185.50.25.13200 OK 2.4 kB URL User Request GET HTTP/1.1 IP 185.50.25.13:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text, with very long lines (400), with CRLF line terminators
Hash ae125f3a6473f689c21363907e66247e
632ffa79ca1673d9e6baaedb0fe8da1854c8355d
4f37d10ed167f19a4dae4947ebc9f0d9ebe54dac773834c89048a29d9d0f4721
GET / HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.40
Content-Encoding: gzip
f95241kr.beget.tech/css/style.css
185.50.25.13200 OK 763 B URL GET HTTP/1.1 f95241kr.beget.tech/css/style.css
IP 185.50.25.13:80
Requested by http://f95241kr.beget.tech/
File type ASCII text, with CRLF line terminators
Hash 8e92a320f71daa6f20550cde24a3f19b
6042129beff696a1d920cee7f8953b1ca2bf15ab
dd1ba5f1e673e062b4f4b61be6c312be233ee9385dd4f6bb094b429f05d6c02f
GET /css/style.css HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/css
Last-Modified: Tue, 02 Feb 2021 11:22:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"6019360e-ac3"
Expires: Sun, 01 Oct 2023 00:30:49 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
f95241kr.beget.tech/css/style.css
185.50.25.13200 OK 763 B URL GET HTTP/1.1 f95241kr.beget.tech/css/style.css
IP 185.50.25.13:80
Requested by http://f95241kr.beget.tech/
File type ASCII text, with CRLF line terminators
Hash 8e92a320f71daa6f20550cde24a3f19b
6042129beff696a1d920cee7f8953b1ca2bf15ab
dd1ba5f1e673e062b4f4b61be6c312be233ee9385dd4f6bb094b429f05d6c02f
GET /css/style.css HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/css
Last-Modified: Tue, 02 Feb 2021 11:22:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"6019360e-ac3"
Expires: Sun, 01 Oct 2023 00:30:49 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ads.people-group.net/331743/14/1/1/
95.217.100.37200 OK 6.6 kB URL GET HTTP/1.1 ads.people-group.net/331743/14/1/1/
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://f95241kr.beget.tech/
File type Unicode text, UTF-8 text, with very long lines (21422), with no line terminators
Hash b96756cef0c5ce11807d039be99804ac
e6f03fe8ca70425f802e21f75fbac96c84e5332c
278014003ef0d025183483611f6459b366fc614ec9a2373985db2c72ab7f6086
GET /331743/14/1/1/ HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: application/x-javascript;charset=UTF-8;
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 0;
Set-Cookie: _pgstg=1695515449.2748a47880; expires=Wed Sep 18 00:30:49 2024 GMT; path=/; domain=ads.people-group.net;
Content-Encoding: gzip
f95241kr.beget.tech/images/bg.jpg
185.50.25.13200 OK 156 kB URL GET HTTP/1.1 f95241kr.beget.tech/images/bg.jpg
IP 185.50.25.13:80
Requested by http://f95241kr.beget.tech/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 1280x800, components 3\012- data
Size 156 kB (156368 bytes)
Hash 24fb9f4c86fe18447ecd27752703f2fb
8a3c7152bd4fda7d110aaf792b8195d5b051077a
46e5ed0965735b292b6c3ac29f90246b275706115f2016b0d6955b5d4b229d3d
GET /images/bg.jpg HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: image/jpeg
Content-Length: 156368
Last-Modified: Tue, 02 Feb 2021 11:24:04 GMT
Connection: keep-alive
Keep-Alive: timeout=30
ETag: "60193654-262d0"
Expires: Tue, 24 Oct 2023 00:30:49 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
f95241kr.beget.tech/images/phw.png
185.50.25.13200 OK 386 B URL GET HTTP/1.1 f95241kr.beget.tech/images/phw.png
IP 185.50.25.13:80
Requested by http://f95241kr.beget.tech/
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ebb002bf2629e5e14451b7dec6714489
56f972ef810456641f889f5d3a07cbe385daab3c
5fb8a371bb6564dee2d0770dece7fc92b12d090f6df696c53fcca6c1cd9f13fd
GET /images/phw.png HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: image/png
Content-Length: 386
Last-Modified: Tue, 02 Feb 2021 11:24:05 GMT
Connection: keep-alive
Keep-Alive: timeout=30
ETag: "60193655-182"
Expires: Tue, 24 Oct 2023 00:30:49 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
linkslot.pro/bancode.php?id=3710
104.21.31.204 903 B URL GET linkslot.pro/bancode.php?id=3710
IP 104.21.31.204:0
Requested by http://f95241kr.beget.tech/
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1494), with no line terminators
Hash 2b3bb34a8de81b98ae676ba535638929
c6773d2ed2c638cfb8dc551312732a4dbc113503
42ea42885bfdd9011ed777abb599f8a724f49d5bfad5da71182e5cf550e8917a
GET /bancode.php?id=3710 HTTP/1.1
