www.akson-vent.ru/
172.67.214.10301 Moved Permanently 0 B IP 172.67.214.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.akson-vent.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Feb 2023 20:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 06 Feb 2023 21:23:06 GMT
Location: https://www.akson-vent.ru/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VM4qBSqUewFj%2BH7pgMuoLcJTuhnzzDq33IIbWoxmXc16Ovo1OryPXh7gGplMzLRvkviXqYZ5%2FcTqPFDnJAQZNq1my2V2ezywhC5rGf%2FjC8MSTbNQs%2F1CWMUkWcoZKCV9zbRilg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79569a0b5b691bfe-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10194
Expires: Mon, 06 Feb 2023 23:13:00 GMT
Date: Mon, 06 Feb 2023 20:23:06 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2468
Expires: Mon, 06 Feb 2023 21:04:14 GMT
Date: Mon, 06 Feb 2023 20:23:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 19:34:06 GMT
content-type: application/json
age: 2941
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Mon, 06 Feb 2023 21:31:48 GMT
Date: Mon, 06 Feb 2023 20:23:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pbImNhOe80ibJ4yxHearEpR18cgov2DttXfM9n5E0ugexo3ufYnITufNFvHpdQDZ/svEufUwvSg=
x-amz-request-id: RK632FC4KC36W37M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 19:45:17 GMT
age: 2270
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:07 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/M3JFgfihR2Y
216.58.211.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/M3JFgfihR2Y
IP 216.58.211.3:0
Hash 5b527fbec1ec15dd014a465b244ee576
32c190df4a9cf69a24631dbcf1ddb8b5c8e3f7f1
a1812235af8ff5d2ab14b2417fafec4cb255b563ddbd343ef3eb69fa38404250
POST /s/gts1p5/M3JFgfihR2Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 20:07:20 GMT
age: 947
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.akson-vent.ru/
104.21.86.16301 Moved Permanently 0 B IP 104.21.86.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.akson-vent.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Mon, 06 Feb 2023 20:23:07 GMT
content-length: 0
location: https://www.akson-vent.ru/Html/motivators.htm
cache-control: no-cache
expires: -1
pragma: no-cache
set-cookie: ARRAffinity=83b6150f0d56f74b042780c77ba244e1739c6b591b9f52c9b18874c36ae01cec;Path=/;HttpOnly;Secure;Domain=www.akson-vent.ru
ARRAffinitySameSite=83b6150f0d56f74b042780c77ba244e1739c6b591b9f52c9b18874c36ae01cec;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.akson-vent.ru
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sv5IHOASvD1xJaf1Ca5WBFqZEYnlZOY1l2AqVGd8Z1f80FZ%2F6b5XXMbcK4wLHYLeDl0LKO0MpE8a6T98co8lDPNLwE2gWy6EWp%2Bw%2BHVEH34g%2BVz5CubxKLAz5uIQUkuUjxrupw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79569a0e0f91b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/M3JFgfihR2Y
216.58.211.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/M3JFgfihR2Y
IP 216.58.211.3:0
Hash 5b527fbec1ec15dd014a465b244ee576
32c190df4a9cf69a24631dbcf1ddb8b5c8e3f7f1
a1812235af8ff5d2ab14b2417fafec4cb255b563ddbd343ef3eb69fa38404250
POST /s/gts1p5/M3JFgfihR2Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20863
Expires: Tue, 07 Feb 2023 02:10:50 GMT
Date: Mon, 06 Feb 2023 20:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c5e7756e7580e806710c43c1514e6f96
8fe07ef62959d8a35774f09ff678159252172f56
e31982b6098a598c30529b4ccb2400dd8d1592a211d8b4aadae2a2654ecece4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E31982B6098A598C30529B4CCB2400DD8D1592A211D8B4AADAE2A2654ECECE4C"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5452
Expires: Mon, 06 Feb 2023 21:53:59 GMT
