fri, 14 Oct 2022 06:31:07 GMT
Date: Fri, 14 Oct 2022 04:13:33 GMT
Connection: keep-alive
freesoftrus.ru/favicon.ico
81.177.140.243404 Not Found 417 B URL HTTP/2 freesoftrus.ru/favicon.ico
IP 81.177.140.243:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
GET /favicon.ico HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/Soft/bandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
151.101.86.133200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.86.133:0
Hash 5e8c53e4e2e3840610301e5c37198c04
237823b21a099a6f481fc8c1fe786cc81a540451
13001e3391b553a461e61318f8337049cda739f2466044982701cb973a33de36
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 18 Oct 2022 02:03:20 GMT
ETag: "237823b21a099a6f481fc8c1fe786cc81a540451"
Last-Modified: Fri, 14 Oct 2022 02:03:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 14 Oct 2022 04:13:34 GMT
Age: 611
X-Served-By: cache-qpg1242-QPG, cache-bma1656-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 20
X-Timer: S1665720814.069698,VS0,VE0
push.services.mozilla.com/
34.213.92.18101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.213.92.18:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qJal2nIpWdFt96/cbAK7YA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cctNBdQ6iiMQS01k/5kde9rFCRc=
jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
195.161.41.61200 OK 62 kB URL HTTP/2 jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
IP 195.161.41.61:0
File type Web Open Font Format (Version 2), TrueType, length 61600, version 2.328\012- data
Hash 5d12c58fffdb5ac7fd41f05ee0180a8e
b147b184608a46e13bd50c9f7b2e9bede4eba085
84baa1b0c5914a65ef3b6049d5d06cd64c44eb35151e6558940d505b9c5ad8af
GET /static/lib/fonts/ptsans-sub/ptsans-regular.woff2 HTTP/1.1
Host: jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: application/octet-stream
date: Fri, 14 Oct 2022 04:13:33 GMT
etag: "6347a72f-f0a0"
expires: Sat, 14 Oct 2023 04:13:33 GMT
last-modified: Thu, 13 Oct 2022 05:50:39 GMT
server: nginx/1.10.3
content-length: 61600
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
93.158.134.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 460146be452f208c1f6522551302a015
b0fa6e22cabc464df86ead41b64ef8611f0a2864
79cc70749200e05b4080f11d05ff2e544e15f4fd2571013619f0f3d88e0c28ea
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57462
date: Fri, 14 Oct 2022 04:13:34 GMT
access-control-allow-origin: *
etag: "633fab48-e076"
expires: Fri, 14 Oct 2022 05:13:34 GMT
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash b9e5284c80ed1fed34e845d7497dca77
c9971795041adb49a03054429b9cb55ae95779fe
c60d44458f4ec57d08d722c032ba8dc028f406b28e3d6f78571bc0dee3126a9c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Oct 2022 04:13:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 12 Oct 2022 21:40:46 GMT
Expires: Wed, 19 Oct 2022 21:40:45 GMT
Etag: "c9971795041adb49a03054429b9cb55ae95779fe"
Cache-Control: max-age=494230,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 759d7bb09b2b0b51-OSL
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 14 Oct 2022 04:13:34 GMT
access-control-allow-origin: *
etag: "633fab48-2b"
expires: Fri, 14 Oct 2022 05:13:34 GMT
accept-ranges: bytes
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cache.betweendigital.com/code/1x1.gif
151.236.74.146200 OK 43 B URL HTTP/2 cache.betweendigital.com/code/1x1.gif
IP 151.236.74.146:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /code/1x1.gif HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 14 Oct 2022 04:13:34 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 08 Oct 2019 15:27:01 GMT
etag: "5d9caac5-2b"
x-cdn-edge-cache: HIT
x-cdn-edge-id: 237
x-cdn-request-id: 28200d600151f50f01b71a7ddddb3a94
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afp%3A970%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A445434718%3Arqn%3A1%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C543%2C0%2C%2C415%2C4%2C%2C%2C%2C1010%3Ans%3A1665720812711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665720814%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afp%3A970%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A445434718%3Arqn%3A1%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C543%2C0%2C%2C415%2C4%2C%2C%2C%2C1010%3Ans%3A1665720812711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665720814%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash ba2882120b1d157d7b53fa0a53be9bb6
b7a3057c0d9a324cd5513df04d33fce411b78af4
db6322eb6908ba158934d8428532eb5ba3bb38ee14e48291b3538aa9562b66a2
