GET /43t3f/45y4g.exe HTTP/1.1
Host: palochusvet.szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
 85.248.228.58
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Server: nginx
Date: Fri, 01 Jul 2022 16:09:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
 54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 01 Jul 2022 15:48:59 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _lsQfgjaWLEaSyJkeR6OCl5Q6c8FrthgvKEdppG7LBchAJf6BwlqJw==
Age: 1204
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "3E2650132BC75A58C9B08C2A69EC353237F48E840D9D2481F9D5E63D92ABBC6F"
Last-Modified: Wed, 29 Jun 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6250
Expires: Fri, 01 Jul 2022 17:53:13 GMT
Date: Fri, 01 Jul 2022 16:09:03 GMT
Connection: keep-alive
|
GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
54.230.111.64
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 01 Jul 2022 03:26:42 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PbKkUcQrdZy5tULswrCqvxipt4RHBnie_wVHhv8AGf-ZpvT2d-sI9w==
age: 45742
X-Firefox-Spdy: h2
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.117.237.239
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:09:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:03 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 05 Jul 2022 15:39:49 GMT
ETag: "038dc923fa7af80147244213e666036e2e6d670b"
Last-Modified: Fri, 01 Jul 2022 15:39:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 72406764fb7ffac0-OSL
|
GET /reklamatr.phtml?URL=http://palochusvet.szm.com/43t3f/45y4g.exe HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
85.248.228.115
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
|
GET /reklamafr.phtml?URL=http://palochusvet.szm.com/43t3f/45y4g.exe HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
85.248.228.115
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 01 Jul 2022 15:38:48 GMT
Expires: Fri, 01 Jul 2022 16:11:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fx5vwjwnZeGc107sBnFU9169N-vbW0pR2rb7_lnYMuEbmOtBLI_oNQ==
Age: 1816
|
GET /google-analytics.html HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Upgrade-Insecure-Requests: 1
|
85.248.228.115
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 178
Connection: keep-alive
Location: https://szm.com/google-analytics.html
|
GET /reklama/adsense.phtml?URL=http%3A%2F%2Fpalochusvet.szm.com%2F43t3f%2F45y4g.exe HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Upgrade-Insecure-Requests: 1
|
85.248.228.115
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 178
Connection: keep-alive
Location: https://szm.com/reklama/adsense.phtml?URL=http%3A%2F%2Fpalochusvet.szm.com%2F43t3f%2F45y4g.exe
|
GET /google-analytics.html HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://palochusvet.szm.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
|
85.248.228.115
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Last-Modified: Sun, 24 Jan 2010 22:13:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"4b5cc60c-197"
Content-Encoding: gzip
|
GET /PIC/reklama.gif HTTP/1.1
Host: img.szm.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/
|
85.248.228.60
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 1216
Last-Modified: Tue, 23 Jun 2020 10:27:25 GMT
Connection: keep-alive
ETag: "5ef1d90d-4c0"
Accept-Ranges: bytes
|
GET /PIC/minilogoszm.gif HTTP/1.1
Host: img.szm.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/
|
85.248.228.60
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 939
Last-Modified: Tue, 23 Jun 2020 10:27:26 GMT
Connection: keep-alive
ETag: "5ef1d90e-3ab"
Accept-Ranges: bytes
|
GET /PIC/zavriet.gif HTTP/1.1
Host: img.szm.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/
|
85.248.228.60
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 107
Last-Modified: Tue, 23 Jun 2020 10:27:26 GMT
Connection: keep-alive
ETag: "5ef1d90e-6b"
Accept-Ranges: bytes
|
GET /reklama/adsense.phtml?URL=http%3A%2F%2Fpalochusvet.szm.com%2F43t3f%2F45y4g.exe HTTP/1.1
Host: szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://palochusvet.szm.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
|
85.248.228.115
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
GET /favicon.ico HTTP/1.1