Date: Mon, 06 Feb 2023 20:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c5e7756e7580e806710c43c1514e6f96
8fe07ef62959d8a35774f09ff678159252172f56
e31982b6098a598c30529b4ccb2400dd8d1592a211d8b4aadae2a2654ecece4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E31982B6098A598C30529B4CCB2400DD8D1592A211D8B4AADAE2A2654ECECE4C"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5452
Expires: Mon, 06 Feb 2023 21:53:59 GMT
Date: Mon, 06 Feb 2023 20:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c5e7756e7580e806710c43c1514e6f96
8fe07ef62959d8a35774f09ff678159252172f56
e31982b6098a598c30529b4ccb2400dd8d1592a211d8b4aadae2a2654ecece4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E31982B6098A598C30529B4CCB2400DD8D1592A211D8B4AADAE2A2654ECECE4C"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17227
Expires: Tue, 07 Feb 2023 01:10:14 GMT
Date: Mon, 06 Feb 2023 20:23:07 GMT
Connection: keep-alive
push.services.mozilla.com/
35.160.240.54101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.160.240.54:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Tz3FkcljUZu+RKN8Rbz8pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kDIb5iM0z4m5PfHAUN9KQ48r1f8=
landbot.io/u/H-74380-KZ4OVLW593QM7PJZ/index.html
35.244.204.185200 OK 3.0 kB URL HTTP/2 landbot.io/u/H-74380-KZ4OVLW593QM7PJZ/index.html
IP 35.244.204.185:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8781)
Hash 59ecc3862726f22678e0837a276c9949
0fc5768032f188e7bf87a566cb21a7c7d79ba6e1
2380eba63f83ad01e60ceb31781eae9e306f68abdceb40dac2ebc59b059d6f2e
GET /u/H-74380-KZ4OVLW593QM7PJZ/index.html HTTP/1.1
Host: landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdudyVutjvuzsdUAKtl3GuSutO2skfX82cRvUpdCdIcP6Oc3xjhLQGIzu0U0KAMKS5bwCm-Hw48IQkRh1N0BytewA8uE30tS
date: Mon, 06 Feb 2023 20:23:07 GMT
cache-control: no-store
expires: Tue, 06 Feb 2024 20:23:07 GMT
last-modified: Fri, 13 Jan 2023 00:18:00 GMT
etag: "59ecc3862726f22678e0837a276c9949"
vary: Accept-Encoding
x-goog-generation: 1673569080500092
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2952
content-type: text/html
content-encoding: gzip
x-goog-hash: crc32c=YMQtOQ==, md5=WezDhicm8iZ44IN6J2yZSQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 2952
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
landbot.io/u/H-75634-40T6KABMEEVC9DPE/index.html
35.244.204.185200 OK 3.0 kB URL HTTP/2 landbot.io/u/H-75634-40T6KABMEEVC9DPE/index.html
IP 35.244.204.185:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8781)
Hash db7d69f4f2c7ff6273eb177a5096eee6
7ee49c03ac78180bcfdca6505ad8564d7ce136e9
780d37e399ae4c500cc86dc17246814b0a51575a5946e2b9d1144620e423f4b8
GET /u/H-75634-40T6KABMEEVC9DPE/index.html HTTP/1.1
Host: landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduQsZHUUeHaA4gA5K15ODiYUn9bka9KrCkX8oZzdI1679etQFRLsPdrLIDI5oaXd-7LkcHjpZO_hSz7spoimXI4DyfbBJEM
date: Mon, 06 Feb 2023 20:23:07 GMT
cache-control: no-store
expires: Tue, 06 Feb 2024 20:23:07 GMT
last-modified: Fri, 13 Jan 2023 00:18:01 GMT
etag: "db7d69f4f2c7ff6273eb177a5096eee6"
vary: Accept-Encoding
x-goog-generation: 1673569081774596
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2959
content-type: text/html
content-encoding: gzip
x-goog-hash: crc32c=nygBBw==, md5=231p9PLH/2Jz6xd6UJbu5g==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 2959
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c5e7756e7580e806710c43c1514e6f96
8fe07ef62959d8a35774f09ff678159252172f56
e31982b6098a598c30529b4ccb2400dd8d1592a211d8b4aadae2a2654ecece4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E31982B6098A598C30529B4CCB2400DD8D1592A211D8B4AADAE2A2654ECECE4C"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17226