GET /watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afp%3A970%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A445434718%3Arqn%3A1%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C543%2C0%2C%2C415%2C4%2C%2C%2C%2C1010%3Ans%3A1665720812711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665720814%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack%28and_portable%29_by_kpojiuk.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afp%3A970%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A445434718%3Arqn%3A1%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C543%2C0%2C%2C415%2C4%2C%2C%2C%2C1010%3Ans%3A1665720812711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665720814%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 14 Oct 2022 04:13:34 GMT
access-control-allow-origin: https://freesoftrus.ru
set-cookie: yandexuid=3519666581665720814; Expires=Sat, 14-Oct-2023 04:13:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3519666581665720814; Expires=Sat, 14-Oct-2023 04:13:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=56659601665720814; Path=/; SameSite=None; Secure
i=n05HHW0k7dBb5T7OVKwrxXTMudmLlHvjs+KWOubTIcWdtnKwocTbAVTJISHvrc7y72XsuNxP0pUqEnHIF0Fz76MsbMs=; Expires=Mon, 11-Oct-2032 04:13:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1697256814.yrts.1665720814#1697256814.yrtsi.1665720814; Expires=Sat, 14-Oct-2023 04:13:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 14-Oct-2022 04:13:34 GMT
last-modified: Fri, 14-Oct-2022 04:13:34 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
104.16.200.58301 Moved Permanently 1.6 kB URL HTTP/2 pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP 104.16.200.58:0
File type gzip compressed data, from Unix\012- data
Hash 2cf0e76f8c42b71535783c61d51156df
94ce2042927b2aa2f472672adadc7e5ffab3e78e
da941f235eeb36d3165129dfc2a25271aca37f763ebc568cb9586cf2704f1689
GET /fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 14 Oct 2022 04:13:34 GMT
location: https://pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
cache-control: max-age=3600
expires: Fri, 14 Oct 2022 05:13:34 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 759d7bb2ccedb506-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 62ea47113671ff5204cc735de226a312
e4aab27238718c60deac7751bd9da48fbec1dd5e
654c10b0e51412db3e0c3cb69a20e89f149315fbfb637acf7af2b415b834ac55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2367
Cache-Control: max-age=120789
Content-Type: application/ocsp-response
Date: Fri, 14 Oct 2022 04:13:34 GMT
Etag: "63480d84-116"
Expires: Sat, 15 Oct 2022 13:46:43 GMT
Last-Modified: Thu, 13 Oct 2022 13:07:16 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&ut=noindex&hittoken=1665720814_8f6174d0b9ea264cd1206260af3168cf94209292aa863fae2bade6fdf88f1273&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A583871611%3Arqn%3A2%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1665720812711%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1665720814&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&ut=noindex&hittoken=1665720814_8f6174d0b9ea264cd1206260af3168cf94209292aa863fae2bade6fdf88f1273&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A583871611%3Arqn%3A2%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1665720812711%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1665720814&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fbandicam.v1.9.4.503_repack(and_portable)_by_kpojiuk.zip&charset=utf-8&ut=noindex&hittoken=1665720814_8f6174d0b9ea264cd1206260af3168cf94209292aa863fae2bade6fdf88f1273&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A8lptml46owy1i81m1iing%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1495814839670%3Ahid%3A724628409%3Az%3A0%3Ai%3A20221014041334%3Aet%3A1665720814%3Ac%3A1%3Arn%3A583871611%3Arqn%3A2%3Au%3A1665720814204713560%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1665720812711%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1665720814&t=gdpr(14)mc(p-1)clc(0-0-0)aw(1)rqnt(2)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 48
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 14 Oct 2022 04:13:34 GMT
access-control-allow-origin: https://freesoftrus.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 14-Oct-2022 04:13:34 GMT
last-modified: Fri, 14-Oct-2022 04:13:34 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pre.glotgrx.com/impimg.gif?cb=1665720814461&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1
104.16.121.195200 OK 26 B URL HTTP/2 pre.glotgrx.com/impimg.gif?cb=1665720814461&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1
IP 104.16.121.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /impimg.gif?cb=1665720814461&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1 HTTP/1.1
Host: pre.glotgrx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 14 Oct 2022 04:13:34 GMT
