historyoftravel.ru/
200 OK 23 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (28274)
Hash 3f8a7cabb8c785eb5caed83a2e9c6a7d
273b78f3cafe585a5c4d00fcffb201419efbd5be
7958b901ab5b998b54cd5e0e185b3a10b7a157652c4dc0f57f34f32075190a63
GET / HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
X-Powered-By: PHP/7.1.33
Cache-Control: no-cache
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5412
Expires: Mon, 05 Dec 2022 05:06:10 GMT
Date: Mon, 05 Dec 2022 03:35:58 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 277
Cache-Control: max-age=111596
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:58 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 10:35:54 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 03:18:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1052
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6510
Expires: Mon, 05 Dec 2022 05:24:28 GMT
Date: Mon, 05 Dec 2022 03:35:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: D+Itt6psGebxXZkSdC+Ncs5Usnwx9dpwqzsUPh967WIVcsYjqoZGVyATaMqPsYa1srGKKlFF8q4=
x-amz-request-id: C63Y8HPDD46C8FFW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 02:47:48 GMT
age: 2890
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 03:35:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 496da88dcf27fdc6c5da32c4a0de0e37
dcb5af10b8212aa7cffa1c71fe0a7fc72da5b22f
06e74d9cc18ea24e7150b3f29eba6cacc8933c97a90943ede8b236ef2ad1990d
GET /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Origin: http://historyoftravel.ru
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
rotarb.bid/1pe0a.min.js
200 OK 19 kB IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63133), with no line terminators
Hash bbf2fa4e6280ebccb8fdc4483ef800c6
1569952e7c1e6e22ce42ce707b292dc6f5ca8975
ec75b89dfb7f7def5efdfb932a38e2b6475e01afef54c8ed01bfa476c83b186c
GET /1pe0a.min.js HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Origin: http://historyoftravel.ru
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Cache-Control: max-age=300
Expires: Mon, 05-Dec-2022 05:40:58 EET
Duration: 337878
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rotarb.bid/1pe0a.min.js?ce9a636
200 OK 19 kB URL HTTP/1.1 rotarb.bid/1pe0a.min.js?ce9a636
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63133), with no line terminators
Hash bbf2fa4e6280ebccb8fdc4483ef800c6
1569952e7c1e6e22ce42ce707b292dc6f5ca8975
ec75b89dfb7f7def5efdfb932a38e2b6475e01afef54c8ed01bfa476c83b186c
GET /1pe0a.min.js?ce9a636 HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Cache-Control: max-age=300
Expires: Mon, 05-Dec-2022 05:40:58 EET
Duration: 972950
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
rotarb.bid/1pe0a.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 5944774742e2106aec65ead82747daa1
eb9af1977441d8fdd09dde05c00758ca6ddd97bd
de60accf0e6fa7433a1824be75545b76c710046a9056440330336e5583548645
POST /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 81
Origin: http://historyoftravel.ru
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
fuyviz.com/ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php
200 OK 23 kB URL HTTP/1.1 fuyviz.com/ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php
IP
File type Unicode text, UTF-8 text, with very long lines (50460)
Hash 5b7c47cd78225169d593a3d9cdb521b7
34f3c5cacf1eb11171f2a9947e8999b40a545128
fcb523c11b1b55436d5a8f61eeffc8cc855fe1089398b35d779ecea5d14af9d9
Analyzer Verdict Alert fortinet Malware
GET /ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php HTTP/1.1
Host: fuyviz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 23444
Last-Modified: Thu, 01 Dec 2022 08:04:42 GMT
Connection: keep-alive
ETag: "6388601a-5b94"
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
rotarb.bid/1pe0a.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash c219b2abdec5af051852bf316efbda69
ab1b8d6665d1304ae427405529af537dc3982176
e52b4dc732e94965543502f160a96afad7d0415bf580f90f953282212935a207
POST /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 148
Origin: http://historyoftravel.ru
Connection: keep-alive
Referer: http://historyoftravel.ru/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Mon, 05 Dec 2022 03:35:58 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06c19332f8848598c5bd816fe27e2d19
55d6141ab84133d32e684cec5cbdccd76a3d012f
895334d475ec0815f66f22421668300468bcb2db7ec6b92ca6334f3d6d586f82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895334D475EC0815F66F22421668300468BCB2DB7EC6B92CA6334F3D6D586F82"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Dec 2022 09:35:59 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06c19332f8848598c5bd816fe27e2d19
55d6141ab84133d32e684cec5cbdccd76a3d012f
895334d475ec0815f66f22421668300468bcb2db7ec6b92ca6334f3d6d586f82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895334D475EC0815F66F22421668300468BCB2DB7EC6B92CA6334F3D6D586F82"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21590
Expires: Mon, 05 Dec 2022 09:35:49 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6e367d9f906496ddbb45b8482e257e4e
241fc1c7a56bf8b8bd7f8cfb9895f5d991cd9f47
07b7567dce42c127113720c1c11ba6dcdb74d1be38144b40382d1f7279dfaf8b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "07B7567DCE42C127113720C1C11BA6DCDB74D1BE38144B40382D1F7279DFAF8B"
Last-Modified: Sun, 04 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Dec 2022 09:35:59 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6e367d9f906496ddbb45b8482e257e4e
241fc1c7a56bf8b8bd7f8cfb9895f5d991cd9f47
07b7567dce42c127113720c1c11ba6dcdb74d1be38144b40382d1f7279dfaf8b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "07B7567DCE42C127113720C1C11BA6DCDB74D1BE38144B40382D1F7279DFAF8B"
Last-Modified: Sun, 04 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Dec 2022 09:35:59 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06c19332f8848598c5bd816fe27e2d19