Expires: Tue, 07 Feb 2023 01:10:14 GMT
Date: Mon, 06 Feb 2023 20:23:08 GMT
Connection: keep-alive
landbot.io/u/H-74380-KZ4OVLW593QM7PJZ/index.html
35.244.204.185200 OK 3.0 kB URL HTTP/2 landbot.io/u/H-74380-KZ4OVLW593QM7PJZ/index.html
IP 35.244.204.185:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8781)
Hash 59ecc3862726f22678e0837a276c9949
0fc5768032f188e7bf87a566cb21a7c7d79ba6e1
2380eba63f83ad01e60ceb31781eae9e306f68abdceb40dac2ebc59b059d6f2e
GET /u/H-74380-KZ4OVLW593QM7PJZ/index.html HTTP/1.1
Host: landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsOxjUAMkKMPmoUo0w2vUXuhmwUzmIK9Ve7w5WPAyLGHr1PkAAIGqBO0iLJm4nUujFGCI5daM64Eoc7P4TUDHBsT7ys6FOa
date: Mon, 06 Feb 2023 20:23:08 GMT
cache-control: no-store
expires: Tue, 06 Feb 2024 20:23:08 GMT
last-modified: Fri, 13 Jan 2023 00:18:00 GMT
etag: "59ecc3862726f22678e0837a276c9949"
vary: Accept-Encoding
x-goog-generation: 1673569080500092
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2952
content-type: text/html
content-encoding: gzip
x-goog-hash: crc32c=YMQtOQ==, md5=WezDhicm8iZ44IN6J2yZSQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 2952
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5543
Cache-Control: max-age=89500
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e006a1-117"
Expires: Tue, 07 Feb 2023 21:14:48 GMT
Last-Modified: Sun, 05 Feb 2023 19:42:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5769
Cache-Control: max-age=89726
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e006a1-117"
Expires: Tue, 07 Feb 2023 21:18:34 GMT
Last-Modified: Sun, 05 Feb 2023 19:42:25 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5543
Cache-Control: max-age=89500
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e006a1-117"
Expires: Tue, 07 Feb 2023 21:14:48 GMT
Last-Modified: Sun, 05 Feb 2023 19:42:25 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6330
Cache-Control: max-age=90287
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e006a1-117"
Expires: Tue, 07 Feb 2023 21:27:55 GMT
Last-Modified: Sun, 05 Feb 2023 19:42:25 GMT
Server: ECS (amb/6B8C)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3615
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Last-Modified: Mon, 06 Feb 2023 19:22:53 GMT
Server: ECS (amb/6B8F)
X-Cache: HIT
Content-Length: 279
cdn.landbot.io/landbot/css/landbot-2.2.0.css?t=1673569081.7236679
104.22.22.110200 OK 16 kB URL HTTP/2 cdn.landbot.io/landbot/css/landbot-2.2.0.css?t=1673569081.7236679
IP 104.22.22.110:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash bea820c79d3d2386a4002119084c343e
c889d53ccfd8398158e79d44727244aa4075ce83
1655c161fc5f5e299187828e71107b3d3342930f495cac0f0c7bc33c3b9c3b97
GET /landbot/css/landbot-2.2.0.css?t=1673569081.7236679 HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/css
content-length: 16335
x-guploader-uploadid: ADPycdsepgvq-GKwKT8G640kCfOxGkiF7Kw0n5ipJIURXz3WGvuaZpWjnLIVDOO2sHiJjipZVRSL39jqG8N96e5DJa86DA
x-goog-generation: 1602087210300328
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 16335
content-encoding: gzip
x-goog-hash: crc32c=oYNm8A==, md5=vqggx509I4akACEZCEw0Pg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type
expires: Mon, 06 Feb 2023 20:23:18 GMT
cache-control: max-age=10,no-transform
last-modified: Wed, 07 Oct 2020 16:13:30 GMT
etag: "bea820c79d3d2386a4002119084c343e"
age: 0
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 79569a13f865b51b-OSL
X-Firefox-Spdy: h2
cdn.landbot.io/landbot/css/landbot-2.2.0.css?t=1673569080.4422722
