Overview

URLwww.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html
IP 163.172.30.40 (France)
ASN#12876 Online S.a.s.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 11:23:01 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (30)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5882 34.160.144.191
googleads.g.doubleclick.net (6) 42 2021-02-20T16:43:32Z 2023-03-29T10:24:16Z 5058 10725 142.250.74.162
www.google.com (6) 7 2015-05-10T13:11:19Z 2023-03-29T05:55:56Z 5013 4276 216.58.207.228
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 2704 7093 95.101.11.115
vk.com (1) 2243 2012-05-21T17:01:19Z 2023-03-29T05:11:07Z 520 721 87.240.132.67
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 35.84.241.69
strm-rad13.strm.yandex.net (1) 323905 2018-07-05T22:05:21Z 2023-03-23T12:22:52Z 656 877505 37.9.93.173
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2373 35.241.9.150
ocsp2.globalsign.com (3) 1544 2012-05-23T20:10:04Z 2023-03-29T05:20:49Z 1081 5726 104.18.21.226
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
favicon.yandex.net (1) 9338 2017-01-29T10:03:57Z 2023-03-29T13:13:56Z 407 955 87.250.250.36
www.googleadservices.com (2) 107 2012-06-26T16:53:06Z 2023-03-29T14:17:45Z 833 17400 142.250.74.2
www.alpha-ag.ru (5) 372936 2016-01-02T05:16:49Z 2023-03-25T10:39:04Z 2576 89334 163.172.30.40
yandex.ru (9) 671 2012-05-21T23:15:36Z 2023-03-29T11:09:24Z 21074 14033 5.255.255.70
ysa-static.passport.yandex.ru (1) 21278 2017-01-30T05:32:10Z 2023-03-29T13:13:56Z 437 398 87.250.250.114
an.yandex.ru (3) 2577 2017-01-30T06:11:51Z 2023-03-24T18:22:03Z 1408 8937 213.180.204.90
ocsp.globalsign.com (14) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 5026 21733 104.18.21.226
avatars.mds.yandex.net (2) 6545 2014-12-15T12:43:59Z 2023-03-29T11:09:41Z 860 25010 87.250.247.183
www.google.no (6) 25607 2016-04-05T21:50:59Z 2023-03-29T09:59:29Z 5033 3846 216.58.207.227
connect.ok.ru (1) 20169 2012-12-05T14:46:44Z 2023-03-28T14:16:22Z 523 2834 217.20.152.207
ocsp.pki.goog (20) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 6860 13993 142.250.74.131
counter.yadro.ru (1) 7275 2014-09-09T20:41:17Z 2023-03-29T08:31:10Z 518 738 88.212.201.204
connect.mail.ru (1) 47433 2012-05-21T17:01:23Z 2023-03-29T13:01:00Z 576 818 94.100.180.54
yastatic.net (13) 72282 2014-03-11T08:15:28Z 2023-03-29T14:40:54Z 5795 326093 178.154.131.215
static.alpha-ag.ru (18) 515461 2019-07-10T17:40:56Z 2023-03-23T12:22:50Z 7928 266425 188.114.97.1
log.strm.yandex.ru (2) 17573 2018-03-28T23:12:20Z 2023-03-29T19:02:50Z 998 641 87.250.251.15
www.google-analytics.com (1) 40 2012-10-03T03:04:21Z 2023-03-29T06:01:47Z 372 20615 216.239.36.178
mc.yandex.ru (11) 2672 2012-05-21T11:38:30Z 2023-03-29T14:40:55Z 11573 146039 87.250.250.119
strm.yandex.ru (1) 14701 2017-01-30T16:19:59Z 2023-03-29T08:59:57Z 590 1300 87.250.254.45
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 2705 39816 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 11:22:58 UTC medium Client IP Internal IP ET INFO URL Shortening Service Domain in DNS Lookup (vk .com) 
2023-03-23 11:22:58 UTC medium Client IP  87.240.132.67 ET INFO Observed URL Shortening Service Domain (vk .com in TLS SNI) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 163.172.30.40
Date UQ / IDS / BL URL IP
2023-04-10 18:47:54 UTC 0 - 3 - 0 www.alpha-ag.ru/games-for-android/action_shoo (...) 163.172.30.40
2023-04-08 19:00:11 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=922900 163.172.30.40
2023-03-26 06:19:08 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=121377 163.172.30.40
2023-03-25 17:57:11 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=915352 163.172.30.40
2023-03-25 15:37:52 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=404975 163.172.30.40


Last 5 reports on ASN: Online S.a.s.
Date UQ / IDS / BL URL IP
2023-06-01 03:44:36 UTC 0 - 19 - 0 en.vidmo.pro/video.php?id=15358459 212.83.168.253
2023-05-31 22:23:59 UTC 3 - 14 - 0 info-gamers.zzux.com/ 62.4.16.126
2023-05-31 22:06:34 UTC 4 - 0 - 0 moninproductions.com/new/auth/sf_rand_string_ (...) 51.159.70.100
2023-05-31 21:36:06 UTC 11 - 21 - 0 www.event-lgr.25u.com/ 62.4.16.197
2023-05-31 20:59:28 UTC 4 - 0 - 0 moninproductions.com/new/auth/sf_rand_string_ (...) 51.159.70.100


Last 5 reports on domain: alpha-ag.ru
Date UQ / IDS / BL URL IP
2023-04-10 18:47:54 UTC 0 - 3 - 0 www.alpha-ag.ru/games-for-android/action_shoo (...) 163.172.30.40
2023-04-08 19:00:11 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=922900 163.172.30.40
2023-03-26 06:19:08 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=121377 163.172.30.40
2023-03-25 17:57:11 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=915352 163.172.30.40
2023-03-25 15:37:52 UTC 0 - 3 - 0 www.alpha-ag.ru/engine/download.php?id=404975 163.172.30.40


No other reports with similar screenshot

JavaScript

Executed Scripts (40)

Executed Evals (0)

Executed Writes (2)
#1 JavaScript::Write (size: 222) - SHA256: b4f4140c60e58dca9c1d4719389022dd5bb2036fc292751ecdc404d7e0471529
< img src = '//counter.yadro.ru/hit?t58.6;r;s1280*1024*24;uhttps%3A//www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html;0.5136454605575963'
alt = ''
style = 'position:absolute;left:-9999px' >
#2 JavaScript::Write (size: 1391) - SHA256: 060f6b753d3f8095ba9d8e9a776e6b0bfb667d4e5593752bbf03c275165e20e7
< script > "use strict";
var p = ["https://yastatic.net/q/set/s/rsya-tag-users/bundle.js"],
    m = /^(?:(?:https?:)?\/\/)?(?:an\.)?yandex\.[a-z]+\//gi,
    t = window.parent;
window.addEventListener("message", function(e) {
    if ("string" == typeof e.data) try {
        t = JSON.parse(e.data)
    } catch (e) {
        return
    } else t = e.data;
    var t = (e = t || {}).name,
        n = e.namespace,
        a = e.days,
        r = e.urls,
        o = e.adblockCountToXhr,
        i = e.countToXhr,
        e = e.bundle,
        s = "load_image" === t || "load_script" === t,
        n = function(e, t) {
            if (t && e) {
                e = "".concat(e, "=1");
                if (-1 !== document.cookie.indexOf(e)) return !1;
                var t = 86400 * t * 1e3,
                    n = new Date,
                    n = new Date(Number(n) + t).toUTCString();
                document.cookie = "".concat(e, "; expires=").concat(n, "; SameSite=None; Secure")
            }
            return !0
        }(n, a),
        a = Array.isArray(r) && 0 < r.length;
    if (s && n && a)
        if ("load_image" === t)
            for (var c = r, d = o, u = i, f = e, l = 0; l < c.length; l++)(u && m.test(c[l]) || "adblock" === f && d ? function(e) {
                var t = new XMLHttpRequest;
                t.open("GET", e, !0), t.withCredentials = !0, t.send()
            } : function(e) {
                (new Image).src = e
            })(c[l]);
        else "load_script" === t && r.filter(function(e) {
            return p.includes(e)
        }).forEach(function(e) {
            return e = e, (t = document.createElement("script")).src = e, void document.body.appendChild(t);
            var t
        })
});

function n(e) {
    "pagehide" === e.type && e.persisted || a || (a = !0, t.postMessage({
        name: "CONFIRM_FRAME_UNLOADED"
    }, "*"))
}
var a = !1;
["beforeunload", "pagehide", "unload"].forEach(function(e) {
    return window.addEventListener(e, n)
}), t.postMessage({
    name: "CONFIRM_FRAME_READY"
}, "*"); < /script>


HTTP Transactions (147)


Request Response
                                        
                                            GET /games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html HTTP/1.1 
Host: www.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             163.172.30.40
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 11:22:49 GMT
Content-Length: 162
Connection: keep-alive
Location: https://www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14539
Expires: Thu, 23 Mar 2023 15:25:08 GMT
Date: Thu, 23 Mar 2023 11:22:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9087
Expires: Thu, 23 Mar 2023 13:54:16 GMT
Date: Thu, 23 Mar 2023 11:22:49 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 10:27:32 GMT
age: 3317
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8802
Expires: Thu, 23 Mar 2023 13:49:32 GMT
Date: Thu, 23 Mar 2023 11:22:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: zKXPJl60t2Qkgft5P+24AplJh6HSufJFJkvpPp2sGq1ntf76wNsFnWymPcSHuY6mH+wMJUuRIwM=
x-amz-request-id: 6GQAFJR9Q1MXK6RA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 10:54:01 GMT
age: 1729
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:02:29 GMT
ETag: "3dd086f3d279e33a719b6c7a899515e7cffada50"
Last-Modified: Thu, 23 Mar 2023 09:02:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 948
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c7f0840b529-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    ec352c30c221aebc0f8628cb15b2eeac
Sha1:   3dd086f3d279e33a719b6c7a899515e7cffada50
Sha256: bea6996006e5fa59a89d146d06bd3942f786bc970dc38526c7368e1aede3e090
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /uploads/icons/com.UnlockGames.HeavenOrHell_gp.png HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 7633
last-modified: Mon, 01 Nov 2021 00:01:51 GMT
etag: "617f2e6f-1dd1"
expires: Thu, 21 Mar 2024 15:26:41 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 71769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vtk1INxeBrojnPFTbjluXccjn9jcEhBi%2BYm7wuwm1FUXC7foMi6Iukb1qsXxRgtAwzabAjYl1ON9KY8J5OMzWotTq8fWPi%2FII%2FHFwLC0tTLoDplSNV5ZUdL%2BK3rgZiAg3X0%2BG1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dbcb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Size:   7633
Md5:    dd80dd581875c351ba73b349a118cb0e
Sha1:   4003630b5006f4abb5493dbcc3e46acbc9d3faaa
Sha256: 38a50f97737bb17f71247490925311199bdba3376e43c222c132bb392eac942e
                                        