Host: linkslot.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: PHPSESSID=qtjab9cesrs7pmpbce3vj7nts6; path=/; domain=.linkslot.pro
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UkkFL%2B8Kn%2FhSskb30Dv3c92rAzA%2BxmJu5VqsutBooW1GdRFRtMZVyrbho42XyndJZTqT3Fy2SbbLoOCpqaTdKtePIo8ObqeidpLTLvoKetZweUSNt%2BGa6oTmaHIzn4Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 80b6ebc68d02569a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
linkslot.pro/bancode.php?id=3641
104.21.31.204 1.4 kB URL GET linkslot.pro/bancode.php?id=3641
IP 104.21.31.204:0
Requested by http://f95241kr.beget.tech/
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1550)
Hash 7f990274cb64267777d2afaf17db2d5b
d9e9a708ea92cbbb9806eec382570e74d1fc1b80
380b6a050fc9bd73603b03ebbe8cdec9d6e8ba46da3e63e332b561d2022c81a9
GET /bancode.php?id=3641 HTTP/1.1
Host: linkslot.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: PHPSESSID=3tf4g467ddkj7cufigcig86jd5; path=/; domain=.linkslot.pro
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=adEeAocNclMZhOxlyIjqXbEW%2BlXBlAA1bvDjWyN30DEMKslGToqfuWsq6tWwBjrT81AL%2F3wdmtWVj9mQq%2BLVXEaF2gWtWvUYPn4AyKK5dThIn5W5h%2BK%2BmgqikjQhONU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 80b6ebc68cee569b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cuys.ru/bancode.php?id=6378
176.57.70.200200 OK 288 B URL GET HTTP/1.1 cuys.ru/bancode.php?id=6378
IP 176.57.70.200:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subjectcuys.ru
FingerprintFF:28:7B:81:E0:92:CC:C5:87:97:34:B8:AE:12:0F:26:03:BD:22:DE
ValiditySun, 06 Aug 2023 23:28:26 GMT - Sat, 04 Nov 2023 23:28:25 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash 2143fc74b52cb131242df3a4ac36b5b0
e07cdbfc1bbc57975c551bbcea16b30e9394507e
25bc2ece4fa5bb2b3c669520507112fc38b8e8aec2f4260d2c3985ed80410684
GET /bancode.php?id=6378 HTTP/1.1
Host: cuys.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=42qhh9hrcu8pm6p39ifsfc0j65; path=/
Strict-Transport-Security: max-age=31536000;
cuys.ru/bancode.php?id=5585
176.57.70.200200 OK 286 B URL GET HTTP/1.1 cuys.ru/bancode.php?id=5585
IP 176.57.70.200:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subjectcuys.ru
FingerprintFF:28:7B:81:E0:92:CC:C5:87:97:34:B8:AE:12:0F:26:03:BD:22:DE
ValiditySun, 06 Aug 2023 23:28:26 GMT - Sat, 04 Nov 2023 23:28:25 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash a0474d680f35d4457e5ae4bee612f25b
50086a527d4afd916b2c16d7ae28b6c16436b5cf
91be319890a988d6fca04822fae4361a0298e038ef947f276dd36d5f87d49bf0
GET /bancode.php?id=5585 HTTP/1.1
Host: cuys.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 24 Sep 2023 00:30:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=tne0q9so9t3ob65iro5tar0ji5; path=/
Strict-Transport-Security: max-age=31536000;
iptrafic.ru/ads/sekno.js
81.177.141.72200 OK 1.3 kB IP 81.177.141.72:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.iptrafic.ru
Fingerprint4C:7A:DA:18:AE:B2:17:F7:0A:53:76:E1:01:E8:0B:50:21:BF:58:E1
ValiditySun, 10 Sep 2023 15:42:53 GMT - Sat, 09 Dec 2023 15:42:52 GMT
File type ASCII text, with very long lines (3128), with no line terminators
Hash 9e160e897f40bd48a210afd10d4f10be
9f6dc38c93221ff33af1d78965625d7fc457b38a
ccbc04c9c9c83e40300668c8d74cca46bd2c34df0c04976c53784db46731e9c5
GET /ads/sekno.js HTTP/1.1
Host: iptrafic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:49 GMT
content-type: text/javascript
content-length: 1263
server: Jino.ru/mod_pizza
last-modified: Sat, 10 Sep 2022 07:52:54 GMT
etag: "2523aac-c38-5e84df33db4bb"
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Mon, 23 Sep 2024 00:30:49 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ads-lot.ru/images/img_al.png
188.114.97.1200 OK 244 B URL GET HTTP/3 ads-lot.ru/images/img_al.png
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
File type PNG image data, 19 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash 4938745e10d3b5eb14b897f2fa3731e1
8a92eaa7b248f76261c553c17cf49539282d0d1b
604bb24675f5699e34f08b82bb092e0627e18120eff34453fb24dc09065447af
GET /images/img_al.png HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/png
content-length: 244
last-modified: Thu, 16 Mar 2023 21:34:40 GMT
etag: "64138b70-f4"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2552
