r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8944
Expires: Thu, 09 Feb 2023 02:26:39 GMT
Date: Wed, 08 Feb 2023 23:57:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5163
Expires: Thu, 09 Feb 2023 01:23:38 GMT
Date: Wed, 08 Feb 2023 23:57:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 23:34:14 GMT
content-type: application/json
age: 1401
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7113
Expires: Thu, 09 Feb 2023 01:56:08 GMT
Date: Wed, 08 Feb 2023 23:57:35 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nEOBV688HThyV0qB6j+xZaKiy0O4CJrKBvKEPKWgbl556LNPyidt2zCYODexAymmCfCPiheipkI=
x-amz-request-id: FC7YHGDAZ54YZSAR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 23:46:09 GMT
age: 686
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:57:35 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
rumyantsevamd.ru/
91.189.114.30200 OK 26 kB IP 91.189.114.30:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (54691), with CRLF, LF line terminators
Hash 769de1c1127aac901223e0954c47c237
7cc07478c2c27f5208f4f7ee77349a41c054d818
5a0811358f8cb5e394fba38af948b1ba0439f31784fd707fbff9c9d5c3facc40
GET / HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Vary: Accept-Encoding, Accept-Encoding,Cookie
X-UA-Compatible: IE=edge
Link: <http://rumyantsevamd.ru/wp-json/>; rel="https://api.w.org/", <http://wp.me/75fcT>; rel=shortlink
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 23:51:21 GMT
age: 374
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10388
Expires: Thu, 09 Feb 2023 02:50:43 GMT
Date: Wed, 08 Feb 2023 23:57:35 GMT
Connection: keep-alive
rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.5.1
91.189.114.30200 OK 534 B URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.5.1
IP 91.189.114.30:0
Hash 5ede63e7c465199b51086e8ea8cb14d3
e3e0f9ccd27a6c5f8b9594c1cc9f8b11a22c4eb9
7befd339133ccedb07dfc0b049072a429cba5fe68658e1ca29f91c001339d78b
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.5.1 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2016 16:16:42 GMT
Vary: Accept-Encoding
ETag: W/"5831cc6a-4f6"
Content-Encoding: gzip
fonts.googleapis.com/css?family=Droid+Serif%3A400%2C700%2C400italic%7CPlayfair+Display%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic&subset=latin%2Clatin-ext
142.250.74.106200 OK 696 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Serif%3A400%2C700%2C400italic%7CPlayfair+Display%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic&subset=latin%2Clatin-ext
IP 142.250.74.106:0
Hash 66a48abdc99a422bd84b2fc43766ae96
e0f4894d43ed1890a694b24a77acac3b26be159e
b288c53fec418332772b653b1d9b9188f5998715cee7f4863ecd54544ec229e9
GET /css?family=Droid+Serif%3A400%2C700%2C400italic%7CPlayfair+Display%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 08 Feb 2023 23:57:35 GMT
Date: Wed, 08 Feb 2023 23:57:35 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
rumyantsevamd.ru/wp-content/themes/hive/assets/css/font-awesome.css?ver=4.2.0
91.189.114.30200 OK 7.4 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/css/font-awesome.css?ver=4.2.0
IP 91.189.114.30:0
File type troff or preprocessor input, ASCII text, with very long lines (372)
Hash e42fb38b27376a790ad1e67e128f8542
2c5a63f394c8d4ad4cc1bf1e84c4d1009b08ff6c
9687460ef9e05e9b3026daaec8cf98a6c491cbc61f6cb3af786a714fda1aec43
GET /wp-content/themes/hive/assets/css/font-awesome.css?ver=4.2.0 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:57 GMT
Vary: Accept-Encoding
ETag: W/"58ecf1c5-9226"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/jetpack/css/jetpack.css?ver=3.9.8
91.189.114.30200 OK 10 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/css/jetpack.css?ver=3.9.8
IP 91.189.114.30:0
File type ASCII text, with very long lines (57107)
Hash ed9ace7c146d5242665385485b15e0a9
fe86660d22d2a4cdaa2dbd3e4a95ff6d3bd75f49
917e4fada4134651444b094301f0b1f47c6272bab8748e9cf04790d014dffde4
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=3.9.8 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
Vary: Accept-Encoding
ETag: W/"60b8ef3f-df74"
Content-Encoding: gzip
rumyantsevamd.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
91.189.114.30200 OK 3.1 kB URL HTTP/1.1 rumyantsevamd.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
IP 91.189.114.30:0
File type ASCII text, with very long lines (7085), with CRLF line terminators
Hash be877782551a115e6da253d62cc3a6b2
b06a56238dcc28a6343c66d41aab3ad12a9c4f08
aba99fe4bef6b2ef9f9f0824e9dbdf7dede23e22a98b2305820c1f25a37e7380
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 23 Jul 2013 15:28:25 GMT
Vary: Accept-Encoding
ETag: W/"51eea119-1c20"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/popup/jquery.magnific-popup.min.js?ver=4.2
91.189.114.30200 OK 7.7 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/popup/jquery.magnific-popup.min.js?ver=4.2
IP 91.189.114.30:0
File type ASCII text, with very long lines (20965)
Hash eecaf699eec02a74dc93b4a45f29ba88
a0fd46ddc804484ffb622332e1f31046b78fa6b4
d4aadea0d8d183f314d3c3692c8d67aa6c15200c3645fe943caeb9cb28551710
GET /wp-content/plugins/easy-facebook-likebox/public/assets/popup/jquery.magnific-popup.min.js?ver=4.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 30 Jan 2016 19:30:18 GMT
Vary: Accept-Encoding
ETag: W/"56ad0f4a-5266"
Content-Encoding: gzip
s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202306
192.0.77.32200 OK 3.2 kB URL HTTP/1.1 s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202306
IP 192.0.77.32:0
File type ASCII text, with very long lines (2788)
Hash 844b0e2ae8eba4159dd5edd8efbde50c
757861da25bea58b1bc03203f65ae93673cfc065
ef84d445c23339e2c3742857d7e020c89d639f1ddc434b6f6a585ac9907bbb92
GET /wp-content/js/devicepx-jetpack.js?ver=202306 HTTP/1.1
Host: s0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5bffef65-52b6"
Content-Encoding: gzip
Expires: Tue, 06 Feb 2024 00:00:10 GMT
Cache-Control: max-age=31536000
X-ac: 4.arn _dca MISS
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-nc: HIT arn 2
s.gravatar.com/js/gprofiles.js?ver=2023Febaa
192.0.73.2200 OK 7.4 kB URL HTTP/1.1 s.gravatar.com/js/gprofiles.js?ver=2023Febaa
IP 192.0.73.2:0
File type ASCII text, with very long lines (24043), with no line terminators
Hash b94596ffc2746c0e33c2039215531592
6a6fde47cda13c98489c70905c18b815910d1c4d
4e98be196118a9cd8e66c910fae42a8a45d6781f360996eadc691263d6193462
GET /js/gprofiles.js?ver=2023Febaa HTTP/1.1
Host: s.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 15 Sep 2022 11:48:47 GMT
ETag: W/"6323111f-5deb"
Content-Encoding: gzip
Expires: Wed, 15 Feb 2023 23:57:35 GMT
Cache-Control: max-age=604800
rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/js/jquery.cookie.js?ver=4.2
91.189.114.30200 OK 1.4 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/js/jquery.cookie.js?ver=4.2
IP 91.189.114.30:0
Hash 71cee6f859ca573c06c376e5ad3cd9fe
92defeef63ab15263a06b357326576d3441e60ce
1568782488cf5cd7416b6a1bbd5afce7d94e5d188cde9223ba6f70aacfe97673
GET /wp-content/plugins/easy-facebook-likebox/public/assets/js/jquery.cookie.js?ver=4.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 30 Jan 2016 19:30:18 GMT
Vary: Accept-Encoding
ETag: W/"56ad0f4a-c38"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/js/public.js?ver=4.2
91.189.114.30200 OK 756 B URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/js/public.js?ver=4.2
IP 91.189.114.30:0
Hash b653a76ff3946d18a1e2577c13c7bf2d
f8628a52c90d7f7c4c921d8ecce4d639408e33b4
4f336a78834a9c61b3d30480948bafcd27080c942c03ad8c4348efa80f9dbe22
GET /wp-content/plugins/easy-facebook-likebox/public/assets/js/public.js?ver=4.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 30 Jan 2016 19:30:18 GMT
Vary: Accept-Encoding
ETag: W/"56ad0f4a-9f8"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/themes/hive/style.css?ver=4.4.29
91.189.114.30200 OK 15 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/style.css?ver=4.4.29
IP 91.189.114.30:0
File type Unicode text, UTF-8 text, with very long lines (458)
Hash 6b4c156384a7ae5669669ce02adc82a8
56d16375406fcee747a65dba7e5f46b84bd263be
7be0ba23caf12742e1cac881134b866af3329c889cfb19ee27bf562d2211f4fd
GET /wp-content/themes/hive/style.css?ver=4.4.29 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:16:50 GMT
Vary: Accept-Encoding
ETag: W/"58ecf362-13118"
Content-Encoding: gzip
rumyantsevamd.ru/wp-includes/js/swfobject.js?ver=2.2-20120417
91.189.114.30200 OK 3.9 kB URL HTTP/1.1 rumyantsevamd.ru/wp-includes/js/swfobject.js?ver=2.2-20120417
IP 91.189.114.30:0
File type ASCII text, with very long lines (10082)
Hash 45952b378736692e1ca5cef76dd76a9b
980b575a952432f78ec206ce64ea4a3b611ba381
84761803b30eed4a2ef0157e02ed30a2b245d4179af71a511bb3e861dcf9de04
GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 17 Apr 2012 23:09:29 GMT
Vary: Accept-Encoding
ETag: W/"4f8df829-27f7"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/css/public.css?ver=4.2
91.189.114.30200 OK 2.1 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/css/public.css?ver=4.2
IP 91.189.114.30:0
Hash 765f41c51cef36be5b95113f587b383e
cfd75d0d1d769779465655e3eeeaeee935c55b00
40d0826f8865386309f124a367cc3664c57ff4a548da2955e4f603aa7d3ac83a
GET /wp-content/plugins/easy-facebook-likebox/public/assets/css/public.css?ver=4.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 30 Jan 2016 19:30:18 GMT
Vary: Accept-Encoding
ETag: W/"56ad0f4a-2292"
Content-Encoding: gzip
rumyantsevamd.ru/wp-includes/js/jquery/jquery.js?ver=1.11.3
91.189.114.30200 OK 33 kB URL HTTP/1.1 rumyantsevamd.ru/wp-includes/js/jquery/jquery.js?ver=1.11.3
IP 91.189.114.30:0
File type ASCII text, with very long lines (32038)
Hash d092e2b1a749ffa39d04b31e6f7d00e9
480162a3eabbc99d546aad818802080cb297b0e4
9bf7e47fc6a5c90b5e5ed56905ecc2c1f42cb8a102b4b81d179bcab30247038b
GET /wp-includes/js/jquery/jquery.js?ver=1.11.3 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Jun 2015 23:40:23 GMT
Vary: Accept-Encoding
ETag: W/"558f3467-176e9"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
91.189.114.30200 OK 5.9 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
IP 91.189.114.30:0
File type ASCII text, with very long lines (14900)
Hash 414d9e2ba69ea5bbe80d7f600c24bcc2
d59e5e2ebbc18583b28d65bb8f40081faf9195e3
2213878341d58261bce67ba9823e8a2b516a17693930f5307b344423a0010135
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2016 16:16:42 GMT
Vary: Accept-Encoding
ETag: W/"5831cc6a-3b90"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/jetpack/modules/shortcodes/js/jquery.cycle.js?ver=2.9999.8
91.189.114.30200 OK 14 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/modules/shortcodes/js/jquery.cycle.js?ver=2.9999.8
IP 91.189.114.30:0