                                            GET /uploads/icons/com.RAWorks.BM_gp.png HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 12677
last-modified: Wed, 01 Sep 2021 01:01:49 GMT
etag: "612ed0fd-3185"
expires: Sat, 16 Mar 2024 17:12:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 497450
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IOO1YoJVgLbijGTHxONpCuSYHqYvqSlVbeO1BzP1PDZ7fWTI8prbwQr5hcnk27flQiLlcSmdxE5lEJTaJT7I1%2Fmk1KZ%2Fooi3%2B0sC18187OhvQu3M5jUElGlIDvXz9xbRdNUqb94%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dc0b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Size:   12677
Md5:    470e108097d258b2fc7233441b524152
Sha1:   8ffbb9b54e327270763a0e972fba80b03445a5f3
Sha256: 5c1abb4628a15c5a4e1e9292d75cfcb9aab3d107910cce84844ddb236f0d37de
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2017-06/1497253016_sims-freeplay.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 4504
last-modified: Mon, 12 Jun 2017 07:43:21 GMT
etag: "593e4619-1198"
expires: Sat, 09 Mar 2024 07:38:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1136690
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R5eejU8LFzs70An%2BzdlkXgPTXbG%2B5Q09l1wHwRah1skoqMB5pqC6mJDuRgA5K2XNiqIpH%2FEGTI%2BZ%2BaPbec1FL41TPJQtwalSC%2B1bvRWZ%2B5vdW8qvqSVCTZk62ppFkmXGPJsyDzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dd0b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 140x80, components 3\012- data
Size:   4504
Md5:    99546e498d5157cbb46dc7591c4db385
Sha1:   7ccd0c67f78dfe039cd830c00b0ef719bd9c7fcc
Sha256: e14a70773ed481d1e02c821616738f741a635992968c8951f54ca119240ee17f
                                        
                                            GET /uploads/icons/com.ASGames.develop.PocketSurvivorExpansion_gp.png HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 9463
last-modified: Sat, 01 Jan 2022 00:01:39 GMT
etag: "61cf99e3-24f7"
expires: Thu, 21 Mar 2024 15:26:41 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 71769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uzzkt5P21gI9Mh%2Bhtd8%2FHd%2BCOGCjOMi51zFT7tHAo%2BnUhBdJ84pcrkKy1gyf94XjLTYFs4Ku8q9kM1fOWB3WVP6uDHzG1%2FmQ4xp26FqBZhMVALEnyYWhrq9PhTtAuLdd9Shlg7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811db7b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Size:   9463
Md5:    40ba55e5555414aefaea3ccdd7eaa1e2
Sha1:   ae5eb998315ffff5fea16c1259b36edb1d8b5145
Sha256: 30493ff91da413bdffb69a00ab0e8b5602e6343f0e6ccd8122886440ebbb95ae
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2016-04/1459776028_01ipa03699entop.jpeg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 5120
last-modified: Thu, 07 Dec 2017 10:52:25 GMT
etag: "5a291d69-1400"
expires: Sun, 17 Mar 2024 09:53:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 437334
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DGNYEcVSfcsq0gUEd93xAp23VDdJFBs9UgjXUIqjgToKPpCs6Q7ui0KhOSgVlX3Wghvb7C15Opq0Vn5Osq7K1kVSt4F3qCwOp9l2KMB7JZroksJ0LZwCYi1y3lfhCQuYZD68Y3c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dd2b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 140x80, components 3\012- data
Size:   5120
Md5:    a55ed8fe729aae8cab06d0e1c662d575
Sha1:   92ea568b26ebc60b8501c99106f9f458c2d48d50
Sha256: 8cb3c9b735f30c893beaa8cc565405b3b790d31aca6909481d98eb1565c7ab82
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2017-03/1488824748_01413728360_minecraft.jpeg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 5068
last-modified: Tue, 28 Mar 2017 09:56:01 GMT
etag: "58da3331-13cc"
expires: Sat, 17 Feb 2024 10:20:35 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2941335
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wJOjNzMLUGEn%2BTGUiuugydp8qC9z4gca9bKcRPLlFWzGBuZhb5UhXAXAsF6BzQeIJ0A7yZtU84eapWDN5by6WpDBYViTUDa6KiNme4go4idxjk%2BLDD7d36lruVRCfC41ZJX6JO0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dc8b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 140x80, components 3\012- data
Size:   5068
Md5:    2c7e6a14a6bb32591c7fc8116250df67
Sha1:   6c90c7477942e43b143d5aa5be913872381d4ecd
Sha256: ca52a0f56ba6e01bfce34120ab57eafeda81c7ffed10008df8a46c595d0b084c
                                        
                                            GET /uploads/posts/2022-03/1646378803_Opasnye-parni-otome-triller_2.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 46503
last-modified: Fri, 04 Mar 2022 08:01:36 GMT
etag: "6221c760-b5a7"
expires: Thu, 21 Mar 2024 15:26:41 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 71769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F9GbVIdeC2HqIoT4RGZN6w3kqraG225ht7IEkefVkr1JSwj1B5OiBxwQCoAgaFxqqcLkRHXW1PFKiz4KsnLqFTnHd50x4IicuSbqPGvFoqtZqxRQAXKLk1NqJFJRJpQX0yADQ9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dd9b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 309x550, components 3\012- data
Size:   46503
Md5:    d108cbf573cfa8a931175dacdd799f58
Sha1:   69e46b29892a990ab1203b38202cd42cca5bd01a
Sha256: 1a1bbf8653e642e6346a91549386680fd1508554a2b4fb4080660d045888faa1
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2017-11/1509805805_last-day-on-earth-survival.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 4024
last-modified: Mon, 05 Mar 2018 17:00:20 GMT
etag: "5a9d77a4-fb8"
expires: Thu, 29 Feb 2024 09:27:39 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1907711
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EVGIAPWAtYyFhaDNlPUlCU4P5FE3OYu07EZ%2BkWVpuf3jyN0ggmRQAvn0yo5xbddGdCPkWw2OkVAdt6MlpnMvz5ODbu6x0quHE7iBkQm9li7OroHY8IzfFIO2uuiyNq9Ss0PWCGs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dc6b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 140x80, components 3\012- data
Size:   4024
Md5:    3a24dc5354bbb364f32fa9feb38a87ed
Sha1:   50cd1f6bab4dcb52e362102f42bd88f2958f1602
Sha256: bb11aeccd39731c00792eba26cfb0ec304157ddf61b0f46e1395517bac9abc99
                                        
                                            GET /uploads/posts/2022-03/1646378781_Opasnye-parni-otome-triller_4.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 50788
last-modified: Fri, 04 Mar 2022 07:25:18 GMT
etag: "6221bede-c664"
expires: Thu, 21 Mar 2024 15:26:41 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 71769
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VbMGSKEZoZNOJFpq8XA72NVgeUtt9wGakAlNDM7tytX2LwkZ%2BQmdTeznROWKhTZYV9pY8uh0hLJ18%2F00h%2F4%2B9prOwCfL60Y84pMPklnXAYVzNgHIhtRjcWc8ZY%2BrInBXjAPBT6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dddb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 309x550, components 3\012- data
Size:   50788
Md5:    b65c4a58be44fde5448264a31713d177
Sha1:   e7cf96e1f236d6c1a76122e65d600f34643525a6
Sha256: 8d68652aee2bffb3003f4e23836b978ef45a58fcf193a8664e5e4027056f0ca8
                                        
                                            GET /templates/foodmaster/images/youtube.png HTTP/1.1 
Host: www.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html
Cookie: PHPSESSID=86db735bdf6c4140343b9aa59392cf59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             163.172.30.40
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 86066
last-modified: Fri, 01 Oct 2021 08:39:33 GMT
etag: "6156c945-15032"
expires: Fri, 22 Mar 2024 11:22:50 GMT
cache-control: max-age=31536000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 760 x 300, 8-bit colormap, non-interlaced\012- data
Size:   86066
Md5:    86aabd7aaa3e533db0edda6c4403cb8b
Sha1:   cd76dd4698618e7988b4ae98408a05f6b62a4e81
Sha256: 7e0d661a548a36befef374fe52eb9214fad09a441122b3132048762641daf365
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2018-03/1521387574_roblox.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 5207
last-modified: Sat, 19 Mar 2022 08:53:00 GMT
etag: "623599ec-1457"
expires: Wed, 20 Mar 2024 17:01:39 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 152471
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w%2FM3%2B9YnrxeioWP0hVBTx2ypxjsla6gp2flCRHe7YyIisfQfQQZF4RuhW%2BHJKApB9ERX6sNPIPX4WhTSXIP3VHimRQ6vt0%2B5eFIYw9aKs36%2B8XY%2BzGHUScoVFDel9g2YuODoCAQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dd6b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 140x80, components 3\012- data
Size:   5207
Md5:    6a82fea799d85ee195cf7d2256d8582a
Sha1:   d978e120f11038b54800863f10092bd105107094
Sha256: 9afd95573a948f6c748eb8fdf4435c6bd09592afd14ea5cba8893c4e731a3a64
                                        
                                            GET /engine/data/emoticons/lol.gif HTTP/1.1 
Host: www.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html
Cookie: PHPSESSID=86db735bdf6c4140343b9aa59392cf59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             163.172.30.40
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 690
last-modified: Mon, 16 Feb 2015 21:00:00 GMT
etag: "54e25a50-2b2"
expires: Fri, 22 Mar 2024 11:22:50 GMT
cache-control: max-age=31536000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 20 x 20\012- data
Size:   690
Md5:    dabd26019f369ae05610d114b679e89f
Sha1:   94a727658c10b387ddefa2f882939b93cd698174
Sha256: 19ccccdf4873ca9f168a71a1bbc4ac0be5e3f557bec4d0c20631105b3cac4ff4
                                        
                                            GET /uploads/thumbs/140x80/zc1/uploads/posts/2019-06/1561893230_Toca-Life-World.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 4939
last-modified: Fri, 08 Oct 2021 10:00:14 GMT
etag: "616016ae-134b"
expires: Sat, 17 Feb 2024 10:20:35 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2941335
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YF1%2B4cdbZPGQ2%2BDddwjNl4qPXOnFiUcrjpgfMb7R8oSF7JKpKKpDGZxr9lAb%2BzNAkrwirHWs8iGtHIIOv8nYafDNaofeSpIvEyYrvvG%2BC0xTO6zGO%2F6ahQQHOvA6DNa%2B6Aned9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dcbb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 140x80, components 3\012- data
Size:   4939
Md5:    3b45388d25ba0ed66567d542b76a0854
Sha1:   dfa1536c502e4d2eb75f664f9cd70cbf4ffb6dd3
Sha256: 170a58bb145308abc3513b8710c2a9d6208d44a2e6d8ce429802308d2383857d
                                        