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fWFYk8yoMZgtFw%2FIg7hHJHAt%2Bj23dC5PNDDBn91FvdHyI2Sr9OFuvtjkvoWoPWtvzqoMFLkTyX7qjhnTQ2O4G1c%2FM7kfBE0XDAd5ZfeZeBPF%2F2cGDPujPQgI89k7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcaebca568b-OSL
alt-svc: h3=":443"; ma=86400
ads-lot.ru/images/img_al2.png
188.114.97.1200 OK 351 B URL GET HTTP/3 ads-lot.ru/images/img_al2.png
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
File type GIF image data, version 89a, 123 x 17\012- data
Hash 15945d32fa167a408a29dc6b53c292b7
1951669ff15844e0b8735c843d27e650ecf31b5d
4a33cc4ac137df2dd60dfe31ee9fa4db6b54ed39b320aede4d18b8bd1542e760
GET /images/img_al2.png HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/png
content-length: 351
last-modified: Thu, 16 Mar 2023 21:34:41 GMT
etag: "64138b71-15f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2552
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Llm%2F%2F%2FqH8rZkqsnYsMhP0rdnOuLfg1SLFnITVUvR5Yiqt67zwhSu8NPedjAeiPKPLA6CKY8si7FbEw%2F1LZLyGvFG%2F2fgcetimOqkY1aboMufrbskgtshXwu%2BibEY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcaebcc568b-OSL
alt-svc: h3=":443"; ma=86400
ads-lot.ru/banners/468x60.gif
188.114.97.1200 OK 12 kB URL GET HTTP/3 ads-lot.ru/banners/468x60.gif
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash a9f6117dc039ef8fae0b3178addf9587
2a89da3b05ddc1ab09c96a49a4e0e0ddaba5e8a8
0756170967ea6088480a5f9c772a0e8532408c4fd0e23450b7f2068d83615fb3
GET /banners/468x60.gif HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/gif
content-length: 11971
last-modified: Thu, 16 Mar 2023 21:33:46 GMT
etag: "64138b3a-2ec3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yp5fJmb791nIv9Jr%2BuJj7ZvobgmxCSqULy%2BlE1Y7wyZm7Q%2B7RWkrTMoKOO1P0l9L6jfH8pnKyp5g9%2BWNfwUxh8K3VlGwVGq6SZODrQzaWPsFbl4IKJpIZNpUlJhi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebca9baa568b-OSL
alt-svc: h3=":443"; ma=86400
ad.a-ads.com/2212001?size=468x60
136.243.55.84200 OK 4.7 kB URL GET HTTP/1.1 ad.a-ads.com/2212001?size=468x60
IP 136.243.55.84:80
ASN #24940 Hetzner Online GmbH
Requested by http://f95241kr.beget.tech/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 2ce257598d2b9deb65d8c1edc9bd8682
cc30ab4cac586e963052cb315171cde95cd543fe
7a6b8b1f3bef1361ef108555a55097d173a6d923640e555ebe0ef84cbc925d05
GET /2212001?size=468x60 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://f95241kr.beget.tech/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
ads-lot.ru/vitrine.php?id=1430
188.114.97.1 5.8 kB URL GET ads-lot.ru/vitrine.php?id=1430
IP 188.114.97.1:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
File type HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (3127)
Hash 9bd4e06ba5cbe80de6ee066fb68d43fc
f83a70fb1285006ae90f3340517e8fb477829e8c
4a471789c5d67c292f6b6c985b0a963fb2e246cad5074c39d030c10b0c7a3c84
GET /vitrine.php?id=1430 HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:49 GMT
content-type: text/html;charset=windows-1251
x-powered-by: PHP/5.4.45
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=vn40fkd93j7ca80jt1b38aei40; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5o48RiMFkSRVnBHSlvbi%2BmbcYbiSXHItM6Dfcm3r4pG1j30JGHh1gu2J66MJYtlNFO0yZepq9n%2FEH9pEftsJVlJPBYt36iQ2VLC6Eih1weOVe5JCAyvwDaL9CWbc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebc6dd6db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
buxbek.ru/codes/banner?rcd=ODg=
5.189.227.168200 OK 162 B URL GET HTTP/2 buxbek.ru/codes/banner?rcd=ODg=
IP 5.189.227.168:443
ASN #50340 OOO Network of data-centers Selectel
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subjectbuxbek.ru
Fingerprint13:60:25:0F:4D:3B:E8:D0:E6:83:04:47:69:D3:8F:93:28:17:F1:9B
ValidityFri, 01 Sep 2023 22:39:23 GMT - Thu, 30 Nov 2023 22:39:22 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /codes/banner?rcd=ODg= HTTP/1.1
Host: buxbek.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://buxbek.ru/codes/banner?rcd=ODg=
linkslot.pro/img/buyb.png
104.21.31.204200 OK 2.6 kB URL GET HTTP/2 linkslot.pro/img/buyb.png
IP 104.21.31.204:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEF:21:FA:70:AF:EF:6E:2B:2C:42:A9:DA:0D:42:47:56:1B:58:AA:02
ValidityFri, 10 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type PNG image data, 127 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 6623622f5954708d814fc46180f75b9f
7bd68ddbb91875e815e73fa937efc259e56fad47