content-type: image/gif
content-length: 26
last-modified: Wed, 12 Oct 2022 01:08:32 GMT
cf-cache-status: HIT
age: 6777
expires: Fri, 14 Oct 2022 06:13:34 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 759d7bb30d29b506-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
151.101.86.133200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.86.133:0
Hash 002abce4fb35247db26e1dff474d02f1
014a3e2a45eea0e6b5d38bfbc5fcccb769440a77
af55cc8c6ae2c4505bdd11d8e002a5f139cf980883db060ebade23da721ec594
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 18 Oct 2022 01:43:20 GMT
ETag: "014a3e2a45eea0e6b5d38bfbc5fcccb769440a77"
Last-Modified: Fri, 14 Oct 2022 01:43:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 14 Oct 2022 04:13:34 GMT
Age: 1811
X-Served-By: cache-qpg1282-QPG, cache-bma1656-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 23
X-Timer: S1665720815.634363,VS0,VE0
www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584
194.226.130.227302 Found 0 B URL HTTP/2 www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584
IP 194.226.130.227:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: ms-counter-3.3.5/1.20.2
date: Fri, 14 Oct 2022 04:13:34 GMT
content-type: image/gif
content-length: 0
location: https://www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584
set-cookie: guid=0E9B070C6348E1EEX1665720814; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
strict-transport-security: max-age=2678400
X-Firefox-Spdy: h2
www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584
194.226.130.227200 OK 43 B URL HTTP/2 www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584
IP 194.226.130.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/60400584 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ms-counter-3.3.5/1.20.2
date: Fri, 14 Oct 2022 04:13:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3388
Expires: Fri, 14 Oct 2022 05:10:03 GMT
Date: Fri, 14 Oct 2022 04:13:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3388
Expires: Fri, 14 Oct 2022 05:10:03 GMT
Date: Fri, 14 Oct 2022 04:13:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3388
Expires: Fri, 14 Oct 2022 05:10:03 GMT
Date: Fri, 14 Oct 2022 04:13:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66af0895-4532-481a-84d9-523353a6c160.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66af0895-4532-481a-84d9-523353a6c160.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e80557033ce8935b57b87fe59633393e
6c055a00a12067ab5b11458bb614bc6f1028c28a
8a88d7f2110e5c200f6f26ed5e6c7b299b9c76654f095b870cfffb2a8d7b96d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66af0895-4532-481a-84d9-523353a6c160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9350
x-amzn-requestid: fd2ec00f-7ef1-4e4a-a652-a388dcba3e16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9m0EHctoAMF8Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634884e6-7e945574599f2ec67e824671;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:36:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jwQT6vQNNLDQFqrROqQ-prpvIGnhB5aK-hVVwZRClZQP5fnbgpfOuA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 23:04:28 GMT
age: 18547
etag: "6c055a00a12067ab5b11458bb614bc6f1028c28a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F244a1612-7d0a-4ff2-9582-fe2a92682acd.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F244a1612-7d0a-4ff2-9582-fe2a92682acd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a63638f79e34b8b7919c04254b31e3d
4c89bf9c28be999299684a97b4da470726acd89b
e7b27e45e575f4b78c56d7af6e84c166a38cd0c13aec2bf8c0d49c813a587318
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F244a1612-7d0a-4ff2-9582-fe2a92682acd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7990
x-amzn-requestid: d7f9dc31-9152-4d9b-ab2c-1e3a91a57ad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9nLhH4VoAMF0Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348857c-284d34774f384ecd7960064a;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:39:08 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: UhPLTF-4_n3vVpbOjn9yFgfz6c8aZ-ZNC79-SKcAUOm8Vd1BIU-l6A==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 22:56:29 GMT
etag: "4c89bf9c28be999299684a97b4da470726acd89b"
content-type: image/jpeg
age: 19026
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd38e46c-1252-4a62-b18c-fa49d9d76841.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd38e46c-1252-4a62-b18c-fa49d9d76841.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7411df7da53e98c4988663b3338ac449
cd5518eff668619efbf3b821306d651fcb30a712