104.22.22.110200 OK 16 kB URL HTTP/2 cdn.landbot.io/landbot/css/landbot-2.2.0.css?t=1673569080.4422722
IP 104.22.22.110:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash bea820c79d3d2386a4002119084c343e
c889d53ccfd8398158e79d44727244aa4075ce83
1655c161fc5f5e299187828e71107b3d3342930f495cac0f0c7bc33c3b9c3b97
GET /landbot/css/landbot-2.2.0.css?t=1673569080.4422722 HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/css
content-length: 16335
x-guploader-uploadid: ADPycdu1UXq0rRYnw7eVFhTHRsU6rB3TBRMmIt-jdEv4Ttx8B7AsEMqz39I8XSRk8jbUjN9nhGzbenUQKcs1wHU0ldDzyPttt34t
x-goog-generation: 1602087210300328
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 16335
content-encoding: gzip
x-goog-hash: crc32c=oYNm8A==, md5=vqggx509I4akACEZCEw0Pg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type
expires: Mon, 06 Feb 2023 20:23:18 GMT
cache-control: max-age=10,no-transform
last-modified: Wed, 07 Oct 2020 16:13:30 GMT
etag: "bea820c79d3d2386a4002119084c343e"
age: 0
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 79569a13f861b51b-OSL
X-Firefox-Spdy: h2
cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569080.4422722
104.22.22.110200 OK 977 kB URL HTTP/2 cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569080.4422722
IP 104.22.22.110:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size 977 kB (976645 bytes)
Hash b7acabb6fc679927f2bacd58054d1973
f7591a3b64e1890a3cfd009c08d471baacec6a31
c5fe4646516f754ba4422628b4c8882c505ff9d99f30d55f188ac8151ddfab60
GET /landbot/js/landbot-2.2.0.js?t=1673569080.4422722 HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/javascript
content-length: 976645
x-guploader-uploadid: ADPycdtvu7Wpfq0WPnO_t8gWZt2tZ4rwDNLdI5fmXafo2vfAHq6UCuUe-9dD_-hAmIM4Mw2IuAtw5kiqQ-OWtYQRmITGGQBftbIG
x-goog-generation: 1614254571604412
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 976645
x-goog-meta-:
x-goog-custom-time: 1970-01-01T00:00:00Z
x-goog-hash: crc32c=06g00A==, md5=t6yrtvxnmSfyus1YBU0Zcw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type
expires: Mon, 06 Feb 2023 20:23:18 GMT
cache-control: max-age=10,no-transform
last-modified: Thu, 25 Feb 2021 12:02:51 GMT
etag: "b7acabb6fc679927f2bacd58054d1973"
age: 0
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 79569a13d830b51b-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 03c95a6c576ec530482cd21b04c6fdff
3a174dfeed2a47acb87328dcfebda02c76f6cbba
68215359948f6537f6bde2dc6127983ff67d569e07e2b893b5c0c1054c0bb5e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5543
Cache-Control: max-age=89500
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e006a1-117"
Expires: Tue, 07 Feb 2023 21:14:48 GMT
Last-Modified: Sun, 05 Feb 2023 19:42:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569080.4422722
104.22.22.110200 OK 977 kB URL HTTP/2 cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569080.4422722
IP 104.22.22.110:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size 977 kB (976645 bytes)
Hash b7acabb6fc679927f2bacd58054d1973
f7591a3b64e1890a3cfd009c08d471baacec6a31
c5fe4646516f754ba4422628b4c8882c505ff9d99f30d55f188ac8151ddfab60
GET /landbot/js/landbot-2.2.0.js?t=1673569080.4422722 HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/javascript
content-length: 976645
x-guploader-uploadid: ADPycdtvu7Wpfq0WPnO_t8gWZt2tZ4rwDNLdI5fmXafo2vfAHq6UCuUe-9dD_-hAmIM4Mw2IuAtw5kiqQ-OWtYQRmITGGQBftbIG
x-goog-generation: 1614254571604412
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 976645
x-goog-meta-:
x-goog-custom-time: 1970-01-01T00:00:00Z
x-goog-hash: crc32c=06g00A==, md5=t6yrtvxnmSfyus1YBU0Zcw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type