                                            GET /uploads/icons/com.genius.assassin_gp.png HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 11351
last-modified: Wed, 01 Sep 2021 16:01:39 GMT
etag: "612fa3e3-2c57"
expires: Fri, 22 Mar 2024 02:52:30 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 30620
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3AcJOn%2BDSdZD5hGqLTfeQlkOYV1gM%2B%2Fy7ihGDIe0p%2F34B6vK8R6HDwzxDx4vl%2FXsycYgCmdNT7Cnxe8ExBNCHEnX6cZJ1dJ246j6sEeLuXMnDqHVqk1lSLkzztL2dkRR7OUsbI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dc4b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Size:   11351
Md5:    be438a38efba53c5446afc7b5f0ab50d
Sha1:   a06ccc2bc7c85e6407f63285565964a84829aa45
Sha256: f628c6d8a9317bfb60da774f4c5f123637d1aeb6e5e6e8cc18de0c4506bb407b
                                        
                                            GET /engine/data/emoticons/recourse.gif HTTP/1.1 
Host: www.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html
Cookie: PHPSESSID=86db735bdf6c4140343b9aa59392cf59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             163.172.30.40
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 689
last-modified: Mon, 16 Feb 2015 21:00:00 GMT
etag: "54e25a50-2b1"
expires: Fri, 22 Mar 2024 11:22:50 GMT
cache-control: max-age=31536000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 20 x 20\012- data
Size:   689
Md5:    c2ddc3417b0ec71436448ab8658507d3
Sha1:   f0864321d6ef1a169aadce821e79f382c2b24c0f
Sha256: 6cb2e2ae84a3c121e911ab90f87a719a2ac9feaff4c11f381aa048a15e412338
                                        
                                            GET /uploads/posts/2022-03/1646378814_Opasnye-parni-otome-triller_3.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 42258
last-modified: Fri, 04 Mar 2022 08:01:37 GMT
etag: "6221c761-a512"
expires: Fri, 22 Mar 2024 02:52:30 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 30620
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=broJLel1gJiF7e7zh4VDpzrPfg2ZgZBy08ZWS46AWNSnRHDRGUxdhCCDxT5ZXT6Wa5YaoGLj4LzDW%2BBjL%2Fei9Hng35c%2Fm9jIpFuio59qJcDXQDoB8Dv4LWCDi2%2BvLEZ0HzAiNEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811ddcb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 309x550, components 3\012- data
Size:   42258
Md5:    3b7fadf2e9aed9a6fcfcce74ccf10b68
Sha1:   fee78e5f7b6f9b47750e2e42a814fd2a997b91f8
Sha256: b13367ca8f90bceb52e506b5ae4f9f29ec3e8d282d38d101087d874f11a2e806
                                        
                                            GET /uploads/posts/2022-03/1646378808_Opasnye-parni-otome-triller.jpg HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 37357
last-modified: Fri, 04 Mar 2022 08:01:37 GMT
etag: "6221c761-91ed"
expires: Fri, 22 Mar 2024 02:52:30 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 30620
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W5QLPkH89C6Bb%2FCp42ZgNOjDxUcZsG%2BPB6sBRlUNgA1oUsz2XdBuaYBfe8SRYR7IX5OXyZxnnJ6wMf0SEove31ZYhlerg7GwBzDDdj%2BiSzNDuGgH5um7YpAYD6WxuEmbcZZ8QmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c811dd8b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x309, components 3\012- data
Size:   37357
Md5:    1b025a63562356f2f35ed5bac6f83191
Sha1:   55ad6003c67cfa9a4d9d690109ff542732d2e8b7
Sha256: c715de63ee724458bedee2f060adbc22ee54758c6e9dc4efece7761485a34764
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 11:14:33 GMT
age: 497
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:40:16 GMT
ETag: "eec6e57da58a18c43a7d626f2e4f7df3db2d3f44"
Last-Modified: Thu, 23 Mar 2023 09:40:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3072
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c830e94b529-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    a5f905b6f70647a6fb1461f568560746
Sha1:   eec6e57da58a18c43a7d626f2e4f7df3db2d3f44
Sha256: 50193e68d4c81c76ac611e1e47d45e80abe1671eba9a8e518f7d55563eb4ecfa
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.239.36.178
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 10:05:11 GMT
expires: Thu, 23 Mar 2023 12:05:11 GMT
cache-control: public, max-age=7200
age: 4659
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 938
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:35:29 GMT
ETag: "ecdcbee3c3931d637e64aa3d9259c385ed934df4"
Last-Modified: Thu, 23 Mar 2023 08:35:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2731
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c8339360b3d-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 938
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:30:37 GMT
ETag: "a8eb0078e750c64fd0f8f33d19798ad2cb842b2a"
Last-Modified: Thu, 23 Mar 2023 08:30:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 26
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c833cf9b527-OSL

                                        
                                            GET /hit?t58.6;r;s1280*1024*24;uhttps%3A//www.alpha-ag.ru/games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html;0.5136454605575963 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             88.212.201.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.17.9
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 435
Connection: keep-alive
Expires: Tue, 22 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31\012- data
Size:   435
Md5:    d3e7f73348014dc40154010ffbf258ba
Sha1:   e687010ef50553ebd07207937d224680fde17903
Sha256: 67509cec541c143658f0003d431d944825aa56dec1fe82d4f4d12c510db21a08
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9699
Expires: Thu, 23 Mar 2023 14:04:29 GMT
Date: Thu, 23 Mar 2023 11:22:50 GMT
Connection: keep-alive

                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 73977
date: Thu, 23 Mar 2023 11:22:50 GMT
access-control-allow-origin: *
etag: "641965ea-120f9"
expires: Thu, 23 Mar 2023 12:22:50 GMT
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Size:   73977
Md5:    a2ae63b62d5190215ac362d454449e8c
Sha1:   92708e196ffd55dbeafc08e56cf677b84dc24d3a
Sha256: 71f36d9e26a859ce63d263639f2a1edc1b332578a253d573d14e5f4900e809f9
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 10:19:54 GMT
ETag: "aa82b008d29a7e9c86bfc1b9bcdc39490e5e1cdd"
Last-Modified: Thu, 23 Mar 2023 10:19:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 741
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c83da240b3d-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    02674077ef2dd900b4b7e4b0ee6863b4
Sha1:   aa82b008d29a7e9c86bfc1b9bcdc39490e5e1cdd
Sha256: 48341fafa39cb08d835e9bd6cd8c9145feba4e768812a2cc59d4b86e75ecf68d
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:20:26 GMT
ETag: "2f6ba57864516c7ce85d368ec0b8dce9cc8c7c95"
Last-Modified: Thu, 23 Mar 2023 09:20:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3518
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c84587eb529-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    756f55f28b37ebbc2912baa650645aa6
Sha1:   2f6ba57864516c7ce85d368ec0b8dce9cc8c7c95
Sha256: d86704c46ea747c4a4c1bad70a61613928dd3344faa5e4fd543c2f8c78a64300
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:15:02 GMT
ETag: "2e9832b1234e7bc9d5334b8169ce00e645cfb348"
Last-Modified: Thu, 23 Mar 2023 08:15:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2074
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c846aac0b3d-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    c365662f856ac28dd3e7e34f67b461f1
Sha1:   2e9832b1234e7bc9d5334b8169ce00e645cfb348
Sha256: 7252e8360482ba8bec2a40ff1653c7929e2fa8c33cbfe08b68c421cdac60ff1c
                                        
                                            GET /share.php?act=count&url=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html%3Futm_source%3Dshare&index=0&_=1679570578417 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.240.132.67
HTTP/2 200 OK
content-type: text/html; charset=windows-1251
                                            
server: kittenx
date: Thu, 23 Mar 2023 11:22:50 GMT
content-length: 41
x-powered-by: KPHP/7.4.113531
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixlang=3; expires=Wed, 20 Mar 2024 14:32:46 GMT; path=/; domain=.vk.com remixstlid=9119463152330161926_2KhnVLy6SBEwn3swzREUtDg0jzHf1IQxqaz1AFxSw6s; expires=Fri, 22 Mar 2024 11:22:50 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   41
Md5:    505409d486dbce9f920a42c21986f363
Sha1:   c1b9b54c6b061fb00e766d00b930ba1a0619093c
Sha256: f9d13738dd787ee7ad9b29d804107c1564b072bfdb46e208f45ecfefc39eb6f3
                                        
                                            GET /share_count?url_list=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html%3Futm_source%3Dshare&callback=1&func=jQuery112406580438334128473_1679570578419&_=1679570578420 HTTP/1.1 
Host: connect.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             94.100.180.54
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 11:22:50 GMT
Content-Length: 198
Connection: keep-alive
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://cspreport.mail.ru/xxssprotection
x-webkit-csp-report-only: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript:
p3p: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
cache-control: no-cache, no-store, must-revalidate, private
x-envoy-upstream-service-time: 4


--- Additional Info ---
Magic:  ASCII text
Size:   198
Md5:    ced1dbb5adcdf5e9ee60fb4cbddd5115
Sha1:   0df8d86539cba6e981ee62b1f241925a602fcf5e
Sha256: f7f1f1cb8650826052a790afde0c5bfeb35bcaeb069bda22cd95c9ef3d96780e
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:52:32 GMT
ETag: "3ae9bdda26aafb0eeca580a6b077469e4c2eb855"
Last-Modified: Thu, 23 Mar 2023 08:52:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 903
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c858bd50b3d-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:52:32 GMT
ETag: "3ae9bdda26aafb0eeca580a6b077469e4c2eb855"
Last-Modified: Thu, 23 Mar 2023 08:52:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 903
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c8588a5b527-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:52:32 GMT
ETag: "3ae9bdda26aafb0eeca580a6b077469e4c2eb855"
Last-Modified: Thu, 23 Mar 2023 08:52:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 903
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c859bde0b3d-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:52:32 GMT
ETag: "3ae9bdda26aafb0eeca580a6b077469e4c2eb855"
Last-Modified: Thu, 23 Mar 2023 08:52:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 903
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c859a53b4fd-OSL

                                        
                                            GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: font/woff2
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Fri, 22 Mar 2024 17:09:28 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: 469dc6ed4ed31b7a
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Size:   26004
Md5:    7f0cdaf91230f9789ca4162aedff612e
Sha1:   965de571aa794dab64076c3cc64dc8894b843f23
Sha256: 033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
                                        