b87d92eef134e1378d51aac8503545949596c982b53fbda75ccbec71dbff6d7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd38e46c-1252-4a62-b18c-fa49d9d76841.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5994
x-amzn-requestid: c4d202a5-0dcc-4ece-9200-4f1865d619c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZhRaIHWfoAMFgGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633d2f73-07f65d1f633273a6422c4e5c;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 07:17:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wxjiS1CMMb4Gr0qvBLC0yc6RmfRnDHbQFiXCwTR6aRjiUkupn3x9uA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 21:59:30 GMT
age: 22445
etag: "cd5518eff668619efbf3b821306d651fcb30a712"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cache.betweendigital.com/sections/2/266562.js
151.236.74.146200 OK 126 kB URL HTTP/2 cache.betweendigital.com/sections/2/266562.js
IP 151.236.74.146:0
Size 126 kB (126302 bytes)
Hash 9c1b5b17cae698dae38dc128798f07f5
b61f87c58121a12e2a9a5ad759284bdabb7d6fa2
b6b782f413e07d689bdecef2ab095f82278044f6ca66b26c7a002290dfcbbff2
GET /sections/2/266562.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 14 Oct 2022 04:13:34 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 08:41:04 GMT
etag: W/"5d9705a0-2176"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 237
x-cdn-request-id: 71f82f5eb6a01331e51f3e360c6a616b
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29dee6f-934c-4a9c-a8aa-8da6931e92e3.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29dee6f-934c-4a9c-a8aa-8da6931e92e3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05cbae7a5598ecb6de18ba845117b543
00c5b6a969acf49d11b963ed509f4c7c0a767438
f915a4215fc3bb08a43b38352dec8ef798d0e7648df20cb53c968c52108216f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc29dee6f-934c-4a9c-a8aa-8da6931e92e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8890
x-amzn-requestid: 53e8447e-dbb7-41f1-a184-ceea0e33ed3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9nLqG2voAMFc-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348857d-302e435a359d84ab25d3b003;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ashiRI0jxjFwVDJaldk8AwtX2z8p4j4Vvck78BAAnazxoIfBFbHwdQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 22:38:13 GMT
age: 20122
etag: "00c5b6a969acf49d11b963ed509f4c7c0a767438"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dabeb89-1b65-4f3f-8a50-db8fa88ada36.webp
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dabeb89-1b65-4f3f-8a50-db8fa88ada36.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 04f5a9157c75ff1bc251587e2be4802c
057a3fc927eba48cc81772ffd866c5b19e59049e
4008e2aa3967790afaed1f90cd86fd6c41359095db5e754f8581ec50a3361e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dabeb89-1b65-4f3f-8a50-db8fa88ada36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4183
x-amzn-requestid: 4f68e99f-0ee9-4178-b032-fb6d644e57d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z9nBYGamIAMF3lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348853b-7eb799a4729211a03aa64ba6;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 21:38:03 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DR1gFAH9ZREY8_LmtpUWDLvKOeBKIcsdFKYswHUFUtSZm-RIo7xevA==
via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 13 Oct 2022 21:59:49 GMT
age: 22426
etag: "057a3fc927eba48cc81772ffd866c5b19e59049e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash bfa6ae16e9bd0a2d185223933de2745a
38d4315954aeeab978fcd2a977b5d8270db04ed4
38e9b48fa27274f5bd6e04977725b5cc7a1b66ee4b95d368eb5011437df301a9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Oct 2022 04:13:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 04:09:17 GMT
Expires: Tue, 18 Oct 2022 04:09:16 GMT
Etag: "38d4315954aeeab978fcd2a977b5d8270db04ed4"
Cache-Control: max-age=344740,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 759d7bb7fe420b51-OSL
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=f5a0eb14-f37e-521f-ba32-c428d97a25c7; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
ut=Y0jh7wAIptjaRBbCWtuDLQQdwByJA83Fv5QYGQ==; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&tld=ZnJlZXNvZnRydXMucnU=
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&tld=ZnJlZXNvZnRydXMucnU=
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /js?en=anNfcnVu&context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&tld=ZnJlZXNvZnRydXMucnU= HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=3f95d70b-6e9f-521f-8582-3914e6cad8fb; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
ut=Y0jh7wAKAoBJy_DP_4tLosrKlFTcKsoVqmqVBQ==; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 12e4ceffb72c277d7ccb87d850819240
4530d08380883371a29344e90cbe704152e049ce