55d6141ab84133d32e684cec5cbdccd76a3d012f
895334d475ec0815f66f22421668300468bcb2db7ec6b92ca6334f3d6d586f82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895334D475EC0815F66F22421668300468BCB2DB7EC6B92CA6334F3D6D586F82"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Dec 2022 09:35:59 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 03:08:58 GMT
cache-control: public,max-age=3600
age: 1621
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 235
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Last-Modified: Mon, 05 Dec 2022 03:32:04 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06c19332f8848598c5bd816fe27e2d19
55d6141ab84133d32e684cec5cbdccd76a3d012f
895334d475ec0815f66f22421668300468bcb2db7ec6b92ca6334f3d6d586f82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895334D475EC0815F66F22421668300468BCB2DB7EC6B92CA6334F3D6D586F82"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Dec 2022 09:35:59 GMT
Date: Mon, 05 Dec 2022 03:35:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SuBo1/6uPs4RDm77TgZzWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /yX04anaSg65C0oMvhI3KrEdsCQ=
historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf
200 OK 166 kB URL HTTP/2 historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Size 166 kB (165548 bytes)
Hash b06871f281fee6b241d60582ae9369b9
13b1eab65a983c7a73bc7997c479d66943f7c6cb
aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
GET /wp-content/themes/root/fonts/fontawesome-webfont.ttf HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/octet-stream
content-length: 165548
last-modified: Tue, 09 Nov 2021 09:13:31 GMT
etag: "618a3bbb-286ac"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
rbthre.work/pjs/A2NApLsPC.js
200 OK 9.1 kB URL HTTP/2 rbthre.work/pjs/A2NApLsPC.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (28412)
Hash 39bb3b05d86740cd760cde4494632ab5
636b80f6f8fe1b22bf56d256d567b286a5c82e04
8ac63617a8c23d575d3c035790d48554f6cacbb3b1f5497d48bd5d9fc863bc1f
Analyzer Verdict Alert fortinet Malware
GET /pjs/A2NApLsPC.js HTTP/1.1
Host: rbthre.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 09:59:16 GMT
etag: W/"635f9c74-84d0"
expires: Mon, 05 Dec 2022 03:45:59 GMT
cache-control: max-age=600, public, must_revalidate
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/uploads/2021/11/1613629692_33-p-fon-dlya-prezentatsii-puteshestvie-39.jpg
200 OK 438 kB URL HTTP/2 historyoftravel.ru/wp-content/uploads/2021/11/1613629692_33-p-fon-dlya-prezentatsii-puteshestvie-39.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 1920x1200, components 3\012- data
Size 438 kB (437729 bytes)
Hash ac73c25aec4e55105ac5aea136a9bf30
fdbebef8806e61c378711a8c9af93f8b4a4b8f35
d621f1b916949e178523102eb7d8163db877fbd1147c414370790aba31f21815
GET /wp-content/uploads/2021/11/1613629692_33-p-fon-dlya-prezentatsii-puteshestvie-39.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 437729
last-modified: Wed, 10 Nov 2021 08:28:07 GMT
etag: "618b8297-6ade1"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css
200 OK 1.6 kB URL HTTP/2 historyoftravel.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css
IP
Hash 2f3c3774dc5d6674b19a36d70f052393
4c862d54911530fd743de6ca2440e6d416217722
8a84ea56e5058c6fdbe9aa64d17ab35a5252fa513987a10ef1cdde20416ace1c
GET /wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Fri, 08 Nov 2019 09:59:03 GMT
vary: Accept-Encoding
etag: W/"5dc53c67-fda"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/ce/2f7d6c4c4cda8ce_1170x400.jpg
200 OK 18 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/ce/2f7d6c4c4cda8ce_1170x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1170x400, components 3\012- data
Hash 3dd07af3db0af290a8b84e9c49339988
62d1e307094e3f4aab45dea5800990cbf5a26efc
6ebe1f86a5b297c348481adc5baa9b99d50f5e22d8a9ca47ad82ec109e1c7651
GET /wp-content/cache/thumb/ce/2f7d6c4c4cda8ce_1170x400.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 17958
last-modified: Wed, 10 Nov 2021 08:26:07 GMT
etag: "618b821f-4626"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.json
200 OK 36 kB IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 8af77d570cda3fae424b4873513f422b
1f4695d4c5efe66ecde21ed91ebcb8ef790fe9c9
fe08f811e8cd4722e65f58c9bacf8d7539134bcccf42cf016d4fdd0cfd660d7f
GET /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.min.js
200 OK 75 kB IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63133), with no line terminators
Hash 49ecc9d1f336cd8614f0e4710e5025a0
49664ef0160987b239d8ed1d358a2d0b40c17837
085eea72290aed930da5d37822d88fc116a46abf288e0d86bd7782e81cb43071
GET /1pe0a.min.js HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
cache-control: max-age=300
expires: Mon, 05-Dec-2022 05:40:59 EET
duration: 400183
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css
200 OK 53 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css
IP
Hash 1158621c252fc4f6f57baf47d88cb9ff
48990b25c8336f5e5d245465c322118b95861b36
f0c2d7269f3103cc3d4bdda2631793c3248c91ab573bc4539ca75f110ac95fc0
GET /wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Thu, 01 Jul 2021 11:18:37 GMT
vary: Accept-Encoding
etag: W/"60dda48d-11e"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
historyoftravel.ru/wp-content/cache/thumb/stub_25f1a3f607fdaf9_1170x400.jpg
200 OK 3.2 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/stub_25f1a3f607fdaf9_1170x400.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1170x400, components 1\012- data
Hash fac584be1c7d801b8b39fe1f909bd533
e4938a279ddc03278a2a81271fbd86d35f7439e5
5a018f5605722e5956f446cc9e27288926f90b1137fe464d7b2e9b9273096950
GET /wp-content/cache/thumb/stub_25f1a3f607fdaf9_1170x400.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 3174