                                            GET /partner-code-bundles/742594/b8d4df323bf34928a800.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 24275
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "0cf4a28098c7453c7ea032f546f397d6"
expires: Sat, 22 Mar 2053 17:56:30 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65494)
Size:   24275
Md5:    0cf4a28098c7453c7ea032f546f397d6
Sha1:   9c6201a008011676cfd29f04bb9990f78623eedc
Sha256: ffb2c62a1f8f624d2dbccc605b096e59ce6ba07ba9ff7829808c0754d3913a33
                                        
                                            GET /safeframe-bundles/0.83/host.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Sat, 22 Mar 2053 17:56:16 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33703), with no line terminators
Size:   8878
Md5:    f80882bf67cf261aa08d636da095149a
Sha1:   3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
Sha256: 4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qTJt9AwKh5apSr7CCoPtQg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.84.241.69
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8FltQ8uNJeaZC32g2u2HYPYydz0=

                                        
                                            GET /partner-code-bundles/742594/1c0942547d39e10f5f56.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 4499
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "2b67c17ff18566f4fb5ba8ec8e46650c"
expires: Sat, 22 Mar 2053 17:56:30 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13349)
Size:   4499
Md5:    2b67c17ff18566f4fb5ba8ec8e46650c
Sha1:   06a978da58d786294138b4e348fb885a7033b3e2
Sha256: 08397780d3a720ab04d09ada7b45c198bcfef428a46f6e4338f7b2e5dfc9f147
                                        
                                            GET /partner-code-bundles/742594/07cea2bf8567304efc16.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 7624
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "a546f0b6abe4f81d8578d02a87d6f52e"
expires: Sat, 22 Mar 2053 17:56:30 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (22589)
Size:   7624
Md5:    a546f0b6abe4f81d8578d02a87d6f52e
Sha1:   bccc0c625394aa11f3f4ca03e45cd269c815315b
Sha256: d428f185a720d4f65e65ea79707e87bf0e5e1b6af75028603f201cb63ea9f36a
                                        
                                            GET /partner-code-bundles/742594/2ec9a88e40a26b53acde.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 1799
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "a5b00dc34fe51ccd4a78b49aa262fe7a"
expires: Sat, 22 Mar 2053 17:54:00 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5994)
Size:   1799
Md5:    a5b00dc34fe51ccd4a78b49aa262fe7a
Sha1:   08bc3ef53bc8d2c3121630e69407e538caf801c4
Sha256: c4e30464a7735ec53e0a99461852cdf22b59469d841738324537c7d17af4a4aa
                                        
                                            GET /watch/39862085/1?wmode=7&page-url=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A937%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1398435132365%3Ahid%3A394731919%3Az%3A0%3Ai%3A20230323112258%3Aet%3A1679570579%3Ac%3A1%3Arn%3A290483021%3Arqn%3A1%3Au%3A1679570579827654711%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A3%2C106%2C150%2C1%2C354%2C0%2C%2C326%2C16%2C%2C%2C%2C958%3Aco%3A0%3Ans%3A1679570577479%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679570579%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B2%D0%B7%D0%BB%D0%BE%D0%BC%D0%B0%D0%BD%D0%BD%D1%83%D1%8E%20%D0%9E%D0%BF%D0%B0%D1%81%D0%BD%D1%8B%D0%B5%20%D0%BF%D0%B0%D1%80%D0%BD%D0%B8%3A%20%D0%BE%D1%82%D0%BE%D0%BC%D1%8D-%D1%82%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%20%D0%BD%D0%B0%20%D0%90%D0%BD%D0%B4%D1%80%D0%BE%D0%B8%D0%B4&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Referer: https://www.alpha-ag.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 454
date: Thu, 23 Mar 2023 11:22:51 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:51 GMT
last-modified: Thu, 23-Mar-2023 11:22:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (454), with no line terminators
Size:   454
Md5:    31c7ce68de4b4d24ef253c9f3087fe29
Sha1:   4cfcc393cf6d7d2df6ed4201c4ecd6fc1ba08508
Sha256: ec663ae332d20c90c45d6faa3e631cae158700073bb2602f92e9a2e23482a664
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 11:22:51 GMT
access-control-allow-origin: *
etag: "641965ea-2b"
expires: Thu, 23 Mar 2023 12:22:51 GMT
accept-ranges: bytes
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /watch/39862085/1?page-url=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html&charset=utf-8&hittoken=1679570571_6389e1d03455317c23f10a10dc90d6b059a9880af760086d0095f58dd6a93369&browser-info=pa%3A1%3Aar%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1398435132365%3Ahid%3A394731919%3Az%3A0%3Ai%3A20230323112259%3Aet%3A1679570579%3Ac%3A1%3Arn%3A895991414%3Arqn%3A2%3Au%3A1679570579827654711%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1699%2C1699%2C0%2C%3Aco%3A0%3Ans%3A1679570577479%3Aadb%3A2%3Ast%3A1679570579&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 11:22:51 GMT
access-control-allow-origin: https://www.alpha-ag.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:51 GMT
last-modified: Thu, 23-Mar-2023 11:22:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:00:57 GMT
ETag: "740f0dcd0571d7ce4624942b07311bdd025ad7e1"
Last-Modified: Thu, 23 Mar 2023 09:00:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1267
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c88bf0c0b3d-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:00:57 GMT
ETag: "740f0dcd0571d7ce4624942b07311bdd025ad7e1"
Last-Modified: Thu, 23 Mar 2023 09:00:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1267
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c88be5db527-OSL

                                        
                                            GET /partner-code-bundles/742594/02cea12995d91bd47132.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 8568
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "ef158a3c2f21952f5e2ec7da95757ba3"
expires: Sat, 22 Mar 2053 17:56:34 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (29160)
Size:   8568
Md5:    ef158a3c2f21952f5e2ec7da95757ba3
Sha1:   48fbdbe5ddedff91a093f8bae4428c2eddd45bb6
Sha256: c91da3aae097d28dd9ca8104293c93c9430225ec9e2726a8e8300fdb4e2902f9
                                        
                                            GET /partner-code-bundles/742594/a43861a2d5505f0e2a09.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 6407
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "5776ada0630624a0fbfeecd327cd88fa"
expires: Sat, 22 Mar 2053 17:54:56 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21734)
Size:   6407
Md5:    5776ada0630624a0fbfeecd327cd88fa
Sha1:   4fcb26e8179ca3f6f076d16d3bb1151bf0f2246f
Sha256: 23191e5e00633e68e72d7c233ea639742e9c01e24c170a106af3fb47fa507780
                                        
                                            GET /partner-code-bundles/742594/8d1a43fc1f1deb2d16bd.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 2630
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "569dc93de4c5676a563bcb92af9be986"
expires: Sat, 22 Mar 2053 17:54:58 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8035)
Size:   2630
Md5:    569dc93de4c5676a563bcb92af9be986
Sha1:   ef8bebb33fb53ef5375b78e0715cd6118d01edc6
Sha256: 058fe3be94903a76cdea60a291674da39f344f853a92f8392aaa446322135cda
                                        
                                            GET /partner-code-bundles/742594/5768c62fee047a7743c0.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 6355
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "5b20a0f651aa7100a4fd10aa56488f8d"
expires: Sat, 22 Mar 2053 17:57:11 GMT
last-modified: Tue, 21 Mar 2023 15:29:20 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (22559)
Size:   6355
Md5:    5b20a0f651aa7100a4fd10aa56488f8d
Sha1:   84c32f6c0bb29c8082c40a3b9325b2688dab753f
Sha256: ddf31e00a27a3adf818a46923c9bf141c2f88aa9250234e5c7b57a5a28843ce5
                                        
                                            GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/html
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Sat, 22 Mar 2053 17:54:26 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Size:   6262
Md5:    eb77de48712912aadc9aa8171ac75ede
Sha1:   f375e4ed6b585c4e30b2d56f4f41c3beed909349
Sha256: 437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 07:37:44 GMT
ETag: "cfbe15624b8593c96708a9d9b1bf832084a55a5a"
Last-Modified: Thu, 23 Mar 2023 07:37:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 623
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c88ef700b3d-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    a0d693b75dab79595925bd67edddb15e
Sha1:   cfbe15624b8593c96708a9d9b1bf832084a55a5a
Sha256: db23215a1673e8914e09f01636aa0d15a4b659bc78b62979ada8ec17376c7917
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 938
Connection: keep-alive
Expires: Mon, 27 Mar 2023 09:29:22 GMT
ETag: "fc6a3c73f4d859cea897bfde18c7e0f9f375316d"
Last-Modified: Thu, 23 Mar 2023 09:29:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2155
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c894fd10b3d-OSL

                                        
                                            GET /vas-bundles/742342/bundles-es2017/loader.bundle.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 175604
access-control-allow-origin: *
cache-control: max-age=946708560
content-encoding: br
etag: "9ede9868dd5a562d8440b1c1c1c5e23d"
expires: Sat, 22 Mar 2053 17:53:54 GMT
last-modified: Tue, 21 Mar 2023 12:22:13 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=946708560; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   175604
Md5:    9ede9868dd5a562d8440b1c1c1c5e23d
Sha1:   907cad1fc25bb49dbbb987e68fa98a52e076d621
Sha256: 9a60c73bc96d7ddd1c8133c29e18d7ee57b1d61f59f236517f9cf65e634a6f20
                                        
                                            GET /favicon/yandex.ru?size=32&stub=2 HTTP/1.1 
Host: favicon.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.250.36
HTTP/1.1 200 Ok
Content-Type: image/png
                                            
Cache-Control: max-age=691200
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   756
Md5:    eb8aed372e7054a8d93592d5f17fb570
Sha1:   e4a52dba2468cac9a7d4bd8890b835ac293c5edf
Sha256: dd321da9fbfb2751ef37064414b32f455ae4e64bfdcfc7c89f9681b163dca0fb
                                        
                                            GET /get-vh/6213324/2a00000181d31f18b8bb099b55ea9cda8f20/orig HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.247.183
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 20112
last-modified: Wed, 06 Jul 2022 10:47:19 GMT
cache-control: max-age=86400,immutable
x-request-id: f12d0315fb31b16a
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.18.100", baseline, precision 8, 1080x1080, components 3\012- data
Size:   20112
Md5:    b92f826a39be54c613440634143f4620
Sha1:   284647dfa87e68cfe08dfb1e268d8860609a6c5c
Sha256: ecb72db76b72224091ffbc94e9aa7c316d5ba1610f3b4e9d4c2d47ad32e606f7
                                        