5e9b14e8db47eb55c01f3982d1e63061c9ac23ecae71d5313e08169e9cfcce29
GET /img/buyb.png HTTP/1.1
Host: linkslot.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/png
content-length: 2585
last-modified: Thu, 06 Apr 2023 09:20:44 GMT
etag: "642e8eec-a19"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 844
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MYS60yDcHYPL3mLXP2tzUPXR8%2B21A5LL78v02GQxyzwLtgOd%2BzguXSvwN9XSJx%2B8PqchEyKrVDUbt2xXiyyjNY%2Bnk%2BnFJ9a4qlL1wQ8coEmV8odiKr1r%2FgODs5Jkdo8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcbaa3b0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cuys.ru/promo/dummy/468x60.png
176.57.70.200200 OK 52 kB URL GET HTTP/1.1 cuys.ru/promo/dummy/468x60.png
IP 176.57.70.200:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subjectcuys.ru
FingerprintFF:28:7B:81:E0:92:CC:C5:87:97:34:B8:AE:12:0F:26:03:BD:22:DE
ValiditySun, 06 Aug 2023 23:28:26 GMT - Sat, 04 Nov 2023 23:28:25 GMT
File type PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 0c2e9bb08905a34d2e1dc00acfbb8ba4
3e2a0134c94a23afdb057712b7126d3a783afe12
149605aadd2653c4147508c696463aaf3f1bbc5b217fba33b36fe45ed2765892
GET /promo/dummy/468x60.png HTTP/1.1
Host: cuys.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: image/png
Content-Length: 51830
Last-Modified: Sat, 09 Dec 2017 15:02:41 GMT
Connection: keep-alive
ETag: "5a2bfb11-ca76"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
ads-lot.ru/pics/mining.php
188.114.97.1200 OK 128 kB URL GET HTTP/3 ads-lot.ru/pics/mining.php
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
Size 128 kB (127558 bytes)
Hash d9babcabb915a8a352d7ec6e24999b98
070a625205af066556adc8991c62a01581b90982
dc9a0d63ce676605f5185c2e037294a91ddc77d037722cac874877e3f3e5d6f8
GET /pics/mining.php HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html; charset=windows-1251
x-powered-by: PHP/5.4.45
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=seZpjP26vxOy1KcCN%2Bo3pqWbpBJlsmM6UtgzlSvGdHSpEW9SxJq9omfC19BTZKaYMHtPy0u3Flq4hrIQHTwJ6QrR1B%2FMNu8UQwmuGkzj9OjAZfyPJL0Bbfmvn9cq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebca2b7e568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkslot.ru/promo/dummy/468x60.jpg
188.114.97.1200 OK 12 kB URL GET HTTP/3 linkslot.ru/promo/dummy/468x60.jpg
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
File type PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 340218e56c9a171e0704f3fabfe1564e
251985e798c3eaa705e541a9e2f29980caad42e2
ec8460fdb36dbdfcac3697426f35d73815e41889744fdb56de455df28d29d857
GET /promo/dummy/468x60.jpg HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/jpeg
content-length: 11802
last-modified: Mon, 05 Jun 2023 11:22:27 GMT
etag: "647dc573-2e1a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 2028100
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pb90dy0aZTDCAuxV6q%2FhvRwYYULsWBK%2FKtdiejsCdcxEm9I1jVWYBXz880bRJ732bzg9UoxYoc4bMVTEEc%2B9tWCANq7ZhFGrvzzV9UU%2B9850gGyA53McIzVzOK1Kkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcd0da65697-OSL
alt-svc: h3=":443"; ma=86400
ads.people-group.net/bann/fonts2.css
95.217.100.37200 OK 93 kB URL GET HTTP/1.1 ads.people-group.net/bann/fonts2.css
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
File type ASCII text, with very long lines (33850), with CRLF line terminators
Hash 18f6313505fd544a932e509a6ba2ed20
0df0bd4a963f906faa109a57e78cf772919c2eff
6c98f1112b2719030cce8ff7c37d67f0851b3536dd98435fce9a4fb946570be7
GET /bann/fonts2.css HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: text/css
Last-Modified: Fri, 08 Aug 2014 18:44:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"53e51a9b-1e2d2"
Expires: Sun, 24 Sep 2023 01:30:50 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip
ads.people-group.net/bann/jquery.min.js
95.217.100.37200 OK 33 kB URL GET HTTP/1.1 ads.people-group.net/bann/jquery.min.js
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /bann/jquery.min.js HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 08 Oct 2014 12:03:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"54352814-1762a"
Expires: Sun, 24 Sep 2023 01:30:50 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip
adslinks.ru/uploads/650d5c4c8f3e1.gif
172.67.150.197200 OK 20 kB URL GET HTTP/3 adslinks.ru/uploads/650d5c4c8f3e1.gif