Hash 2afa0391e549e03c57d20006330c7118
8bfb65cb84f584eabdb661984fbf4aad73fdad76
a6edf8cb077270e14e7b77c6d75cbe057cbe3e445561bb2441ec40c0039e761d
GET /wp-content/plugins/jetpack/modules/shortcodes/js/jquery.cycle.js?ver=2.9999.8 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
Vary: Accept-Encoding
ETag: W/"60b8ef3f-ccf6"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/popup/magnific-popup.css?ver=4.2
91.189.114.30200 OK 2.0 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/easy-facebook-likebox/public/assets/popup/magnific-popup.css?ver=4.2
IP 91.189.114.30:0
Hash 940d74755e5536d09c7fa9eb66372652
d1d8b8238f080fdedd4015c7da81675c62a802c6
69a629f67d38a1a75391be1ba82c5756821d6bf7aa135e800ec88c679d716621
GET /wp-content/plugins/easy-facebook-likebox/public/assets/popup/magnific-popup.css?ver=4.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 30 Jan 2016 19:30:18 GMT
Vary: Accept-Encoding
ETag: W/"56ad0f4a-1e6d"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.5.1
91.189.114.30200 OK 3.3 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.5.1
IP 91.189.114.30:0
Hash 705137491fbdb828951524b67f86510b
98844b84314e1fd875a9744e4d9ba7cc347aecf5
efa0011eed7613c6e2cde24cff446b18a5b3b76a32fbb17315e96d49a498b8be
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.5.1 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2016 16:16:42 GMT
Vary: Accept-Encoding
ETag: W/"5831cc6a-2fcf"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.css?ver=4.4.29
91.189.114.30200 OK 207 B URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.css?ver=4.4.29
IP 91.189.114.30:0
Hash 4e43cc01fafe401c6166602e6b5f7ae7
771340dbf5b35b3808a08a95488440dce2996588
e5af1eb6993dc2df14e003d0fe5f3e3d48c188332f3ffa5ede99559fcf0eef3a
GET /wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.css?ver=4.4.29 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: text/css
Content-Length: 207
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
ETag: "60b8ef3f-cf"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/plugins/jetpack/modules/shortcodes/js/slideshow-shortcode.js?ver=20121214.1
91.189.114.30200 OK 1.9 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/modules/shortcodes/js/slideshow-shortcode.js?ver=20121214.1
IP 91.189.114.30:0
Hash ac7e66026fd50b1fcdc9d252581b52ae
230f01e936215640320cf24a5f463e12726dd9f0
9efe7e52aaccc60c9bc7dd078342c66a86ba6399a71dc77e55a3352d65f3ac92
GET /wp-content/plugins/jetpack/modules/shortcodes/js/slideshow-shortcode.js?ver=20121214.1 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
Vary: Accept-Encoding
ETag: W/"60b8ef3f-16d5"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/jetpack/modules/wpgroho.js?ver=4.4.29
91.189.114.30200 OK 1.0 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/modules/wpgroho.js?ver=4.4.29
IP 91.189.114.30:0
Hash b900f865a0d6f581b8e93f8c6311550f
21c1d3f27564133fb9aad8f1c2d6cc1ec138aea1
8f2270058422f39ff89104cec8f21350c09c033a28ad8ef72d82f76f56960440
GET /wp-content/plugins/jetpack/modules/wpgroho.js?ver=4.4.29 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Content-Length: 1015
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
ETag: "60b8ef3f-3f7"
Accept-Ranges: bytes
push.services.mozilla.com/
54.203.75.56101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.203.75.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5PEaOgmw8+bZsuZb+1mDUA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7OWb4ClIhstixzrE4EeKEd//rwQ=
rumyantsevamd.ru/wp-includes/js/masonry.min.js?ver=3.1.2
91.189.114.30200 OK 9.3 kB URL HTTP/1.1 rumyantsevamd.ru/wp-includes/js/masonry.min.js?ver=3.1.2
IP 91.189.114.30:0
File type ASCII text, with very long lines (24945)
Hash d0b1fc82122c17161056175b1f61abf3
808706500d182fcc48d6bc88b48d09d4f9b0e57d
daba1987abe4dd47928ec7ef13b70b3acfede2768cce5855ba7f97cf3cbf7952
GET /wp-includes/js/masonry.min.js?ver=3.1.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 07 Apr 2015 04:38:25 GMT
Vary: Accept-Encoding
ETag: W/"55235f41-7ce8"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/themes/hive/assets/js/imagesloaded.js?ver=3.1.8
91.189.114.30200 OK 6.8 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/js/imagesloaded.js?ver=3.1.8
IP 91.189.114.30:0
Hash fa75b23214cd5b1f41a11eb9369f4098
76e59de0331d5b377aacc4807efb5a3af95f7b5c
cc7439d41339d4162eec63a56397b9ba58dbceda0fe02213d3fe7d1a41e39c7d
GET /wp-content/themes/hive/assets/js/imagesloaded.js?ver=3.1.8 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:58 GMT
Vary: Accept-Encoding
ETag: W/"58ecf1c6-6812"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/themes/hive/assets/js/jquery.hoverIntent.js?ver=1.8.0
91.189.114.30200 OK 1.6 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/js/jquery.hoverIntent.js?ver=1.8.0
IP 91.189.114.30:0
Hash 6d235bd126f4884106cd6b401c3af7f0
21552db4016a55a1bbc56a988562d45816d31e73
ddf531bc7bb4a5076619ba47bd5a27239cd64473e2cdb18de18767f9a6e5908d
GET /wp-content/themes/hive/assets/js/jquery.hoverIntent.js?ver=1.8.0 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:58 GMT
Vary: Accept-Encoding
ETag: W/"58ecf1c6-1355"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/themes/hive/assets/js/main.js?ver=1.0.0
91.189.114.30200 OK 5.9 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/js/main.js?ver=1.0.0
IP 91.189.114.30:0
Hash e5077cb6452c9ec2180fe8d0cd7542a8
f765705da3019c4f9a4f709ee9bcbde1c639cd7b
baffef6e659dfbfd9e05915f2205dacd45765b31abb28041dd77d47f1a004036
GET /wp-content/themes/hive/assets/js/main.js?ver=1.0.0 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:58 GMT
Vary: Accept-Encoding
ETag: W/"58ecf1c6-50fb"
Content-Encoding: gzip
rumyantsevamd.ru/wp-includes/js/wp-embed.min.js?ver=4.4.29
91.189.114.30200 OK 733 B URL HTTP/1.1 rumyantsevamd.ru/wp-includes/js/wp-embed.min.js?ver=4.4.29
IP 91.189.114.30:0
File type ASCII text, with very long lines (1384), with no line terminators
Hash b33ec51a91e80b6ec465ae6b3f7a7948
41dd8a38051c338609e872b50f52341ae66ca29a
b34255b006c8b1f1d04237f2a3727151ff4ae3b7123e925c9d681fd22a0d2f01
GET /wp-includes/js/wp-embed.min.js?ver=4.4.29 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 May 2021 03:03:32 GMT
Vary: Accept-Encoding
ETag: W/"609c9704-568"
Content-Encoding: gzip
rumyantsevamd.ru/wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.min.js?ver=1.2
91.189.114.30200 OK 892 B URL HTTP/1.1 rumyantsevamd.ru/wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.min.js?ver=1.2
IP 91.189.114.30:0
File type ASCII text, with very long lines (891)
Hash 585005690e530e8047374cf14e479281
937632135c140682d2ea651378bdc9fe9faf9ed6
1f6d3e09969916e203c940124ef19b654464ed322c756530e1bcb1267cc93e2c
GET /wp-content/plugins/jetpack/modules/theme-tools/responsive-videos/responsive-videos.min.js?ver=1.2 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Content-Length: 892
Connection: keep-alive
Last-Modified: Thu, 03 Jun 2021 15:03:27 GMT
ETag: "60b8ef3f-37c"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/themes/hive/assets/js/velocity.js?ver=1.1.0
91.189.114.30200 OK 50 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/js/velocity.js?ver=1.1.0
IP 91.189.114.30:0
Hash 8a9296344e6e91d739adc0c6d4ce213b
244c64061bbea6b8308d474380547054f37e300f
4882a00c1da4376c261c2ed86e960ae61010a9746d587c4b8f5598767a9dcb5f
GET /wp-content/themes/hive/assets/js/velocity.js?ver=1.1.0 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:58 GMT
Vary: Accept-Encoding
ETag: W/"58ecf1c6-3369a"
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5c88d3bea11b5e4ab55139b12afd6481
e6f6a45f9cad1fe06edbc5371887199387f51b5f
897d20199934381ef24f0c9c9d1738f5cc504b0ccd5d16005eeb8837955d3ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4896
Cache-Control: max-age=101584
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Etag: "63e30da0-117"
Expires: Fri, 10 Feb 2023 04:10:40 GMT
Last-Modified: Wed, 08 Feb 2023 02:49:04 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5c88d3bea11b5e4ab55139b12afd6481
e6f6a45f9cad1fe06edbc5371887199387f51b5f
897d20199934381ef24f0c9c9d1738f5cc504b0ccd5d16005eeb8837955d3ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4896
Cache-Control: max-age=101584
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Etag: "63e30da0-117"
Expires: Fri, 10 Feb 2023 04:10:40 GMT
Last-Modified: Wed, 08 Feb 2023 02:49:04 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
rumyantsevamd.ru/wp-content/uploads/2019/07/%D1%82%D0%BE%D1%87%D0%BA%D0%B0-%D0%BD%D0%B0%D1%81%D0%BB%D0%B0%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D1%8F.-%D0%9C%D0%B8%D0%BD%D1%86.-%D0%BE%D1%82%D0%B7%D1%8B%D0%B2-450x491.jpg
91.189.114.30200 OK 27 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/07/%D1%82%D0%BE%D1%87%D0%BA%D0%B0-%D0%BD%D0%B0%D1%81%D0%BB%D0%B0%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D1%8F.-%D0%9C%D0%B8%D0%BD%D1%86.-%D0%BE%D1%82%D0%B7%D1%8B%D0%B2-450x491.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x491, components 3\012- data
Hash a497b0e5cffa1207bd04a778be8c807f
18c544976fcb7ffe30e1a7d5fe4b9d5ba8e79f81
73c5a3ef3d8c2eb2fe4e72af06f46aca9a59cac778bde52fe25afa2edd82e667
GET /wp-content/uploads/2019/07/%D1%82%D0%BE%D1%87%D0%BA%D0%B0-%D0%BD%D0%B0%D1%81%D0%BB%D0%B0%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D1%8F.-%D0%9C%D0%B8%D0%BD%D1%86.-%D0%BE%D1%82%D0%B7%D1%8B%D0%B2-450x491.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 26579
Connection: keep-alive
Last-Modified: Sun, 14 Jul 2019 19:11:37 GMT
ETag: "5d2b7e69-67d3"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/07/%D0%BE%D0%B1%D0%BD%D0%B0%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE-%D0%B2-%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%85-450x600.jpg
91.189.114.30200 OK 51 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/07/%D0%BE%D0%B1%D0%BD%D0%B0%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE-%D0%B2-%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%85-450x600.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x600, components 3\012- data
Hash 5b4289f4b5befcd894dfc0b43bfd7f67
d130cde05caf64d9af542b8ffc36458e1521154e
0f7a896e90b3a1934f7c9fca7e13ecb39607076255ffdafe83929872de84a9dc
GET /wp-content/uploads/2019/07/%D0%BE%D0%B1%D0%BD%D0%B0%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE-%D0%B2-%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%85-450x600.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 51285
Connection: keep-alive
Last-Modified: Sun, 14 Jul 2019 19:02:32 GMT
ETag: "5d2b7c48-c855"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/07/%D0%B3%D0%B0%D1%80%D0%B4%D0%BD%D0%B5%D1%80%D0%B5%D0%BB%D0%BB%D0%B0-450x670.jpg