last-modified: Sat, 08 Oct 2022 14:34:48 GMT
etag: "63418a88-c66"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://historyoftravel.ru/wp-content/themes/root/assets/css/style.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/font-woff2
content-length: 77160
last-modified: Tue, 09 Nov 2021 09:13:31 GMT
etag: "618a3bbb-12d68"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:09:46 GMT
expires: Fri, 01 Dec 2023 08:09:46 GMT
cache-control: public, max-age=31536000
age: 329173
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 374504
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 374525
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9644, version 1.0\012- data
Hash 6f112ec2b932ee12379442c42853244e
b2e73c8c70d6261e1d187f41693c43ac4fe0809d
6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:09:46 GMT
expires: Fri, 01 Dec 2023 08:09:46 GMT
cache-control: public, max-age=31536000
age: 329173
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:35:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
historyoftravel.ru/wp-content/uploads/2021/11/logo3.png
200 OK 19 kB URL HTTP/2 historyoftravel.ru/wp-content/uploads/2021/11/logo3.png
IP
File type PNG image data, 490 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash ee9e41039961d2c3834765090e4c7997
7cf870dcd0f439cf9853a7128c12f0509dfaa314
a7cd430b3359cb67e14bde5d8b5167b6994473c0e63341ba71ae5f99f412da91
GET /wp-content/uploads/2021/11/logo3.png HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/png
content-length: 18975
last-modified: Tue, 09 Nov 2021 09:21:58 GMT
etag: "618a3db6-4a1f"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/stub_25f1a3f607fdaf9_310x140.jpg
200 OK 630 B URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/stub_25f1a3f607fdaf9_310x140.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 310x140, components 1\012- data
Hash 1dea8823af8f25d38a1ac3a84ab08e57
6bd0345689aed8c227cc3d86a5ba98606665e3b7
8b25195e3287fb7da916837a5eaac2dfc8ea2b49e51449579c0b80f357dc65bd
GET /wp-content/cache/thumb/stub_25f1a3f607fdaf9_310x140.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 630
last-modified: Sat, 08 Oct 2022 14:34:49 GMT
etag: "63418a89-276"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/b3/f74d6fc6ab820b3_310x140.jpg
200 OK 7.0 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/b3/f74d6fc6ab820b3_310x140.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 310x140, components 3\012- data
Hash 3799590de3e7188b0e965bcf5f0f91f9
dc82b4f7c6d875d3205159b4dd3de7f508d5387c
a4cc813ec477688afe12f54af55709d3f338cb12a3c27f17ba337ab5ea6c2598
GET /wp-content/cache/thumb/b3/f74d6fc6ab820b3_310x140.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 7028
last-modified: Tue, 09 Nov 2021 09:56:41 GMT
etag: "618a45d9-1b74"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/8f/5d04a81003dfd8f_310x140.jpg
200 OK 9.9 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/8f/5d04a81003dfd8f_310x140.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 310x140, components 3\012- data
Hash de7160d331de84969fdf5c10e7de0710
2af62828816ef8b2f07e0b29acd19ad4e90361b8
82fb0417dbdf56aa1ff88f64ff669caaa55cefc6040c5d0f93b142ed6037aa3d
GET /wp-content/cache/thumb/8f/5d04a81003dfd8f_310x140.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 9897
last-modified: Tue, 09 Nov 2021 09:15:02 GMT
etag: "618a3c16-26a9"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/7e/95622833d944a7e_310x140.jpg
200 OK 6.2 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/7e/95622833d944a7e_310x140.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 310x140, components 3\012- data
Hash 615ba7c89e600028dd265b1b7a75b553
9b0354bd67ab0fb28732a6a9f9bc822c83def6f2
a14d7f9b71707b499cc3c808bf1004594ab083ee6e0c3f3615b586fcd55809e6
GET /wp-content/cache/thumb/7e/95622833d944a7e_310x140.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 6170
last-modified: Tue, 09 Nov 2021 09:15:02 GMT
etag: "618a3c16-181a"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/thumb/a0/2e0797b883678a0_310x140.jpg
200 OK 4.3 kB URL HTTP/2 historyoftravel.ru/wp-content/cache/thumb/a0/2e0797b883678a0_310x140.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 310x140, components 3\012- data
Hash 8b5b2845def9c799b943367a4e7d713d
184db0e9810b6b60490ee92b6a3e2ed89d72df9f
2b6ad6a023ccb057937d7edd27db1802037266d44ddfef3db54da7e385bd46c3
GET /wp-content/cache/thumb/a0/2e0797b883678a0_310x140.jpg HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/jpeg
content-length: 4290
last-modified: Tue, 09 Nov 2021 09:15:02 GMT
etag: "618a3c16-10c2"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
fuyviz.com/ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php
200 OK 23 kB URL HTTP/2 fuyviz.com/ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php
IP
File type Unicode text, UTF-8 text, with very long lines (50460)
Hash 5b7c47cd78225169d593a3d9cdb521b7
34f3c5cacf1eb11171f2a9947e8999b40a545128
fcb523c11b1b55436d5a8f61eeffc8cc855fe1089398b35d779ecea5d14af9d9
Analyzer Verdict Alert fortinet Malware
GET /ljw17l/291/ilvm0p/30yqh8/678/qvu678/kpydv.php HTTP/1.1
Host: fuyviz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 23444
last-modified: Thu, 01 Dec 2022 08:04:42 GMT
etag: "6388601a-5b94"
content-encoding: gzip
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
historyoftravel.ru/favicon.ico
200 OK 0 B URL HTTP/2 historyoftravel.ru/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
x-powered-by: PHP/7.1.33
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash e0a1002eb2d6c0d5cdf277db888a942c
c2d172f91c4dd67e8b69fc88252ddf26097d611a
f91b83a7d96d19945071f65e35673f3205683c0f4a9dfcbafb4d5a8f136652be
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 03:36:00 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Fri, 09 Dec 2022 02:32:01 GMT