IP 172.67.150.197:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectadslinks.ru
Fingerprint07:D0:6F:01:01:82:2F:3B:22:C7:A4:A7:0D:64:77:10:07:01:67:BA
ValidityMon, 18 Sep 2023 17:31:44 GMT - Sun, 17 Dec 2023 17:31:43 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash 028f77a91feb3ce4b7a7470772b186aa
71922dea953706f5708d38e9c9385e737e12a9c2
022304bb9eeb66b76476cd5e2aae961ed1d1f4ff3ceea982dff6ae4c38b5043a
GET /uploads/650d5c4c8f3e1.gif HTTP/1.1
Host: adslinks.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/gif
content-length: 20238
last-modified: Fri, 22 Sep 2023 09:20:12 GMT
etag: "650d5c4c-4f0e"
expires: Fri, 06 Oct 2023 10:49:44 GMT
cache-control: max-age=1209600
cf-cache-status: HIT
age: 135666
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oczTcg7HFfd6Gi83Mv1S0gaIV3bsm1kmM1JZuxVZow%2Bu76nHSHVzih9ELZGAXtWeUiPP%2BbrKLN9BynJyUO%2Fh7XlX2Mg0UC4ov4Qv2uRIcVrG2L9ziQUFC51Av9PQJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcde965b515-OSL
alt-svc: h3=":443"; ma=86400
adslinks.ru/img/buyb.png
172.67.150.197301 Moved Permanently 0 B IP 172.67.150.197:80
Requested by http://f95241kr.beget.tech/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/buyb.png HTTP/1.1
Host: adslinks.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Sep 2023 00:30:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 24 Sep 2023 01:30:50 GMT
Location: https://adslinks.ru/img/buyb.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8UbFEmfmA%2BG0fNMzxzgVcezK0oG0xjNuUN%2BEd0ATU8%2BEBiu0%2FO%2BOPYHsKiGldDTHFzgadHo5I9%2FREixH%2FY5%2Fi%2FEXb1V%2BMygRNuYKmWYLfNYn3hjXL814b7L7YJ2l2A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 80b6ebcdecdcb4eb-OSL
alt-svc: h2=":443"; ma=60
adslinks.ru/img/buyb.png
172.67.150.197301 Moved Permanently 2.0 kB IP 172.67.150.197:80
Requested by http://f95241kr.beget.tech/
File type PNG image data, 130 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 9beb42470cb5a5c57e508d5f5dd099df
c5c588d622d1cd8ce21b6a296fe66b7dde95462e
cce722f381a31d616be4036852e2990121132057010f09cf2ef253ba68d2875f
GET /img/buyb.png HTTP/1.1
Host: adslinks.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://f95241kr.beget.tech/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: image/png
content-length: 2013
last-modified: Sat, 25 Feb 2023 22:31:38 GMT
etag: "63fa8c4a-7dd"
expires: Thu, 28 Sep 2023 09:48:10 GMT
cache-control: max-age=1209600
cf-cache-status: HIT
age: 830560
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OP9GXUbORufLde93nBu3W05ROyWTWpVGTWzSHZE%2Bzy8UiOTa%2BdrRjVO6TN2yFMnKJE3u2hxatWUDp1QL5snB1gfNGiAxAHfrcyhZdfVy2WZz4SEGkbpYg7100AFg2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebce3980b515-OSL
alt-svc: h3=":443"; ma=86400
ads.people-group.net/bann/2/7/1/2/271233_85.gif
95.217.100.37200 OK 67 kB URL GET HTTP/1.1 ads.people-group.net/bann/2/7/1/2/271233_85.gif
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
File type GIF image data, version 89a, 468 x 60\012- data
Hash 4d16c0322ddc3d56de0d989de4fa4835
5d8eae0afd31f092e7176517edef5efff59a8fad
bba87aa33870d85c111ec2fad2b392026bd83deeea80c9f5a6fd2886e031ea4f
GET /bann/2/7/1/2/271233_85.gif HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: image/gif
Content-Length: 67159
Last-Modified: Sun, 16 Jul 2023 12:22:56 GMT
Connection: keep-alive
ETag: "64b3e120-10657"
Expires: Sun, 24 Sep 2023 01:30:50 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
ads.people-group.net/bann/ilogo.png
95.217.100.37200 OK 1.8 kB URL GET HTTP/1.1 ads.people-group.net/bann/ilogo.png
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
File type PNG image data, 128 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ddaa0f0c1b93bdde30c38a7bcd4e210
0fb0f78fce59bcd196f55e682c24a6a0ea7ae701
2304c4723b978310b7821046bebb9e040245d67978fd3725165560205b6c96fe
GET /bann/ilogo.png HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: image/png
Content-Length: 1766
Last-Modified: Sat, 13 Apr 2013 15:38:38 GMT
Connection: keep-alive
ETag: "51697bfe-6e6"
Expires: Sun, 24 Sep 2023 01:30:50 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
static.a-ads.com/a-ads-banners/468595/468x60?region=eu-central-1
116.202.214.170200 OK 122 kB URL GET HTTP/1.1 static.a-ads.com/a-ads-banners/468595/468x60?region=eu-central-1
IP 116.202.214.170:80