                                            GET /get-direct/4119367/lP61-ERuxNTfMHNa4ACuaQ/y300 HTTP/1.1 
Host: avatars.mds.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.247.183
HTTP/2 200 OK
content-type: image/webp
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:51 GMT
content-length: 3820
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 10 Nov 2022 12:10:42 GMT
cache-control: max-age=31536000,immutable
x-request-id: 490af2cb9ac41b5e
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   3820
Md5:    30ddfadb7b1cc7025b0a0e16d0ea7144
Sha1:   07370fd7e8b6403b8758ba552cf043c1b03dbdf7
Sha256: be179981b3a9e4351477249cdc8d4d5af1197501eac4f75f4da330a4b7da6326
                                        
                                            GET /watch/243296/1?wmode=7&page-url=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A983%3Acn%3A2%3Adp%3A0%3Als%3A229629225469%3Ahid%3A394731919%3Az%3A0%3Ai%3A20230323112259%3Aet%3A1679570579%3Ac%3A1%3Arn%3A214149216%3Au%3A1679570579827654711%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1679570577479%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679570579%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B2%D0%B7%D0%BB%D0%BE%D0%BC%D0%B0%D0%BD%D0%BD%D1%83%D1%8E%20%D0%9E%D0%BF%D0%B0%D1%81%D0%BD%D1%8B%D0%B5%20%D0%BF%D0%B0%D1%80%D0%BD%D0%B8%3A%20%D0%BE%D1%82%D0%BE%D0%BC%D1%8D-%D1%82%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%20%D0%BD%D0%B0%20%D0%90%D0%BD%D0%B4%D1%80%D0%BE%D0%B8%D0%B4&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Referer: https://www.alpha-ag.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 407
date: Thu, 23 Mar 2023 11:22:51 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:51 GMT
last-modified: Thu, 23-Mar-2023 11:22:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Size:   407
Md5:    2cffa77936308319bcb2413ad8c7a217
Sha1:   f67052cd8504cd33855f65d3e319f341592ab0b4
Sha256: c2786b3bc28f6f553ea913b8a1ee5eac50fcda4f40c1cab43521632ef7ba66ca
                                        
                                            POST /watch/243296/1?page-url=https%3A%2F%2Fwww.alpha-ag.ru%2Fgames-for-android%2Fsimulatory%2F34096-vzlom-opasnye-parni-otome-triller.html&charset=utf-8&cnt-class=1&hittoken=1679570571_33abd5644e120f0e0bfcc54112871ca6f02cd627e8c02134aa5e724de4ac4c4b&browser-info=pa%3A1%3Aar%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A937%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A983%3Acn%3A2%3Adp%3A0%3Als%3A229629225469%3Ahid%3A394731919%3Az%3A0%3Ai%3A20230323112259%3Aet%3A1679570580%3Ac%3A1%3Arn%3A432295892%3Arqn%3A1%3Au%3A1679570579827654711%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A3%2C106%2C150%2C1%2C354%2C0%2C%2C326%2C16%2C1699%2C1699%2C0%2C958%3Aco%3A0%3Aeu%3A1%3Ans%3A1679570577479%3Aadb%3A2%3Ast%3A1679570580&t=gdpr(14)mc(p-2-h-1)clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 11:22:51 GMT
access-control-allow-origin: https://www.alpha-ag.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:51 GMT
last-modified: Thu, 23-Mar-2023 11:22:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /an/rtbcount/1GawPDR00HO200000000U9nJx5Oxct6gIrZUS2l_IPil0ek5BRlDP58OWC0J9XBgnPHK69kmZPaXbH4edhcLtzC895ug0kJLNWKIhOpbGB8J90i4J0mp6IE5cC3iXOnCQo32AndZko3oUndlHOim70NpppA2PA-2oRkC338A37yPPm6rpcK2YQnb-WKappBz1u9NJ08w7yGvjl8pCcpETgll_yxAy9U96MGvCokGx6LM199JcK7QvZApWInaPd9K05kuaPdhN8W_MyvYqvFCCFzU1Qky2oP_CZiuyKESon8hAmnchM2vkOHZ0yj_663SWSG-WCI-mBAzuSovJHCFBHU_oGBnu0VxXomJFzvwUdB35VktB21lBc3bFSdQ-e8BB7s1jQ61wIPhLnf7bIrJZCXNLf0v7MmDB3FOhXmENi3MlMVpXjQ_P_QNhMI3cNA0pUC46_CZDbxtC5Uhj4m3nv3SidJpbsmm-twojS_x4l--zR7zH7R9o5YFwtrlxMUnivcR69bQcYnWPrp1phY1lQcXWMS7Eyy9Tl47xFqRUruV_7VsTCWFTfu5742lhk1eki6sWUF-5AOT78m0EBUuxm00?confirmTime=-1&confirmRatio=1000000&test-tag=106652627894274&format-type=118&actual-format=10&rnd=6848397633637&pcode-active-testids=740570%2C0%2C52&banner-sizes=eyI3MjA1NzYwNzA4NDU2NzIzMyI6IjU1MHgzMDAifQ%3D%3D&width=550&height=300 HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
content-type: image/gif
                                            
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.alpha-ag.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570571799917-14468396913300464386-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:51 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Thu, 23 Mar 2023 11:22:51 GMT
set-cookie: i=T7xrqV6f/2OvBjQZCCi4uhEjLtvljzLLyesJij6764zXSMpDfJ+i3j6jNWKtvdT544jU3pkTr44fAjUvPr9eR2LYIVY=; Expires=Sat, 22-Mar-2025 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=4004643861679570571; Expires=Sat, 22-Mar-2025 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Thu, 23 Mar 2023 11:22:51 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:47:24 GMT
ETag: "eff0d63716d5271b8362e5d7e1bef6dfa5d1c4fe"
Last-Modified: Thu, 23 Mar 2023 08:47:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3290
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c8a994a0b3d-OSL

                                        
                                            GET /static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes HTTP/1.1 
Host: ysa-static.passport.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.250.114
HTTP/1.1 200 Ok
Content-Type: image/png
                                            
Server: nginx/1.14.2
Date: Thu, 23 Mar 2023 11:22:51 GMT
Content-Length: 95
Connection: close
Cache-Control: private
Expires: Fri, 24 Mar 2023 11:22:51 GMT
X-RT-IQ: 0.0001
X-RT-IH: 0.0002
Strict-Transport-Security: max-age=315360000; includeSubDomains


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Size:   95
Md5:    60cf42b4d05caf10cf8bb15c0817a7b4
Sha1:   bd269860bb508aebcb6f08fe7289d5f117830383
Sha256: 18c327afa903633f86c3efcf12b77f098077eacaa8be101bb007846fd74f8b93
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:52 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:39:23 GMT
ETag: "742fdcdbccd0311ac5496f52de6cd330404a1de4"
Last-Modified: Thu, 23 Mar 2023 08:39:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1626
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac64c8b9a6d0b3d-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    bf50858e01d8bc59d874910ae67310eb
Sha1:   742fdcdbccd0311ac5496f52de6cd330404a1de4
Sha256: 73d8f5926129ddc7d62f050ef4c17451718a8d57758c11a96a04da27e5453cd3
                                        
                                            GET /vh-canvas-converted/vod-content/422371330114943489/0cd1872c-2279-4189-9481-edf36939df3b/webm/VP8_360_640_900.webm?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578 HTTP/1.1 
Host: strm.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.254.45
HTTP/2 302 Found
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:52 GMT
content-length: 0
location: https://strm-rad13.strm.yandex.net/vh-canvas-converted/vod-content/422371330114943489/0cd1872c-2279-4189-9481-edf36939df3b/webm/VP8_360_640_900.webm?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&noredir=1&lid=181
x-plg: host=strm-plgo-production-271.sas.yp-c.yandex.net; version=11057154
x-request-id: 5e56a5f3831ce27a
x-strm-request-id: 5e56a5f3831ce27a
x_h: strm-anycast-ru-net-production-26.vla.yp-c.yandex.net
x-strm-log-split: 7
report-to: {"group": "network-errors", "max_age": 1200, "include_subdomains": true, "endpoints": [ {"url": "https://dr.yandex.net/strm", "priority": 1}, {"url": "https://dr2.yandex.net/strm", "priority": 2} ]}
nel: {"report_to": "network-errors", "max_age": 1200, "success_fraction": 0.005, "failure_fraction": 0.05, "include_subdomains": true}
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session
access-control-expose-headers: Date, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, Age, X-Server-Time-Ms, X-Plg-URL
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /vh-canvas-converted/vod-content/422371330114943489/0cd1872c-2279-4189-9481-edf36939df3b/webm/VP8_360_640_900.webm?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&noredir=1&lid=181 HTTP/1.1 
Host: strm-rad13.strm.yandex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.alpha-ag.ru/
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             37.9.93.173
HTTP/2 206 Partial Content
content-type: video/webm
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:52 GMT
content-length: 876202
etag: "0cdc2c42eef84842fc0d34068ae54838"
last-modified: Wed, 06 Jul 2022 10:47:29 GMT
x-amz-version-id: null
x-robots-tag: noindex, noarchive, nofollow
x-strm-log-split: 7
x_h: strm-rad13.strm.yandex.net
x-strm-request-id: c6f23d694988110e
x-request-id: c6f23d694988110e
expires: Thu, 23 Mar 2023 11:27:52 GMT
cache-control: max-age=300
report-to: {"group": "network-errors", "max_age": 1200, "include_subdomains": true, "endpoints": [ {"url": "https://dr.yandex.net/strm", "priority": 1}, {"url": "https://dr2.yandex.net/strm", "priority": 2} ]}
nel: {"report_to": "network-errors", "max_age": 1200, "success_fraction": 0.005, "failure_fraction": 0.05, "include_subdomains": true}
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session
access-control-expose-headers: Date, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, Age, X-Server-Time-Ms, X-Plg-URL
x-estimated-rtt: 12616
x-estimated-bandwidth: 3277760
x-connection-id: 64129458
x-server-time-ms: 1679570572196
content-range: bytes 0-876201/876202
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  WebM\012- EBML file, creator webmB\20\012- data
Size:   876202
Md5:    0cdc2c42eef84842fc0d34068ae54838
Sha1:   b970c65dee5573d83e459d26cb83c22e51f0a626
Sha256: 787385fac34da01f5388a6d388ca271f016cdacad0d20778d58c25c549833197
                                        