ETag: "c2d172f91c4dd67e8b69fc88252ddf26097d611a"
Last-Modified: Mon, 05 Dec 2022 02:32:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 763
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7749bc285dbcb500-OSL
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8652567287031986
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8652567287031986
IP
File type ASCII text, with very long lines (4885)
Hash 4b2132137ecf0a3daa17ac8840f57e1c
30b07613437917f130b53186d73fa4d2e78112b3
d882c99b9554f842ae0d2917a2e6e1a044c98d7f384a378e36f1fdd9c9cdff90
GET /pagead/js/adsbygoogle.js?client=ca-pub-8652567287031986 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 05 Dec 2022 03:36:00 GMT
expires: Mon, 05 Dec 2022 03:36:00 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6453578165776396208
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49589
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash a4567a1e52f99c2b3870f58375ec8cac
dbfc795e71fc19f7e45e8637abc4ac770f639a48
2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73266
date: Mon, 05 Dec 2022 03:36:00 GMT
access-control-allow-origin: *
etag: "6388ac0c-11e32"
expires: Mon, 05 Dec 2022 04:36:00 GMT
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a2365b2356f35547e7a8a0eeac1a5e71
f070192cf1ad964c90dd00bdf6b04fa598618d61
50415514239bdc4345cb6f75e5aba42fe0f093aaf21de22276aaeceab84c0450
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 663979bbd831a40bec8611cfac8d77af
aa43c96676a33100f244e6772e37adc2b6f89b76
60c21027da288e857f546b531dd226d81206bfa85a35985b0e1587a68dec4d5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=historyoftravel.ru&callback=_gfp_s_&client=ca-pub-8652567287031986&gpid_exp=1
200 OK 257 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=historyoftravel.ru&callback=_gfp_s_&client=ca-pub-8652567287031986&gpid_exp=1
IP
File type ASCII text, with very long lines (403), with no line terminators
Hash ce461e89c1d61c37568d637bbb8220ea
5c09dafb3333477dca988bb128516528d7ddd1f8
212cc1c95a01e864f0f16362ef0d493aec51601a30eabc27932e40ff889c1626
GET /gampad/cookie.js?domain=historyoftravel.ru&callback=_gfp_s_&client=ca-pub-8652567287031986&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 05 Dec 2022 03:36:00 GMT
server: cafe
cache-control: private
content-length: 257
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=historyoftravel.ru
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=historyoftravel.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=historyoftravel.ru HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 05 Dec 2022 03:36:00 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=historyoftravel.ru
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=historyoftravel.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=historyoftravel.ru HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 05 Dec 2022 03:36:00 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:00 GMT
access-control-allow-origin: *
etag: "6388ac0c-2b"
expires: Mon, 05 Dec 2022 04:36:00 GMT
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a2365b2356f35547e7a8a0eeac1a5e71
f070192cf1ad964c90dd00bdf6b04fa598618d61
50415514239bdc4345cb6f75e5aba42fe0f093aaf21de22276aaeceab84c0450
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 917d281ca22c901597795b51fd9df338
be0e026d76f26092edfc1f67ea98ddc4a539439a
5f47f5ac32d4c80f29c4a69a830ec9427dd0055fc57973f01f73ec22503cd30c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/56360608/1?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 426 B URL HTTP/2 mc.yandex.ru/watch/56360608/1?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (426), with no line terminators
Hash 09762bfe88a02e5e40fd95e7d98b5174
7eb06223af843664667859e0ab555f5738e05bd6
e14115936436549619aaa75d22f991aab2835fd8c543a9c340328555389beb37
GET /watch/56360608/1?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://historyoftravel.ru
Referer: https://historyoftravel.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 426
date: Mon, 05 Dec 2022 03:36:00 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:00 GMT
last-modified: Mon, 05-Dec-2022 03:36:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10686
Expires: Mon, 05 Dec 2022 06:34:06 GMT
Date: Mon, 05 Dec 2022 03:36:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10686
Expires: Mon, 05 Dec 2022 06:34:06 GMT
Date: Mon, 05 Dec 2022 03:36:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10686
Expires: Mon, 05 Dec 2022 06:34:06 GMT
Date: Mon, 05 Dec 2022 03:36:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10686
Expires: Mon, 05 Dec 2022 06:34:06 GMT
Date: Mon, 05 Dec 2022 03:36:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 12:09:06 GMT
age: 55614
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/56360608?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 6.1 kB URL HTTP/2 mc.yandex.ru/watch/56360608?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3d863be9bd5d072e85b8976251ce342
b9c67cf9a5ae7ec4c7bf8e8b857918be9277a140
f188fb7575c4b8662acfe2a6682559d50a12430c116605391dd77257bc11a60b
GET /watch/56360608?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/56360608/1?wmode=7&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&page-ref=http%3A%2F%2Fhistoryoftravel.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A489%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A507299993854%3Ahid%3A1052338986%3Az%3A0%3Ai%3A20221205033557%3Aet%3A1670211358%3Ac%3A1%3Arn%3A113316889%3Arqn%3A1%3Au%3A1670211358556734541%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C91%2C113%2C1%2C%2C0%2C%2C208%2C6%2C%2C%2C%2C589%3Aco%3A0%3Ans%3A1670211356747%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670211358%3At%3AHistory%20of%20Travel.ru%20-&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Mon, 05 Dec 2022 03:36:00 GMT