91.189.114.30200 OK 35 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/07/%D0%B3%D0%B0%D1%80%D0%B4%D0%BD%D0%B5%D1%80%D0%B5%D0%BB%D0%BB%D0%B0-450x670.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x670, components 3\012- data
Hash 9e447be96029132814d262da980f92fc
c6ae092eb00a8feb69d4a57e5e5b2a4340090e7f
dedff441c397aad9ad5057e14b2535e46cd4532109fd26dff726f6f975b6acfa
GET /wp-content/uploads/2019/07/%D0%B3%D0%B0%D1%80%D0%B4%D0%BD%D0%B5%D1%80%D0%B5%D0%BB%D0%BB%D0%B0-450x670.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 34733
Connection: keep-alive
Last-Modified: Sun, 14 Jul 2019 18:49:20 GMT
ETag: "5d2b7930-87ad"
Accept-Ranges: bytes
www.youtube.com/embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
216.58.211.14301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
IP 216.58.211.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 08 Feb 2023 23:57:36 GMT
Location: https://www.youtube.com/embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
216.58.211.14301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
IP 216.58.211.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 08 Feb 2023 23:57:36 GMT
Location: https://www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rumyantsevamd.ru/wp-content/uploads/2019/04/photo-1508067397415-e1086a135fff-450x675.jpg
91.189.114.30200 OK 17 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/04/photo-1508067397415-e1086a135fff-450x675.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x675, components 3\012- data
Hash 1b0bb63875fa2c558df300ca18f5493c
e8733492e57f6b982b1027db910dbed5605e3231
e4e09d06cb052757a3e9a909f273faac5842bc70742780e164aed58824854dad
GET /wp-content/uploads/2019/04/photo-1508067397415-e1086a135fff-450x675.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 17441
Connection: keep-alive
Last-Modified: Sat, 20 Apr 2019 12:03:35 GMT
ETag: "5cbb0a97-4421"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/04/OGMN_News_birth_control_price_photo-800x500_c-450x281.png
91.189.114.30200 OK 84 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/04/OGMN_News_birth_control_price_photo-800x500_c-450x281.png
IP 91.189.114.30:0
File type PNG image data, 450 x 281, 8-bit/color RGBA, non-interlaced\012- data
Hash 44beee4969117070c6db599c386da3bf
78856070f10b7bfe7e80403489d26898a6351f8d
0ba9534a626a531087f8fcbb3d4f06822a7a2488815a796fd556611da9c89c5b
GET /wp-content/uploads/2019/04/OGMN_News_birth_control_price_photo-800x500_c-450x281.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 84442
Connection: keep-alive
Last-Modified: Sat, 20 Apr 2019 12:33:55 GMT
ETag: "5cbb11b3-149da"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2021/04/%D0%BB%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5-%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D0%B8-450x272.jpg
91.189.114.30200 OK 19 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2021/04/%D0%BB%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5-%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D0%B8-450x272.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x272, components 3\012- data
Hash 564f196629b19dee8125571d6cc3c60c
a165d829ef8ccbbc3f3435c6ec2556e0924a4292
95e08dff3a7dd8d7393e50122333d24265ff1d4bd598dc436bbfa59ce229e926
GET /wp-content/uploads/2021/04/%D0%BB%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5-%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D0%B8-450x272.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 18657
Connection: keep-alive
Last-Modified: Sat, 01 May 2021 13:09:57 GMT
ETag: "608d5325-48e1"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2021/05/%D0%94%D0%B8%D0%B0%D1%81%D1%82%D0%B0%D0%B7-450x360.jpg
91.189.114.30200 OK 30 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2021/05/%D0%94%D0%B8%D0%B0%D1%81%D1%82%D0%B0%D0%B7-450x360.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x360, components 3\012- data
Hash 245f60a7e89ce6b585743f7e9cf5e9cc
6ca6784b13538ea02f09604474b06e78b1e52205
0f2e218591f255c1ce4f08cc1bc47ef3f94e62b7292374411531da3fcf45aa70
GET /wp-content/uploads/2021/05/%D0%94%D0%B8%D0%B0%D1%81%D1%82%D0%B0%D0%B7-450x360.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 29906
Connection: keep-alive
Last-Modified: Sat, 29 May 2021 16:09:05 GMT
ETag: "60b26721-74d2"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/05/%D1%82%D0%B5%D1%81%D1%82-%D0%BD%D0%B0-%D0%BA%D0%BE%D1%80%D0%BE%D0%BD%D0%B0%D0%B2%D0%B8%D1%80%D1%83%D1%81-450x615.jpg
91.189.114.30200 OK 71 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/05/%D1%82%D0%B5%D1%81%D1%82-%D0%BD%D0%B0-%D0%BA%D0%BE%D1%80%D0%BE%D0%BD%D0%B0%D0%B2%D0%B8%D1%80%D1%83%D1%81-450x615.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x615, components 3\012- data
Hash d934beed7306974e53ef65c9ba29cc28
e58b9a771a92ee01da556b3d6eee88c3540c27a2
231fd071814b2cde9cbf71222c672e9320e600151da760204d6c7a5cd05a8ceb
GET /wp-content/uploads/2020/05/%D1%82%D0%B5%D1%81%D1%82-%D0%BD%D0%B0-%D0%BA%D0%BE%D1%80%D0%BE%D0%BD%D0%B0%D0%B2%D0%B8%D1%80%D1%83%D1%81-450x615.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 71194
Connection: keep-alive
Last-Modified: Mon, 18 May 2020 20:34:35 GMT
ETag: "5ec2f15b-1161a"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/04/covid-19-%D1%83-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x271.png
91.189.114.30200 OK 86 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/04/covid-19-%D1%83-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x271.png
IP 91.189.114.30:0
File type PNG image data, 450 x 271, 8-bit/color RGBA, non-interlaced\012- data
Hash fb381dadb1f1d983ab95653fce6e5292
9b81c13f2e621285c71b843eb8c4a1bacb7d6794
60b149500eebff4a8d4d179c3dddef75670020cf08ebe84cf2a5c0d1be4b28d8
NIDS Severity Alert suricata medium ET HUNTING Suspicious GET Request with Possible COVID-19 URI M1
GET /wp-content/uploads/2020/04/covid-19-%D1%83-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x271.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 85641
Connection: keep-alive
Last-Modified: Wed, 29 Apr 2020 11:37:09 GMT
ETag: "5ea966e5-14e89"
Accept-Ranges: bytes
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
216.58.207.227200 OK 36 kB URL HTTP/1.1 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 35764
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 04:41:15 GMT
Expires: Wed, 07 Feb 2024 04:41:15 GMT
Cache-Control: public, max-age=31536000
Age: 155781
Last-Modified: Mon, 18 Jul 2022 19:06:36 GMT
Content-Type: font/woff2
rumyantsevamd.ru/wp-content/uploads/2021/03/%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D1%8F-450x670.jpg
91.189.114.30200 OK 35 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2021/03/%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D1%8F-450x670.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x670, components 3\012- data
Hash 57cb772d51ec3bffb84d601d2eb5ef0b
5f0037c46043d7d10feb41b931d2b41cf74f77a9
b2885f25cdd87e6bd8ef33235922e82cfb77a50d1ff484839c3910d2dd4ca594
GET /wp-content/uploads/2021/03/%D1%8D%D1%80%D0%B5%D0%BA%D1%82%D0%B8%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F-%D0%B4%D0%B8%D1%81%D1%84%D1%83%D0%BD%D0%BA%D1%86%D0%B8%D1%8F-450x670.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 34724
Connection: keep-alive
Last-Modified: Mon, 22 Mar 2021 18:25:08 GMT
ETag: "6058e104-87a4"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2021/03/%D0%95%D1%81%D1%82%D1%8C-%D0%BB%D0%B8-%D0%B6%D0%B8%D0%B7%D0%BD%D1%8C-%D0%BF%D0%BE%D1%81%D0%BB%D0%B5-%D0%BF%D0%BE%D1%82%D0%B5%D1%80%D1%8C-4-450x675.jpg
91.189.114.30200 OK 20 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2021/03/%D0%95%D1%81%D1%82%D1%8C-%D0%BB%D0%B8-%D0%B6%D0%B8%D0%B7%D0%BD%D1%8C-%D0%BF%D0%BE%D1%81%D0%BB%D0%B5-%D0%BF%D0%BE%D1%82%D0%B5%D1%80%D1%8C-4-450x675.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x675, components 3\012- data
Hash 86fd483d18cf01d130a2f0bba2f41f04
145ea7ef339f64909f2b3262eba34f257c7cf086
b4eae119dc012c9bacdc40576434b74e48a984f8783bf2670bc62be4cd48b6c0
GET /wp-content/uploads/2021/03/%D0%95%D1%81%D1%82%D1%8C-%D0%BB%D0%B8-%D0%B6%D0%B8%D0%B7%D0%BD%D1%8C-%D0%BF%D0%BE%D1%81%D0%BB%D0%B5-%D0%BF%D0%BE%D1%82%D0%B5%D1%80%D1%8C-4-450x675.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 19905
Connection: keep-alive
Last-Modified: Sat, 06 Mar 2021 19:13:15 GMT
ETag: "6043d44b-4dc1"
Accept-Ranges: bytes
fonts.gstatic.com/s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2
216.58.207.227200 OK 36 kB URL HTTP/1.1 fonts.gstatic.com/s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 36104, version 1.0\012- data
Hash 32938cccb9665d3b8afe8689b88a9ea3
5834c8e5bf4a8daf23f518a5ccb2e8b8391f6190
b574669ac419e9857b34bd603555cc632152f8122f6b154d049e13cc0a167b35
GET /s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 36104
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 06 Feb 2023 18:49:38 GMT
Expires: Tue, 06 Feb 2024 18:49:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 18 Jul 2022 19:13:00 GMT
Content-Type: font/woff2
Age: 191278
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2
216.58.207.227200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 20792, version 1.0\012- data
Hash 8fada1f8e5fc8576732e6cb60ae70d5a
ad7dabd4ac316d44c160e08bc1834722c3b5f878
068b7c011286f23557651b4c08bffdf420e3809a35043fdf625bd00c0c041cbf
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20792
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 03 Feb 2023 02:53:17 GMT
Expires: Sat, 03 Feb 2024 02:53:17 GMT
Cache-Control: public, max-age=31536000
Age: 507859
Last-Modified: Mon, 18 Jul 2022 19:06:27 GMT
Content-Type: font/woff2
rumyantsevamd.ru/wp-content/themes/hive/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
91.189.114.30200 OK 77 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/themes/hive/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 91.189.114.30:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/hive/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://rumyantsevamd.ru/wp-content/themes/hive/assets/css/font-awesome.css?ver=4.2.0
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Length: 77160
Connection: keep-alive
Last-Modified: Tue, 11 Apr 2017 15:09:58 GMT
ETag: "12d68-54ce57c2cd298"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%BA%D1%80%D0%B8%D0%BE%D0%BA%D0%BE%D0%BD%D1%81%D0%B5%D1%80%D0%B2%D0%B0%D1%86%D0%B8%D1%8F-%D1%8F%D0%B9%D1%86%D0%B5%D0%BA%D0%BB%D0%B5%D1%82%D0%BE%D0%BA-%D0%BE%D0%BE%D1%86%D0%B8%D1%82%D0%BE%D0%B2-1-450x466.jpg
91.189.114.30200 OK 37 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%BA%D1%80%D0%B8%D0%BE%D0%BA%D0%BE%D0%BD%D1%81%D0%B5%D1%80%D0%B2%D0%B0%D1%86%D0%B8%D1%8F-%D1%8F%D0%B9%D1%86%D0%B5%D0%BA%D0%BB%D0%B5%D1%82%D0%BE%D0%BA-%D0%BE%D0%BE%D1%86%D0%B8%D1%82%D0%BE%D0%B2-1-450x466.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x466, components 3\012- data