ASN #24940 Hetzner Online GmbH
Requested by http://ad.a-ads.com/2212001?size=468x60
File type GIF image data, version 89a, 468 x 60\012- data
Size 122 kB (122361 bytes)
Hash fd57253b24a70574fb9a710589a29fe8
792259a83f8a5f6fc96059030adcdec8bc0b4493
82922774843f44c3918c53209cff8f7904ca1a5c9d4b3c6b70cb3578af85d0a1
GET /a-ads-banners/468595/468x60?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ad.a-ads.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: image/gif
Content-Length: 122361
Connection: keep-alive
x-amz-id-2: D7Pib6W655HL7S0QsTCBZV5qtSuVOSNgST89mruisTV45mhosudMA4DrEXM5lUFTwRTeR9LLvj8=
x-amz-request-id: K55XCGFWSKWHZ9DK
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 04 Jul 2023 10:57:31 GMT
ETag: "fd57253b24a70574fb9a710589a29fe8"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: FaWLETqwBqDYjU6_Xl4DylVBjW0FxBuV
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
f95241kr.beget.tech/favicon.ico
185.50.25.13404 Not Found 235 B URL GET HTTP/1.1 f95241kr.beget.tech/favicon.ico
IP 185.50.25.13:80
Requested by http://f95241kr.beget.tech/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8609ec781419a317c27ce7f876cec7d3
45a754b94c833390dabd0d7a253fc4cf40f98276
5a914aaffecc8df2ed00e70aa7ded9557a28c1075a1b5ec20a907b39a63505de
GET /favicon.ico HTTP/1.1
Host: f95241kr.beget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Cookie: adslinks_vmb_=0|14464; nova=4wr59ldtg86ry6xql6mt4rmcup7mdibk
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx-reuseport/1.21.1
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
Content-Encoding: gzip
linkslot.pro/promo/dummy/468x60.png
104.21.31.204200 OK 12 kB URL GET HTTP/2 linkslot.pro/promo/dummy/468x60.png
IP 104.21.31.204:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEF:21:FA:70:AF:EF:6E:2B:2C:42:A9:DA:0D:42:47:56:1B:58:AA:02
ValidityFri, 10 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 340218e56c9a171e0704f3fabfe1564e
251985e798c3eaa705e541a9e2f29980caad42e2
ec8460fdb36dbdfcac3697426f35d73815e41889744fdb56de455df28d29d857
GET /promo/dummy/468x60.png HTTP/1.1
Host: linkslot.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:51 GMT
content-type: image/png
content-length: 11802
last-modified: Thu, 06 Apr 2023 09:20:56 GMT
etag: "642e8ef8-2e1a"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gf1JgBGjBM8i%2FAH9cmL4%2Bhy5O14BA8UIbvsRg6a2nAR5HKpW%2BaweyHBv%2B8qfMbFooU89L2e99s36%2F39KtrGvtbZ2fGfa6odRDcm9fVJwoqQt3mr94NX5NkRI3u74ybw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcbea4f0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
linkslot.pro/uploads/da6f7462a5474196a709aae89d5ba2da.png
104.21.31.204200 OK 63 kB URL GET HTTP/2 linkslot.pro/uploads/da6f7462a5474196a709aae89d5ba2da.png
IP 104.21.31.204:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintEF:21:FA:70:AF:EF:6E:2B:2C:42:A9:DA:0D:42:47:56:1B:58:AA:02
ValidityFri, 10 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e12fb611eacffe87dd713382c09570a
85db4ca29a9e845229871beabec7810de63d8d18
3127b011a07a6d883d7ba70f675018c44d9804a4495ae7393536d45459e14adc
GET /uploads/da6f7462a5474196a709aae89d5ba2da.png HTTP/1.1
Host: linkslot.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:51 GMT
content-type: image/png
content-length: 62728
last-modified: Mon, 18 Sep 2023 05:56:28 GMT
etag: "6507e68c-f508"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zA%2FkX%2FOqIOF%2FsH7xilth3rzO%2BTPJYja4LRFpxXQjfOIsTNRaf5MCeK5YBZ9L8KdFKyALiGYNUY%2F1CwPfQWlSX1neDXMyxge%2BDiwXL0qJuGDUtdUrkoaiz9yMPMaGxrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b6ebcbea510afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
adslinks.ru/mbcode.php?load=126
0.0.0.0 0 B URL GET adslinks.ru/mbcode.php?load=126
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectadslinks.ru
Fingerprint07:D0:6F:01:01:82:2F:3B:22:C7:A4:A7:0D:64:77:10:07:01:67:BA
ValidityMon, 18 Sep 2023 17:31:44 GMT - Sun, 17 Dec 2023 17:31:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mbcode.php?load=126 HTTP/1.1
Host: adslinks.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:49 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.3
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gaCi16FdsUSRMTR%2FY4rc5TQmVtCqIIL8WOqVRteu8HWQSCRM4cdezDaue1SdBJaXLWYNnjk30wl70NXp%2FOV7f9SW%2FmP2Q6QeBbzBKiWuuzIYMYw5SclKLq55IwXwiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebc6c9edb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