expires: Mon, 06 Feb 2023 20:23:18 GMT
cache-control: max-age=10,no-transform
age: 0
last-modified: Thu, 25 Feb 2021 12:02:51 GMT
etag: "b7acabb6fc679927f2bacd58054d1973"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 79569a144919b51b-OSL
X-Firefox-Spdy: h2
cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569081.7236679
104.22.22.110200 OK 280 B URL HTTP/2 cdn.landbot.io/landbot/js/landbot-2.2.0.js?t=1673569081.7236679
IP 104.22.22.110:0
Hash 8e6c8a904a6275f4d478ff38411ca6b7
36f7ab0cfcd1da5101ce8d9e385e3a31061d029d
a3147f1f023affaf8a81efa9c13663417dab8d8cad5a5b676484a9944c008410
GET /landbot/js/landbot-2.2.0.js?t=1673569081.7236679 HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/javascript
content-length: 976645
x-guploader-uploadid: ADPycdvFFYnxzNrxhkQDKkqTNB2CMIFEvzgFeDLbEi14Kez8QNqSW9uakKfJUXdbNPmnsSS9wvoVUQBeFTqBIdSJDg54YrQKwtqB
x-goog-generation: 1614254571604412
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 976645
x-goog-meta-:
x-goog-custom-time: 1970-01-01T00:00:00Z
x-goog-hash: crc32c=06g00A==, md5=t6yrtvxnmSfyus1YBU0Zcw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type
expires: Mon, 06 Feb 2023 20:23:18 GMT
cache-control: max-age=10,no-transform
last-modified: Thu, 25 Feb 2021 12:02:51 GMT
etag: "b7acabb6fc679927f2bacd58054d1973"
age: 0
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 79569a13d83db51b-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 8e6c8a904a6275f4d478ff38411ca6b7
36f7ab0cfcd1da5101ce8d9e385e3a31061d029d
a3147f1f023affaf8a81efa9c13663417dab8d8cad5a5b676484a9944c008410
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3864
Cache-Control: max-age=113421
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:08 GMT
Etag: "63e06aa1-118"
Expires: Wed, 08 Feb 2023 03:53:29 GMT
Last-Modified: Mon, 06 Feb 2023 02:49:05 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2350
Expires: Mon, 06 Feb 2023 21:02:19 GMT
Date: Mon, 06 Feb 2023 20:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2350
Expires: Mon, 06 Feb 2023 21:02:19 GMT
Date: Mon, 06 Feb 2023 20:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2350
Expires: Mon, 06 Feb 2023 21:02:19 GMT
Date: Mon, 06 Feb 2023 20:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2350
Expires: Mon, 06 Feb 2023 21:02:19 GMT
Date: Mon, 06 Feb 2023 20:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2350
Expires: Mon, 06 Feb 2023 21:02:19 GMT
Date: Mon, 06 Feb 2023 20:23:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 336b665bfad04ec8ed14b01bbf17566d
92102d4c75d2c7efd8197be88e3cb467d2682190
1e21687a242c058a3b442909b168c5e706175b1e93e51cfce691c6f033f795d7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8039
x-amzn-requestid: b36a6062-0676-4abc-820c-959bc02810f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4pkoECwIAMF4hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e022ea-52faddc079b7107004e8cfea;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:43:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MOgI0aopvRaUSJ-YFH6QFNpGxhUNlpnLk7VeCeOsmcrGTUYIESN2Hg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:13:33 GMT
age: 79776
etag: "92102d4c75d2c7efd8197be88e3cb467d2682190"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad2298793399bf73c51c7d60952065c1
816bd4c36ceea2c46489ae72fde0b4a94c7c4bef
dc540d64e5e0835c7007e89ca3b5dd620b43a87e13309f323f3843a5f908a199
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8649