access-control-allow-origin: https://historyoftravel.ru
set-cookie: yabs-sid=2266864441670211360; Path=/; SameSite=None; Secure
i=B+m2SL/ikmAbTdYTamB1FAJRQhQ+ADEiu/5hfOLNj7/+z1GrTjrfUAeznAqmszCBFVeTHkRHWn6BiA0wB0JCAgODVtM=; Expires=Thu, 02-Dec-2032 03:35:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2688933461670211360; Expires=Tue, 05-Dec-2023 03:36:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2688933461670211360; Expires=Tue, 05-Dec-2023 03:36:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701747360.yc.1670211360#1701747360.yrts.1670211360#1701747360.yrtsi.1670211360; Expires=Tue, 05-Dec-2023 03:36:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:00 GMT
last-modified: Mon, 05-Dec-2022 03:36:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9e228ec099cad3eea0fb1656da3536f
532cf52021a6cdb7b7963e9108b41590f58276fe
8e54f09dd66fdc35e5f54100cf6c56abf88cb7e724b08092e7ce82720d423135
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6236
x-amzn-requestid: 0215aac5-7c44-43b0-b2e9-baddeed42fe0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjiXEEXiIAMFqIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ae42d-5961705726e81a4e3b6a91c9;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 05:52:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ToFwGweqIr6TeGKj1mw8gMfun_defm7BE11XM-gKfL5NsEbJKC2iMg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:15:59 GMT
age: 19201
etag: "532cf52021a6cdb7b7963e9108b41590f58276fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6079166a1ed5bac7373183f03f33b84e
b0c9391b87a4560598e43d5084dda41e267974a9
3e2faccbc3e14a10da4a433d789068cdc3fb2d3e2a04a7e2b7ea5f6f6313dcd4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13647
x-amzn-requestid: 36276b12-9e02-4d00-a100-9aa5c794fc79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ueEWUoAMFj7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1329-7abb45a85c6bc2235c25d61e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Au3s215cCYumuz8qJ7dQFYQ45s4XRo0-zzFcnRLv7gNb3aFHpKnGwg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:07 GMT
age: 20633
etag: "b0c9391b87a4560598e43d5084dda41e267974a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8e6f84dff61fedd8ff9baa9bb648883
f8d5cc7b315879b66a11b403463da1330617d2fa
025c66a4a0e7927353e1733d7f8cfb6ec3c9c0228d34267cbff11f09cf112127
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12348
x-amzn-requestid: 72f681ef-9ae7-4fc5-8539-230e1d4277a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKa_HpTIAMFrcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abddf-43ef45165fd982997e5018c8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:09:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGsNaADKr1KoJT7rxDSFf8dxM1_IXsaF67Eqe8DIO9PAJy8HtqQKng==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 03:21:42 GMT
age: 858
etag: "f8d5cc7b315879b66a11b403463da1330617d2fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f71032604eecccf0a81f323a5f96a400
f8866d4f3185bcf7871581d75339998b34d6cf6d
d053eedc717d7fd86e621ba948680be16538396d1ba9854b6816626d149b1c57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6886
x-amzn-requestid: d721caf6-2252-4ede-9533-3d3fcd6cce0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpsw-FfRoAMFtOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d5b39-7644a195142f6c420ec7eac6;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 02:45:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn_L-TMV_ypQZFmolIRm4r5dyj5PpN12jrtafcP9HEkALUPfSzJ38w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 02:45:54 GMT
age: 3006
etag: "f8866d4f3185bcf7871581d75339998b34d6cf6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 48 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3505)
Hash ca57a2dee741fcb5c26204d54254d941
8c9ad16e50db0a268ecdd55a4bdcbb43d320a96b
0bd2d4c3f5c52381fa0a7ce37bc60fcc9f94e4ffbf643c94559f9ad2fa1c646a
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48508
date: Mon, 05 Dec 2022 03:36:01 GMT
expires: Mon, 05 Dec 2022 03:36:01 GMT
cache-control: private, max-age=3000
etag: "1669811598765935"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css
200 OK 1.8 kB URL HTTP/2 historyoftravel.ru/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css
IP
Hash 2816abdb1c12b6f029ed3a7686032825
6403b6d04171a6a23e23599117d3af99faaf4e53
1069a447ac5c8a41f0d648ac99111feeefbb158a4c588f101a4ed9cf11d78e8d
GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Fri, 08 Nov 2019 10:04:37 GMT
vary: Accept-Encoding
etag: W/"5dc53db5-17f9"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 13dc85b9faf49e6a9bf32608b0fcf56d
2ded5a6b67364d3f7875ce1598683ac2c97937d0
7924016b948a369b3a0bcb336f32dd8f10b14893ba1d9437c4fc171190eb5899
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1540)
Hash d22e40b1bc4f1b0f1727b96a0f32f7dd
57030c5040f0013120cca1e77fe38af35d4610e0
6f6d3797f9b19ffcd2f416a7566a58cf70fd4fb0ab17dec03fa5b690c6939494
GET /pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7458
x-xss-protection: 0
date: Sun, 04 Dec 2022 15:59:33 GMT
expires: Sun, 18 Dec 2022 15:59:33 GMT
cache-control: public, max-age=1209600
age: 41788
etag: 16870613375306414947
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
200 OK 9.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1596)
Hash 6b277303de172776fc303dfc195982ef
fe6c6af5791742485ae21c4dc02edbee2b426886
c536ada7aa8f4679e0e4f0b99703aab79f6fe32659d777f9c01a7785aa06a36d
GET /pagead/js/r20221110/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 9428
x-xss-protection: 0
date: Sun, 04 Dec 2022 13:29:36 GMT
expires: Sun, 18 Dec 2022 13:29:36 GMT
cache-control: public, max-age=1209600
age: 50785
etag: 246362764157784863