Host: palochusvet.szm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://palochusvet.szm.com/43t3f/45y4g.exe
|
85.248.228.58
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
172.217.21.168
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Fri, 01 Jul 2022 14:17:10 GMT
expires: Fri, 01 Jul 2022 16:17:10 GMT
cache-control: public, max-age=7200
age: 6714
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 1680
Cache-Control: 'max-age=158059'
Date: Fri, 01 Jul 2022 16:09:04 GMT
Last-Modified: Fri, 01 Jul 2022 15:41:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "54600436DDCB13E9097E7081ECD348437B9334213EB3E3A02BB37F6DE4D59857"
Last-Modified: Wed, 29 Jun 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8181
Expires: Fri, 01 Jul 2022 18:25:25 GMT
Date: Fri, 01 Jul 2022 16:09:04 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "54600436DDCB13E9097E7081ECD348437B9334213EB3E3A02BB37F6DE4D59857"
Last-Modified: Wed, 29 Jun 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8181
Expires: Fri, 01 Jul 2022 18:25:25 GMT
Date: Fri, 01 Jul 2022 16:09:04 GMT
Connection: keep-alive
|
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-8813686-1&cid=1171909612.1656691745&jid=400838370&_v=5.7.2&z=579405538 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://szm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
173.194.73.154
HTTP/2 200 OK
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 01 Jul 2022 16:09:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /generic/advert.php?g=ref:991,area:468x60,:,tabl:4,design_name:custom,border_color:ffffff,border_style:none,background_opacity:100,background_color:ffffff,hover_back:,title_color:cc0000,text_color:000000,url_color:0067d6,h_title_color:cc0000,h_text_color:000000,h_url_color:0067d6,freespace:0,logo_type:0,logo:0,title_underline:0,url_underline:0,h_title_underline:1,h_url_underline:1,nourl:,fsi:auto,font:verdana,require_login_pass:0,login_pass:,show_in_fb:,show_in_fb_text:,tt:0,q:https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: sk.search.etargetnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
195.168.10.172
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Protected-By: Bee/0.43
Set-Cookie: p=991; expires=Fri, 01-Jul-2022 17:09:04 GMT; Max-Age=3600; path=/; samesite=none; domain=.etargetnet.com; secure
euvh=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
euvf=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
euvf=512; expires=Fri, 15-Jul-2022 16:09:04 GMT; Max-Age=1209600; path=/; samesite=none; domain=.etargetnet.com; secure
euvh=J; expires=Mon, 01-Aug-2022 16:09:04 GMT; Max-Age=2678400; path=/; samesite=none; domain=.etargetnet.com; secure
ckf=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
ckf=1; expires=Sat, 01-Jul-2023 16:09:04 GMT; Max-Age=31536000; path=/; samesite=none; domain=.etargetnet.com; secure
ecc[996]=3; expires=Fri, 01-Jul-2022 22:09:04 GMT; Max-Age=21600; path=/; samesite=none; domain=.etargetnet.com; secure
ecc[944]=3; expires=Fri, 01-Jul-2022 22:09:04 GMT; Max-Age=21600; path=/; samesite=none; domain=.etargetnet.com; secure
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM", policyref="/w3c/p3p.xml"
X-Powered-By: Queen/2.145
Access-Control-Allow-Origin: *
Y-Protected-By: Bulbasaur/mblade01-01-c
Content-Encoding: gzip
|
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 73lMXkAbURW6nTzG9PnrHQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
|
52.40.216.187
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cEIEmkuh0E5JsnMxFuRSgqzQnqQ=
|
GET /frontend/logos/sk/35160/35160_9-5.jpg HTTP/1.1
Host: etargetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
172.67.73.79
HTTP/2 200 OK
date: Fri, 01 Jul 2022 16:09:04 GMT
content-type: image/jpeg
content-length: 10440
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10681, status=webp_bigger
etag: "622ddf97-29b9"
last-modified: Sun, 13 Mar 2022 12:12:07 GMT
y-protected-by: Bulbasaur/mblade01-01-b
cache-control: max-age=14400
cf-cache-status: HIT
age: 4165
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XtE31%2BLI6EibkUsKOgWMoFQ4%2FaH6ChUukhI8gfNXyMrR3TTLiORaha0R2IyetVCCKh44bsy17CX5F%2B37O8LUc1rT8Jh9ULmM0X0W%2FvZuiyTWEW6d1RdWRj%2FxDA1SiIJM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7240676d19b00b59-OSL
X-Firefox-Spdy: h2
|
GET /generic/advert.php?g=ref:991,area:468x60,:,tabl:4,design_name:custom,border_color:ffffff,border_style:none,background_opacity:100,background_color:ffffff,hover_back:,title_color:cc0000,text_color:000000,url_color:0067d6,h_title_color:cc0000,h_text_color:000000,h_url_color:0067d6,freespace:0,logo_type:0,logo:0,title_underline:0,url_underline:0,h_title_underline:1,h_url_underline:1,nourl:,fsi:auto,font:verdana,require_login_pass:0,login_pass:,show_in_fb:,show_in_fb_text:,tt:0,q:https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: sk.search.etargetnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
195.168.10.172
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Protected-By: Bee/0.43
Set-Cookie: p=991; expires=Fri, 01-Jul-2022 17:09:04 GMT; Max-Age=3600; path=/; samesite=none; domain=.etargetnet.com; secure
euvh=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
euvf=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
euvf=512; expires=Fri, 15-Jul-2022 16:09:04 GMT; Max-Age=1209600; path=/; samesite=none; domain=.etargetnet.com; secure
euvh=J; expires=Mon, 01-Aug-2022 16:09:04 GMT; Max-Age=2678400; path=/; samesite=none; domain=.etargetnet.com; secure
ckf=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; samesite=none; domain=.etargetnet.com; secure
ckf=1; expires=Sat, 01-Jul-2023 16:09:04 GMT; Max-Age=31536000; path=/; samesite=none; domain=.etargetnet.com; secure
ecc[996]=3; expires=Fri, 01-Jul-2022 22:09:04 GMT; Max-Age=21600; path=/; samesite=none; domain=.etargetnet.com; secure
ecc[944]=3; expires=Fri, 01-Jul-2022 22:09:04 GMT; Max-Age=21600; path=/; samesite=none; domain=.etargetnet.com; secure
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM", policyref="/w3c/p3p.xml"
X-Powered-By: Queen/2.145
Access-Control-Allow-Origin: *
Y-Protected-By: Bulbasaur/mblade01-01-c
Content-Encoding: gzip
|
GET /img/sipka/sipka_C00.png HTTP/1.1
Host: sk.search.etargetnet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
195.168.10.172
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Fri, 01 Jul 2022 16:09:04 GMT
Content-Length: 1228
Last-Modified: Fri, 06 Dec 2013 09:35:48 GMT
Connection: keep-alive
ETag: "52a19a74-4cc"
Expires: Sat, 02 Jul 2022 16:09:04 GMT
Cache-Control: max-age=86400
Vary: Origin
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Pragma: cache
Y-Protected-By: Bulbasaur/mblade01-01-c
Accept-Ranges: bytes
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /s/player/0e7373c2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
142.250.74.142
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 51437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Jul 2022 02:35:04 GMT
expires: Sat, 01 Jul 2023 02:35:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Jun 2022 00:22:13 GMT
content-type: text/javascript
age: 48840
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 01 Jul 2022 16:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 3310
Cache-Control: 'max-age=158059'
Date: Fri, 01 Jul 2022 16:09:05 GMT
Last-Modified: Fri, 01 Jul 2022 15:13:55 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
GET /containr.js HTTP/1.1
Host: cdn.mookie1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
 23.13.39.40
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Accept-Ranges: bytes
ETag: "6200df1a0ff97d44f843b0184fa20225:1599561740.987291"
Last-Modified: Tue, 08 Sep 2020 10:42:20 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=60
Expires: Fri, 01 Jul 2022 16:10:05 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Content-Length: 2941
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "974497D7DEFC2E7CC99CFDF35346137BA84D342D3BCDAD854DF7920019E9846B"
Last-Modified: Thu, 30 Jun 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19991
Expires: Fri, 01 Jul 2022 21:42:16 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "974497D7DEFC2E7CC99CFDF35346137BA84D342D3BCDAD854DF7920019E9846B"
Last-Modified: Thu, 30 Jun 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20508
Expires: Fri, 01 Jul 2022 21:50:53 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "974497D7DEFC2E7CC99CFDF35346137BA84D342D3BCDAD854DF7920019E9846B"
Last-Modified: Thu, 30 Jun 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20563
Expires: Fri, 01 Jul 2022 21:51:48 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "974497D7DEFC2E7CC99CFDF35346137BA84D342D3BCDAD854DF7920019E9846B"
Last-Modified: Thu, 30 Jun 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20029
Expires: Fri, 01 Jul 2022 21:42:54 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
GET /dist/bundle.js HTTP/1.1
Host: tpx.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
 35.157.179.180
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:09:05 GMT
content-type: application/javascript
content-length: 26906
etag: "f8ef48c937b68b99d07d3f89ad4b87ff8f42c502"
set-cookie: tpuuid=gHQX4elOLABtkAUHelTQtx6zZjlUosgp6xj0OwNMI88Y; Domain=.tesseradigital.com; expires=Sat, 27 Jun 2037 16:09:05 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
|
GET /dist/bundle.js HTTP/1.1
Host: tpx.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
35.157.179.180
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:09:05 GMT
content-type: application/javascript
content-length: 26906
etag: "3ae6cedcc5e46fbf56523cd45aff891d14e60376"
set-cookie: tpuuid=BQuDOTBxOZxows6Pqx6uRVWIAVAgcyszrRMwB6Q7swKy; Domain=.tesseradigital.com; expires=Sat, 27 Jun 2037 16:09:05 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
|
GET /dist/bundle.js HTTP/1.1
Host: tpx.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
35.157.179.180
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:09:05 GMT
content-type: application/javascript
content-length: 26906
etag: "c10da53c7d91d1dbb265482374ded6d83997ac53"
set-cookie: tpuuid=8bqlrqtPQihZiA4PZCbRIEVQosbEZwuUcsJcPp1FlNar; Domain=.tesseradigital.com; expires=Sat, 27 Jun 2037 16:09:05 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
|
GET /dist/bundle.js HTTP/1.1
Host: tpx.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
35.157.179.180
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:09:05 GMT
content-type: application/javascript
content-length: 26906
etag: "8b20953cd7be3ba1db576b6a5b0dcf0d82bfeb59"
set-cookie: tpuuid=XSFRmjNBG01K9VeiEuk1UPJnWJJZcnILHX4p0JQZAu2n; Domain=.tesseradigital.com; expires=Sat, 27 Jun 2037 16:09:05 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
X-Firefox-Spdy: h2
|
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
142.250.74.142
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Fri, 01 Jul 2022 16:09:04 GMT
date: Fri, 01 Jul 2022 16:09:04 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
critical-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=c-dX31UCPa4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=urX3icDC-NA; Domain=.youtube.com; Expires=Wed, 28-Dec-2022 16:09:04 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+506; expires=Sun, 30-Jun-2024 16:09:04 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "73B35E1142F56B80F8CCD3F5E75131E0C2862C08C708F14CC5EAC3E83672A5DA"
Last-Modified: Thu, 30 Jun 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1106
Expires: Fri, 01 Jul 2022 16:27:31 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
GET /incoming?p=false&a=false&b=false HTTP/1.1
Host: tpx.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Cookie: tpuuid=8bqlrqtPQihZiA4PZCbRIEVQosbEZwuUcsJcPp1FlNar
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
35.157.179.180
HTTP/2 204 No Content
server: nginx
date: Fri, 01 Jul 2022 16:09:05 GMT
last-modified: Friday, 01-Jul-2022 16:09:05 GMT
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "FCE600B67DA1F1FDE46D8E1752605A1DA76A369EAA1AF92C78BBC7D793882B99"
Last-Modified: Wed, 29 Jun 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Fri, 01 Jul 2022 19:03:58 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "FCE600B67DA1F1FDE46D8E1752605A1DA76A369EAA1AF92C78BBC7D793882B99"
Last-Modified: Wed, 29 Jun 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1284
Expires: Fri, 01 Jul 2022 16:30:29 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
GET /PIC/zavriet.gif HTTP/1.1
Host: img.szm.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
85.248.228.60
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:05 GMT
Content-Length: 107
Last-Modified: Tue, 23 Jun 2020 10:27:26 GMT
Connection: keep-alive
ETag: "5ef1d90e-6b"
Accept-Ranges: bytes
|
GET /PIC/reklama-horizontalna.gif HTTP/1.1
Host: img.szm.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
85.248.228.60
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:05 GMT
Content-Length: 1251
Last-Modified: Tue, 23 Jun 2020 10:27:25 GMT
Connection: keep-alive
ETag: "5ef1d90d-4e3"
Accept-Ranges: bytes
|
GET /imp.js?_pid=163594704&_ouuid=gHQX4elOLABtkAUHelTQtx6zZjlUosgp6xj0OwNMI88Y&_oprio=0&_oref=https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: fd.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Cookie: tpuuid=gHQX4elOLABtkAUHelTQtx6zZjlUosgp6xj0OwNMI88Y
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
18.196.91.239
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:03:35 GMT
content-type: text/html; charset=UTF-8
content-length: 0
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
last-modified: Friday, 01-Jul-2022 16:03:35 GMT
X-Firefox-Spdy: h2
|
GET /imp.js?_pid=163594704&_ouuid=XSFRmjNBG01K9VeiEuk1UPJnWJJZcnILHX4p0JQZAu2n&_oprio=0&_oref=https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: fd.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Cookie: tpuuid=XSFRmjNBG01K9VeiEuk1UPJnWJJZcnILHX4p0JQZAu2n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
18.196.91.239
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:03:35 GMT
content-type: text/html; charset=UTF-8
content-length: 0
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
last-modified: Friday, 01-Jul-2022 16:03:35 GMT
X-Firefox-Spdy: h2
|
GET /imp.js?_pid=163594704&_ouuid=8bqlrqtPQihZiA4PZCbRIEVQosbEZwuUcsJcPp1FlNar&_oprio=0&_oref=https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: fd.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Cookie: tpuuid=XSFRmjNBG01K9VeiEuk1UPJnWJJZcnILHX4p0JQZAu2n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
18.196.91.239
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:03:35 GMT
content-type: text/html; charset=UTF-8
content-length: 0
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
last-modified: Friday, 01-Jul-2022 16:03:35 GMT
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "F763D7576AAB81AE47F35FD4AFFB2D6BE29F421DA0A2F3607F966049C88AE66C"
Last-Modified: Thu, 30 Jun 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10078
Expires: Fri, 01 Jul 2022 18:57:03 GMT
Date: Fri, 01 Jul 2022 16:09:05 GMT
Connection: keep-alive
|
GET /imp.js?_pid=163594704&_ouuid=BQuDOTBxOZxows6Pqx6uRVWIAVAgcyszrRMwB6Q7swKy&_oprio=0&_oref=https%3A%2F%2Fszm.com%2Freklama%2Fadsense.phtml%3FURL%3Dhttp%253A%252F%252Fpalochusvet.szm.com%252F43t3f%252F45y4g.exe HTTP/1.1
Host: fd.tesseradigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Cookie: tpuuid=BQuDOTBxOZxows6Pqx6uRVWIAVAgcyszrRMwB6Q7swKy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
18.196.91.239
HTTP/2 200 OK
server: nginx
date: Fri, 01 Jul 2022 16:03:35 GMT
content-type: text/html; charset=UTF-8
content-length: 0
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
last-modified: Friday, 01-Jul-2022 16:03:35 GMT
X-Firefox-Spdy: h2
|
GET /www/delivery/afr.php?zoneid=60&cb=988273 HTTP/1.1
Host: ad.novara.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://palochusvet.szm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
|
85.248.228.68
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Fri, 01 Jul 2022 16:09:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/
OAID=7f127d5908e1b06015c93420fc3bfc22; expires=Sat, 01-Jul-2023 16:09:05 GMT; Max-Age=31536000; path=/
Content-Encoding: gzip
|
GET /www/images/85ebc45601450d75a4c0a72eb1f95988.jpg HTTP/1.1
Host: ad.novara.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.novara.sk/www/delivery/afr.php?zoneid=60&cb=988273
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
|
85.248.228.68
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Fri, 01 Jul 2022 16:09:05 GMT
Content-Length: 34478
Last-Modified: Thu, 26 Oct 2017 00:30:50 GMT
Connection: keep-alive
ETag: "59f12cba-86ae"
Accept-Ranges: bytes
|
GET /www/delivery/lg.php?bannerid=4130&campaignid=1689&zoneid=60&loc=http%3A%2F%2Fpalochusvet.szm.com%2F&cb=04d5794623 HTTP/1.1
Host: ad.novara.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.novara.sk/www/delivery/afr.php?zoneid=60&cb=988273
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
|
85.248.228.68
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 01 Jul 2022 16:09:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/
OAID=94c8c30c57a3e5148fe7c35663a682f0; expires=Sat, 01-Jul-2023 16:09:05 GMT; Max-Age=31536000; path=/
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6A0721423C3B7EF429DA855641043D8F038DA4FFF1A788C1273BA18B1C0C9F8B"
Last-Modified: Wed, 29 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7974
Expires: Fri, 01 Jul 2022 18:22:00 GMT
Date: Fri, 01 Jul 2022 16:09:06 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6A0721423C3B7EF429DA855641043D8F038DA4FFF1A788C1273BA18B1C0C9F8B"
Last-Modified: Wed, 29 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7974
Expires: Fri, 01 Jul 2022 18:22:00 GMT
Date: Fri, 01 Jul 2022 16:09:06 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6A0721423C3B7EF429DA855641043D8F038DA4FFF1A788C1273BA18B1C0C9F8B"
Last-Modified: Wed, 29 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7974
Expires: Fri, 01 Jul 2022 18:22:00 GMT
Date: Fri, 01 Jul 2022 16:09:06 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6A0721423C3B7EF429DA855641043D8F038DA4FFF1A788C1273BA18B1C0C9F8B"
Last-Modified: Wed, 29 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7974
Expires: Fri, 01 Jul 2022 18:22:00 GMT
Date: Fri, 01 Jul 2022 16:09:06 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6A0721423C3B7EF429DA855641043D8F038DA4FFF1A788C1273BA18B1C0C9F8B"
Last-Modified: Wed, 29 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7974
Expires: Fri, 01 Jul 2022 18:22:00 GMT
Date: Fri, 01 Jul 2022 16:09:06 GMT
Connection: keep-alive
|
GET /embed/eplayaV5.32.js HTTP/1.1
Host: etargetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
172.67.73.79
HTTP/2 200 OK
date: Fri, 01 Jul 2022 16:09:04 GMT
content-type: application/javascript
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=86400
cf-bgj: minify
cf-polished: origSize=79702
etag: W/"610a490a-13756"
expires: Fri, 01 Jul 2022 21:34:47 GMT
last-modified: Wed, 04 Aug 2021 08:00:10 GMT
pragma: cache
vary: Accept-Encoding, Origin
y-protected-by: Bulbasaur/mblade01-01-b
cf-cache-status: HIT
age: 66857
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wa1757hZi8XbK%2BFN%2B8XqOUqZWD7d1YN1N7g2frui6zkfk1Bfh%2FuQnQUvKk%2BPgJIYDmenIZzaOR06t53iYcpCDKKqMcX7v6s6bngCK18WG%2Fx6hlvUVMs86NyzZw6OxSJm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7240676d09930b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc64139e3-1714-4207-9f83-6963efdebdb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
server: nginx
content-length: 11303
x-amzn-requestid: bb4e28bd-b8fe-46aa-b7e1-9df6f52c9d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UeQW-EnzIAMFSfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bbfa92-4788a606125c42431ba5c73a;Sampled=0
x-amzn-remapped-date: Wed, 29 Jun 2022 07:09:06 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FECr8vnUNXIJXah4ilgSdBbkbjEIYjsLUdys3R4NE65S9iuOzjcSwQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 01 Jul 2022 07:42:41 GMT
age: 30385
etag: "91d2dc48008a198adb2b740bec1843a146f826c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
142.250.74.142
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Fri, 01 Jul 2022 16:09:04 GMT
date: Fri, 01 Jul 2022 16:09:04 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
critical-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=GIg0ILMGV0o; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=1nQBFQk8q3o; Domain=.youtube.com; Expires=Wed, 28-Dec-2022 16:09:04 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+519; expires=Sun, 30-Jun-2024 16:09:04 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf1e617a-6fd1-48e4-960a-73bddd0fb482.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
server: nginx
content-length: 9555
x-amzn-requestid: ddc50c80-7b41-4709-952d-096c3fcfc5a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UUXJ-HsgIAMFwag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b80572-1ecc47e74333e7c2352e2e0e;Sampled=0
x-amzn-remapped-date: Sun, 26 Jun 2022 07:06:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fx_8uoi08YuMMK-Gg4rNkPq53DuRCUSW_zVMfl3JfmlrKn5VjQl4SQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Jun 2022 19:57:44 GMT
age: 72682
etag: "e52d1a0382cee461a2ba0df6d554cdb82087ff49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fb8f8ac-1447-4cbf-a03d-3b6276064e5d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
server: nginx
content-length: 5228
x-amzn-requestid: aa2ae070-d7af-4ab5-a62b-cd3133c0717d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UXjQMF1fIAMFm-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b94c01-39c87d2c65b06bc212bee113;Sampled=0
x-amzn-remapped-date: Mon, 27 Jun 2022 06:19:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -hFyOxRNAoBAZwq1tZEZx-WmK1wrvy7_GMngpvsKzKrngHEWN8dWTg==
via: 1.1 0800f067ff646622f3e8e507cb9b52e8.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Jun 2022 22:03:52 GMT
age: 65114
etag: "ce25cc6aba5d9ebdd79eb30b51847cf96807f608"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1934ff6c-738b-4ee1-a3a7-f172a73da4bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
server: nginx
content-length: 10798
x-amzn-requestid: ec008800-0485-48fc-ad7d-1f28baff782f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UjickERbIAMF1NA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62be1783-328a674d1742f9c236542ec2;Sampled=0
x-amzn-remapped-date: Thu, 30 Jun 2022 21:37:07 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: o3AnxqrsGxaBlFc3pR1fNbgG8owT3PJgY29iVJBLj3DXcaZYfGX0EQ==
via: 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Jun 2022 22:03:52 GMT
age: 65114
etag: "7db6b42dda26780d3a6cf5c9e3761db08722c630"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /frontend/logos/sk/35160/35160_9-6.jpg HTTP/1.1
Host: etargetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
172.67.73.79
HTTP/2 200 OK
date: Fri, 01 Jul 2022 16:09:06 GMT
content-type: image/webp
content-length: 8668
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=8958
content-disposition: inline; filename="35160_9-6.webp"
etag: "622e43b5-22fe"
last-modified: Sun, 13 Mar 2022 19:19:17 GMT
vary: Accept
y-protected-by: Bulbasaur/mblade01-01-c
cache-control: max-age=14400
cf-cache-status: HIT
age: 4165
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uAFxYXyIlQ2i49%2FIA%2BTuaP4NuJP5697HiX8i4Zj%2B%2BnGvNVXOXS02cSW1reRkENbCTEuJMvgKnDmlUt3BOZtIC9dF43AiyNMYjhEgDqawgTKzLWCmJ0uBWJIJqN0ROPaM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 724067796f6f0b59-OSL
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 3052
Cache-Control: max-age=92170
Date: Fri, 01 Jul 2022 16:09:08 GMT
Etag: "62bdd542-1d7"
Expires: Sat, 02 Jul 2022 17:45:18 GMT
Last-Modified: Thu, 30 Jun 2022 16:54:26 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
GET /t/v2/learn?tagid=V2_291021&src.rand=1656691744&gdpr_err=NO_CMP&gdpr_consent=-1&depp=7.0.1-4-eu HTTP/1.1
Host: sk-gmtdmp.mookie1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
35.186.238.175
HTTP/2 200 OK
date: Fri, 01 Jul 2022 16:09:08 GMT
server: Apache
p3p: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml"
x-application-context: application
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-type: image/gif;charset=UTF-8
content-length: 43
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 3052
Cache-Control: max-age=92170
Date: Fri, 01 Jul 2022 16:09:08 GMT
Etag: "62bdd542-1d7"
Expires: Sat, 02 Jul 2022 17:45:18 GMT
Last-Modified: Thu, 30 Jun 2022 16:54:26 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
GET /frontend/logos/sk/35160/35160_9-11.jpg HTTP/1.1
Host: etargetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://szm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
|
172.67.73.79
HTTP/2 200 OK
date: Fri, 01 Jul 2022 16:09:10 GMT
content-type: image/jpeg
content-length: 10718
cf-bgj: imgq:100,h2pri
cf-polished: origSize=11055, status=webp_bigger
etag: "622f33c8-2b2f"
last-modified: Mon, 14 Mar 2022 12:23:36 GMT
y-protected-by: Bulbasaur/mblade01-01-b
cache-control: max-age=14400
cf-cache-status: HIT
age: 2888
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rtiYrlYxlrb%2BboDopFIKsQd3cU77h3gfNakmvrXudx8VwfoUqYOP3sBUgk1q7rBtIG8LYfhZqqZjvR%2BgcyoIhvYjEKa%2BbwjH%2Bwi%2FQu%2Fy2zTNGZeOP6doz8LpelL%2BdVSN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 724067926d520b59-OSL
X-Firefox-Spdy: h2
|