                                            GET /min/templates/foodmaster/js/social-likes.min.js?v=3.1.3 HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
last-modified: Thu, 28 Oct 2021 12:57:28 GMT
etag: W/"617a9e38-ea8"
expires: Wed, 29 Mar 2023 10:37:14 GMT
cache-control: max-age=864000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 348336
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xLN0eJ70T%2BKo9eA5J%2FidBoW7K28w2iardOhsrvqWfBrPk%2FMhtLNvIGSzpgLmWP8FovbVc4ibZB7NbIvHZ%2FY89SHwxr0qgdBWMg8DOjsEzc62bFK894WZLdY39i4IEC6WRXs%2BoGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c812de8b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (9666)
Size:   4297
Md5:    594cc36aeb46bc00e1d52a2d6afb800b
Sha1:   43edc61f438af39006c9b4f005518c91877e9bf2
Sha256: 42c3d7c2ec95cbf1259ee294085a7f14958e42c73183084a337d3c795afc50bb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18837
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 11:22:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18837
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 11:22:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18837
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 11:22:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18837
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 11:22:52 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5950
x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CKyF9EI3oAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: lnMR6Lh4T37cFhMwb1qXIxjoPBghVFOGUz7HTt65DegMaxlElZxfjQ==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:32 GMT
age: 56796
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5950
Md5:    800c2662fd6ab8829a02b7d63084c38d
Sha1:   0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
Sha256: 76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:49:25 GMT
age: 30807
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4000
Md5:    85351059b67b0a42eda7e69a31b3b4b4
Sha1:   b798268806dc2f79f033e5872676019faf0e0cc1
Sha256: 86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
                                        
                                            POST /event_confirmation HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 316
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             213.180.204.90
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:51 GMT
access-control-allow-origin: https://www.alpha-ag.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23 Mar 2023 11:22:51 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Thu, 23 Mar 2023 11:22:51 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7459
Md5:    152c11245218b69991182b153c3144bc
Sha1:   e530744774874c8e1fbd3e078b24bd21c65631f6
Sha256: db2016e6e74f67fe57972418b973b6074123d20de34cc90105e2c5aa49be39dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea5d4e17-e42c-49fb-a54b-d7d97ad50ba4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7083
x-amzn-requestid: 352ae6e5-476d-430b-adf0-84d4a739967b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6fGcE1foAMFbRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141228-7dc6c3cb72cd40965006ab76;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:09:28 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bgeeN4oUpN5wPo6UnQKqKTGDiuLWu-ioS9UtrO5a6m5SI7WyiRNLcA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 09:43:54 GMT
age: 5938
etag: "76213c7d5c759471ed3823888860f918ac7e8f13"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7083
Md5:    40d24dfcd9f0afe0e4077384f16cc494
Sha1:   76213c7d5c759471ed3823888860f918ac7e8f13
Sha256: fbbbef0498ddf14bc9b204273a3cd416c357dceed20339c3e8c64a16b0be3caf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:34 GMT
age: 49158
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26aea22c-e627-45d1-bce6-55eaa4acfd06.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10816
x-amzn-requestid: 60a537d2-1b8a-4ae2-967c-a7e57c818cc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xY0EHqoAMFrrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6415629e-1be08f9f3a13492717fdaa48;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:02 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: vDHHtzyodFMqzVuaPCmaEfKrHTLjTL8d25c9PJjPXAdyN-SYJC1NGA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:58:21 GMT
age: 44671
etag: "ee683e481a4501d2ab8ca63d1426d6fab6f2b064"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10816
Md5:    f3aa18378fc5715083fb26bd0d62f382
Sha1:   ee683e481a4501d2ab8ca63d1426d6fab6f2b064
Sha256: 8aade71c4b55f6a9daab28a05a90bcc3c6c01b700aa48d2f8ccdb1992fa5ee81
                                        
                                            GET /watch/39370120/1?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.alpha-ag.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 23 Mar 2023 11:22:52 GMT
pragma: no-cache
expires: Thu, 23-Mar-2023 11:22:52 GMT
x-xss-protection: 1; mode=block
last-modified: Thu, 23-Mar-2023 11:22:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /watch/39370120?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 302 Found
                                            
location: /watch/39370120/1?vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578
date: Thu, 23 Mar 2023 11:22:52 GMT
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: yabs-sid=2369207821679570572; Path=/; SameSite=None; Secure i=DC412vwKhJBPgPNvLcr5Cpvv9IA315afj2gIgV+KYjHf9A0MDjx1b7gORektvHqWQho0Eti+sPv/SYcA7OfFNuVzfb0=; Expires=Sun, 20-Mar-2033 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=2033758151679570572; Expires=Sun, 20-Mar-2033 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yuidss=2033758151679570572; Expires=Fri, 22-Mar-2024 11:22:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1711106572.yc.1679570572#1711106572.yrts.1679570572#1711106572.yrtsi.1679570572; Expires=Fri, 22-Mar-2024 11:22:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:52 GMT
last-modified: Thu, 23-Mar-2023 11:22:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    2bf4f55d8dda9f495b30422e7192a2d7
Sha1:   8bbd91e6260fb815abab4a5b1983e79317ccb296
Sha256: 2902da6b8f35c561ff571bb32f09550268e65399c26c5ea6e576650d5a11b120
                                        
                                            POST /log?VAS=742342&event=PrioritiseMediaFiles HTTP/1.1 
Host: log.strm.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13452
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.250.251.15
HTTP/2 200 OK
                                            
content-length: 0
access-control-expose-headers: Date
access-control-allow-credentials: true
date: Thu, 23 Mar 2023 11:22:52 GMT
timing-allow-origin: https://www.alpha-ag.ru
access-control-allow-origin: https://www.alpha-ag.ru
x-request-id: 1679570572679073-8577103080832010960
X-Firefox-Spdy: h2

                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 58347
date: Thu, 23 Mar 2023 11:22:53 GMT
access-control-allow-origin: *
etag: "641965ea-e3eb"
expires: Thu, 23 Mar 2023 12:22:53 GMT
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (594)
Size:   58347
Md5:    11ae545171ff35a5600a4824211219de
Sha1:   00627a8fdbdef9254f36d2649de0f05a426e087f
Sha256: 7d67fdd5d2579c8b12147ba1ac97e50dd39ab5d25b56b0dfb28d2daa26054f1c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 23 Mar 2023 11:22:53 GMT
expires: Thu, 23 Mar 2023 11:22:53 GMT
cache-control: private, max-age=3600
etag: 9381018632195513782
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15938
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   15938
Md5:    33145cb2b6561505db88bbbd07551a39
Sha1:   69d99db90580a1e04147823d7df1d55b7ba10c68
Sha256: a9693248c5a2a10eaabbad5a74f1eafa42a5e684623b79f6de417282a23816c0
                                        
                                            GET /pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0 HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.2
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=jTYcZJSdNIWL6wTz0YzgBA&random=1878296647&sscte=1&crd=
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /an/tracking/WU4ejI_zO241lGu0j1a00000LSgNIWK08G8nYpOSP000000umDaTOBm8Q0I00US1Y07GrggeCP01WgkVck60W802c062gv-QORW1o9lIvXZO0OJgnnFW0TRjuGQW0hID0g0Ow0I6AFW4hz5qY0MmYM-G1Q_HTA05tCeZg0NDqnsm1StJ7RW5pTCTm0MXZUW2o0NGnblW1Sa6YoRDQCgA4n-f1xKFIJBq4ACJk0Uq1eW8w0bQcNhE3sVKFuWBAAeB42pm5mYr3m40isj6Vu_t1G3m2mhW3OA2WO60W808m-qtg0-rdwJcmvx4qHE049MSqX31i9220PWHvA8jeRa_W1I0W0Ae5Fc7Oi0KWE3eyBp8ZZVO5Cw9xPi6u1G1s1QPmklGsx-LaVu1WHS0y3-O5_MZRj0Nq8O3s1VBWJxG627u6C6AzkoZZxpyOu0Pk1e1WXmDHrP5EcPfC45KRNPdD-aSW1r_q1xLWfsUpTg2z9S1s1xwsXwW7vMSqX2m7m787uBrumdI7mOtD38rEJJW80RG8V___m7L8l__V_-18uaZPcPcPcPcrZyH05OWwLX7SHXfaK1kN8e4RaPci05SbtdZpyic-INlTb1rMYCmiBD6qaEs3pF0vro6rN2DPKyPMSQY~1?action-id=11&adsdk-bundle-version=742342&adsdk-bundle-name=AdLoader&ad-session-id=3865051679570578954&vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&top-ancestor=https%3A%2F%2Fwww.alpha-ag.ru&top-ancestor-undetermined=0&client-ts=1679570580155&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&pcode-active-testids=742342%2C0%2C4%3B740570%2C0%2C52&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22width%22%3A304%2C%22height%22%3A304%2C%22w%22%3A304%2C%22h%22%3A304%2C%22left%22%3A378%2C%22top%22%3A189%2C%22visible%22%3A1%2C%22req_no%22%3A0%7D HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:52 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: i=5Kn8vzBVfmtgLGTScPKf/l0YHmWDMAp9kYnh3WfXQ/577m3j0PGAuMoTs50ks3rDagAFArQKxAkbHjnyJEguX5RzZAg=; Expires=Sat, 22-Mar-2025 11:22:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=5216633181679570572; Expires=Sat, 22-Mar-2025 11:22:52 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Thu, 23 Mar 2023 11:22:52 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570572918967-13361804598121663318-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:52 GMT
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx/1.17.9
date: Thu, 23 Mar 2023 11:22:53 GMT
access-control-allow-origin: *
cache-control: public, max-age=31556952
content-encoding: br
etag: W/"82bdc8db563d3e71c35534315f8a9fd5"
expires: Sat, 25 Mar 2023 23:18:52 GMT
last-modified: Fri, 29 Oct 2021 11:19:01 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: 2296d25f335c1624
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   37060
Md5:    40379d957463454590e71c424bd0fea1
Sha1:   447c94a9239d3c0672a622ab2b7638b57b330ac0
Sha256: 78e5a438405d6223ab4525fa7f327758076a01897064e4cfdb580d522142d986
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/947884341/?random=1679570581736&cv=9&fst=1679570581736&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1384
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:53 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3303), with no line terminators
Size:   1384
Md5:    e4ffb59ce42b5fef6c525205c1429863
Sha1:   9be6ccc2de2c3e3ffb694338cb698c47b2bd4cfc
Sha256: 4610a82d7c93d4bafb2f27b4ba240aceeb834ba2ce84b7ff79642280e8653da1
                                        