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/83de75e735dabeddf4e705de6f0a2f41.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/83de75e735dabeddf4e705de6f0a2f41.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1833)
Hash bf18e06fe996d8e32931955996f6f9f9
83b00b5650cf50deb2c305d4382f06a42b63fb32
a9b7ee4074a79df10d3f9eb1d4dffd8f08d1c46883cca461ef023c00b7c71f88
GET /mysidia/83de75e735dabeddf4e705de6f0a2f41.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 14157
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 15:24:06 GMT
expires: Thu, 02 Mar 2023 15:24:06 GMT
cache-control: public, max-age=7776000
last-modified: Wed, 30 Nov 2022 21:37:13 GMT
content-type: text/javascript
age: 216715
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e388f1ab4ec88104f57cf23944ee684
39178c45ed645709cc388d5790b1b58a3272a62f
e33b88f6f77d90b65a8fed943a45623e51f1efbdae401a1652f24be68408dba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 03:36:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/measurement/l?ebcid=ALh7CaRKQVdgtRMEE3AJH91PQlydKieiWGgPrVVqWEhPp1ToD9H3MT7bKbX4bkT5LUuOsdtynp2CsOA7K6un0cNCpFboOcrDxA
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaRKQVdgtRMEE3AJH91PQlydKieiWGgPrVVqWEhPp1ToD9H3MT7bKbX4bkT5LUuOsdtynp2CsOA7K6un0cNCpFboOcrDxA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaRKQVdgtRMEE3AJH91PQlydKieiWGgPrVVqWEhPp1ToD9H3MT7bKbX4bkT5LUuOsdtynp2CsOA7K6un0cNCpFboOcrDxA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 05 Dec 2022 03:36:02 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaSgRqbZ38ZNiQ9VxZr19s-OOl1XJ8PbkvKGl3FbF92jNptE39dcIVEt1nYSb4HXCTVnrpNC_cQ4CoDq9qhU2GfcHIfHmA
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaSgRqbZ38ZNiQ9VxZr19s-OOl1XJ8PbkvKGl3FbF92jNptE39dcIVEt1nYSb4HXCTVnrpNC_cQ4CoDq9qhU2GfcHIfHmA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaSgRqbZ38ZNiQ9VxZr19s-OOl1XJ8PbkvKGl3FbF92jNptE39dcIVEt1nYSb4HXCTVnrpNC_cQ4CoDq9qhU2GfcHIfHmA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 05 Dec 2022 03:36:02 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 374507
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221110&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221110&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14510), with no line terminators
Hash a5b4735b73bab83b2e5688d856f634c4
116abb817d16126cb5be63ac1517edd671e9eb2c
ec8e1723835a752f500cc96f050ede592be49d2f2c9f48c1e674b5bc8c0a6a55
GET /getconfig/sodar?sv=200&tid=gda&tv=r20221110&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Mon, 05 Dec 2022 03:36:03 GMT
server: cafe
content-length: 10953
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvZc2hlGffcemq7kfhwvUx9tCdfj52yNPllm3E0GaeIn_ydqyiTffP-RngdRY5m3KcjFPz6jjVk5YmwfbicQgxyNP4RWNIPihKIhMID9EhpNUKm7w0eRITcGRJMCUgImVHI_6N2HGg&sai=AMfl-YQrrZ5Yc2LfYskvcgK7wkiWvbNyPMXVV5EKMOHGS7wYtZ-W-zA79SYcGzdjvSWKMbFly6tqAQ7JiVgSUHgaV4NIqS9xPI2kv-L6Yld8mv9rwoJ8mCPPqBbLLpbu9CMGCT8&sig=Cg0ArKJSzEnRDm8n4GArEAE&cid=CAQSPwDq26N9-Hq_f9Ff3UIsgIzfd_kbudi31MtwlAtYx23RMuO4FPa26WhenxF6q1EeUdcW1qZy3ZO3GX2GMoP8FhgBIBM&id=lidar2&mcvt=1015&p=0,0,280,1170&mtos=1015,1015,1015,1015,1015&tos=1015,0,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1376766619&rs=2&la=1&cr=0&vs=4&r=v&rst=1670211358022&rpt=1619&met=mue&wmsd=0&pbe=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvZc2hlGffcemq7kfhwvUx9tCdfj52yNPllm3E0GaeIn_ydqyiTffP-RngdRY5m3KcjFPz6jjVk5YmwfbicQgxyNP4RWNIPihKIhMID9EhpNUKm7w0eRITcGRJMCUgImVHI_6N2HGg&sai=AMfl-YQrrZ5Yc2LfYskvcgK7wkiWvbNyPMXVV5EKMOHGS7wYtZ-W-zA79SYcGzdjvSWKMbFly6tqAQ7JiVgSUHgaV4NIqS9xPI2kv-L6Yld8mv9rwoJ8mCPPqBbLLpbu9CMGCT8&sig=Cg0ArKJSzEnRDm8n4GArEAE&cid=CAQSPwDq26N9-Hq_f9Ff3UIsgIzfd_kbudi31MtwlAtYx23RMuO4FPa26WhenxF6q1EeUdcW1qZy3ZO3GX2GMoP8FhgBIBM&id=lidar2&mcvt=1015&p=0,0,280,1170&mtos=1015,1015,1015,1015,1015&tos=1015,0,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1376766619&rs=2&la=1&cr=0&vs=4&r=v&rst=1670211358022&rpt=1619&met=mue&wmsd=0&pbe=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsvZc2hlGffcemq7kfhwvUx9tCdfj52yNPllm3E0GaeIn_ydqyiTffP-RngdRY5m3KcjFPz6jjVk5YmwfbicQgxyNP4RWNIPihKIhMID9EhpNUKm7w0eRITcGRJMCUgImVHI_6N2HGg&sai=AMfl-YQrrZ5Yc2LfYskvcgK7wkiWvbNyPMXVV5EKMOHGS7wYtZ-W-zA79SYcGzdjvSWKMbFly6tqAQ7JiVgSUHgaV4NIqS9xPI2kv-L6Yld8mv9rwoJ8mCPPqBbLLpbu9CMGCT8&sig=Cg0ArKJSzEnRDm8n4GArEAE&cid=CAQSPwDq26N9-Hq_f9Ff3UIsgIzfd_kbudi31MtwlAtYx23RMuO4FPa26WhenxF6q1EeUdcW1qZy3ZO3GX2GMoP8FhgBIBM&id=lidar2&mcvt=1015&p=0,0,280,1170&mtos=1015,1015,1015,1015,1015&tos=1015,0,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1376766619&rs=2&la=1&cr=0&vs=4&r=v&rst=1670211358022&rpt=1619&met=mue&wmsd=0&pbe=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Mon, 05 Dec 2022 03:36:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvmy3wVZz9ofSL6t37VOkfSEEgaxtZyaOGvWJ21IOHTOfy8c7H-xwfGBgJdQfzgAMx3-5MSN8pReuDfXSY_IcpmIhaMwUoYNTxyCKoouD6gJvOjNXJaeikNMKHlU1oasigiS9nZbDc&sai=AMfl-YTxRvq4SyrlbSpDkugpDykZtIVByBm5qMcU3wx7Rkaezx17ZaYNf3iEWaPo71XQKLtA0m3SxmR-_6aq_wVPcOjyl8HZGF8oizG5VxPICnMXaGsJEPEiwq3k19NVf3TzOVQ&sig=Cg0ArKJSzLfD4VJ313BBEAE&cid=CAQSPwDq26N9zJ-iuHh8GwzdUtJAIX0rg-R2ssRuKO8sbOEqILyhWiNCXoE_YtZCJmlFCbkzrKb5oMeOIotMuv8zDBgBIBM&id=lidar2&mcvt=1000&p=0,0,124,1005&mtos=272,1000,1000,1000,1000&tos=272,728,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1670211359370&rpt=580&met=mue&wmsd=0&pbe=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvmy3wVZz9ofSL6t37VOkfSEEgaxtZyaOGvWJ21IOHTOfy8c7H-xwfGBgJdQfzgAMx3-5MSN8pReuDfXSY_IcpmIhaMwUoYNTxyCKoouD6gJvOjNXJaeikNMKHlU1oasigiS9nZbDc&sai=AMfl-YTxRvq4SyrlbSpDkugpDykZtIVByBm5qMcU3wx7Rkaezx17ZaYNf3iEWaPo71XQKLtA0m3SxmR-_6aq_wVPcOjyl8HZGF8oizG5VxPICnMXaGsJEPEiwq3k19NVf3TzOVQ&sig=Cg0ArKJSzLfD4VJ313BBEAE&cid=CAQSPwDq26N9zJ-iuHh8GwzdUtJAIX0rg-R2ssRuKO8sbOEqILyhWiNCXoE_YtZCJmlFCbkzrKb5oMeOIotMuv8zDBgBIBM&id=lidar2&mcvt=1000&p=0,0,124,1005&mtos=272,1000,1000,1000,1000&tos=272,728,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1670211359370&rpt=580&met=mue&wmsd=0&pbe=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsvmy3wVZz9ofSL6t37VOkfSEEgaxtZyaOGvWJ21IOHTOfy8c7H-xwfGBgJdQfzgAMx3-5MSN8pReuDfXSY_IcpmIhaMwUoYNTxyCKoouD6gJvOjNXJaeikNMKHlU1oasigiS9nZbDc&sai=AMfl-YTxRvq4SyrlbSpDkugpDykZtIVByBm5qMcU3wx7Rkaezx17ZaYNf3iEWaPo71XQKLtA0m3SxmR-_6aq_wVPcOjyl8HZGF8oizG5VxPICnMXaGsJEPEiwq3k19NVf3TzOVQ&sig=Cg0ArKJSzLfD4VJ313BBEAE&cid=CAQSPwDq26N9zJ-iuHh8GwzdUtJAIX0rg-R2ssRuKO8sbOEqILyhWiNCXoE_YtZCJmlFCbkzrKb5oMeOIotMuv8zDBgBIBM&id=lidar2&mcvt=1000&p=0,0,124,1005&mtos=272,1000,1000,1000,1000&tos=272,728,0,0,0&v=20221130&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1670211359370&rpt=580&met=mue&wmsd=0&pbe=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Mon, 