Hash a296df2593c4686f5d1d6db8be4911a7
53138766fdb58ddb1854c7f16678439a56d8266c
1e57b375da445b2ac8b06ee79db765985755b3879d34459009e9dcbf67a3a47b
GET /wp-content/uploads/2020/02/%D0%BA%D1%80%D0%B8%D0%BE%D0%BA%D0%BE%D0%BD%D1%81%D0%B5%D1%80%D0%B2%D0%B0%D1%86%D0%B8%D1%8F-%D1%8F%D0%B9%D1%86%D0%B5%D0%BA%D0%BB%D0%B5%D1%82%D0%BE%D0%BA-%D0%BE%D0%BE%D1%86%D0%B8%D1%82%D0%BE%D0%B2-1-450x466.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 37084
Connection: keep-alive
Last-Modified: Wed, 12 Feb 2020 14:39:01 GMT
ETag: "5e440e05-90dc"
Accept-Ranges: bytes
fonts.gstatic.com/s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2
216.58.207.227200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23124, version 1.0\012- data
Hash 6843eb68bb6f0e2b14079a535ecd44da
a347794e1714167686e33b6db48acad706bf7a2c
816f34cf470bb04628b3933e1a714c9eeb7b76dff4672737eaf43732e2f47d3d
GET /s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnohkk72xU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: font/woff2
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23124
Date: Wed, 08 Feb 2023 23:57:36 GMT
Expires: Thu, 08 Feb 2024 23:57:36 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 18 Jul 2022 19:13:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%A1%D0%BA%D0%BE%D0%BB%D1%8C%D0%BA%D0%BE-%D1%80%D0%B0%D0%B7-%D0%BD%D0%B0%D0%B4%D0%BE-%D0%B7%D0%B0%D0%BD%D1%8F%D1%82%D1%8C%D1%81%D1%8F-%D1%81%D0%B5%D0%BA%D1%81%D0%BE%D0%BC-%D0%B2-%D0%B4%D0%B5%D0%BD%D1%8C-%D0%BE%D0%B2%D1%83%D0%BB%D1%8F%D1%86%D0%B8%D0%B8-%D1%87%D1%82%D0%BE%D0%B1%D1%8B-%D1%82%D0%BE%D1%87%D0%BD%D0%BE-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-450x675.jpg
91.189.114.30200 OK 43 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%A1%D0%BA%D0%BE%D0%BB%D1%8C%D0%BA%D0%BE-%D1%80%D0%B0%D0%B7-%D0%BD%D0%B0%D0%B4%D0%BE-%D0%B7%D0%B0%D0%BD%D1%8F%D1%82%D1%8C%D1%81%D1%8F-%D1%81%D0%B5%D0%BA%D1%81%D0%BE%D0%BC-%D0%B2-%D0%B4%D0%B5%D0%BD%D1%8C-%D0%BE%D0%B2%D1%83%D0%BB%D1%8F%D1%86%D0%B8%D0%B8-%D1%87%D1%82%D0%BE%D0%B1%D1%8B-%D1%82%D0%BE%D1%87%D0%BD%D0%BE-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-450x675.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x675, components 3\012- data
Hash b6770975420b4506598c06f9e7993d89
6c51637105d77ddda50965eb30f54d9d08f7da1b
363718d3936ebe0503214adc4aad5caf4503a1b5f7f1e49ad9bb6fa7385b9f58
GET /wp-content/uploads/2019/12/%D0%A1%D0%BA%D0%BE%D0%BB%D1%8C%D0%BA%D0%BE-%D1%80%D0%B0%D0%B7-%D0%BD%D0%B0%D0%B4%D0%BE-%D0%B7%D0%B0%D0%BD%D1%8F%D1%82%D1%8C%D1%81%D1%8F-%D1%81%D0%B5%D0%BA%D1%81%D0%BE%D0%BC-%D0%B2-%D0%B4%D0%B5%D0%BD%D1%8C-%D0%BE%D0%B2%D1%83%D0%BB%D1%8F%D1%86%D0%B8%D0%B8-%D1%87%D1%82%D0%BE%D0%B1%D1%8B-%D1%82%D0%BE%D1%87%D0%BD%D0%BE-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-450x675.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 43154
Connection: keep-alive
Last-Modified: Sat, 14 Dec 2019 12:57:02 GMT
ETag: "5df4dc1e-a892"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2021/03/%D0%BC%D0%B5%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%B0%D1%86%D0%B8%D0%B8-%D0%BD%D0%BE%D1%80%D0%BC%D0%B0-450x300.jpg
91.189.114.30200 OK 13 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2021/03/%D0%BC%D0%B5%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%B0%D1%86%D0%B8%D0%B8-%D0%BD%D0%BE%D1%80%D0%BC%D0%B0-450x300.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x300, components 3\012- data
Hash abd85b961896435dbea2d10893f97440
c4b4ae562c7ea61dc68b0d1b944718134909361e
eb9a999bff3db8e30de38ee00fc6d0edd8766aba49bd410b6ea7a2ae17dfb642
GET /wp-content/uploads/2021/03/%D0%BC%D0%B5%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%B0%D1%86%D0%B8%D0%B8-%D0%BD%D0%BE%D1%80%D0%BC%D0%B0-450x300.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 13385
Connection: keep-alive
Last-Modified: Sat, 06 Mar 2021 14:43:10 GMT
ETag: "604394fe-3449"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%B2%D1%80%D0%B0%D1%87%D0%B8-%D0%BC%D0%B8%D1%80%D0%B0-2-450x600.jpg
91.189.114.30200 OK 78 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%B2%D1%80%D0%B0%D1%87%D0%B8-%D0%BC%D0%B8%D1%80%D0%B0-2-450x600.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x600, components 3\012- data
Hash f7b42eb4ce926e598a11c978a6d0ca64
8cd25d4f1fd03bfaf9fa749ede28562646c3d873
66cd98cd200fd94b66b445f8dd382375150fd8d390501c8f6fac42e0ba4257df
GET /wp-content/uploads/2019/12/%D0%B2%D1%80%D0%B0%D1%87%D0%B8-%D0%BC%D0%B8%D1%80%D0%B0-2-450x600.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 78165
Connection: keep-alive
Last-Modified: Sun, 29 Dec 2019 11:50:31 GMT
ETag: "5e089307-13155"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%BF%D0%BE%D0%B7%D0%B0-%D0%B1%D0%B5%D1%80%D0%B5%D0%B7%D0%BA%D0%B0-%D0%B4%D0%BB%D1%8F-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D0%B8%D1%8F-450x675.jpg
91.189.114.30200 OK 35 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/12/%D0%BF%D0%BE%D0%B7%D0%B0-%D0%B1%D0%B5%D1%80%D0%B5%D0%B7%D0%BA%D0%B0-%D0%B4%D0%BB%D1%8F-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D0%B8%D1%8F-450x675.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x675, components 3\012- data
Hash 71b4a4e01510d481d38c529c7b88308d
0a492e949f4dc457731e997fa6349e6bafed139a
aaef8baec5c83308140edada575b81ec4670e43af9f89f6f18d1c8be6ae2735e
GET /wp-content/uploads/2019/12/%D0%BF%D0%BE%D0%B7%D0%B0-%D0%B1%D0%B5%D1%80%D0%B5%D0%B7%D0%BA%D0%B0-%D0%B4%D0%BB%D1%8F-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D0%B8%D1%8F-450x675.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 35232
Connection: keep-alive
Last-Modified: Thu, 12 Dec 2019 14:16:48 GMT
ETag: "5df24bd0-89a0"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%BA%D0%B0%D0%BA-%D0%BF%D0%BE%D0%B2%D1%8B%D1%81%D0%B8%D1%82%D1%8C-%D1%88%D0%B0%D0%BD%D1%81-%D1%8D%D0%BA%D0%BE-450x237.png
91.189.114.30200 OK 49 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%BA%D0%B0%D0%BA-%D0%BF%D0%BE%D0%B2%D1%8B%D1%81%D0%B8%D1%82%D1%8C-%D1%88%D0%B0%D0%BD%D1%81-%D1%8D%D0%BA%D0%BE-450x237.png
IP 91.189.114.30:0
File type PNG image data, 450 x 237, 8-bit/color RGBA, non-interlaced\012- data
Hash ec2ae1809f5f11e67b998cb1fe12eed1
bddf5c050dd6f75b9b797e8ef43d1c434720d20f
32f4986f2a6e5ea8da76bb220fdd1ead1e2df9fc1210e3dea1fcda514f580fd3
GET /wp-content/uploads/2019/09/%D0%BA%D0%B0%D0%BA-%D0%BF%D0%BE%D0%B2%D1%8B%D1%81%D0%B8%D1%82%D1%8C-%D1%88%D0%B0%D0%BD%D1%81-%D1%8D%D0%BA%D0%BE-450x237.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 48793
Connection: keep-alive
Last-Modified: Wed, 11 Sep 2019 10:46:02 GMT
ETag: "5d78d06a-be99"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/05/%D1%80%D0%B5%D0%B7%D1%83%D1%81-%D1%84%D0%B0%D0%BA%D1%82%D0%BE%D1%80-450x523.jpg
91.189.114.30200 OK 21 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/05/%D1%80%D0%B5%D0%B7%D1%83%D1%81-%D1%84%D0%B0%D0%BA%D1%82%D0%BE%D1%80-450x523.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x523, components 3\012- data
Hash 1e7783c8625bba2f6a07f34de1038897
bba01e13e0126bf98ef9d3dc12c74fdce97dac3e
2d3cb52020ab2dd2ca31e727f33f3a3409cb28c755fd7d861ef9acfb86f71df9
GET /wp-content/uploads/2019/05/%D1%80%D0%B5%D0%B7%D1%83%D1%81-%D1%84%D0%B0%D0%BA%D1%82%D0%BE%D1%80-450x523.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 20557
Connection: keep-alive
Last-Modified: Tue, 21 May 2019 16:52:32 GMT
ETag: "5ce42cd0-504d"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/11/%D0%93%D0%B5%D1%82%D0%B5%D1%80%D0%BE%D1%82%D0%BE%D0%BF%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%B0%D1%8F-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D1%8C-450x300.jpg
91.189.114.30200 OK 16 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/11/%D0%93%D0%B5%D1%82%D0%B5%D1%80%D0%BE%D1%82%D0%BE%D0%BF%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%B0%D1%8F-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D1%8C-450x300.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x300, components 3\012- data
Hash bee0a168763b31d9836397bcb41e154e
30b49e16252ddb97b61c68d4aff20aa0f3f5ae07
6846077d37915c068deeabb4867f2c9eda20b3c22b00d94702a481b4c94ce3dc
GET /wp-content/uploads/2019/11/%D0%93%D0%B5%D1%82%D0%B5%D1%80%D0%BE%D1%82%D0%BE%D0%BF%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%B0%D1%8F-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D1%8C-450x300.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 15703
Connection: keep-alive
Last-Modified: Fri, 29 Nov 2019 13:02:38 GMT
ETag: "5de116ee-3d57"
Accept-Ranges: bytes
s.gravatar.com/dist/css/hovercard.min.css?ver=2023Febaa
192.0.73.2200 OK 1.9 kB URL HTTP/1.1 s.gravatar.com/dist/css/hovercard.min.css?ver=2023Febaa
IP 192.0.73.2:0
File type ASCII text, with very long lines (8069)
Hash 61f9d983eb62bb05ec7a53e0cde1a645
865dac6893de02651a007239581da6e23beb9a88
3d261c73111b3ec277d6d40b15978839ebef180639f76ed698332798b16bbeb3
GET /dist/css/hovercard.min.css?ver=2023Febaa HTTP/1.1
Host: s.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 09:10:35 GMT
ETag: W/"63b3f10b-1f86"
Content-Encoding: gzip
Expires: Wed, 15 Feb 2023 23:57:36 GMT
Cache-Control: max-age=604800
rumyantsevamd.ru/wp-content/uploads/2020/06/%D0%B7%D0%B0%D0%BF%D0%BE%D1%80%D1%8B-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x300.png
91.189.114.30200 OK 109 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/06/%D0%B7%D0%B0%D0%BF%D0%BE%D1%80%D1%8B-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x300.png
IP 91.189.114.30:0
File type PNG image data, 450 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 109 kB (109313 bytes)
Hash 656ba7a546026fac82df4407ac90f1a4
9b24226373405a32cce1a93d96527ff1ca5d29bd
4659414024ffc23abdb7e237234140466a97964c1ad3bb1ffb8dc5965dcfabc0
GET /wp-content/uploads/2020/06/%D0%B7%D0%B0%D0%BF%D0%BE%D1%80%D1%8B-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D1%85-450x300.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 109313
Connection: keep-alive
Last-Modified: Mon, 15 Jun 2020 15:41:25 GMT
ETag: "5ee796a5-1ab01"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%9C%D0%BE%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-%D0%B2%D0%BE-%D0%B2%D1%80%D0%B5%D0%BC%D1%8F-%D0%BC%D0%B5%D1%81%D1%8F%D1%87%D0%BD%D1%8B%D1%85-450x252.jpg
91.189.114.30200 OK 12 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%9C%D0%BE%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-%D0%B2%D0%BE-%D0%B2%D1%80%D0%B5%D0%BC%D1%8F-%D0%BC%D0%B5%D1%81%D1%8F%D1%87%D0%BD%D1%8B%D1%85-450x252.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x252, components 3\012- data
Hash c32fe8a7c1a89956a494a6720f33b6dc
0daad4d1e7d18001d64a58483cf4b619642b66e0
3aded3abc4db2dfe241818a9f2c7e1f2b79a61b4ccb7d8940347a03ffe71f866