                                            GET /pagead/viewthroughconversion/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=jTYcZLOqNJLL6gTh2rPQDQ&random=1832236106&sscte=1&crd= HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1832236106&crd=&is_vtc=1&random=1936792819
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:53 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/viewthroughconversion/693627671/?random=1679570581741&cv=9&fst=1679570581741&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=466465925%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1392
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3325), with no line terminators
Size:   1392
Md5:    7ead9630a309af98601816ef18c0cb38
Sha1:   91b7fb58c5987a7fcdf40f20388952fc6c01f3ec
Sha256: e50fbe880dea63799106bc47662d082e53bff1b45127cb2266f63284a6ffe6d2
                                        
                                            GET /pagead/viewthroughconversion/947884341/?random=1679570581749&cv=9&fst=1679570581749&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1377
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3303), with no line terminators
Size:   1377
Md5:    bafc4b1b2e10d984e8d9323d8e6eb51b
Sha1:   977bb038c3647a790828f47476dce612141c7015
Sha256: 36e1757ea62a1d52ca5c3868ed75a02ff43ce2af42ce84f6d41acb835a4a9696
                                        
                                            GET /pagead/viewthroughconversion/693627671/?random=1679570581752&cv=9&fst=1679570581752&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1394
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3327), with no line terminators
Size:   1394
Md5:    f1c067f165f9d353332d72e5c4929b2a
Sha1:   3ac04da85c541139a535ef079dd6e24ec31dc8b8
Sha256: 6a14252e2af6f063c4f612e6cc3500c30bba9bab51d454f856b3793d73a60976
                                        
                                            GET /pagead/viewthroughconversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=jTYcZJSdNIWL6wTz0YzgBA&random=1878296647&sscte=1&crd= HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.162
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1878296647&crd=&is_vtc=1&random=1021665028
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 11:37:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/947884341/?random=1679570581736&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=1817177054&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/947884341/?random=1679570581749&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=2233411021&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/693627671/?random=1679570581752&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=1449895155&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1878296647&crd=&is_vtc=1&random=1021665028 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.228
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1878296647&crd=&is_vtc=1&random=1021665028&ipr=y
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/693627671/?random=1679570581741&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465925%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=757686508&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/947884341/?random=1679570581749&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=2233411021&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/947884341/?random=1679570581736&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=1817177054&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/693627671/?random=1679570581752&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=1449895155&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/693627671/?random=1679570581741&cv=9&fst=1679569200000&num=1&guid=ON&eid=466465925%2C512247839&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&async=1&fmt=3&is_vtc=1&random=757686508&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1832236106&crd=&is_vtc=1&random=1936792819 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.228
HTTP/2 302 Found
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1832236106&crd=&is_vtc=1&random=1936792819&ipr=y
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1878296647&crd=&is_vtc=1&random=1021665028&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:22:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1832236106&crd=&is_vtc=1&random=1936792819&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 11:22:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /log?VAS=742342&event=VastTracking_impression HTTP/1.1 
Host: log.strm.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 5914
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.251.15
HTTP/2 200 OK
                                            
content-length: 0
access-control-expose-headers: Date
access-control-allow-credentials: true
date: Thu, 23 Mar 2023 11:22:54 GMT
timing-allow-origin: https://www.alpha-ag.ru
access-control-allow-origin: https://www.alpha-ag.ru
x-request-id: 1679570574936154-16340706182781600246
X-Firefox-Spdy: h2

                                        
                                            GET /watch/37412095/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fwww.alpha-ag.ru%2F&charset=utf-8&site-info=%7B%22extensions%22%3A%22%22%2C%22fromGoogle%22%3A%22false%22%2C%22fromCancel%22%3A%22false%22%2C%22loyal%22%3A%220%22%2C%22sbscrb%22%3A%22%22%2C%22p%22%3A%22%22%2C%22b%22%3A%22%22%2C%22fresh%22%3A%22%22%2C%22infected%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22os%22%3A%22windows%22%2C%22browser%22%3A%22firefox%22%2C%22winxp%22%3A%22false%22%2C%22old%22%3A%22actual%22%2C%22yabroAge%22%3Anull%7D&browser-info=pv%3A1%3Avf%3A75h6wcsj9ghedjzqdff8j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A2%3Adp%3A0%3Als%3A557558347903%3Ahid%3A243703983%3Aphid%3A394731919%3Az%3A0%3Ai%3A20230323112305%3Aet%3A1679570585%3Arn%3A57453545%3Arqn%3A1%3Au%3A1679570582750316767%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C13%2C0%2C%2C0%2C%2C129%2C0%2C341%2C341%2C1%2C152%3Aco%3A0%3Ans%3A1679570579508%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679570585%3At%3A&t=gdpr%286%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.250.250.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 419
date: Thu, 23 Mar 2023 11:22:57 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 11:22:57 GMT
last-modified: Thu, 23-Mar-2023 11:22:57 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    fcc865553ca48c802adf5c373459358a
Sha1:   7ec7c814e3c40cfc8b102fd6ebd42b012e0373cc
Sha256: 49373646a300e3ed61117be0cf586406bb2b2768675a0bde8bb256768c9930ab
                                        
                                            GET /min/general.js HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
last-modified: Sat, 24 Dec 2022 07:39:35 GMT
etag: W/"63a6acb7-fd81"
expires: Wed, 29 Mar 2023 10:37:14 GMT
cache-control: max-age=864000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 348336
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WjLZq8c%2B%2B3RcShjOVFanT0LTKnGNph9lQkbK4YU1h3WcIPBMTyKWDKAxCBxEUL76LkB%2FLwocPG3phqFFgBFkgXSw7PHKq3qmIb6jKLQmU3GYR8kXzpyuhieFgLSNV2UDVA2M6OQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac64c812de7b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /ads/system/context.js HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             5.255.255.70
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=kusZx3DHLr3E/x/F3dxaS1Bmn1zpTZX4kacBues9GYr9Kij+L1pGwy4wpkh8soswW1C9DColqTe3BdSDE+N7Z+Sh7kw=; Expires=Sat, 22-Mar-2025 11:22:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=7948989591679570570; Expires=Sat, 22-Mar-2025 11:22:50 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
expires: Thu, 23 Mar 2023 12:22:50 GMT
x-yandex-req-id: 1679570570794189-15730241672494898959-vla1-3034-vla-l7-balancer-8080-BAL-5441
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /an/tracking/WU4ejI_zO241lGu0j1a00000LSgNIWK08G8nYpOSP000000umDaTOBm8Q0I00US1Y07GrggeCP01WgkVck60W802c062gv-QORW1o9lIvXZO0OJgnnFW0TRjuGQW0hID0g0Ow0I6AFW4hz5qY0MmYM-G1Q_HTA05tCeZg0NDqnsm1StJ7RW5pTCTm0MXZUW2o0NGnblW1Sa6YoRDQCgA4n-f1xKFIJBq4ACJk0Uq1eW8w0bQcNhE3sVKFuWBAAeB42pm5mYr3m40isj6Vu_t1G3m2mhW3OA2WO60W808m-qtg0-rdwJcmvx4qHE049MSqX31i9220PWHvA8jeRa_W1I0W0Ae5Fc7Oi0KWE3eyBp8ZZVO5Cw9xPi6u1G1s1QPmklGsx-LaVu1WHS0y3-O5_MZRj0Nq8O3s1VBWJxG627u6C6AzkoZZxpyOu0Pk1e1WXmDHrP5EcPfC45KRNPdD-aSW1r_q1xLWfsUpTg2z9S1s1xwsXwW7vMSqX2m7m787uBrumdI7mOtD38rEJJW80RG8V___m7L8l__V_-18uaZPcPcPcPcrZyH05OWwLX7SHXfaK1kN8e4RaPci05SbtdZpyic-INlTb1rMYCmiBD6qaEs3pF0vro6rN2DPKyPMSQY~1?action-id=13&adsdk-bundle-version=742342&adsdk-bundle-name=AdLoader&ad-session-id=3865051679570578954&vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&top-ancestor=https%3A%2F%2Fwww.alpha-ag.ru&top-ancestor-undetermined=0&client-ts=1679570582173&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&pcode-active-testids=742342%2C0%2C4%3B740570%2C0%2C52&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1123108187%3B0%3B25feac58d722fb11%3B1414993349102342069%3B0%3B243296%3B20%3B0&product-theme=unknown&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22width%22%3A304%2C%22height%22%3A304%2C%22w%22%3A304%2C%22h%22%3A304%2C%22left%22%3A378%2C%22top%22%3A189%2C%22visible%22%3A1%2C%22req_no%22%3A3%7D HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:54 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:54 GMT; SameSite=None; Secure is_gdpr_b=CJjiFRDGrQEYAQ==; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:54 GMT; SameSite=None; Secure i=3B4xEIBTUwbwK4ZZjICBZ/y7YMCNXL3m2ZFNVtVyzKKqJPRZ5zofPA6pjW9Pxxh/jniTlwyPw7jrNJ1qqwn1XLqtIWA=; Expires=Sat, 22-Mar-2025 11:22:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=4856768031679570574; Expires=Sat, 22-Mar-2025 11:22:54 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Thu, 23 Mar 2023 11:22:54 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570574936094-16635909316885676803-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:54 GMT
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /games-for-android/simulatory/34096-vzlom-opasnye-parni-otome-triller.html HTTP/1.1 
Host: www.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             163.172.30.40
HTTP/2 200 OK
content-type: text/html; charset=cp1251
                                            
server: nginx
date: Thu, 23 Mar 2023 11:22:50 GMT
set-cookie: PHPSESSID=86db735bdf6c4140343b9aa59392cf59; path=/; domain=www.alpha-ag.ru; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
last-modified: Wed, 15 Mar 2023 10:09:08 +0300 GMT
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /an/rtbcount/1JUX8Bx30HO200000000U9nJx5Oxct6gIrZUS2l_IPil0ek5BRlDP58OWC0J9XBgnPHK69kmZPaXbH4edhcLtzC895ug0kJLNWKIhOpbGB8J90i4J0mp6IE5cC3iXOnCQo32AndZko3oUndlHOim70Nppp8o0qMkCeBKt6Laa55W-Ciu2wXrBXD8P2tJBo1vbka_4BnY4j3v8CwnbP-HONEsMtt_TrQ6lqmWpQtCh42obraHI4vb1ccRoym6if2PoL41RE56Pgvp8VviEOjDJpB3_7iLhF8kcFp9xE343t4kIwoiC9YrWkNc4euDBFzXW7474li04li2o_Q6C-SsJJoqNFmc2yI37-mViapyUElfoGrNxD-oWBovW9Nt96lh2owmz0NMXWQccwnTQHnLjamn8bzPGUPqi3Mmp62xSZXu0LltdiqRMl-UsL-saWrcoW4sZnDip8_OUDt3NAtICWqSGtBBqirVii7i-ydMFkzB_FlMn_OJsIKZOpskzxsrdyNEPcvYP6ffie2TSGKxumRsfeO6dXtiF2VOnH-mzs_iUNtmtzdJ8J_OUHPm0BswWgFf1ji6ZljJc7PmC080Ez-uyG00 HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
content-type: image/gif
                                            