95.217.100.37200 OK 13 kB URL GET HTTP/1.1 ads.people-group.net/?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948
IP 95.217.100.37:80
ASN #24940 Hetzner Online GmbH
Requested by http://f95241kr.beget.tech/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?hwn=MzMxNzQzJzE0JzEn&xm=1&swf=0&hrf=http%3A%2F%2Ff95241kr.beget.tech%2F&stg=1695515449.2748a47880&s=MTI4MCUzQTAlM0ExMDI0&h=09%2F24%2F2023%2000%3A30%3A50%27%5E%271%27%5E%27&k=%D0%A0%D0%B0%D1%81%D0%BA%D1%80%D1%83%D1%82%D0%BA%D0%B0%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&0.8562560549311948 HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: text/html;charset=UTF-8;
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 0;
Set-Cookie: _pgutm1=818|1|1; path=/; domain=ads.people-group.net;
_pgstg=1695515449.2748a47880; expires=Wed Sep 18 00:30:50 2024 GMT; path=/; domain=ads.people-group.net;
Content-Encoding: gzip
cuys.ru/promo/dummy/1000x90.png
176.57.70.200200 OK 128 kB URL GET HTTP/1.1 cuys.ru/promo/dummy/1000x90.png
IP 176.57.70.200:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subjectcuys.ru
FingerprintFF:28:7B:81:E0:92:CC:C5:87:97:34:B8:AE:12:0F:26:03:BD:22:DE
ValiditySun, 06 Aug 2023 23:28:26 GMT - Sat, 04 Nov 2023 23:28:25 GMT
File type PNG image data, 1000 x 90, 8-bit/color RGB, non-interlaced\012- data
Size 128 kB (127504 bytes)
Hash 6f01f253d0dba3e11ed230d08704389a
757718c5d83f645c26f6b258a6c040eb03a43441
ec0210e0426c6e8921a5f3a9c844674084fcddf6c43c059dc9abf90135889689
GET /promo/dummy/1000x90.png HTTP/1.1
Host: cuys.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 24 Sep 2023 00:30:50 GMT
Content-Type: image/png
Content-Length: 127504
Last-Modified: Sat, 09 Dec 2017 15:02:36 GMT
Connection: keep-alive
ETag: "5a2bfb0c-1f210"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
linkslot.ru/gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da49edde9cce2cbd99dd7d39edce5d0dbddc7ecdfa0e1d1cf97a2a498daeec4a28b978b869c9ba3a79c9aaf95a7989ba096
188.114.97.1200 OK 2 B URL GET HTTP/3 linkslot.ru/gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da49edde9cce2cbd99dd7d39edce5d0dbddc7ecdfa0e1d1cf97a2a498daeec4a28b978b869c9ba3a79c9aaf95a7989ba096
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da49edde9cce2cbd99dd7d39edce5d0dbddc7ecdfa0e1d1cf97a2a498daeec4a28b978b869c9ba3a79c9aaf95a7989ba096 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://f95241kr.beget.tech
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t2KUnDSa3e5TzghMkrChKNnLi3d%2BhpS2ns9fnUUvzJlC7YjMudxmVKowGsHDPcp7dpVJ37RVt5mBpBjDoyqOC1acKwXVo6IGanEPNAc%2F320cJqbvx6OdHRZCyCWcVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebcd0da75697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkslot.ru/bancode.php?id=311760
0.0.0.0 0 B URL GET linkslot.ru/bancode.php?id=311760
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bancode.php?id=311760 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html;charset=utf-8
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2BAXLFxNsSKrxlBPH9tai9HhewIUwgbT2dyWBu5bx0yYk%2FyHd2MDZXJq3EOaNQ39Iyu2U4g2DhPoX5Mol4nW5F8jS3QOc98YnKoJS60aK3uJFMFtWCoB1OnXk%2FvkuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebc77efdb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
linkslot.ru/gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869b889a95978cab97ab9d9c99989f9a9aa7979c
188.114.97.1200 OK 2 B URL GET HTTP/3 linkslot.ru/gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869b889a95978cab97ab9d9c99989f9a9aa7979c
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869b889a95978cab97ab9d9c99989f9a9aa7979c HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://f95241kr.beget.tech
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:55 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BjaDbiTeh500GjXM1muQ9LKg3XbxaNmMwvZWrCAsHZQQ60wFOHu6rOWi%2BZBJebexL9KTeV1%2BKMetL6wQBY4F3Entok7c3cY6Gt0%2B9VkHsF4l%2FRbu2tG4udvs0GXYbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebeb697c5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkslot.ru/lincode.php?id=312770
0.0.0.0 0 B URL GET linkslot.ru/lincode.php?id=312770