05 Dec 2022 03:36:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=758937629&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211361%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211361&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=758937629&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211361%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211361&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=758937629&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211361%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211361&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 164315
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:03 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:03 GMT
last-modified: Mon, 05-Dec-2022 03:36:03 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=399347464&wv-type=3&browser-info=we%3A1%3Aet%3A1670211362%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211362&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=399347464&wv-type=3&browser-info=we%3A1%3Aet%3A1670211362%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211362&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=399347464&wv-type=3&browser-info=we%3A1%3Aet%3A1670211362%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033601%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211362&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:04 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:04 GMT
last-modified: Mon, 05-Dec-2022 03:36:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=441919261&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211363%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033602%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211363&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=441919261&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211363%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033602%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211363&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=441919261&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211363%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033602%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211363&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 14223
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:05 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:05 GMT
last-modified: Mon, 05-Dec-2022 03:36:05 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wv-check=21919&wv-type=0&wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=902884661&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wv-check=21919&wv-type=0&wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=902884661&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wv-check=21919&wv-type=0&wmode=0&wv-part=1&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=902884661&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:07 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:07 GMT
last-modified: Mon, 05-Dec-2022 03:36:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=377374212&wv-type=3&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=377374212&wv-type=3&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wmode=0&wv-part=2&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=377374212&wv-type=3&browser-info=we%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:07 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:07 GMT
last-modified: Mon, 05-Dec-2022 03:36:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=3&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=1067736086&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/56360608?wmode=0&wv-part=3&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=1067736086&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/56360608?wmode=0&wv-part=3&wv-hit=1052338986&page-url=https%3A%2F%2Fhistoryoftravel.ru%2F&rn=1067736086&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1670211365%3Aw%3A1268x939%3Av%3A933%3Az%3A0%3Ai%3A20221205033604%3Au%3A1670211358556734541%3Avf%3Aynz2f7f3y7l8rj188tipo%3Ast%3A1670211365&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 03:36:07 GMT
access-control-allow-origin: https://historyoftravel.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 03:36:07 GMT
last-modified: Mon, 05-Dec-2022 03:36:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/themes/root/assets/css/style.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/themes/root/assets/css/style.min.css
IP
GET /wp-content/themes/root/assets/css/style.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Tue, 09 Nov 2021 09:13:31 GMT
vary: Accept-Encoding
etag: W/"618a3bbb-27d98"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css
IP
GET /wp-content/cache/wmac/css/wmac_single_c9dc6f1ef374d733a82d1682278e5b55.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Thu, 01 Jul 2021 11:18:37 GMT
vary: Accept-Encoding