ac9bbd8dbd4526a1edbbd957c5374eb0d93eeb0ca475d0d2e3f11c63db4024c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC9BBD8DBD4526A1EDBBD957C5374EB0D93EEB0CA475D0D2E3F11C63DB4024C3"
Last-Modified: Tue, 11 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2961
Expires: Fri, 14 Oct 2022 05:02:56 GMT
Date: Fri, 14 Oct 2022 04:13:35 GMT
Connection: keep-alive
parking.jino.ru/static/bnr/728x90-joomla.jpg
195.161.62.100200 OK 18 kB URL HTTP/2 parking.jino.ru/static/bnr/728x90-joomla.jpg
IP 195.161.62.100:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 728x90, components 3\012- data
Hash d393de258d04bcb6084bfeccb73a1dcd
f92d66055a50f20402b085f49d769c7311876e45
50924754d49e9b12150bc9ec55c4352187925ab89da508c572aa9cc28092b2ed
GET /static/bnr/728x90-joomla.jpg HTTP/1.1
Host: parking.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 14 Oct 2022 04:13:35 GMT
content-type: image/jpeg
content-length: 17592
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-44b8"
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&event=omo
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&event=omo
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&event=omo HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:36 GMT; Path=/; Domain=.betweendigital.com
tuuid=f9be3b4e-7575-521f-9cfd-ecf5ffb50d05; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:36 GMT; Path=/; Domain=.betweendigital.com
ut=Y0jh8AAAcUinGHAlO9fRBazTbh5nidhH3qkT0w==; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:36 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D472ee3627790149918802bf80ea0c3d84352c8dc
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D472ee3627790149918802bf80ea0c3d84352c8dc
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAOjpIWxhdgACdwA0AtVTvW_TQBS3H1ZVlQhQxYBQhwiBBRJx7hL7bLeyikoFCNEWVVSqugR_3DWmxg7nS5p2qliAjYGxfwRD18LIwEDYmBB_AkJMTJzz0UYRYmPg-Xz2-91779773Tu4F4TItEKbVALLDSomQUHFtxmrWCzEzHWCyPJDwF9ffDgq_Xj_5uOvx9OdmO4qCtxsCtHK56tVxinNMyZ4Ozd4G4w_41W45GLDRYZZM7Blwkt1JduPk8SvWgYqX9_EeKH8IE7b3XLXIQ1iLpR5Z94lBrpRvkvDnaxaQxjJgct3Yk5Z1q0WizBTN5Fpn3ws26kTKNUIsUgN3p6FIxUU0ADkrMDcRKoKzHLaaeRNn1MANLAqpJhhZk00KYdphDECbXUNptfyJAMN1QtbjaYw008YAMPlQerLNN8RWWvk2g91sfe6d_z5ee9d73gUWoGp2w9XoK_ANxgR5ke5EVCxS2kaxdux8BMjzJ5KOF5kPPGQ3spyzxdMF_tSYQWS8cizXISIg-uORVxsu4ajc-5FkqRQ6CwLPazzRk6fSWuRRN5Wej_Z2lztbKXre9HmSjtMN67Vl3Xhbz_aa1FPbqbvenbN0Zuei_TcG1CpP8mF58d6yJmHJUsXmJ8kgR_uSG4LZku4RhCylT6F_XdYqDKs8tzw1EBzSX9hQPSQ7_9Jvi-Oa5P5S_1gcQSrwzrh6qFyS_6YSxKDMR-1sPgX9-JQUyYjF_sdalPrG0uTFcGVLE3ilDbiVqOZ5SJOt0GBvxyN-vPMiAu1JHul66KpOfXg1f7Q69P5Ygxkdowo-KINukKVPaKeLpxeupOUNPmoyrhoJ_yP8N8=&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D472ee3627790149918802bf80ea0c3d84352c8dc HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:37 GMT; Path=/; Domain=.betweendigital.com
tuuid=b3ee0f93-1c89-521f-8bd9-d824e89139d5; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:37 GMT; Path=/; Domain=.betweendigital.com
ut=Y0jh8QAAdTB7QPbWugRywRaggfuynhp01yVfAw==; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:37 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
parking-static.jino.ru/static/main.js
195.161.41.160200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/main.js
IP 195.161.41.160:0
GET /static/main.js HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-1b823"
content-encoding: gzip
X-Firefox-Spdy: h2
parking-static.jino.ru/static/components/page/logo.svg
195.161.41.160200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/components/page/logo.svg
IP 195.161.41.160:0
GET /static/components/page/logo.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 14 Oct 2022 04:13:33 GMT
content-type: image/svg+xml
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-a26"
content-encoding: gzip
X-Firefox-Spdy: h2
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
188.42.191.196200 OK 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
IP 188.42.191.196:0
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=590068138569179.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=03f14edf-0704-521f-bb30-10ced878f121; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
ut=Y0jh7wAJTtBERiB0CcID2Bbu9j8VFuk6evSCug==; Max-Age=31536000; Expires=Sat, 14 Oct 2023 04:13:35 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cache.betweendigital.com/pmListener.js
151.236.74.146200 OK 0 B URL HTTP/2 cache.betweendigital.com/pmListener.js
IP 151.236.74.146:0
GET /pmListener.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 14 Oct 2022 04:13:35 GMT
content-type: application/javascript
last-modified: Wed, 03 Feb 2021 14:20:14 GMT
etag: W/"601ab11e-caf"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 237
x-cdn-request-id: e37c82f55cc32bfa2612aa69684eedd0
X-Firefox-Spdy: h2