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lincode.php?id=312770 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html;charset=utf-8
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hq9Hku5Cm9L3%2BzqoNu%2BiZqD54N8ErLpEfDba5FdPLsNc3TRenDxCxMVAXZSG%2FVd0JfA%2BXp77ssxUfhNs1V%2FsGiuiFM%2BDETWJFyp07PvBQ5mZIVrztiX03lFGZilcWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebc79f08b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
adslinks.ru/mbcode.php?id=126&loader=JS&cs=0&i=0&l=0&h=d2579b5ca1e39352a9fb6cd9e6ff53c7
0.0.0.0 0 B URL GET adslinks.ru/mbcode.php?id=126&loader=JS&cs=0&i=0&l=0&h=d2579b5ca1e39352a9fb6cd9e6ff53c7
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectadslinks.ru
Fingerprint07:D0:6F:01:01:82:2F:3B:22:C7:A4:A7:0D:64:77:10:07:01:67:BA
ValidityMon, 18 Sep 2023 17:31:44 GMT - Sun, 17 Dec 2023 17:31:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mbcode.php?id=126&loader=JS&cs=0&i=0&l=0&h=d2579b5ca1e39352a9fb6cd9e6ff53c7 HTTP/1.1
Host: adslinks.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.3
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=90SkF8EjQlqSJI%2Bzf35k941pJ1m2z%2F7bqSmmPSSGBCGSIjfGL1ySzboMjewZtGsinga6roxv3CbsMZI6VKipSS7dhkZAKJMMoJ66SjUHU47ogBqVE840BeIdzGXagw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebcb2861b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkslot.ru/gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869b889a95978cab97ab9d9c99989f9a9aa7979c
0.0.0.0 0 B URL GET linkslot.ru/gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869b889a95978cab97ab9d9c99989f9a9aa7979c
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gate.php?d2=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a39f9d98869b889a95978cab97ab9d9c99989f9a9aa7979c HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://f95241kr.beget.tech
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
linkslot.ru/gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da6dedbaf9adeccdbcf9ba1d7e3a8dfdae697dfdc9bdad0cedadaa9d4cde3c3dd8b978b869c9ba3a79c9aaf95a7989c9896
188.114.97.1200 OK 2 B URL GET HTTP/3 linkslot.ru/gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da6dedbaf9adeccdbcf9ba1d7e3a8dfdae697dfdc9bdad0cedadaa9d4cde3c3dd8b978b869c9ba3a79c9aaf95a7989c9896
IP 188.114.97.1:443
Requested by http://f95241kr.beget.tech/
Certificate IssuerLet's Encrypt
Subject*.linkslot.ru
Fingerprint43:90:37:68:C2:67:0E:4E:46:33:42:B8:A3:D9:C4:1D:14:A8:C7:CE
ValidityThu, 24 Aug 2023 03:11:33 GMT - Wed, 22 Nov 2023 03:11:32 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /gate.php?d1=c9a49a9ca698d4ec8fd4cdcecdd799d9cfd5cf8cad92a49f9e98869c97a2a28a9aaa93a68bd4d7ddd4d1d6d3969ea8919290df9994a685d6dbd5def281eaa09dc7999fa08ae4dda3ab91ab96979183d2cacdddd698ac91a3989799939c85d0dbd9cee0d0ea9798999499958da6dedbaf9adeccdbcf9ba1d7e3a8dfdae697dfdc9bdad0cedadaa9d4cde3c3dd8b978b869c9ba3a79c9aaf95a7989c9896 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://f95241kr.beget.tech
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 00:30:50 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n8gq4tYOY8jyjSwAnvhB7JhY6E5gZwBssCZMtoKwWqokr02f0g1XYnsRol6nSnvzxwx%2BvbzDKqFkwSriZnPd5zPMM2OAxaBe0fqpJStqJYj56VqXtfyQOi7bnRB4YQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebcd0da85697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ads-lot.ru/vitrine.php?id=1431
0.0.0.0 0 B URL GET ads-lot.ru/vitrine.php?id=1431
IP 0.0.0.0:0
Requested by http://f95241kr.beget.tech/
Certificate IssuerGoogle Trust Services LLC
Subjectads-lot.ru
FingerprintB7:05:B9:23:CC:3D:32:51:C2:02:0C:2C:ED:5B:B7:A9:9C:AF:1A:46
ValiditySat, 16 Sep 2023 08:32:35 GMT - Fri, 15 Dec 2023 08:32:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vitrine.php?id=1431 HTTP/1.1
Host: ads-lot.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f95241kr.beget.tech/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 00:30:49 GMT
content-type: text/html;charset=windows-1251
x-powered-by: PHP/5.4.45
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=v46ft6rcu3us8q58so1o6pfhq4; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UJ9T2FDW%2FFJYQWaAzbd1POlQ%2BkxsmMgl4WTsuSsGLTGqqB7PhoLp8udrL5BkNNxoubPVbSV6wD7nFGGG0kgTPlqSu%2F1AJTA2NQQtymy%2Bq%2BkAzh7EJgEREjWe5Xud"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b6ebc70d7fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2