x-amzn-requestid: f85f3c9d-95c1-4db6-af5f-595070fe46c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHzboAMFQCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-6eed72bf20887cac6dc1a56a;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7HTSLYJmhfIGlCjeG2EeN3q2Cd9vKlq71nqo3iIuhwkgwlEAlRPmQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:02 GMT
age: 81127
etag: "816bd4c36ceea2c46489ae72fde0b4a94c7c4bef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 714723c38877e0d1655c7118a88ec064
809a42ce7c76cea0ce16af8172d852723c3a5f02
6bad7253694d155de31a8f5a3c635545a39aac340ca49d1bc10efb6739d4a356
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8981
x-amzn-requestid: 0054e925-c381-4737-bd92-32b2af3a604e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQHRFoAMFw6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-45ea5ee33d07326c593d21d3;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WPChtMRjKafjMFkXCam-m5lHQ-4E-UZ5VwnfjrBKaz6nuOh70Fkunw==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:02:46 GMT
age: 80423
etag: "809a42ce7c76cea0ce16af8172d852723c3a5f02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:10:54 GMT
age: 79935
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 062e186a259eda97173695240a492c63
9b476a4ec219667f560b88199a3a4e4b0a93b579
d18570d3c4ada689b5c2a99b0783ce41c629bd125e6683cf225e01b7032f14a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12256
x-amzn-requestid: 1b959eb9-cf69-414c-b57b-4a63277d709c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvgx-EhgoAMF2wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc7b3f-2c58e8ac2aee8a8f409a93a0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 03:10:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4R-s-RLkMZ07191B7nQm0O5Bh2njqsKKvOzNkhmygr13X-97J-1BCg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 05:58:11 GMT
age: 51898
etag: "9b476a4ec219667f560b88199a3a4e4b0a93b579"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 81180
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 26a15a1b880ec1026360b696b1c27074
fd35f80a1cf599da2a8e68a44477465a580440a5
a6d5caec988319523c120bc435a4ff0200b7ead114db10db19a09caeace978f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:500&subset=latin,cyrillic
142.250.74.106200 OK 982 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:500&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 37f560862ca11f3e7c657d9533550172
0a16944dd7372c26296dcf211a319372ff38ae29
88b4674946388cb8eb762c1dab54b24b5b000c4e9c8a2f86b770cae3aadf9886
GET /css?family=Roboto:500&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 22:02:00 GMT
expires: Mon, 05 Feb 2024 22:02:00 GMT
cache-control: public, max-age=31536000
age: 80470
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Feb 2023 10:26:49 GMT
expires: Sun, 04 Feb 2024 10:26:49 GMT
cache-control: public, max-age=31536000
age: 208581
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:regular,700,italic,regular&subset=latin,cyrillic
142.250.74.106200 OK 10 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:regular,700,italic,regular&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 58f83a4922016540fabdfd009f2cce6b
ec4d6fef7eaf613ed4bc7cb70e47ee35c08f2aa7
c6f3fd04fcf0eef313605793702347aae662fdb2d66017dfc43fe6ef475adcb6
GET /css?family=Open+Sans:regular,700,italic,regular&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.74.35200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 17820, version 1.0\012- data
Hash 3d5107abaf7bf4df5478bd04625c0929
b04d394caabf6ea3e500b74781dc2bfd54f3c18d
9ad0a22b0c58240a7a92b4c01aa31f39a5918dea6a8fdfa77e63042abc4fca31
GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 00:39:14 GMT
expires: Wed, 31 Jan 2024 00:39:14 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:13:12 GMT