GET /wp-content/uploads/2019/10/%D0%9C%D0%BE%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%B7%D0%B0%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B5%D1%82%D1%8C-%D0%B2%D0%BE-%D0%B2%D1%80%D0%B5%D0%BC%D1%8F-%D0%BC%D0%B5%D1%81%D1%8F%D1%87%D0%BD%D1%8B%D1%85-450x252.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 12289
Connection: keep-alive
Last-Modified: Sat, 19 Oct 2019 14:16:18 GMT
ETag: "5dab1ab2-3001"
Accept-Ranges: bytes
s.gravatar.com/dist/css/services.min.css?ver=2023Febaa
192.0.73.2200 OK 643 B URL HTTP/1.1 s.gravatar.com/dist/css/services.min.css?ver=2023Febaa
IP 192.0.73.2:0
File type ASCII text, with very long lines (3236)
Hash e3d8ce6d4c0bfed4cbf303bf7a75f0ba
5262fb96cec66c94d099270658ddc908c698917f
792f46a05d6065063fc5d88d603dbe5b94a17826822a074db8b86ffd65d13c51
GET /dist/css/services.min.css?ver=2023Febaa HTTP/1.1
Host: s.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 09:10:35 GMT
ETag: W/"63b3f10b-ca5"
Content-Encoding: gzip
Expires: Wed, 15 Feb 2023 23:57:36 GMT
Cache-Control: max-age=604800
profitquery-a.akamaihd.net/lib/profitquery.v5.min.js
23.36.76.170400 Bad Request 207 B URL HTTP/1.0 profitquery-a.akamaihd.net/lib/profitquery.v5.min.js
IP 23.36.76.170:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 46e1f12cf343e61ae37e035ef9ca3a97
1b0b7fb88b667daaa85695135668c08875580235
1315c73e4e753ae88d110d30889e2d408f0d29bce7217a059bf3c3d486711746
GET /lib/profitquery.v5.min.js HTTP/1.1
Host: profitquery-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 207
Expires: Wed, 08 Feb 2023 23:57:36 GMT
Date: Wed, 08 Feb 2023 23:57:36 GMT
Connection: close
rumyantsevamd.ru/wp-content/uploads/2019/11/%D0%BA%D0%B0%D0%BA-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D1%8C-%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D1%83-450x619.jpg
91.189.114.30200 OK 40 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/11/%D0%BA%D0%B0%D0%BA-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D1%8C-%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D1%83-450x619.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x619, components 3\012- data
Hash a8df9f5485a1d0bfb08866f683ee4621
a96fb2e8b409eb41306045fe582873f9c7f86322
313b38d05d24209778e6a9098d952cccd28bd7f9841500261fbd810398006bdc
GET /wp-content/uploads/2019/11/%D0%BA%D0%B0%D0%BA-%D0%B7%D0%B0%D1%87%D0%B0%D1%82%D1%8C-%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D1%83-450x619.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 40187
Connection: keep-alive
Last-Modified: Sat, 09 Nov 2019 10:37:24 GMT
ETag: "5dc696e4-9cfb"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/02/%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D0%B8%D0%BD%D0%B3-%D1%80%D0%B0%D0%BA%D0%B0-450x329.png
91.189.114.30200 OK 137 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/02/%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D0%B8%D0%BD%D0%B3-%D1%80%D0%B0%D0%BA%D0%B0-450x329.png
IP 91.189.114.30:0
File type PNG image data, 450 x 329, 8-bit/color RGBA, non-interlaced\012- data
Size 137 kB (137182 bytes)
Hash 900c06daa128d5cf9d1b776f0accb495
94c31e1086ad79610164573d1a5b56e81a7a6d28
6e50ad92e1de5a9eeaf9188bc7540e3317d2e15185edbdbcb8c2e28e2dd0cb72
GET /wp-content/uploads/2020/02/%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D0%B8%D0%BD%D0%B3-%D1%80%D0%B0%D0%BA%D0%B0-450x329.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 137182
Connection: keep-alive
Last-Modified: Fri, 21 Feb 2020 13:48:04 GMT
ETag: "5e4fdf94-217de"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%BA%D0%B0%D0%BA-%D1%83%D0%BB%D1%83%D1%87%D1%88%D0%B8%D1%82%D1%8C-%D0%BA%D0%B0%D1%87%D0%B5%D1%81%D1%82%D0%B2%D0%BE-%D1%81%D0%BF%D0%B5%D1%80%D0%BC%D1%8B-450x600.jpg
91.189.114.30200 OK 112 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%BA%D0%B0%D0%BA-%D1%83%D0%BB%D1%83%D1%87%D1%88%D0%B8%D1%82%D1%8C-%D0%BA%D0%B0%D1%87%D0%B5%D1%81%D1%82%D0%B2%D0%BE-%D1%81%D0%BF%D0%B5%D1%80%D0%BC%D1%8B-450x600.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x600, components 3\012- data
Size 112 kB (112503 bytes)
Hash eebb481c34a84dafbfb7426c03404c09
d7edc53a9034279fce9fee29ba81c40d1d63d24e
8f81fc0d1502904db6a4ad8736dbecd76996a55e948a1e239afe2acec285365f
GET /wp-content/uploads/2019/10/%D0%BA%D0%B0%D0%BA-%D1%83%D0%BB%D1%83%D1%87%D1%88%D0%B8%D1%82%D1%8C-%D0%BA%D0%B0%D1%87%D0%B5%D1%81%D1%82%D0%B2%D0%BE-%D1%81%D0%BF%D0%B5%D1%80%D0%BC%D1%8B-450x600.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 112503
Connection: keep-alive
Last-Modified: Sat, 05 Oct 2019 15:37:42 GMT
ETag: "5d98b8c6-1b777"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/08/%D0%93%D0%B5%D1%81%D1%82%D0%B0%D1%86%D0%B8%D0%BE%D0%BD%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D1%85%D0%B0%D1%80%D0%BD%D1%8B%D0%B9-%D0%B4%D0%B8%D0%B0%D0%B1%D0%B5%D1%82-450x253.jpg
91.189.114.30200 OK 13 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/08/%D0%93%D0%B5%D1%81%D1%82%D0%B0%D1%86%D0%B8%D0%BE%D0%BD%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D1%85%D0%B0%D1%80%D0%BD%D1%8B%D0%B9-%D0%B4%D0%B8%D0%B0%D0%B1%D0%B5%D1%82-450x253.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x253, components 3\012- data
Hash 18d4b577710be896d4eb1dbd87e10810
1616cb70f8cac74ada963566cb101e8785799463
a726874519b040da5bf7a13d3ef9720d808f16325b3e32fa38ad270a7ef2ddbf
GET /wp-content/uploads/2019/08/%D0%93%D0%B5%D1%81%D1%82%D0%B0%D1%86%D0%B8%D0%BE%D0%BD%D0%BD%D1%8B%D0%B9-%D1%81%D0%B0%D1%85%D0%B0%D1%80%D0%BD%D1%8B%D0%B9-%D0%B4%D0%B8%D0%B0%D0%B1%D0%B5%D1%82-450x253.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 13145
Connection: keep-alive
Last-Modified: Fri, 02 Aug 2019 09:26:58 GMT
ETag: "5d4401e2-3359"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/04/Svakom-Nova-Balls-450x268.png
91.189.114.30200 OK 49 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/04/Svakom-Nova-Balls-450x268.png
IP 91.189.114.30:0
File type PNG image data, 450 x 268, 8-bit/color RGBA, non-interlaced\012- data
Hash e558671e8fe971656142b4af29403c7b
4bc1a7d54ccdfa8d37e05acb495d8861c1f9a5a6
e2626e3dcc90a86b423bdea08986e8abe363e487d2fc86dd4b1ed9c37ba454c4
GET /wp-content/uploads/2019/04/Svakom-Nova-Balls-450x268.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 49021
Connection: keep-alive
Last-Modified: Sat, 27 Apr 2019 12:12:24 GMT
ETag: "5cc44728-bf7d"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%9F%D1%80%D0%B5%D0%B6%D0%B4%D0%B5%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F-%D0%BD%D0%B5%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D1%82%D0%BE%D1%87%D0%BD%D0%BE%D1%81%D1%82%D1%8C-%D1%8F%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2.png
91.189.114.30200 OK 391 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%9F%D1%80%D0%B5%D0%B6%D0%B4%D0%B5%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F-%D0%BD%D0%B5%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D1%82%D0%BE%D1%87%D0%BD%D0%BE%D1%81%D1%82%D1%8C-%D1%8F%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2.png
IP 91.189.114.30:0
File type PNG image data, 389 x 540, 8-bit/color RGBA, non-interlaced\012- data
Size 391 kB (391278 bytes)
Hash 6714713f2503b279d4e739e056477191
18f43bee3863f66e1127ad3638f6853a09b63de5
ad346cd0ec5b14a8d608d8cd1bca8cb822bc936d0221714acc281f271bffd0ff
GET /wp-content/uploads/2020/02/%D0%9F%D1%80%D0%B5%D0%B6%D0%B4%D0%B5%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F-%D0%BD%D0%B5%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D1%82%D0%BE%D1%87%D0%BD%D0%BE%D1%81%D1%82%D1%8C-%D1%8F%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 391278
Connection: keep-alive
Last-Modified: Sat, 22 Feb 2020 14:46:06 GMT
ETag: "5e513eae-5f86e"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7-%D0%BD%D0%B0-%D0%A5%D0%93%D0%A7-450x300.jpg
91.189.114.30200 OK 40 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7-%D0%BD%D0%B0-%D0%A5%D0%93%D0%A7-450x300.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x300, components 3\012- data
Hash be929290d07685f07ebe40c5fcca350d
b416c142d4b6c333b5ce045061bc36aa6fd66478
9fd746adfc0e7f86daad12eeb21864040b7f77cbd2f5f8e154e7ffcc1115e689
GET /wp-content/uploads/2019/09/%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7-%D0%BD%D0%B0-%D0%A5%D0%93%D0%A7-450x300.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 39468
Connection: keep-alive
Last-Modified: Sat, 28 Sep 2019 12:32:08 GMT
ETag: "5d8f52c8-9a2c"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%BF%D1%80%D0%B8%D1%87%D0%B8%D0%BD%D1%8B-%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%BE%D0%B4%D0%B8%D1%8F-450x300.jpg
91.189.114.30200 OK 13 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/09/%D0%BF%D1%80%D0%B8%D1%87%D0%B8%D0%BD%D1%8B-%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%BE%D0%B4%D0%B8%D1%8F-450x300.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x300, components 3\012- data
Hash 13d6bb1351bbb2a734eb34ac59be02bc
dce1b8eaf789ca2972676cf9f7307b1092609f41
69c11ff8e67243de04a1da570300d6afa683394a675fb74034badd5ddc55c117
GET /wp-content/uploads/2019/09/%D0%BF%D1%80%D0%B8%D1%87%D0%B8%D0%BD%D1%8B-%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%BE%D0%B4%D0%B8%D1%8F-450x300.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 13389
Connection: keep-alive
Last-Modified: Wed, 11 Sep 2019 12:44:08 GMT
ETag: "5d78ec18-344d"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%BD%D0%B0%D0%B1%D0%BE%D1%80-%D0%B2%D0%B5%D1%87%D0%B0-%D0%B2-%D0%BF%D0%BE%D1%81%D1%82%D0%BC%D0%B5%D0%BD%D0%BE%D0%BF%D0%B0%D1%83%D0%B7%D0%B5-450x674.png
91.189.114.30200 OK 292 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2020/02/%D0%BD%D0%B0%D0%B1%D0%BE%D1%80-%D0%B2%D0%B5%D1%87%D0%B0-%D0%B2-%D0%BF%D0%BE%D1%81%D1%82%D0%BC%D0%B5%D0%BD%D0%BE%D0%BF%D0%B0%D1%83%D0%B7%D0%B5-450x674.png
IP 91.189.114.30:0
File type PNG image data, 450 x 674, 8-bit/color RGBA, non-interlaced\012- data
Size 292 kB (291915 bytes)
Hash b8fc92d29ed7cfa311a6e5f116cf0aab
86907d196137fd37bd0cc6c546396f2084dba35f
2ea15feccc596014ad974330134826293f1ff2cd4ae8b26d26f8f9dd2eee890b
GET /wp-content/uploads/2020/02/%D0%BD%D0%B0%D0%B1%D0%BE%D1%80-%D0%B2%D0%B5%D1%87%D0%B0-%D0%B2-%D0%BF%D0%BE%D1%81%D1%82%D0%BC%D0%B5%D0%BD%D0%BE%D0%BF%D0%B0%D1%83%D0%B7%D0%B5-450x674.png HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/png
Content-Length: 291915
Connection: keep-alive
Last-Modified: Sat, 15 Feb 2020 14:02:02 GMT
ETag: "5e47f9da-4744b"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%9D%D1%83%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%BC%D1%83%D0%B6%D1%87%D0%B8%D0%BD%D0%B5-%D0%BF%D1%80%D0%B8%D0%BD%D0%B8%D0%BC%D0%B0%D1%82%D1%8C-%D0%B2%D0%B8%D1%82%D0%B0%D0%BC%D0%B8%D0%BD%D1%8B-%D0%BF%D1%80%D0%B8-%D0%BF%D0%BB%D0%B0%D0%BD%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B8-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D0%B8-450x298.jpg