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.alpha-ag.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570571800265-4551510546927791981-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:51 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Thu, 23 Mar 2023 11:22:51 GMT
set-cookie: i=RwinVT00NTACKKulvgtlxTomKxxVfeqI+6MRLtHVl6v1yMiQbr3ZcA1cbaFYpBAXADuScptcLgVwAXUOAlwIBn6bGnE=; Expires=Sat, 22-Mar-2025 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=1277919811679570571; Expires=Sat, 22-Mar-2025 11:22:51 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Thu, 23 Mar 2023 11:22:51 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /an/tracking/WU4ejI_zO241lGu0j1a00000LSgNIWK08G8nYpOSP000000umDaTOBm8Q0I00US1Y07GrggeCP01WgkVck60W802c062gv-QORW1o9lIvXZO0OJgnnFW0TRjuGQW0hID0g0Ow0I6AFW4hz5qY0MmYM-G1Q_HTA05tCeZg0NDqnsm1StJ7RW5pTCTm0MXZUW2o0NGnblW1Sa6YoRDQCgA4n-f1xKFIJBq4ACJk0Uq1eW8w0bQcNhE3sVKFuWBAAeB42pm5mYr3m40isj6Vu_t1G3m2mhW3OA2WO60W808m-qtg0-rdwJcmvx4qHE049MSqX31i9220PWHvA8jeRa_W1I0W0Ae5Fc7Oi0KWE3eyBp8ZZVO5Cw9xPi6u1G1s1QPmklGsx-LaVu1WHS0y3-O5_MZRj0Nq8O3s1VBWJxG627u6C6AzkoZZxpyOu0Pk1e1WXmDHrP5EcPfC45KRNPdD-aSW1r_q1xLWfsUpTg2z9S1s1xwsXwW7vMSqX2m7m787uBrumdI7mOtD38rEJJW80RG8V___m7L8l__V_-18uaZPcPcPcPcrZyH05OWwLX7SHXfaK1kN8e4RaPci05SbtdZpyic-INlTb1rMYCmiBD6qaEs3pF0vro6rN2DPKyPMSQY~1?action-id=1&adsdk-bundle-version=742342&adsdk-bundle-name=AdLoader&ad-session-id=3865051679570578954&vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&top-ancestor=https%3A%2F%2Fwww.alpha-ag.ru&top-ancestor-undetermined=0&client-ts=1679570584149&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&pcode-active-testids=742342%2C0%2C4%3B740570%2C0%2C52&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1123108187%3B0%3B25feac58d722fb11%3B1414993349102342069%3B0%3B243296%3B20%3B0&product-theme=unknown&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22width%22%3A304%2C%22height%22%3A304%2C%22w%22%3A304%2C%22h%22%3A304%2C%22left%22%3A378%2C%22top%22%3A189%2C%22visible%22%3A1%2C%22req_no%22%3A4%7D HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:56 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:56 GMT; SameSite=None; Secure is_gdpr_b=CJjiFRDGrQEYAQ==; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:56 GMT; SameSite=None; Secure i=hku0Fms98luOLSZflWh0uuYmTgLt0Qwpti5rSuQz3iq2i8nMs88QXtS/ANXdpGHKMWVRobW6g1VzFpKveiv+f+kAf3U=; Expires=Sat, 22-Mar-2025 11:22:56 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=6353512911679570576; Expires=Sat, 22-Mar-2025 11:22:56 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Thu, 23 Mar 2023 11:22:56 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570576911653-13347305713435351291-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:56 GMT
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /an/tracking/WU4ejI_zO241lGu0j1a00000LSgNIWK08G8nYpOSP000000umDaTOBm8Q0I00US1Y07GrggeCP01WgkVck60W802c062gv-QORW1o9lIvXZO0OJgnnFW0TRjuGQW0hID0g0Ow0I6AFW4hz5qY0MmYM-G1Q_HTA05tCeZg0NDqnsm1StJ7RW5pTCTm0MXZUW2o0NGnblW1Sa6YoRDQCgA4n-f1xKFIJBq4ACJk0Uq1eW8w0bQcNhE3sVKFuWBAAeB42pm5mYr3m40isj6Vu_t1G3m2mhW3OA2WO60W808m-qtg0-rdwJcmvx4qHE049MSqX31i9220PWHvA8jeRa_W1I0W0Ae5Fc7Oi0KWE3eyBp8ZZVO5Cw9xPi6u1G1s1QPmklGsx-LaVu1WHS0y3-O5_MZRj0Nq8O3s1VBWJxG627u6C6AzkoZZxpyOu0Pk1e1WXmDHrP5EcPfC45KRNPdD-aSW1r_q1xLWfsUpTg2z9S1s1xwsXwW7vMSqX2m7m787uBrumdI7mOtD38rEJJW80RG8V___m7L8l__V_-18uaZPcPcPcPcrZyH05OWwLX7SHXfaK1kN8e4RaPci05SbtdZpyic-INlTb1rMYCmiBD6qaEs3pF0vro6rN2DPKyPMSQY~1?action-id=0&adsdk-bundle-version=742342&adsdk-bundle-name=AdLoader&ad-session-id=3865051679570578954&vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&top-ancestor=https%3A%2F%2Fwww.alpha-ag.ru&top-ancestor-undetermined=0&client-ts=1679570580160&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&pcode-active-testids=742342%2C0%2C4%3B740570%2C0%2C52&document-has-focus=true&is-fullscreen=false&ad-pod-id=a34sdf%3B1123108187%3B0%3B25feac58d722fb11%3B1414993349102342069%3B0%3B243296%3B20%3B0&product-theme=unknown&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22width%22%3A304%2C%22height%22%3A304%2C%22w%22%3A304%2C%22h%22%3A304%2C%22left%22%3A378%2C%22top%22%3A189%2C%22visible%22%3A1%2C%22req_no%22%3A1%7D HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:52 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: i=thU9L3jOQdCUNkvHYB851+I6wUVw/3Gdq93tK62R+RnzLXeTm6f6lWRbpnU9vDBI9IBDlqw6abdVG+wEANwPk/Xk4x4=; Expires=Sat, 22-Mar-2025 11:22:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=9622648921679570572; Expires=Sat, 22-Mar-2025 11:22:52 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Thu, 23 Mar 2023 11:22:52 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570572924741-9968152628662264892-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:52 GMT
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /an/tracking/WU4ejI_zO241lGu0j1a00000LSgNIWK08G8nYpOSP000000umDaTOBm8Q0I00US1Y07GrggeCP01WgkVck60W802c062gv-QORW1o9lIvXZO0OJgnnFW0TRjuGQW0hID0g0Ow0I6AFW4hz5qY0MmYM-G1Q_HTA05tCeZg0NDqnsm1StJ7RW5pTCTm0MXZUW2o0NGnblW1Sa6YoRDQCgA4n-f1xKFIJBq4ACJk0Uq1eW8w0bQcNhE3sVKFuWBAAeB42pm5mYr3m40isj6Vu_t1G3m2mhW3OA2WO60W808m-qtg0-rdwJcmvx4qHE049MSqX31i9220PWHvA8jeRa_W1I0W0Ae5Fc7Oi0KWE3eyBp8ZZVO5Cw9xPi6u1G1s1QPmklGsx-LaVu1WHS0y3-O5_MZRj0Nq8O3s1VBWJxG627u6C6AzkoZZxpyOu0Pk1e1WXmDHrP5EcPfC45KRNPdD-aSW1r_q1xLWfsUpTg2z9S1s1xwsXwW7vMSqX2m7m787uBrumdI7mOtD38rEJJW80RG8V___m7L8l__V_-18uaZPcPcPcPcrZyH05OWwLX7SHXfaK1kN8e4RaPci05SbtdZpyic-INlTb1rMYCmiBD6qaEs3pF0vro6rN2DPKyPMSQY~1?action-id=14&adsdk-bundle-version=742342&adsdk-bundle-name=AdLoader&ad-session-id=3865051679570578954&vsid=37fe4ee4b80ec07a99cd8ac51e90174decfc064d61f1xVASx2594x1679570578&top-ancestor=https%3A%2F%2Fwww.alpha-ag.ru&top-ancestor-undetermined=0&client-ts=1679570582170&client-timezone-offset=0&viewability-undetermined=0&video-volume=100&video-muted=1&pcode-active-testids=742342%2C0%2C4%3B740570%2C0%2C52&document-has-focus=true&is-fullscreen=false&ad-pod-id=unknown&product-theme=unknown&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22width%22%3A304%2C%22height%22%3A304%2C%22w%22%3A304%2C%22h%22%3A304%2C%22left%22%3A378%2C%22top%22%3A189%2C%22visible%22%3A1%2C%22req_no%22%3A2%7D HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alpha-ag.ru
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             5.255.255.70
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Thu, 23 Mar 2023 11:22:54 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.alpha-ag.ru
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:54 GMT; SameSite=None; Secure is_gdpr_b=CJjiFRDGrQEYAQ==; Path=/; Domain=.yandex.ru; Expires=Sat, 22 Mar 2025 11:22:54 GMT; SameSite=None; Secure i=kwjFU+l1zhYYsGJOUsdqBRa+JGNCv0PrWFTaInOA/bIjexAXkkLOleAyGVWHuWy/0misQCLDGnJf+L2fic3ExEXDt/4=; Expires=Sat, 22-Mar-2025 11:22:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=9427566171679570574; Expires=Sat, 22-Mar-2025 11:22:54 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
access-control-allow-credentials: true
pragma: no-cache
expires: Thu, 23 Mar 2023 11:22:54 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1679570574933097-10447509657542756617-vla1-3034-vla-l7-balancer-8080-BAL
last-modified: Thu, 23 Mar 2023 11:22:54 GMT
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /min/templates/foodmaster/js/active.js HTTP/1.1 
Host: static.alpha-ag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alpha-ag.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 11:22:50 GMT
last-modified: Thu, 28 Oct 2021 12:57:23 GMT
etag: W/"617a9e33-483"
expires: Wed, 29 Mar 2023 10:37:14 GMT
cache-control: max-age=864000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 348336
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=337jYmutGfpOlSRw46WvFnlsAVF%2BfldAjiFP7XGTUuD7AUbN9nImZb8sEFiqML10JfJDC1t2AAXHB1434gAJjYOPfba0hChQcXm7bJK9f3XvCv4aimjc%2BGjj2%2BJEWpX%2FLDYE%2BUA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare