gl.guruleads.ru/click/40/79?sub3=20557736&sub1=PreCLC
301 Moved Permanently 169 B URL HTTP/1.1 gl.guruleads.ru/click/40/79?sub3=20557736&sub1=PreCLC
IP
ASN #200350 Yandex.Cloud LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
GET /click/40/79?sub3=20557736&sub1=PreCLC HTTP/1.1
Host: gl.guruleads.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Sat, 28 Jan 2023 19:03:08 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://gl.guruleads.ru/click/40/79?sub3=20557736&sub1=PreCLC
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11649
Expires: Sat, 28 Jan 2023 22:17:18 GMT
Date: Sat, 28 Jan 2023 19:03:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4392
Expires: Sat, 28 Jan 2023 20:16:21 GMT
Date: Sat, 28 Jan 2023 19:03:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 18:35:31 GMT
content-type: application/json
age: 1658
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6718
Expires: Sat, 28 Jan 2023 20:55:07 GMT
Date: Sat, 28 Jan 2023 19:03:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bFFv+1BVQ6Snet7sbQ4EoxtE7tzSiF5iL4pHh1GE4VlENSlHEO/p6tFKykuSqLhY5EzDYcnQapk=
x-amz-request-id: 0GFD5GD38D0YGTZQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 18:50:01 GMT
age: 788
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:09 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 0bd92190b336ecf0f6c545fda601c028
31627f6e7573d5b19a032d1ccfdb9b760ec04f7b
2db4c605072758b69d203a0e09b21b73bc0781754941633dd4eeba0335a914f9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 01 Feb 2023 15:11:26 GMT
ETag: "31627f6e7573d5b19a032d1ccfdb9b760ec04f7b"
Last-Modified: Sat, 28 Jan 2023 15:11:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc8b28d6b52d-OSL
gl.guruleads.ru/click/40/79?sub3=20557736&sub1=PreCLC
302 Found 0 B URL HTTP/1.1 gl.guruleads.ru/click/40/79?sub3=20557736&sub1=PreCLC
IP
ASN #200350 Yandex.Cloud LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click/40/79?sub3=20557736&sub1=PreCLC HTTP/1.1
Host: gl.guruleads.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: session-click-370=e1e47736d47824ea1b6280573ac07a9a3385b5eff6a58e868568989b68e4823ba%3A2%3A%7Bi%3A0%3Bs%3A17%3A%22session-click-370%22%3Bi%3A1%3Bs%3A32%3A%2238e436ff0f835e5c2e13814b1d87cfc9%22%3B%7D; glcidv3=dee05fcea6af43661fcc0d20cbc6c484a1d5b0686433235cc7097a3b3d765216a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22glcidv3%22%3Bi%3A1%3Bs%3A36%3A%2206048184-817a-4726-a3ec-eedb4e06b89e%22%3B%7D; session-click-435=bc8005345e4cb14ad1c07bb81a3ef18aedc45a903d5c3a38b969f7dd77a6f226a%3A2%3A%7Bi%3A0%3Bs%3A17%3A%22session-click-435%22%3Bi%3A1%3Bs%3A32%3A%22db682fa9af19dd7a0fd9f39e768a7bfe%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Sat, 28 Jan 2023 19:03:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.27
Location: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Referrer-Policy: no-referrer
Set-Cookie: session-click-79=5cf00da067880d1e18c47a60dad3137acd46f7d2ee18c4e7c402f3547f07b932a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22session-click-79%22%3Bi%3A1%3Bs%3A32%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%3B%7D; expires=Sun, 28-Jan-2024 19:03:09 GMT; Max-Age=31536000; path=/; domain=.guruleads.ru; secure; SameSite=None
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 18:49:03 GMT
age: 846
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15381ed0f683893c71057a5b5b5e9d8
1520bba33de42e3f93dc95b8f007200f8470fcf4
6e80d5ae26194bb6de01b176689c93a94a04587daf653d1178f14384c5584ada
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E80D5AE26194BB6DE01B176689C93A94A04587DAF653D1178F14384C5584ADA"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11506
Expires: Sat, 28 Jan 2023 22:14:55 GMT
Date: Sat, 28 Jan 2023 19:03:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12818
Expires: Sat, 28 Jan 2023 22:36:47 GMT
Date: Sat, 28 Jan 2023 19:03:09 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r2dyLXzGBmCTReyvFeUL6A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DPh4Kfkw1/QntAiKNjcEaCe4Hq8=
dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
200 OK 40 kB URL HTTP/1.1 dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 376361560d790fc54eeb62f687859c92
993a9ce36dfa374912e0add11c02edd8d9558dba
a4ff0cd86b2164b0c41818ef4b4be9cf0dfd82b41e11259296fea37023e30fca
GET /?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6 HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 39482
Connection: keep-alive
Keep-Alive: timeout=15
set-cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; Secure; SameSite=None
WPO-Cache-Status: not cached
WPO-Cache-Message: In the settings, caching is disabled for matches for one of the current request's GET parameters
Last-Modified: Fri, 30 Dec 2022 17:19:50 GMT
Cache-Control: private, must-revalidate
Expires: Sun, 29 Jan 2023 19:03:09 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:1
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 86352d15c37831cf9bf1e41325029224
ac8b28bcc1e6dd026e1f62d1ef8b9f80a42eee21
154f5f5e116df41f5d3bd414c671138b2afc198071529a0f3573109277566cd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 9574013841b0efaebbc817a43900fd59
67321939b0dc8e0bc8bd38c2877d0999d4134d81
41b6006fd7fc1ce98f5c7a87b9c0b64265ac5156c6da969c541e66ec89ebfd6e
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 18:06:13 GMT
ETag: "67321939b0dc8e0bc8bd38c2877d0999d4134d81"
Last-Modified: Sat, 28 Jan 2023 18:06:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 558
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc929f22b505-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 9574013841b0efaebbc817a43900fd59
67321939b0dc8e0bc8bd38c2877d0999d4134d81
41b6006fd7fc1ce98f5c7a87b9c0b64265ac5156c6da969c541e66ec89ebfd6e
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 18:06:13 GMT
ETag: "67321939b0dc8e0bc8bd38c2877d0999d4134d81"
Last-Modified: Sat, 28 Jan 2023 18:06:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 558
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc929dbc0b61-OSL
www.google.com/recaptcha/api.js?render=6LdpGwgiAAAAAHl070Si0KECEHNHwycl-otsNufz&ver=3.0
200 OK 585 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LdpGwgiAAAAAHl070Si0KECEHNHwycl-otsNufz&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash b4f7b20a483b71cfade87e1a6e62e5d6
4ceecbce692c2914f3376ba6534222fcd5a12b20
4954bfcac6193a31b18f9a43d8ec14c6c6e8877d49fdcc99d6e3c62cc12d0ab4
GET /recaptcha/api.js?render=6LdpGwgiAAAAAHl070Si0KECEHNHwycl-otsNufz&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 28 Jan 2023 19:03:10 GMT
date: Sat, 28 Jan 2023 19:03:10 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
200 OK 78 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
IP
File type ASCII text, with very long lines (50952)
Hash 64821005f7b46665519a760dafd06d7a
1a0c7e6f4b2fa3943de40db85f5a73813d6f291a
25ebc10a225e3e040bac76a4cde1bd19d3e0b3a19cd4311ec4230154fd084e89
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:2
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-8cbb0ee5.min.css
200 OK 12 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-8cbb0ee5.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d781ac48df9432350fea76bc9ae0fd6e
c9bd6a764c190cde3f9cd6a8ab3b6baca8d198c8
ede84a5948805f2c96e8fd77c2112fbeb136e1e93ad86153a89bf7e4cbf6f2e4
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-8cbb0ee5.min.css HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/css
Content-Length: 11658
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 144661422:1
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-regenerator-runtime0.13.9.min.js
200 OK 2.5 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-regenerator-runtime0.13.9.min.js
IP
File type ASCII text, with very long lines (6476)
Hash c43f95c8290c1afb1b9f2dadadc088a6
1c671c22a7025212f6ffa6cc0afa768b95f900b9
cc80b5b3206188b4b41234e4309aed52985edb1b116c74060160de49706c4831
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-regenerator-runtime0.13.9.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 2460
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 269819877:1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wp-polyfill3.15.0.min.js
200 OK 7.1 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wp-polyfill3.15.0.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (19138)
Hash ff190b3270365979b1fcf855d767f473
60437fc226208f0fac1315111e79684ecb927690
0c875e2478a699ba655fe88b903e6247702befdc23981dbcabe54de19b093d21
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wp-polyfill3.15.0.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 7098
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:3
storage.yandexcloud.net/wp-dzp-prod/2022/12/fon-1920-min-min.jpg
200 OK 59 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/12/fon-1920-min-min.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x488, components 3\012- data
Hash 722d533896dbd399a49829a92606d470
b56d5eff9e5b112b7bf2b853314b1338ee4bc4da
8c66f6a0c79a8880f22786c7d3cbaa651d917f21b6182f4c8549378d8397ce99
GET /wp-dzp-prod/2022/12/fon-1920-min-min.jpg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/jpeg
content-length: 59377
accept-ranges: bytes
cache-control: public,max-age=15552000
etag: "722d533896dbd399a49829a92606d470"
last-modified: Fri, 30 Dec 2022 20:20:23 GMT
x-amz-request-id: 30910f2927593798
X-Firefox-Spdy: h2
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-a1ee1ad3.min.css
200 OK 4.4 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-a1ee1ad3.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (22723), with no line terminators
Hash 283128ec4506575049407c9e8e8e6a21
411e670e7201a85e3e16dbd8c5a3bedc4330a843
8f8d69b9f810cc08fe82c00294e18331f18b087018bed304ff6de362dc8bca31
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-a1ee1ad3.min.css HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/css
Content-Length: 4398
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:34 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477188:1
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-contact-form-75.6.min.js
200 OK 6.5 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-contact-form-75.6.min.js
IP
File type ASCII text, with very long lines (21821)
Hash a99deea3b993cb783f85f41b8d01c015
814a81140bc2719f3166664cba6457a0f66023a2
43012a651bfd70f902bdba04b20b5bd84f4d7e2f75eca0b9adf125776f74050c
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-contact-form-75.6.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 6542
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 144661422:2
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-dzp-main.min.js
200 OK 2.6 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-dzp-main.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (2266)
Hash fb3b5b7f06e0e54bbc27c64ab4ad0a17
2755d5a7607588ef2736477909f0cf6efd0885aa
e283d6f2d071536c2d194f5ee766cde911389327ab913b5c2d708738e6ad0491
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-dzp-main.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 2606
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:4
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-78b40e77.min.css
200 OK 16 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-78b40e77.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 22fbcb50ab5668975e1cc842d0c9a0ad
88a6f69f9d956c01fe34c0a92260ca90f80dfa23
5794796dae35a42a600769700e829ea7bf46b4a926a8756db855e466f8f90d20
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-78b40e77.min.css HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/css
Content-Length: 15965
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:34 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477187:1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-605e0dfe.min.css
200 OK 15 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-605e0dfe.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 5d30c94bd014cf39013c6b75642cf561
5efd484f90056fb66f1edb2b84e420b534a4480d
c4752a5d4a542858d89feaf69d3209403a35f7c928c3b94d99c20a0cdcfc5286
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-605e0dfe.min.css HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: text/css
Content-Length: 15234
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 24349211:1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wpcf7-recaptcha5.6.min.js
200 OK 510 B URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wpcf7-recaptcha5.6.min.js
IP
File type ASCII text, with very long lines (999)
Hash 299977a69d38986ecdf00a0fd4575e4d
02af78902e05ad2b76b0fda62d5d774ecfec15e8
a3ebea7bdcf21e9932b009a3dd98bcdd7ce563754af3fe588e0fc5f64d16e143
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-wpcf7-recaptcha5.6.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 510
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 144661422:3
dozarplati.com/wp-content/themes/dzpblog/assets/js/libs.js
200 OK 67 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/js/libs.js
IP
File type Unicode text, UTF-8 text, with very long lines (32083)
Hash 44df04360f2ba78f3a40b6f3ad162e0d
07a2e37b66fd337b7b5576146850c2050e949a66
0e5cac668f2a023daa0b0770a2b998d67822c65d5850b15b33de70956bfd3b5d
GET /wp-content/themes/dzpblog/assets/js/libs.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:55 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 269819877:2
dozarplati.com/wp-content/themes/dzpblog/libs/metricservice/metric-service-0.4.0.js
200 OK 26 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/libs/metricservice/metric-service-0.4.0.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 08d6a265a992fac897ce321031cbe198
7305300740183a596f5264668184d6086c6cd4a1
a50c0f37b7495326261b31f4e9111ba2c714f96aa95e673b4e02790b985cc6c5
GET /wp-content/themes/dzpblog/libs/metricservice/metric-service-0.4.0.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 25597
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:5
www.googletagmanager.com/gtm.js?id=GTM-W7CC626
200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W7CC626
IP
File type ASCII text, with very long lines (20276)
Hash 429aaed89121a80f8ffe42155d89796b
36af5b4fcd29692310e8b97afad7116a97294c60
2a30c50a276071670b87a64c4dffca0f3a0a8eedfe21cd1d600c5fa503057034
GET /gtm.js?id=GTM-W7CC626 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 19:03:10 GMT
expires: Sat, 28 Jan 2023 19:03:10 GMT
cache-control: private, max-age=900
last-modified: Sat, 28 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff2
200 OK 22 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22068, version 1.0\012- data
Hash 7b8933781c319adea5c9be1c4ac1fec5
06fc2e5c6407abfd8e73bcc467bde9a01a20b869
e314ac24b2392753db0999d00c9b1f194fdec382dc3ca3db625ca9f0b1828aff
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff2 HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/woff2
Content-Length: 22068
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 24349211:2
dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-calc.min.js
200 OK 14 kB URL HTTP/1.1 dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-calc.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (5130)
Hash 2c23a7f0c5ddcc710dd14d0aa820e909
db5e338c218b521edbbf74aa3b1a0518b35b9767
425bc47c8ba412b381a214196b5f9962964ce959f6f15861baf016b9982876fa
GET /wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-footer-calc.min.js HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: application/javascript
Content-Length: 14336
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:39:33 GMT
Accept-Ranges: bytes
Cache-Control: private
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477188:2
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff2
200 OK 22 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22444, version 1.0\012- data
Hash e9c07dc0a3fa3e7ab84e0ec03534fac2
08d143996cd9796a77badefa4b7736ab04702c58
6951506b5345fbf2bd303beec82e8c4a4d740309889e6f02841993ee451aff72
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff2 HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/woff2
Content-Length: 22444
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 167477187:2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Bold.woff2
200 OK 22 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22056, version 1.0\012- data
Hash 554f3af31ccbcebc2aa1fd34b2215680
ff95e0ea27d57eac70a875954d32bff5be6fcf6f
2ab3c92ff90e214729e3deaec2772747123bd67bb57e8c730ce66e9c7a75f9a8
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Bold.woff2 HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/woff2
Content-Length: 22056
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 144661422:4
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/next.svg
200 OK 328 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/next.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (381)
Hash aba759ceb0799fdb31b4aa228badaab8
1df2f9ed561485fb5a582c72b8f59c5d5c263252
ef1ee77d28d784b3409c9884e1df17f9f903b10a57b2488f6330528becfe6dff
GET /wp-content/themes/dzpblog/assets/img/general/next.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 328
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:6
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff2
200 OK 22 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22068, version 1.0\012- data
Hash 418662d3523243ffba6c57b25ae5ee81
f2779788657a90281080a141313fff7fa950e2ea
cf4649178c589b5239e04d548ba22f4de16bb478b6bbd1914c1980db927d79f6
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff2 HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/woff2
Content-Length: 22068
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 269819877:3
dozarplati.com/wp-content/themes/dzpblog/libs/calculator/large_loan.svg
200 OK 330 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/libs/calculator/large_loan.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (413)
Hash 8652fb8a0abbf98760895158e29d4d4f
bc6907f268cc3170617c9033ff3e33f28203ae63
c0ffb9ee9aa36641b665f83173fccd6740b78d0f0f557633d1e1589b13d256e8
GET /wp-content/themes/dzpblog/libs/calculator/large_loan.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 330
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477188:3
dozarplati.com/wp-content/themes/dzpblog/libs/calculator/calendar.svg
200 OK 259 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/libs/calculator/calendar.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 68fee883acbc192ca88f87d8cdbc3c4d
1a253bbcb1ed3b0f121cd6778b930a7f51575a82
bf15714ef8df400c5e6afce0a90460417b24e916d12ccca222ef864b932a7ddf
GET /wp-content/themes/dzpblog/libs/calculator/calendar.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 259
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477187:3
dozarplati.com/wp-content/themes/dzpblog/libs/calculator/little_loan.svg
200 OK 679 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/libs/calculator/little_loan.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1395)
Hash 1fcf0e49c1bf6e5d0beae3bc54a2132e
88897bfa69de978c834c452fc8b9ca0edec3078b
5a895af457e3ada22bd5e2684379ccbfe172b3eb3ddb19d9e431b4ec6187d4f5
GET /wp-content/themes/dzpblog/libs/calculator/little_loan.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 679
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 24349211:3
dozarplati.com/wp-content/themes/dzpblog/libs/calculator/clock.svg
200 OK 418 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/libs/calculator/clock.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (688)
Hash 0a982a77a147a29fc3f45146f8b23e7d
956fd772b983ac5ed1725e955297a39e81b88d3a
8bbc802b8ecc6343d6eb521534b8f833394c5ecf5d6d50ee672414c9a36be1f7
GET /wp-content/themes/dzpblog/libs/calculator/clock.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 418
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 144661422:5
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/vk.svg
200 OK 692 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/vk.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1150)
Hash f1568ad6489da9b04048cbe4bc5b8c6c
a6ed719bf33c29dc3eb0f59842cade0c2dfe30f5
4847679ba366678c56f929c875ab1573314f0623200fb4382a16286476e61615
GET /wp-content/themes/dzpblog/assets/img/general/vk.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 692
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:7
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/ok.svg
200 OK 677 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/ok.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (977)
Hash 9570b93a8f77684f7166511a7ddf82df
307bf5a8e10c326622df4a0c8b6cc7a7fe486f06
85acdc8229de77f985f498caec5c18d52248d979c96e7d7e4044b7db4a23efb1
GET /wp-content/themes/dzpblog/assets/img/general/ok.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 677
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 269819877:4
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/apple-full.svg
200 OK 2.7 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/apple-full.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5774)
Hash dfca7785c8834f72ccf7d55834ffc180
103ca28199f5d215505ccb91ff3fc66e044891a9
b9d7e17a165c803bb5927e135ff61a74205efdb1212270fc442faaef5efda837
GET /wp-content/themes/dzpblog/assets/img/general/apple-full.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 2651
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477187:4
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/google-full.svg
200 OK 2.2 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/google-full.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4198)
Hash ba250d8381f13e7accec87616e1835b0
2323015d4e094beba385482846289707cc5348be
3e220c5666101cf289f567a8a1c051d9dc7320e2d0998ad790352e9006c23f9b
GET /wp-content/themes/dzpblog/assets/img/general/google-full.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 2174
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167477188:4
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/google.svg
200 OK 393 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/google.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash be26e9a35518fbae95f7ed3429070053
4ea8a9eb195a3ec115701e5e527558ee4b04d48b
d8c667fd44048ad61284e1e5d3cce1655fb77318ae80d669c10446a8f8f2d62d
GET /wp-content/themes/dzpblog/assets/img/general/google.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 393
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 167476998:8
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/acc-arrow.svg
200 OK 307 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/acc-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (352)
Hash 444b79685c067950e441f7bd5740d4d0
0550dedd071ee2de3660e2d641153609b02d991f
987a589031f4a2a628e7154f27a58027669b7f2caee4b7c1d03899c1f733badc
GET /wp-content/themes/dzpblog/assets/img/general/acc-arrow.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 307
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 144661422:6
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/huawei-full.svg
200 OK 3.0 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/huawei-full.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5528)
Hash 528984902883725c4239f826883c3d8c
8078b1647143dd553bc05d67c2d4e20c7ac0d426
d91b8a29833b46dcfd249e49f99f562c80b75bf162c0b4be1fe7bd2d3b58e750
GET /wp-content/themes/dzpblog/assets/img/general/huawei-full.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 2979
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 24349211:4
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/apple.svg
200 OK 417 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/apple.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (391)
Hash 794fcfda5d24f2d6d16c955dfc02d0b2
44b12c9389cf7692a91784ac8ca671f9c178936d
4d30823cd5fa644e8643b0a805d9c07dcd2c57d464616b073f30808b4e084c58
GET /wp-content/themes/dzpblog/assets/img/general/apple.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: image/svg+xml
Content-Length: 417
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 269819877:5
storage.yandexcloud.net/wp-dzp-prod/2022/05/4571b8ef66da972c19e9c1b64882d89a.svg
200 OK 3.7 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/4571b8ef66da972c19e9c1b64882d89a.svg
IP
Hash af5716016ae4161da73a8ae99ed2047a
f91b2ffdb82beb4b4ff9f6edf350193be7fc10ea
493bed8f0ef2b56a090f2a8bfeef39367097c4f4177f9acb2f3863dbdb693092
GET /wp-dzp-prod/2022/05/4571b8ef66da972c19e9c1b64882d89a.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"8c6218ccf6c49bb100bba2825b858487"
last-modified: Thu, 21 Jul 2022 11:56:15 GMT
x-amz-request-id: 3b10db15a3b0fff5
content-encoding: gzip
X-Firefox-Spdy: h2
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff
200 OK 30 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff
IP
File type Web Open Font Format, TrueType, length 30016, version 2.137\012- data
Hash 6e3f54b2764b579208411c777f1952f2
a3f28a17f2b124271f615c62b3119f58a8e87c32
8f0551a46a46d692633e3b92e080f57bfbd684229163e25242dabc8f5b579989
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Light.woff HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/x-woff
Content-Length: 30016
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 167477187:5
storage.yandexcloud.net/wp-dzp-prod/2022/05/c709df08541345cc684f297d469b3054.svg
200 OK 612 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/c709df08541345cc684f297d469b3054.svg
IP
Size 612 kB (612191 bytes)
Hash 3246ce7ba22fa320072656eedeb858d0
29d4bb68910420fc90298c1a9fef4a01ca6d429e
b8a64e5e045e5ecee3788c5d25b44c47f40ab5fd8ddddf1c9cc885b4e59b3923
GET /wp-dzp-prod/2022/05/c709df08541345cc684f297d469b3054.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"532d551142b4227173dc9aa7dc680879"
last-modified: Thu, 21 Jul 2022 11:56:15 GMT
x-amz-request-id: 1c222952af1d4cd0
content-encoding: gzip
X-Firefox-Spdy: h2
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff
200 OK 31 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff
IP
File type Web Open Font Format, TrueType, length 30620, version 2.137\012- data
Hash e3d2cab50efb02f6b11842d2d54ae42f
07c625473923bb1fc73759c7bf55635cab615368
4d983d801acf33ed79e7110a8a93245b2585d61cbac4dfe0b65c2e8a010868bf
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Medium.woff HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:10 GMT
Content-Type: font/x-woff
Content-Length: 30620
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 167476998:9
dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff
200 OK 30 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff
IP
File type Web Open Font Format, TrueType, length 30008, version 2.137\012- data
Hash 8e08b7ca701699650027b7be4de203e4
0d24a74eacbb3ffabce3c52bbfc2e7b78357005c
d99d6a8a3497428da338e9ef4741466c2e6239fd0d786ae31c8e22a3b41a0ef5
GET /wp-content/themes/dzpblog/assets/fonts/roboto/subset-Roboto-Regular.woff HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: font/x-woff
Content-Length: 30008
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:10 GMT
Vary: User-Agent
X-SP-CRID: 144661422:7
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbe94bc7052911313fffd1cdad964a74
a96a6606f1d20baeeb4040c9ced3ba2f7bd1aada
430d90ac0a39038dbb5336cf29baf6786ac29491c5a8e4dcce04e93d9fceb5e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff1.svg
200 OK 3.3 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff1.svg
IP
Hash f9a8bf15cbf358f900d16c16f6d6d6ad
c0a6073ddbd42fdd2416d2b0a28bf5ea667a59f8
7055d96efa3b3a59f8124d0f28c5ef94213ea3cf81969af4fbd72ef2bd6ba920
GET /wp-dzp-prod/2022/05/tariff1.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"7cc8e4cdcdaa69e2f15ade8c6d83e884"
last-modified: Thu, 21 Jul 2022 11:56:16 GMT
x-amz-request-id: 67f4e162acdcf201
content-encoding: gzip
X-Firefox-Spdy: h2
dozarplati.com/wp-content/themes/dzpblog/assets/img/general/huawei.svg
200 OK 623 B URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/img/general/huawei.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (958)
Hash e075351fcb8955ff9216ae6e0a95c30c
ace3dbc1ecef141cd3f4078eaaed8ee5a4295234
6fece59c7798e833358249cfefff2143ec4b46d891c1bad08e792026829f7212
GET /wp-content/themes/dzpblog/assets/img/general/huawei.svg HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/wp-content/cache/wpo-minify/1670875561/assets/wpo-minify-header-45850d57.min.css
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: image/svg+xml
Content-Length: 623
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sun, 29 Jan 2023 19:03:11 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-SP-CRID: 269819877:6
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 162908
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbe94bc7052911313fffd1cdad964a74
a96a6606f1d20baeeb4040c9ced3ba2f7bd1aada
430d90ac0a39038dbb5336cf29baf6786ac29491c5a8e4dcce04e93d9fceb5e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dozarplati.com/wp-json/contact-form-7/v1/contact-forms/9118/feedback/schema
200 OK 337 B URL HTTP/1.1 dozarplati.com/wp-json/contact-form-7/v1/contact-forms/9118/feedback/schema
IP
File type JSON data\012- , ASCII text, with very long lines (1228), with no line terminators
Hash 0ba2fa3cd0d40ec9af973dc53f6343eb
0a85801685f2f8faf9b580f47560470e283d5989
5bf27546cc799aaea0cbd63fdc765d93647717cda7bdb698269bf9e8750d7b61
GET /wp-json/contact-form-7/v1/contact-forms/9118/feedback/schema HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Connection: keep-alive
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
X-Robots-Tag: noindex
Link: <https://dozarplati.com/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Accept-Encoding, Origin,User-Agent
Cache-Control: no-cache, private, must-revalidate
Expires: Sun, 29 Jan 2023 19:03:11 GMT
X-SP-CRID: 24349211:5
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43e2ee53f9d993575131cacb32a52ef7
f2b7f5a102f90a2cadb2ff4e28513dd58189ade2
bd7b9770bc1d356e0d8f1a348c9c5df0292dc17a7659409fc71fe9e93e73fd1e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD7B9770BC1D356E0D8F1A348C9C5DF0292DC17A7659409FC71FE9E93E73FD1E"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Sun, 29 Jan 2023 01:02:54 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff3.svg
200 OK 1.9 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff3.svg
IP
Hash 4120adc1c7510a617397cedf2eb0ffdf
11d8527755d33dd1be5c990bee166a33e9b61943
5f721406b4eb632df22b1354a09597038f62d58e948e08b60c656d0f245c11f2
GET /wp-dzp-prod/2022/05/tariff3.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"325b12051eb0989af4775d784e56c0a1"
last-modified: Thu, 21 Jul 2022 11:56:16 GMT
x-amz-request-id: 994204b1753e7727
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43e2ee53f9d993575131cacb32a52ef7
f2b7f5a102f90a2cadb2ff4e28513dd58189ade2
bd7b9770bc1d356e0d8f1a348c9c5df0292dc17a7659409fc71fe9e93e73fd1e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD7B9770BC1D356E0D8F1A348C9C5DF0292DC17A7659409FC71FE9E93E73FD1E"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:03:11 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
storage.yandexcloud.net/wp-dzp-prod/2022/12/fon-1199-min-min.jpg
200 OK 39 kB URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/12/fon-1199-min-min.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 760x464, components 3\012- data
Hash 44a37f9a83537d526e27c97a4f7131a2
4ff7dab6d0d9c10991540b33a351863d73b25952
fe07b6d7e66b427c727031494f711ee1ae182a1e324eca017edc3a6364934102
GET /wp-dzp-prod/2022/12/fon-1199-min-min.jpg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: image/jpeg
content-length: 39054
accept-ranges: bytes
cache-control: public,max-age=15552000
etag: "44a37f9a83537d526e27c97a4f7131a2"
last-modified: Fri, 30 Dec 2022 20:20:25 GMT
x-amz-request-id: dac295eb016803f1
X-Firefox-Spdy: h2
email.do-zarplati.com/goals_log.js?p=2&u=V
200 OK 20 B URL HTTP/1.1 email.do-zarplati.com/goals_log.js?p=2&u=V
IP
ASN #198881 GETRESPONSE Sp.z o.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /goals_log.js?p=2&u=V HTTP/1.1
Host: email.do-zarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=63072000
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: accelerometer *; ambient-light-sensor *; autoplay *; camera *; encrypted-media *; fullscreen *; geolocation *; gyroscope *; magnetometer *; microphone *; midi *; payment *; picture-in-picture *; speaker *; sync-xhr *; usb *; vr *
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server-Timing: dtSInfo;desc="1"
Set-Cookie: dtCookie=v_4_srv_1_sn_0ABD3E231782FF2BD23F6C477E8ED200_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.do-zarplati.com
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4091
Expires: Sat, 28 Jan 2023 20:11:22 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4091
Expires: Sat, 28 Jan 2023 20:11:22 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4091
Expires: Sat, 28 Jan 2023 20:11:22 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4091
Expires: Sat, 28 Jan 2023 20:11:22 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4091
Expires: Sat, 28 Jan 2023 20:11:22 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 18:36:06 GMT
age: 1625
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 75985
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 74831
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 75819
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
age: 75994
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XRAeWdoEkbnzXKOs_EdgQ1r9BGOeDNh4FRXm-fv0KiCz4juqk8UKIw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:35 GMT
age: 75816
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
online-api.dozarplati.com/rpc
204 No Content 0 B URL HTTP/1.1 online-api.dozarplati.com/rpc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rpc HTTP/1.1
Host: online-api.dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization
Referer: https://dozarplati.com/
Origin: https://dozarplati.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Keep-Alive: timeout=15
set-cookie: spid=1674932591273_6c092b16c8eb5b8596b902a5657ae6d7_8kf0r85adsxu6n0i; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; Secure; SameSite=None
Allow: POST,POST
Cache-Control: no-cache, private
X-Request-ID: 28be96fb-04f1-4c4b-ad61-9eab2087ace7
Access-Control-Expose-Headers: X-Request-ID
Access-Control-Allow-Headers: authorization
Access-Control-Allow-Methods: POST,POST
Access-Control-Max-Age: 15
Access-Control-Allow-Origin: https://dozarplati.com
X-SP-CRID: 269820044:1
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash da61bcbf369c26b312d8f8a1d2eccf21
651cc178ab529e4be33490d4d7a620500c788383
51feee597ddff292cfd8adf8a986578ffce2815cbc47b4ad5a73d849e6eba28b
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Wed, 01 Feb 2023 15:55:38 GMT
ETag: "651cc178ab529e4be33490d4d7a620500c788383"
Last-Modified: Sat, 28 Jan 2023 15:55:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3459
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc98dea8b52d-OSL
www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
IP
File type ASCII text, with very long lines (771)
Size 164 kB (163774 bytes)
Hash 57c909ab73fc27ec24f737bbf1cb1de8
89b2c02e9e7a9a764518fca545d3eec2044fd6d9
7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 17:09:34 GMT
expires: Tue, 23 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
age: 438817
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dozarplati.com/wp-content/themes/dzpblog/assets/favicon/android-icon-192x192.png
200 OK 6.5 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/favicon/android-icon-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a0397811fae58f76f8ab93dbf3560bd9
c4b28d6240628ad5f4b51554af4093251c8c7b28
4a5652a7f40f76e6d409a9588a8d1d6d85abee37930551c9ea7655aa2a6c39be
GET /wp-content/themes/dzpblog/assets/favicon/android-icon-192x192.png HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _ms_sid=4bbd08a1-a9f2-4549-8f08-78e0afabb7c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: image/png
Content-Length: 6491
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:11 GMT
Vary: User-Agent
X-SP-CRID: 167476998:10
vk.com/rtrg?r=Q55MvvmP6WhhB*x/P7AJs/q9gwRka2RoAjH4uImVB0DrPKUc9PZbqFOpMkyHrLDJFGglJcwOp2mh0ssKdKz4ZBRBPuSnJEkXOc0HS0ioMSzO7RhrhBtUky7cN/3/jad1gg4bYgAb4Wb7QUTz3lgCLBF1DiSjrqcEscCjMgvGiC0-&pixel_id=1000079059
200 OK 65 B URL HTTP/2 vk.com/rtrg?r=Q55MvvmP6WhhB*x/P7AJs/q9gwRka2RoAjH4uImVB0DrPKUc9PZbqFOpMkyHrLDJFGglJcwOp2mh0ssKdKz4ZBRBPuSnJEkXOc0HS0ioMSzO7RhrhBtUky7cN/3/jad1gg4bYgAb4Wb7QUTz3lgCLBF1DiSjrqcEscCjMgvGiC0-&pixel_id=1000079059
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ec4341fe3a8b2c4880fbfe0ef9cde34f
a0947414eb426b2939ca1a05fc870763f6bfc63f
01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?r=Q55MvvmP6WhhB*x/P7AJs/q9gwRka2RoAjH4uImVB0DrPKUc9PZbqFOpMkyHrLDJFGglJcwOp2mh0ssKdKz4ZBRBPuSnJEkXOc0HS0ioMSzO7RhrhBtUky7cN/3/jad1gg4bYgAb4Wb7QUTz3lgCLBF1DiSjrqcEscCjMgvGiC0-&pixel_id=1000079059 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.113183
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sun, 21 Jan 2024 20:12:17 GMT; path=/; domain=.vk.com
remixstlid=9096096091283716807_OBvjzCa4eADDcyhzL3l36NPEL0zGniS2ypZM7aXvhs8; expires=Sun, 28 Jan 2024 19:03:11 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash deb4009d9cf930c22c3f5a5b84da0ac0
8a836d1d06195abd9c1a2c9de738b7e68b10f594
7cfeba165ffe403e5443ea916c93bd7f73353d1cdb0ecc0fc48bd63e6be61e24
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 01 Feb 2023 16:11:10 GMT
ETag: "8a836d1d06195abd9c1a2c9de738b7e68b10f594"
Last-Modified: Sat, 28 Jan 2023 16:11:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 235
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc991e82b505-OSL
dozarplati.com/wp-content/themes/dzpblog/assets/favicon/favicon-16x16.png
200 OK 1.3 kB URL HTTP/1.1 dozarplati.com/wp-content/themes/dzpblog/assets/favicon/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 46e5547e88827157aa38a675ef2c457c
baf570860da729303bb4fcc797da19a3ea062ce6
2335177320bd8182cfc52b1d6eab74abc5b2b2ad94f4f4d88ce42ab78189c87d
GET /wp-content/themes/dzpblog/assets/favicon/favicon-16x16.png HTTP/1.1
Host: dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/?utm_source=guruleads_new&utm_medium=cpa&utm_campaign=40&wmid=40&clickid=f62c49c6ef1c0782026ff2a11afd5ed6
Cookie: spid=1674932589832_3090596b85169aac01306137007e62fb_6tm616qowgqxnrxl; _dzp_utm_2=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _dzp_utm=%7B%22utm_source%22%3A%22guruleads_new%22%2C%22utm_medium%22%3A%22cpa%22%2C%22utm_campaign%22%3A%2240%22%2C%22wmid%22%3A%2240%22%2C%22clickid%22%3A%22f62c49c6ef1c0782026ff2a11afd5ed6%22%7D; _ms_sid=4bbd08a1-a9f2-4549-8f08-78e0afabb7c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: image/png
Content-Length: 1310
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 18 Jan 2023 15:34:41 GMT
Accept-Ranges: bytes
Cache-Control: public
Expires: Sun, 29 Jan 2023 19:03:11 GMT
Vary: User-Agent
X-SP-CRID: 269819877:7
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 31ced5d16ef8259d31910ff18a72fe65
483eb1ce4dd5b11e191b6ce6dd3d0e213d23c2b2
571dd8bfe976c5916750d6b991789769b0be50074225c7462e100cef1b504745
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Wed, 01 Feb 2023 17:36:43 GMT
ETag: "483eb1ce4dd5b11e191b6ce6dd3d0e213d23c2b2"
Last-Modified: Sat, 28 Jan 2023 17:36:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1122
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfc993c680b61-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f69c5f43bf99edb53b690cb0bba51efb
e303559ff0956b6bf963b572b17da2a713ce5206
bc95b0a6b8b9a1df9c53272c4324ca1d008699b3da74110efa37ed0118c66181
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed8a8c45dceab588456b222e04775919
0242859712655caa3c3e9b936878c7c7874b7b5a
669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 18:57:52 GMT
expires: Sat, 28 Jan 2023 19:12:52 GMT
cache-control: public, max-age=900
age: 319
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 28 Jan 2023 19:03:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Sat, 28 Jan 2023 19:03:11 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sat, 28 Jan 2023 20:03:11 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
online-api.dozarplati.com/rpc
200 OK 90 B URL HTTP/1.1 online-api.dozarplati.com/rpc
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 68a62cd6e192f0db437c0084a486ec95
32272a55c55c9b8d80bf809dd741b44b1abd18ec
bbc3f5ca5e0064e7186ec78da96a691acc7ad9724e7d410072a97c535014d70d
POST /rpc HTTP/1.1
Host: online-api.dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
authorization:
Content-Length: 53
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
set-cookie: spid=1674932591496_dbdd631f4174145cd63e8d62fcbd44a8_8p4cpbrsfa0omjs5; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; Secure; SameSite=None
Cache-Control: no-cache, private
X-Request-ID: 853295d0-6b7d-4aaa-a5e5-a9001166e3c4
Access-Control-Expose-Headers: X-Request-ID
Access-Control-Allow-Origin: https://dozarplati.com
Content-Encoding: gzip
X-SP-CRID: 24349376:1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8cbbd6381b92fd53b25c5eb3f2469752
d1b9da185e41137d82e32beff956380d27580f87
531937e087c991adce05642aa76c539c41cc7e2efb958262f3e31ada7b390c03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "531937E087C991ADCE05642AA76C539C41CC7E2EFB958262F3E31ADA7B390C03"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5086
Expires: Sat, 28 Jan 2023 20:27:57 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Jan 2023 10:25:03 GMT
expires: Mon, 22 Jan 2024 10:25:03 GMT
cache-control: public, max-age=31536000
age: 549488
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 60e4afcdf7643442065a31e2dace03c8
1b4052f5d8936a27d758dc2eed090164ef24fb93
edf6a58ba63ca5e7fcbc7f3807cc78d8db38e7fa5ce34d1bfa21add2b2f9d6d7
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 19:03:11 GMT
server: ESF
cache-control: private
content-length: 31066
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dwh.devim.team/api/v2.0/events/web
204 No Content 0 B URL HTTP/2 dwh.devim.team/api/v2.0/events/web
IP
ASN #200350 Yandex.Cloud LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2.0/events/web HTTP/1.1
Host: dwh.devim.team
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,user-agent,x-api-client-id,x-api-key,x-sessionid,x-userid
Referer: https://dozarplati.com/
Origin: https://dozarplati.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 19:03:11 GMT
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: https://dozarplati.com
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Accept, User-Agent, X-UserID, X-API-KEY, X-API-CLIENT-ID, X-SessionID
access-control-max-age: 1728000
content-length: 0
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 15 kB URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
Hash c0eeeda589e953c6eaf039d7da874f6d
dc10c26e029d668c790cccf625ed39f6a6c7db03
1ac56f3296be42d09926f93c21514110ae126a73c86806647cae42665b960ddb
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 13:29:54 GMT
set-cookie: FTID=1RMYgQ0tkIIF:1674932591:0:::; path=/; expires=Mon, 29-Jan-24 19:03:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"63beb9d2-85cc"
expires: Sat, 28 Jan 2023 20:03:11 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
dwh.devim.team/api/v2.0/events/web
201 Created 20 B URL HTTP/2 dwh.devim.team/api/v2.0/events/web
IP
ASN #200350 Yandex.Cloud LLC
File type JSON data\012- , ASCII text, with no line terminators
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /api/v2.0/events/web HTTP/1.1
Host: dwh.devim.team
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dozarplati.com/
Content-Type: application/json
X-UserID:
X-API-KEY: eeeae680-04ad-4249-92fd-9cff7b8ba72f
X-API-CLIENT-ID: d85fce73-cf24-43bd-872f-e255a0f6d26f
X-SessionID: 4bbd08a1-a9f2-4549-8f08-78e0afabb7c3
Origin: https://dozarplati.com
Content-Length: 566
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: text/plain; charset=utf-8
content-length: 20
access-control-allow-origin: https://dozarplati.com
ratelimit-remaining: 48
vary: Origin
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Content-Type, Accept, User-Agent, X-UserID, X-API-KEY, X-API-CLIENT-ID, X-SessionID
access-control-max-age: 1728000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b14aba57f9adac4886fe5a32b1ee0aae
8bc11adeab5cec244eb429db961ed3e6950550d8
fb2e205c8156cca2b4f87e51b25048f7329e6e460268243acf93c83d0458735c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB2E205C8156CCA2B4F87E51B25048F7329E6E460268243ACF93C83D0458735C"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Sun, 29 Jan 2023 01:03:07 GMT
Date: Sat, 28 Jan 2023 19:03:11 GMT
Connection: keep-alive
i.ytimg.com/vi_webp/9GwM1-BEzoE/maxresdefault.webp
200 OK 29 kB URL HTTP/2 i.ytimg.com/vi_webp/9GwM1-BEzoE/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c2c7f64eee21f280754bb98b2f12d53e
a1ce5624a76920e1545d3f3814a07029139e6d50
5605f3ae3c0e774a1ca51604581b7d6f0ce26a644bb4a6886a74f048980bf50f
GET /vi_webp/9GwM1-BEzoE/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 29266
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 19:03:11 GMT
expires: Sat, 28 Jan 2023 21:03:11 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e2579e6546ece9f51d426a7d7f271499
1a73b4aa9dd0a6ad011c8d56d5bfdd1be30e2b10
56f86a1282b4e619ae6a9f211ccebaa8a6ddf614acec73700814986dc84a593c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 19:03:11 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145
set-cookie: FTID=1RMYgQ0tkIIF:1674932591:3141446:::; path=/; expires=Mon, 29-Jan-24 19:03:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 166bf2c6932f048996b3fe12e1cf3db9
9489d067ac8215775dda446a4c291e6db1e8ab3f
896314990eb656b725f8ec5d3753e70bf71e956c142a15b45773a77bb7d6ff24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AL5GRJVJqQKuvpIJDCicupbNDRu9Q_ro56Oqn78sHJ7UJQ=s68-c-k-c0x00ffffff-no-rj
200 OK 2.6 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJVJqQKuvpIJDCicupbNDRu9Q_ro56Oqn78sHJ7UJQ=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 56c9dcc9a399f149a6a4e52810d832fc
e11823b23a365d1f2aec2209b1f2802074074b60
7ed830964e4d42b93ababb3fffe2e5a67e90845c77ef9b4f021757ed8fc0f841
GET /ytc/AL5GRJVJqQKuvpIJDCicupbNDRu9Q_ro56Oqn78sHJ7UJQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2603
x-xss-protection: 0
date: Sat, 28 Jan 2023 16:36:55 GMT
expires: Wed, 25 Jan 2023 11:24:47 GMT
cache-control: public, max-age=86400, no-transform
age: 8776
etag: "vc0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1674932595624%3A1674932595627%3A1%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.5772768246896145 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dozarplati.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:11 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1674932591:3141446:::; path=/; expires=Mon, 29-Jan-24 19:03:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7c4f207ec97cacb1eedd94d2f6b371
5f0948a39435ace8bacc4ac5fb3df19045908e42
bfb24fe4a1cb45a068b0a6432b03c20d00ea178aabea23498f2d1f0273bf6e1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/25885646/1?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 454 B URL HTTP/2 mc.yandex.ru/watch/25885646/1?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (454), with no line terminators
Hash 4ee48658fb83aa615f102eea12387691
a80ceaa9c4805a736589444bf503c8055d08fd32
f26be2d3744ebeb3b7f448e8983804c301fd3c4a71140eb866032036ba138f35
GET /watch/25885646/1?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dozarplati.com
Referer: https://dozarplati.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 454
date: Sat, 28 Jan 2023 19:03:12 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://dozarplati.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 19:03:12 GMT
last-modified: Sat, 28-Jan-2023 19:03:12 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 28 Jan 2023 19:03:12 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sat, 28 Jan 2023 20:03:12 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
online-api.dozarplati.com/rpc
200 OK 58 B URL HTTP/1.1 online-api.dozarplati.com/rpc
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash eaf2f2ef7a66f7a12acf38e977216111
e2d25a056ea94155e36fedf5d58f8b8504899b66
06efc5a0baedd5752d7280281e6fdc5899ea371984f06e2296bf2966263bff1a
POST /rpc HTTP/1.1
Host: online-api.dozarplati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1025
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:12 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
set-cookie: spid=1674932592081_e84076da0e56d42e35751c68649cdbf4_unkumbb8diuv4b9m; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; Secure; SameSite=None
Cache-Control: no-cache, private
X-Request-ID: 280d94c9-ab66-4af0-9721-d7f30f262fcc
Access-Control-Expose-Headers: X-Request-ID
Access-Control-Allow-Origin: https://dozarplati.com
Content-Encoding: gzip
X-SP-CRID: 24349376:2
top-fwz1.mail.ru/tracker?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;nt=0/0/1674932592615/////875/876/878/878/1079/913/1079/1104/1545/1558/2141/2170/2186/3435/3435/;ni=;lvid=1674932595624%3A1674932596054%3A2%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.24967784238987156;e=RT/load;et=1674932596052
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;nt=0/0/1674932592615/////875/876/878/878/1079/913/1079/1104/1545/1558/2141/2170/2186/3435/3435/;ni=;lvid=1674932595624%3A1674932596054%3A2%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.24967784238987156;e=RT/load;et=1674932596052
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3141446;u=https%3A//dozarplati.com/%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6;st=1674932594756;pid=USER_ID;title=%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=5baea469b3932c5c;ver=60.3.0;tz=0%2FUTC;nt=0/0/1674932592615/////875/876/878/878/1079/913/1079/1104/1545/1558/2141/2170/2186/3435/3435/;ni=;lvid=1674932595624%3A1674932596054%3A2%3Ad82fb1d72c35ff49f19765d3d6731d27;opts=dl%2Cjst-gtag-ga;visible=true;_=0.24967784238987156;e=RT/load;et=1674932596052 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:12 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1674932592:3141446:::; path=/; expires=Mon, 29-Jan-24 19:03:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 28 Jan 2023 19:03:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 144bfbd50e31de202cadd222d4915fa9
e1e3ea93196d02eeb3c37d39bf6d028b201aee1d
f9be7970824db4f42ed8ce2abf2df80e51268fb900594783702c60a036caa307
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1312
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 19:03:12 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&gjid=899908721&_gid=59458392.1674932595&_u=YEBAAEAAAAAAACAAI~&z=1720272922
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&gjid=899908721&_gid=59458392.1674932595&_u=YEBAAEAAAAAAACAAI~&z=1720272922
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&gjid=899908721&_gid=59458392.1674932595&_u=YEBAAEAAAAAAACAAI~&z=1720272922 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dozarplati.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 28 Jan 2023 19:03:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&_u=YEBAAEAAAAAAACAAI~&z=1774966069
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&_u=YEBAAEAAAAAAACAAI~&z=1774966069
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-91457660-11&cid=91728136.1674932595&jid=2001464206&_u=YEBAAEAAAAAAACAAI~&z=1774966069 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 19:03:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash ce4e4c1d84ff51a17a8d8b8983adbc15
f9bdb417734de7c569187dee0a5a0435da8a512f
17b047aa71bf1b72e5eee25915f54fd1b7185c0fd66b9a963d6c5a48f0e4ce41
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 01 Feb 2023 17:13:05 GMT
ETag: "f9bdb417734de7c569187dee0a5a0435da8a512f"
Last-Modified: Sat, 28 Jan 2023 17:13:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bfcbcffc9b505-OSL
dozarplaticom001.webim.ru/js/button.js
200 OK 221 kB URL HTTP/1.1 dozarplaticom001.webim.ru/js/button.js
IP
ASN #49505 OOO Network of data-centers Selectel
File type ASCII text, with very long lines (2049)
Size 221 kB (220865 bytes)
Hash 5a42623729f5efe4a1a4bd62cb37a0eb
bba58be49b5c430d85365c64d4211e006706ec3d
b88f81234f58e0aad467f0eb4ff810ccbf212291a43f9022055fbe2f0740e45b
GET /js/button.js HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 24 Jan 2023 17:50:07 GMT
Cache-Control: no-cache
Content-Encoding: gzip
dozarplaticom001.webim.ru/x/js/v/all-settings-default.js?10.4.125
200 OK 9.2 kB URL HTTP/1.1 dozarplaticom001.webim.ru/x/js/v/all-settings-default.js?10.4.125
IP
ASN #49505 OOO Network of data-centers Selectel
Hash f06b32c0c9fd55df6087228e859cd834
aff80f84fbcf8ddc7cc0a6c8e85189794c5c81c5
190c21a16df5d1bd9a16909c9c9946740b88af36207b5db4306bb922e3678101
GET /x/js/v/all-settings-default.js?10.4.125 HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 9218
Last-Modified: Fri, 27 Jan 2023 23:59:20 GMT
Connection: keep-alive
ETag: "63d46558-2402"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
dozarplaticom001.webim.ru/v/ui-resources.php?location=default&mode=desktop&lang=ru&7a6e3ddc&callback=getWebimUIResourcesCallback
200 OK 60 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/ui-resources.php?location=default&mode=desktop&lang=ru&7a6e3ddc&callback=getWebimUIResourcesCallback
IP
ASN #49505 OOO Network of data-centers Selectel
File type exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 0e6078597133b147bc969dd6ad5da67f
a0533e64eb0394304aba31841f1945b07d0fd9fc
1aba392d83887ca03f5e8128c283d1f6228da12768026829837ac9c1304d2602
GET /v/ui-resources.php?location=default&mode=desktop&lang=ru&7a6e3ddc&callback=getWebimUIResourcesCallback HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 24 Jan 2023 17:50:07 GMT
X-Cache: HIT
Content-Encoding: gzip
dozarplaticom001.webim.ru/webim/images/cursor.png
200 OK 591 B URL HTTP/1.1 dozarplaticom001.webim.ru/webim/images/cursor.png
IP
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 17 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fa7bdcd138f8aee5178f0d4f926595b
6d3a5103766e97395bebbd2ffe811b2e7ad3c7c0
a1fb1b429d644ad011e6bd98701d1951138d3f973bda19ce3411e1c1d65ef35e
GET /webim/images/cursor.png HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: image/png
Content-Length: 591
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-24f"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
dozarplaticom001.webim.ru/l/v/get-online-status?callback=webimApplyOnlineStatusResponse
200 OK 100 B URL HTTP/1.1 dozarplaticom001.webim.ru/l/v/get-online-status?callback=webimApplyOnlineStatusResponse
IP
ASN #49505 OOO Network of data-centers Selectel
File type ASCII text, with no line terminators
Hash 0c35966456947ec55f094b0a2eff0ede
f57732c1e452b41c6f280451517272f8e60d5d83
93c3d887f935963dbadaa4b44ff299e12359d0bc05ddf68bcfa74c8cb5c50764
GET /l/v/get-online-status?callback=webimApplyOnlineStatusResponse HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: application/x-javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Webim-Version: 10.4.125
Etag: W/"25c9efaac85a5432467840803f074c63066271fa"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
dozarplaticom001.webim.ru//images/logo/dozarplaticom001_site_logo.png
200 OK 2.9 kB URL HTTP/1.1 dozarplaticom001.webim.ru//images/logo/dozarplaticom001_site_logo.png
IP
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9864ebd2bc248692c96dde04605d3ec5
11cc5ba1fdeeeb1943f4ae870252bb46c1225cbe
86f758be96a0bdeb0cc968452b3ce4a30103b6e0076e26cd765f103d8b750f51
GET //images/logo/dozarplaticom001_site_logo.png HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:17 GMT
Content-Type: image/png
Content-Length: 2924
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 17:50:07 GMT
X-Cache: HIT
dozarplaticom001.webim.ru/v/images/upload.png
200 OK 5.6 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/images/upload.png
IP
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 252 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7b5802fbdfcaff9ccd0826fa008c38ba
bec3747315222740af2524067fdb193ba5cd3dd4
455f8ff96a7775e51c6766e041b6d94f324729236e4f11cee602d5374d4c70e6
GET /v/images/upload.png HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: image/png
Content-Length: 5607
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-15e7"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
dozarplaticom001.webim.ru/v/images/default-department-logo.png
200 OK 16 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/images/default-department-logo.png
IP
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 53a142e29b647ceba5a2adf6cc69b919
37fc7f6523e5f4d9e01157c70acc74069bfff416
a5b367cc08f01ae61da2109c04047ee7e218df860be597c35d4ca7e064fea63a
GET /v/images/default-department-logo.png HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: image/png
Content-Length: 15479
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-3c77"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
dozarplaticom001.webim.ru/v/images/ui-icons_222222_256x240.png
200 OK 4.4 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/images/ui-icons_222222_256x240.png
IP
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 256 x 240, 8-bit colormap, non-interlaced\012- data
Hash 9129e086dc488d8bcaf808510bc646ba
1f12bac718a6275823d9805cbe6bf6818838aa8c
57adb0d65f4e91dacfee975d9574422bee7486c8a182d60133728c672f2cdbbc
GET /v/images/ui-icons_222222_256x240.png HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: image/png
Content-Length: 4369
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-1111"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
dozarplaticom001.webim.ru/v/images/logo_webim.svg
200 OK 4.3 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/images/logo_webim.svg
IP
ASN #49505 OOO Network of data-centers Selectel
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e4be29d740049c65ca80df96a735bb9d
9e9d0d80281d084c8f621a352727388d00c30d66
205e6b3777dc55ca4da8d725aaa964aac9d52d2e86f600c2f63c1dd5832878f1
GET /v/images/logo_webim.svg HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: image/svg+xml
Content-Length: 4289
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-10c1"
X-Time: 0.000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jqb6G21QeTDiI0HWT9Fd87D-HkAOiesyfN9vr7vMxrOUADBxV-_Fug==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:42 GMT
age: 76056
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dozarplaticom001.webim.ru/v/fonts/Roboto-Bold.ttf
200 OK 167 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/fonts/Roboto-Bold.ttf
IP
ASN #49505 OOO Network of data-centers Selectel
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size 167 kB (167336 bytes)
Hash b8e42971dec8d49207a8c8e2b919a6ac
62442a18a9fe9457c1afeabf683d263a691b7798
ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7
GET /v/fonts/Roboto-Bold.ttf HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: application/octet-stream
Content-Length: 167336
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-28da8"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
dozarplaticom001.webim.ru/v/fonts/Roboto.ttf
200 OK 168 kB URL HTTP/1.1 dozarplaticom001.webim.ru/v/fonts/Roboto.ttf
IP
ASN #49505 OOO Network of data-centers Selectel
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob\012- data
Size 168 kB (168260 bytes)
Hash 8a36205bd9b83e03af0591a004bc97f4
56c5c0d38bde4c1f1549dda43db37b09c608aad3
4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14
GET /v/fonts/Roboto.ttf HTTP/1.1
Host: dozarplaticom001.webim.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:03:18 GMT
Content-Type: application/octet-stream
Content-Length: 168260
Last-Modified: Wed, 14 Dec 2022 22:48:56 GMT
Connection: keep-alive
ETag: "639a52d8-29144"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff2.svg
200 OK 0 B URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff2.svg
IP
GET /wp-dzp-prod/2022/05/tariff2.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"bd83726996f2501d4db6e12a889a81a3"
last-modified: Thu, 21 Jul 2022 11:56:16 GMT
x-amz-request-id: 3edbe579f722d6a3
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25885646?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/25885646?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/25885646?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dozarplati.com
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/25885646/1?wmode=7&page-url=https%3A%2F%2Fdozarplati.com%2F%3Futm_source%3Dguruleads_new%26utm_medium%3Dcpa%26utm_campaign%3D40%26wmid%3D40%26clickid%3Df62c49c6ef1c0782026ff2a11afd5ed6&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1884%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1320227291383%3Ahid%3A154208945%3Az%3A0%3Ai%3A20230128190315%3Aet%3A1674932596%3Ac%3A1%3Arn%3A844992396%3Arqn%3A1%3Au%3A1674932596290794352%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C200%2C25%2C441%2C874%2C0%2C%2C597%2C17%2C%2C%2C%2C2170%3Aco%3A0%3Ans%3A1674932592615%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674932596%3At%3A%D0%A1%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%B7%D0%B0%D0%B9%D0%BC%D1%8B%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20-%200%25%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%BE%D0%B2%D1%8B%D1%85%20%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 19:03:11 GMT
access-control-allow-origin: https://dozarplati.com
set-cookie: yabs-sid=755167191674932591; Path=/; SameSite=None; Secure
i=blDTzCPRNwQf5rfdWYIZtX6TrSam9gymutEszLPXJvr2rn4nu5gSMczGyCpcYnyCUECDHX0A6tFsn7XRlupbXRB9VI0=; Expires=Tue, 25-Jan-2033 19:03:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9352714481674932591; Expires=Sun, 28-Jan-2024 19:03:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9352714481674932591; Expires=Sun, 28-Jan-2024 19:03:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706468591.yc.1674932591#1706468591.yrts.1674932591#1706468591.yrtsi.1674932591; Expires=Sun, 28-Jan-2024 19:03:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 19:03:11 GMT
last-modified: Sat, 28-Jan-2023 19:03:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff4.svg
200 OK 0 B URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/tariff4.svg
IP
GET /wp-dzp-prod/2022/05/tariff4.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"3ca6e939bceabaa3b632014077e688c1"
last-modified: Thu, 21 Jul 2022 11:56:16 GMT
x-amz-request-id: 1c31cb2d689014c6
content-encoding: gzip
X-Firefox-Spdy: h2
storage.yandexcloud.net/wp-dzp-prod/2022/06/notice.svg
200 OK 0 B URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/06/notice.svg
IP
GET /wp-dzp-prod/2022/06/notice.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"207f2a9db65e479397d8a81bf50bbec6"
last-modified: Thu, 21 Jul 2022 11:56:17 GMT
x-amz-request-id: b9774205d54320d9
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/9GwM1-BEzoE?controls=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/9GwM1-BEzoE?controls=0
IP
GET /embed/9GwM1-BEzoE?controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 28 Jan 2023 19:03:10 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=6m96qOlJJuY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=pXVR10GWkCY; Domain=.youtube.com; Expires=Thu, 27-Jul-2023 19:03:10 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TXpjNE1EWTVPVEEwTVRVd05EUTVOZz09EO7i1Z4GGO7i1Z4G; Domain=.youtube.com; Expires=Thu, 27-Jul-2023 19:03:10 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+287; expires=Mon, 27-Jan-2025 19:03:10 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
storage.yandexcloud.net/wp-dzp-prod/2022/05/f0d55fdf28ecdc9a0e351dd511870870.svg
200 OK 0 B URL HTTP/2 storage.yandexcloud.net/wp-dzp-prod/2022/05/f0d55fdf28ecdc9a0e351dd511870870.svg
IP
GET /wp-dzp-prod/2022/05/f0d55fdf28ecdc9a0e351dd511870870.svg HTTP/1.1
Host: storage.yandexcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dozarplati.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:03:10 GMT
content-type: image/svg+xml
etag: W/"b48fa6249113b5de21cc2f95559d2f68"
last-modified: Thu, 21 Jul 2022 11:56:15 GMT
x-amz-request-id: b5a02b6dda8cc9e3
content-encoding: gzip
X-Firefox-Spdy: h2
178.154.229.132
173.194.221.156
104.18.21.226
23.33.119.27
188.114.81.186