91.189.114.30200 OK 23 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/10/%D0%9D%D1%83%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%BC%D1%83%D0%B6%D1%87%D0%B8%D0%BD%D0%B5-%D0%BF%D1%80%D0%B8%D0%BD%D0%B8%D0%BC%D0%B0%D1%82%D1%8C-%D0%B2%D0%B8%D1%82%D0%B0%D0%BC%D0%B8%D0%BD%D1%8B-%D0%BF%D1%80%D0%B8-%D0%BF%D0%BB%D0%B0%D0%BD%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B8-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D0%B8-450x298.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x298, components 3\012- data
Hash 9d65a9cce6f0b7583d96de1c149d3626
2dd1f8f54af37d2559eb158e089be8f4a4e2a808
fbff3ede7366a39bc974d843771fdbf1d689a0c40d4af39b8c253ad981206303
GET /wp-content/uploads/2019/10/%D0%9D%D1%83%D0%B6%D0%BD%D0%BE-%D0%BB%D0%B8-%D0%BC%D1%83%D0%B6%D1%87%D0%B8%D0%BD%D0%B5-%D0%BF%D1%80%D0%B8%D0%BD%D0%B8%D0%BC%D0%B0%D1%82%D1%8C-%D0%B2%D0%B8%D1%82%D0%B0%D0%BC%D0%B8%D0%BD%D1%8B-%D0%BF%D1%80%D0%B8-%D0%BF%D0%BB%D0%B0%D0%BD%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B8-%D0%B1%D0%B5%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D0%BE%D1%81%D1%82%D0%B8-450x298.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 22982
Connection: keep-alive
Last-Modified: Sat, 19 Oct 2019 13:47:12 GMT
ETag: "5dab13e0-59c6"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/08/folic-acid-450x309.jpg
91.189.114.30200 OK 24 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/08/folic-acid-450x309.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x309, components 3\012- data
Hash f93984683949c328485ecf18a735d466
01a826a5ce088689cfd9657bb847164e7524f6df
217666007a398cc20884f7234f29467bcac0fb9f02291fa8ae1f69ca323d1714
GET /wp-content/uploads/2019/08/folic-acid-450x309.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 24048
Connection: keep-alive
Last-Modified: Fri, 30 Aug 2019 10:08:43 GMT
ETag: "5d68f5ab-5df0"
Accept-Ranges: bytes
rumyantsevamd.ru/wp-content/uploads/2019/08/%D0%B3%D0%BE%D0%BD%D0%BE%D1%80%D0%B5%D1%8F-450x337.jpg
91.189.114.30200 OK 48 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2019/08/%D0%B3%D0%BE%D0%BD%D0%BE%D1%80%D0%B5%D1%8F-450x337.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 450x337, components 3\012- data
Hash 4dd43dbeabb28dfe4454d642c6c6d867
aed92b85476c0e073a9acabd54698dbd4f84b09b
a8a5af73e00ad5ef8570938cca939d9dfd3597f77010729ddc96fe6d47029889
GET /wp-content/uploads/2019/08/%D0%B3%D0%BE%D0%BD%D0%BE%D1%80%D0%B5%D1%8F-450x337.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 47914
Connection: keep-alive
Last-Modified: Sun, 04 Aug 2019 19:28:18 GMT
ETag: "5d4731d2-bb2a"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/97ea7458/www-player.css
216.58.211.14200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/www-player.css
IP 216.58.211.14:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 06da032848dee0d02f299eb5d9d0b47b
9328ede00a7daa3c3af4e9a745b2f288a89985e1
1b4032e39d4869ac4d51be6750760b10108ce5d47c357fec81c66dbc90578601
GET /s/player/97ea7458/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 20:57:12 GMT
expires: Thu, 08 Feb 2024 20:57:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/css
age: 10824
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/97ea7458/www-embed-player.vflset/www-embed-player.js
216.58.211.14200 OK 110 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/www-embed-player.vflset/www-embed-player.js
IP 216.58.211.14:0
File type ASCII text, with very long lines (679)
Size 110 kB (110070 bytes)
Hash ebe79d652346a39f78ba70ecfb911269
b996db460e2862473018d11947ac7711bc8ca537
445ae1b45376bf82466aa698c16011ea0781d16f3e25653713d935a9bc39fda9
GET /s/player/97ea7458/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 110070
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 15:52:28 GMT
expires: Thu, 08 Feb 2024 15:52:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/javascript
age: 29108
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
216.58.211.14200 OK 641 kB URL HTTP/2 www.youtube.com/embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
IP 216.58.211.14:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58599)
Size 641 kB (640894 bytes)
Hash 607ddb16fc5c88a3ab1235bd4c43af10
92330b35ba10522018e878afa7c1f84ffbf23cbd
ec4bf8cf792c1d9bcd782e47678347000c3d9c60bb016560dc40783912a725b3
GET /embed/GTRAEpllGZo?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rumyantsevamd.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 Feb 2023 23:57:36 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=w4dBsIRONHc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=QjghYRPkkVo; Domain=.youtube.com; Expires=Mon, 07-Aug-2023 23:57:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1Tnprek9EVXhNRE16TmpZeE1qazROUT09EPDtkJ8GGPDtkJ8G; Domain=.youtube.com; Expires=Mon, 07-Aug-2023 23:57:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+722; expires=Fri, 07-Feb-2025 23:57:36 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rumyantsevamd.ru/wp-content/uploads/2016/01/cropped-icon-192x192.jpg
91.189.114.30200 OK 5.7 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2016/01/cropped-icon-192x192.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 192x192, components 3\012- data
Hash d36c1ffdb0e9cb48e5ea164fd662f772
b43a5675ef81d79cd62651adef0e8b4d7f940b1e
365b5aff13280b725488ea50cb09c66c4ae1c0a7c359bbf10e64132a8f44d9ce
GET /wp-content/uploads/2016/01/cropped-icon-192x192.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 5715
Connection: keep-alive
Last-Modified: Sat, 02 Jan 2016 08:50:18 GMT
ETag: "56878f4a-1653"
Accept-Ranges: bytes
www.youtube.com/s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js
216.58.211.14200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js
IP 216.58.211.14:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 16:17:24 GMT
expires: Thu, 08 Feb 2024 16:17:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/javascript
age: 27612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dsms0mj1bbhn4.cloudfront.net/assets/pub/shareaholic.js
54.230.245.157200 OK 4.3 kB URL HTTP/1.1 dsms0mj1bbhn4.cloudfront.net/assets/pub/shareaholic.js
IP 54.230.245.157:0
File type ASCII text, with very long lines (10540), with no line terminators
Hash e33511561808ca812c76b301b406d103
94e974603a6d772f66614045d19f0e3e18ccae6e
a61f812802a68805c57d74929ca078ac0ce1e6cec9685d5280a9f3d02d27050e
GET /assets/pub/shareaholic.js HTTP/1.1
Host: dsms0mj1bbhn4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 4285
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 19 Dec 2022 20:20:18 GMT
Content-Encoding: gzip
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Hello-Human: Join the fun! Apply at www.shareaholic.com/jobs
Date: Wed, 08 Feb 2023 23:48:26 GMT
Cache-Control: max-age=1200, public
ETag: "e33511561808ca812c76b301b406d103"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ACBZd3Sl8veAQ6G0FDPdYCbLXXaBPQfQd1_imexUq56RLNYvVaJIIw==
Age: 585
connect.facebook.net/ru_RU/sdk.js
157.240.205.11301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/ru_RU/sdk.js
IP 157.240.205.11:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ru_RU/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/ru_RU/sdk.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Wed, 08 Feb 2023 23:57:36 GMT
Connection: keep-alive
Content-Length: 0
ajax.googleapis.com/ajax/libs/webfont/1/webfont.js
142.250.74.74200 OK 5.4 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/webfont/1/webfont.js
IP 142.250.74.74:0
File type ASCII text, with very long lines (2134)
Hash 30ca3165d143baf2835023bfcf463450
62c662c0873b79a314c040fef28dcd29abb14480
4f405d00e8ced09d5826e3e070b7e4d3f3556f856ca790b0b4a2c2eaaf58d33b
GET /ajax/libs/webfont/1/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 5437
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 14:19:38 GMT
Expires: Wed, 07 Feb 2024 14:19:38 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 121078
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Wed, 08 Feb 2023 23:49:13 GMT
Expires: Thu, 09 Feb 2023 01:49:13 GMT
Cache-Control: public, max-age=7200
Age: 503
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
rumyantsevamd.ru/wp-content/uploads/2016/01/cropped-icon-32x32.jpg
91.189.114.30200 OK 1.0 kB URL HTTP/1.1 rumyantsevamd.ru/wp-content/uploads/2016/01/cropped-icon-32x32.jpg
IP 91.189.114.30:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 32x32, components 3\012- data
Hash 7173ee6a7d44f3f2691804b9e88cd775
236369f1d8c3d7b8e19b0980cdb156eb05c54ccc
88a6c015ac8512aa66f1418fcecb4e15bdc3bacb3dc55e3cccccbe795c673ea2
GET /wp-content/uploads/2016/01/cropped-icon-32x32.jpg HTTP/1.1
Host: rumyantsevamd.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: image/jpeg
Content-Length: 1039
Connection: keep-alive
Last-Modified: Sat, 02 Jan 2016 08:50:18 GMT
ETag: "56878f4a-40f"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 47e4d68aead40dddb605413b5a61da93
3647c183428a10ec09290bbcf07225802efd9987
74d2676bc9b1ab6d71d9a6d9628d3af8ea7d4be6cb50b603451648b3f5d56bd6
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 23:03:12 GMT
ETag: "3647c183428a10ec09290bbcf07225802efd9987"
Last-Modified: Wed, 08 Feb 2023 23:03:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2269
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79684f016eee0b41-OSL
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 17:20:45 GMT
expires: Tue, 06 Feb 2024 17:20:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 196611
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Playfair+Display:regular,italic,700,700italic,900,900italic%7CLora:regular,italic,700,700italic&subset=cyrillic,cyrillic
142.250.74.106200 OK 837 B URL HTTP/1.1 fonts.googleapis.com/css?family=Playfair+Display:regular,italic,700,700italic,900,900italic%7CLora:regular,italic,700,700italic&subset=cyrillic,cyrillic
IP 142.250.74.106:0
Hash 4ce4e7fd1da0550f3309e4f9a986d1a8
3bfa7294584f8635d122bd8b69b8d26c6f0d8cff
379ded9febf87bc4743e277c72fbf675319cca23e84786529c3f5a15fe5bc66a
GET /css?family=Playfair+Display:regular,italic,700,700italic,900,900italic%7CLora:regular,italic,700,700italic&subset=cyrillic,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 08 Feb 2023 23:57:37 GMT
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
151.139.128.10200 OK 42 kB URL HTTP/2 m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
IP 151.139.128.10:0
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash bfbe20460e43896d158d4b21e5c02ca8
12ec31148e52a5a0861d63e98344f45bba7523dc
bc9563b66fafb04f290b402270af0cf8ac5349619ccdf556103024652198f87a
GET /v2/bec87dbf/main.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:57:37 GMT