etag: W/"60dda48d-11e"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-includes/css/dist/block-library/style.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-includes/css/dist/block-library/style.min.css
IP
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Thu, 11 Jun 2020 01:06:25 GMT
vary: Accept-Encoding
etag: W/"5ee18391-a055"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js
IP
GET /wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/x-javascript
last-modified: Mon, 17 Oct 2022 13:33:13 GMT
vary: Accept-Encoding
etag: W/"634d5999-56a83"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.json
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 158
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:36:00 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
rbthre.work/pjs/A2NApLsPC.js
200 OK 0 B URL HTTP/2 rbthre.work/pjs/A2NApLsPC.js
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Malware
GET /pjs/A2NApLsPC.js HTTP/1.1
Host: rbthre.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 09:59:16 GMT
etag: W/"635f9c74-84d0"
expires: Mon, 05 Dec 2022 03:45:59 GMT
cache-control: max-age=600, public, must_revalidate
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css
IP
GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Fri, 08 Nov 2019 10:04:37 GMT
vary: Accept-Encoding
etag: W/"5dc53db5-17f9"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.json
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 156
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:36:03 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/themes/root/assets/css/style.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/themes/root/assets/css/style.min.css
IP
GET /wp-content/themes/root/assets/css/style.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Tue, 09 Nov 2021 09:13:31 GMT
vary: Accept-Encoding
etag: W/"618a3bbb-27d98"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/themes/root/fonts/fontawesome-webfont.ttf
IP
GET /wp-content/themes/root/fonts/fontawesome-webfont.ttf HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://historyoftravel.ru
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/octet-stream
content-length: 165548
last-modified: Tue, 09 Nov 2021 09:13:31 GMT
etag: "618a3bbb-286ac"
expires: Wed, 04 Jan 2023 03:35:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
historyoftravel.ru/wp-includes/css/dist/block-library/style.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-includes/css/dist/block-library/style.min.css
IP
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Thu, 11 Jun 2020 01:06:25 GMT
vary: Accept-Encoding
etag: W/"5ee18391-a055"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/
200 OK 0 B IP
GET / HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: PHP/7.1.33
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.14 HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/x-javascript
last-modified: Thu, 15 Apr 2021 13:08:32 GMT
vary: Accept-Encoding
etag: W/"60783ad0-3619"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css
IP
GET /wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Tue, 09 Nov 2021 09:14:35 GMT
vary: Accept-Encoding
etag: W/"618a3bfb-2ad"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700%7CPT+Sans%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=5.3.14
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700%7CPT+Sans%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=5.3.14
IP
GET /css?family=Roboto%3A400%2C400i%2C700%7CPT+Sans%3A400%2C400i%2C700&subset=cyrillic&display=swap&ver=5.3.14 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 03:35:58 GMT
date: Mon, 05 Dec 2022 03:35:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js
IP
GET /wp-content/cache/wmac/js/wmac_50ab6476c68c294a2d1c476cae71b809.js HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/x-javascript
last-modified: Mon, 17 Oct 2022 13:33:13 GMT
vary: Accept-Encoding
etag: W/"634d5999-56a83"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-includes/js/wp-emoji-release.min.js?ver=5.3.14
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.14 HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/x-javascript
last-modified: Thu, 15 Apr 2021 13:08:32 GMT
vary: Accept-Encoding
etag: W/"60783ad0-3619"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css
IP
GET /wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Fri, 08 Nov 2019 09:59:03 GMT
vary: Accept-Encoding
etag: W/"5dc53c67-fda"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css
200 OK 0 B URL HTTP/2 historyoftravel.ru/wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css
IP
GET /wp-content/cache/wmac/css/wmac_single_ccbec26801817b6a6eef8f269fe34020.css HTTP/1.1
Host: historyoftravel.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/css
last-modified: Tue, 09 Nov 2021 09:14:35 GMT
vary: Accept-Encoding
etag: W/"618a3bfb-2ad"
expires: Mon, 12 Dec 2022 03:35:59 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.json
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /1pe0a.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 81
Origin: https://historyoftravel.ru
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
rotarb.bid/1pe0a.min.js?b6921f1
200 OK 0 B URL HTTP/2 rotarb.bid/1pe0a.min.js?b6921f1
IP
ASN #24940 Hetzner Online GmbH
GET /1pe0a.min.js?b6921f1 HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://historyoftravel.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: cloudflare-nginx
date: Mon, 05 Dec 2022 03:35:59 GMT
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
cache-control: max-age=300
expires: Mon, 05-Dec-2022 05:40:59 EET
duration: 355642
strict-transport-security: max-age=63072000
content-encoding: br
X-Firefox-Spdy: h2
45.130.41.3
23.36.77.32
34.102.187.140
95.216.65.102
46.4.104.244
93.184.220.29
104.18.21.226