content-encoding: gzip
content-length: 41854
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 19 Dec 2022 20:19:59 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: UfjmZKB7E9YUrY0vXGV2Q4QFmkUFf7Rkudm6LThhwpl7+eRxcirLt8dDB2kADGk4IpJE000Z+08=
x-amz-request-id: PAKD9GVGPTREG1NW
etag: "bfbe20460e43896d158d4b21e5c02ca8"
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1675900657.cds065.sk1.hn,1675900657.cds230.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2988
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Last-Modified: Wed, 08 Feb 2023 23:07:49 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/ru_RU/sdk.js
157.240.205.11200 OK 1.7 kB URL HTTP/2 connect.facebook.net/ru_RU/sdk.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (1957)
Hash d581710e4349d0744b735249f2248ca7
b4a261d8817c8b2a6eab88f3b9269a4a8dfd908e
34b6b30692b98fe108b58f13b3a792170ccf890e1d64923ce7484fedc9c4ea71
GET /ru_RU/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rumyantsevamd.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 495878ecdc242f50569a16319e6ad120
etag: "aa87e2174000f351b0fdc0f9b48ed968"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 09 Feb 2023 00:00:17 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 1YFxDkNJ0HRLc1JJ8iSMpw==
x-fb-debug: jQtJj9UhANiq4SBysRkNDWObJNOLYI30PdMqDHy02Lrp1XwNjZS7VZpahFKau/5/cWVYi/ReNStKNNnF/38GOg==
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 08 Feb 2023 23:57:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2988
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Last-Modified: Wed, 08 Feb 2023 23:07:49 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMw77I-NP.woff2
216.58.207.227200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMw77I-NP.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 21248, version 1.0\012- data
Hash 7d64dadb0715f748b41e1750de7c818a
dc321eb9dc0d22be3134d3862b667853590d68a0
2bf5e117e06da5c1b13ae14184b2d22d1783398583c1323c66cf3bab845e35ce
GET /s/lora/v26/0QIvMX1D_JOuMw77I-NP.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21248
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 03 Feb 2023 09:37:44 GMT
Expires: Sat, 03 Feb 2024 09:37:44 GMT
Cache-Control: public, max-age=31536000
Age: 483593
Last-Modified: Mon, 15 Aug 2022 18:08:14 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
216.58.207.227200 OK 36 kB URL HTTP/1.1 fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 35660, version 1.0\012- data
Hash 0d0d3e5824e5e67a9e993960df2b67a9
328d67bb1d5899a7809df9f4385181863fd035f1
38da98e06ba18c4204f547d30572cd81a2dd3fd5438d306856d2617480ee8639
GET /s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 35660
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 06 Feb 2023 05:00:01 GMT
Expires: Tue, 06 Feb 2024 05:00:01 GMT
Cache-Control: public, max-age=31536000
Age: 241056
Last-Modified: Mon, 15 Aug 2022 18:07:59 GMT
Content-Type: font/woff2
mc.yandex.ru/watch/34508175/1?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.251.119200 OK 426 B URL HTTP/2 mc.yandex.ru/watch/34508175/1?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (426), with no line terminators
Hash 3ece7c33f9a9a2b269da3e68fa8a2d78
ba8bd137eb84fac52c93fb01d90796d8890a6502
4133b75e9f691cf275eff5435b0ad6c093a0b781a58e6a1084d375748668ff12
GET /watch/34508175/1?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rumyantsevamd.ru
Referer: http://rumyantsevamd.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 426
date: Wed, 08 Feb 2023 23:57:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://rumyantsevamd.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:57:37 GMT
last-modified: Wed, 08-Feb-2023 23:57:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
142.250.74.166200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.166:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 23:50:50 GMT
expires: Thu, 09 Feb 2023 00:05:50 GMT
cache-control: public, max-age=900
age: 407
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
142.250.74.66302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 08 Feb 2023 23:57:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14729
Expires: Thu, 09 Feb 2023 04:03:06 GMT
Date: Wed, 08 Feb 2023 23:57:37 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14729
Expires: Thu, 09 Feb 2023 04:03:06 GMT
Date: Wed, 08 Feb 2023 23:57:37 GMT
Connection: keep-alive
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:57:37 GMT
access-control-allow-origin: *
etag: "63e36f34-2b"
expires: Thu, 09 Feb 2023 00:57:37 GMT
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:45:24 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 764b732e88dd1e9c1824529b24b3dffc
2ba954a51c2972b267ae0536e343e608aa9aa7f4
a1efdf03b14bb05cf8e407b92476592c35fa2d27c5e66705322abdb4c6412a06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8150
x-amzn-requestid: 3834493a-4162-4cc9-b67c-541cc9be895b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8IH0TIAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb380-3746ff7b0a6894366efa848e;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I3qmC4D6qdsheK8VO3oKbPDU7XV1r9_XEPMcExKnvATDkVUsJHjHbg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:19:43 GMT
age: 70674
etag: "2ba954a51c2972b267ae0536e343e608aa9aa7f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/34508175?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 9.8 kB URL HTTP/2 mc.yandex.ru/watch/34508175?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d7814305f961caded310b6f2089219b
efcb6a067bb023865823625e67d9de60d44685e0
3c01637a052e2394774fc8f6dd37a284afaf76b423219ecd26a89c2d8b69c121
GET /watch/34508175?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/34508175/1?wmode=7&page-url=http%3A%2F%2Frumyantsevamd.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1632%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1012382761353%3Ahid%3A349790498%3Az%3A0%3Ai%3A20230208235833%3Aet%3A1675900714%3Ac%3A1%3Arn%3A398147905%3Arqn%3A1%3Au%3A1675900714318416945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A82%2C26%2C825%2C27%2C-83%2C0%2C%2C857%2C22%2C%2C%2C%2C1839%3Aco%3A0%3Ans%3A1675900711337%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675900714%3At%3A%D0%91%D0%BB%D0%BE%D0%B3%20%D0%B0%D0%BA%D1%83%D1%88%D0%B5%D1%80%D0%B0-%D0%B3%D0%B8%D0%BD%D0%B5%D0%BA%D0%BE%D0%BB%D0%BE%D0%B3%D0%B0%20%D0%A2%D0%B0%D1%82%D1%8C%D1%8F%D0%BD%D1%8B%20%D0%A0%D1%83%D0%BC%D1%8F%D0%BD%D1%86%D0%B5%D0%B2%D0%BE%D0%B9%2C%20%D0%BA.%D0%BC.%D0%BD.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:57:37 GMT
access-control-allow-origin: http://rumyantsevamd.ru
set-cookie: yabs-sid=1342212591675900657; Path=/; SameSite=None; Secure
i=EdOF4MKU0fcuD0z9VvS+aOOncER3FScA3tU/ZCCa/VxPHz36elHa5tKIjqLILGq7koALi/nHODOT3mnE42yA6kHbsJg=; Expires=Sat, 05-Feb-2033 23:57:33 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3019343451675900657; Expires=Thu, 08-Feb-2024 23:57:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3019343451675900657; Expires=Thu, 08-Feb-2024 23:57:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707436657.yc.1675900657#1707436657.yrts.1675900657#1707436657.yrtsi.1675900657; Expires=Thu, 08-Feb-2024 23:57:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:57:37 GMT
last-modified: Wed, 08-Feb-2023 23:57:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
142.250.74.66302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 08 Feb 2023 23:57:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9203cfb9f0c1c958dd008eac55a9d3c4
6bdd1047590dd3fb54c15d5d6d38e7c86274b203
09770229be5ff3037708543e3204c66de84253b3a858a83a0e1672a04c0e9cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11760
x-amzn-requestid: b2863a01-4714-4554-a478-5402467b3448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKHc_oAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-1c5a3edf37bc7cc937c800d2;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: y-1zzLzVegi0T-SAyTpUuFD6iVVYbuL5u71dc74BY2l7PrxVu-am5w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:37 GMT
etag: "6bdd1047590dd3fb54c15d5d6d38e7c86274b203"
content-type: image/jpeg
age: 8580
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb7c8b758fe17f6c06ce2bebb5008495
032d747cf20951f6ca6fd51489fefd7c09c4948d
835d89e028ec4c85a845f2835cb5eddb9653937f6736e2713b671419474608ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12811
x-amzn-requestid: be33f9ef-31cb-4572-9f22-0a433423e195
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChzZFiWIAMFgmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4167b-70ed2a756b8da4372ccc1f83;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:39:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JpeDqbyAp9qLkVVqTKxmVy96vqBfyK4-GDiWdgkAjQlUN4Fu160VLA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:45:55 GMT
etag: "032d747cf20951f6ca6fd51489fefd7c09c4948d"
content-type: image/jpeg
age: 7902
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90107713-2512-413b-bb6c-0156521b403c.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90107713-2512-413b-bb6c-0156521b403c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 113363afa7cfd484dbc115a9f44c1723
2f9dfb845aa919a51a0b5fa9a824ac4845f669be
a91a045600ef2fdebd582ce453a85f7ce0c9f8be7258baf311d0d940de027c20
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90107713-2512-413b-bb6c-0156521b403c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4308
x-amzn-requestid: 2d4ce596-9a69-4394-8e10-cd5c54687a06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzKZ0F2DoAMF6nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddf10b-6c4fabe01360b8781bdd8e06;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 05:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GnbG_CYddidhGlygFinwMyN81eHxP_vRzxsm7QBIAJzFqwaKTt-POQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:44 GMT
age: 8573
etag: "2f9dfb845aa919a51a0b5fa9a824ac4845f669be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea55fd1053c19123cb789a7d14479ccc
45fb06a6feeceff6a06c8c3f37e259ddf6e09820
393290f5ec8379a09da72b2554c30023b688489ffda79f5edfe6f114250ee4c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6061
x-amzn-requestid: cf552847-17d0-4820-9711-3fb129090686
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f8xbCG8jIAMF7Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1c913-0f2af41d6063340d483c3a55;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 03:44:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AhvgnN4mrezDRzaqcb-O0ZGyjW83OcyZd76sLZByQhZDzZgr8Mg-ZA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 05:14:12 GMT
age: 67405
etag: "45fb06a6feeceff6a06c8c3f37e259ddf6e09820"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.207.202200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.207.202:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 08 Feb 2023 23:57:37 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
142.250.74.164200 OK 14 kB URL HTTP/2 www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (36180)
Hash 6caf3ddf47bad942732577bf1cd634ed
5930e4cdb4173c5ffa3f9e2eaf7ecc147623dd0c
cc13b4b51d92ba1992ec59da7b670f2a66cf5ffd4907061f911349e925a218b7
GET /js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 08:52:36 GMT
expires: Wed, 07 Feb 2024 08:52:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 12:00:00 GMT
content-type: text/javascript
age: 140701
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 10:25:03 GMT
expires: Mon, 05 Feb 2024 10:25:03 GMT
cache-control: public, max-age=31536000
age: 307954
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.207.202200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.207.202:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash b3242cb1d5d307e11c2aac168cf57c23
ae510a04235ea2fd0794349e0f927b2d760acd30
b4e134ba88d0d80bbc8f4bc66f1593fb8e7d2bb8fe61eedcffd67960f431739f
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 Feb 2023 23:57:37 GMT
server: ESF
cache-control: private
content-length: 30877
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 433af7e1e2f0f14adb78a739bbae1832
fab933db47af9ab3f4f86befee579ac9972b82fd
a6be621f8cdc57bd55a8e73ff58a34b6a816eb558cb88b49cc031222042f82a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash da7ec6cdfb8eb8618e25bd1233622b0e
fa69c0711b2ad58b96ffbcaa8c1c8e617415712d
39ea51794254bafd67a8070483a664e61f63d5a7b15b8b083a109564641c11ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AL5GRJXoOD6X7n8smJ_MvWzc9cdVoM289ltQLcsu8OBm=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.4 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJXoOD6X7n8smJ_MvWzc9cdVoM289ltQLcsu8OBm=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash a13288782c202c74a4c908a04e1d3f47
08f3d792b742a2e2d732adbb3b964ece4a04891c
4be15a15f1a53dfe2f616da7f96d4e2b8891bd1f96f73646c1e5af9fc67e2fb9
GET /ytc/AL5GRJXoOD6X7n8smJ_MvWzc9cdVoM289ltQLcsu8OBm=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2376
x-xss-protection: 0
date: Wed, 08 Feb 2023 23:57:37 GMT
expires: Sun, 05 Feb 2023 17:05:11 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2b"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/WKjGZI1vSiI/maxresdefault.webp
216.58.207.214200 OK 85 kB URL HTTP/2 i.ytimg.com/vi_webp/WKjGZI1vSiI/maxresdefault.webp
IP 216.58.207.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 309a9cf4edec36bde7b2e55106282336
e808ea5a3be53ee2473c59ea4a734b6b0b155282
b40a789af6d3a61eafa97b6dc237d8bda3606dab75786a8202813921beb3324a
GET /vi_webp/WKjGZI1vSiI/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 85180
date: Wed, 08 Feb 2023 23:57:37 GMT
expires: Thu, 09 Feb 2023 01:57:37 GMT
cache-control: public, max-age=7200
etag: "1562405892"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.207.202200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.207.202:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash dfd60115e29fab96c67d83fbc0ea0e1d
1417aa26214ad8b367cad0fe27c436dc1cd4fb7b
e2ee0f2e4e5677a90aa8b190fb2c12aad89cfcf91fc0c03ea2ab865089cdf595
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 08 Feb 2023 23:57:38 GMT
server: ESF
cache-control: private
content-length: 30868
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash da7ec6cdfb8eb8618e25bd1233622b0e
fa69c0711b2ad58b96ffbcaa8c1c8e617415712d
39ea51794254bafd67a8070483a664e61f63d5a7b15b8b083a109564641c11ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 433af7e1e2f0f14adb78a739bbae1832
fab933db47af9ab3f4f86befee579ac9972b82fd
a6be621f8cdc57bd55a8e73ff58a34b6a816eb558cb88b49cc031222042f82a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:57:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 4b3bc369121ccf3251f12bf7767e7fb6
b65720aaa2ca0b895879afb4799fbba5414f4b0b
7a459912916a3982655ce30468a075d8a26788d3cb1c06512aba32a12d95ba98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 23:57:38 GMT
Last-Modified: Wed, 08 Feb 2023 22:34:42 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IghlGUT011pvTrd0_pShTSx0CIOvPfnbcvX_WQ_h5c-PsfUj-4Vt1w==
Age: 4977
analytics.shareaholic.com/e
3.229.57.141200 OK 43 B URL HTTP/2 analytics.shareaholic.com/e
IP 3.229.57.141:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /e HTTP/1.1
Host: analytics.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 155
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:57:38 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: http://rumyantsevamd.ru
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
p3p: CP="OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC"
expires: Thu, 01 Jan 1970 00:00:00 GMT
referer-policy: unsafe-url
content-security-policy: referrer always
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8cd8d182a0300ed0a21e8481b4d5ffec
824a1d1fc536f25c9b778cc150c9882733b8e1e7
3843f6e71719fb33709a0d0bb27ce44ead63e8f4bab757611ff4c63e4ca538be
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3843F6E71719FB33709A0D0BB27CE44EAD63E8F4BAB757611FF4C63E4CA538BE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10223
Expires: Thu, 09 Feb 2023 02:48:01 GMT
Date: Wed, 08 Feb 2023 23:57:38 GMT
Connection: keep-alive
www.shareaholic.net/config/2ddc719f2f177fc7f6f9cbb27a657f7d.json
184.73.100.94200 OK 1.5 kB URL HTTP/2 www.shareaholic.net/config/2ddc719f2f177fc7f6f9cbb27a657f7d.json
IP 184.73.100.94:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (10199), with no line terminators
Hash 47ee38b7bf39277350edede79327d4df
585b0a34f4f5292761387ac03d1a806c7882a225
676f7c1666c9284eecc351b63d6a052c5e9e2807b4e284c80f25fc14a3938dd7
GET /config/2ddc719f2f177fc7f6f9cbb27a657f7d.json HTTP/1.1
Host: www.shareaholic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://rumyantsevamd.ru
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 05:11:27 GMT
etag: W/"8d59a4a1952b8427b28b402a19ac739b"
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json
cache-control: max-age=3, public, must-revalidate
x-varnish: 767513050 746843226
via: 1.1 varnish (Varnish/6.0)
access-control-allow-methods: GET, HEAD
access-control-allow-headers: *
access-control-allow-origin: *
access-control-expose-headers: Etag, Access-Control-Allow-Origin, x-client-geo-latlong, x-client-geo-country, x-client-geo-city, x-client-geo-zip, x-client-geo-region, x-client-geo-metrocode
access-control-max-age: 2000
x-client-geo-latlong: 59.945200,10.755900
x-client-geo-country: NO,Norway
x-client-geo-city:
x-client-geo-region:
x-client-geo-metrocode:
x-client-geo-zip:
accept-ranges: bytes
content-length: 1509
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 507617d00611e7f8e29c74f5eaf8c605
a9168bf45ef1e9e19e3db300b09a93956cebe37a
d1163d33c54958329a92d9e9801d87fc6b9dde7d63c9dacd2e1e7f0db683cd5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1163D33C54958329A92D9E9801D87FC6B9DDE7D63C9DACD2E1E7F0DB683CD5E"
Last-Modified: Tue, 07 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10431
Expires: Thu, 09 Feb 2023 02:51:29 GMT
Date: Wed, 08 Feb 2023 23:57:38 GMT
Connection: keep-alive
partner.shareaholic.com/partners.js?location=http%3A%2F%2Frumyantsevamd.ru%2F&cl=ru-RU&id_sync=043ab79f-4da6-4dc6-b11d-cbca5f2e0151&pvs=1&site=2ddc719f2f177fc7f6f9cbb27a657f7d
107.20.140.231200 OK 0 B URL HTTP/2 partner.shareaholic.com/partners.js?location=http%3A%2F%2Frumyantsevamd.ru%2F&cl=ru-RU&id_sync=043ab79f-4da6-4dc6-b11d-cbca5f2e0151&pvs=1&site=2ddc719f2f177fc7f6f9cbb27a657f7d
IP 107.20.140.231:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partners.js?location=http%3A%2F%2Frumyantsevamd.ru%2F&cl=ru-RU&id_sync=043ab79f-4da6-4dc6-b11d-cbca5f2e0151&pvs=1&site=2ddc719f2f177fc7f6f9cbb27a657f7d HTTP/1.1
Host: partner.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:57:39 GMT
content-type: application/javascript;charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding, User-Agent
content-length: 0
p3p: CP='OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC'
X-Firefox-Spdy: h2
s0.videopress.com/js/videopress.js?ver=1.09
192.0.78.24301 Moved Permanently 0 B URL HTTP/1.1 s0.videopress.com/js/videopress.js?ver=1.09
IP 192.0.78.24:0
GET /js/videopress.js?ver=1.09 HTTP/1.1
Host: s0.videopress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 08 Feb 2023 23:57:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://s0.videopress.com/js/videopress.js?ver=1.09
X-ac: 3.arn _dca BYPASS
netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.css
104.18.11.207200 OK 0 B URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.css
IP 104.18.11.207:0
GET /font-awesome/4.3.0/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rumyantsevamd.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:57:36 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-07-24 16:53:06
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 2df1db1c1bde5cb32a4cae1ba297613a
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 21340447
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79684efd7b551bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s0.videopress.com/js/videopress.js?ver=1.09
192.0.78.24404 Not Found 0 B URL HTTP/2 s0.videopress.com/js/videopress.js?ver=1.09
IP 192.0.78.24:0
GET /js/videopress.js?ver=1.09 HTTP/1.1
Host: s0.videopress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rumyantsevamd.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Wed, 08 Feb 2023 23:57:36 GMT
content-type: text/html
vary: Accept-Encoding
etag: W/"5bfee305-7e5"
content-encoding: br
x-ac: 3.arn _dca MISS
X-Firefox-Spdy: h2
www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
216.58.211.14200 OK 0 B URL HTTP/2 www.youtube.com/embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent
IP 216.58.211.14:0
GET /embed/WKjGZI1vSiI?version=3&rel=1&fs=1&autohide=2&showsearch=0&showinfo=1&iv_load_policy=1&wmode=transparent HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rumyantsevamd.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 Feb 2023 23:57:36 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=YCnK2QNHarc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=KgVc9CC2hM8; Domain=.youtube.com; Expires=Mon, 07-Aug-2023 23:57:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1Tnprek9EVXhNRGczTlRReU56VTJPQT09EPDtkJ8GGPDtkJ8G; Domain=.youtube.com; Expires=Mon, 07-Aug-2023 23:57:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+515; expires=Fri, 07-Feb-2025 23:57:36 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2