content-type: font/woff2
age: 589436
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI.woff2
142.250.74.35200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 16756, version 1.0\012- data
Hash 603c99275486a11982874425a0bc0dd1
ffeb62d105d2893d323574407b459fbae8cc90a6
4ffc35ac4d5e3f1546a4c1a879f425f090ff3336e0fce31a39ae4973b5e8c127
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 06:42:05 GMT
expires: Wed, 31 Jan 2024 06:42:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:16:20 GMT
content-type: font/woff2
age: 567665
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:300&subset=latin,cyrillic
142.250.74.106200 OK 18 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 25ddd3da5e9328ed5f29f4daa69f8ebf
cc1c9abbe0ba75ca2ecb23bb8e73db040799f611
74f98aa6a70bad03a043644f05ca5d69a2b16b8b864ec28c32bbe344235a41a3
GET /css?family=Open+Sans:300&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:regular,italic,regular&subset=latin,cyrillic
142.250.74.106200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:regular,italic,regular&subset=latin,cyrillic
IP 142.250.74.106:0
Hash cecffd0ad843389c0e809d269977949e
a7e9115f6848eb8732e6a0e56bca64a191d37199
1574a55a60c18fa3fd20fdf89a918ca0b8d83bab9175c8745c9a7c7e5800e805
GET /css?family=Roboto:regular,italic,regular&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2
142.250.74.35200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 12248, version 1.0\012- data
Hash e2ba25c1f2f512c84e06d1fa05d21991
7bc000ac9fc581519fbf4588d26ecbcf00d3f5bd
aee321b108eeeac25bcfe9ee9f53f0a62c57b1e14a9da05b0974a42454bf22a1
GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 10:14:50 GMT
expires: Sat, 03 Feb 2024 10:14:50 GMT
cache-control: public, max-age=31536000
age: 295700
last-modified: Mon, 15 Aug 2022 18:13:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2
142.250.74.35200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 10292, version 1.0\012- data
Hash 5bdb5a70335e7a4462e02f8c45decb57
1c98607dae007f36fcc31ccc15df771fb925f543
a6933e678530b263486fa7b185a449cac947e1496ef61d496642032f339e9e43
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 10:05:12 GMT
expires: Sat, 03 Feb 2024 10:05:12 GMT
cache-control: public, max-age=31536000
age: 296278
last-modified: Wed, 11 May 2022 19:24:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:900&subset=latin,cyrillic
142.250.74.106200 OK 11 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:900&subset=latin,cyrillic
IP 142.250.74.106:0
Hash d3f4c919f4f5aeb4e1e9de2339c77e6e
f5e37b4927a41ebd4e803cdae8ea1c79863711bb
d94baf5df17fc239c0db86da2b7148cd4e3320f4358468748e5ccca234baa662
GET /css?family=Roboto:900&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 01:03:45 GMT
expires: Fri, 02 Feb 2024 01:03:45 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
age: 415165
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
142.250.74.35200 OK 9.7 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Hash d572b531f0823555818998b466028e08
788073fb7656c7b44a3d67468fc355ceb618290e
bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:55:32 GMT
expires: Fri, 02 Feb 2024 00:55:32 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:44:23 GMT
content-type: font/woff2
age: 415658
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
142.250.74.35200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:52:01 GMT
expires: Thu, 01 Feb 2024 07:52:01 GMT
cache-control: public, max-age=31536000
age: 477069
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300&subset=latin,cyrillic
142.250.74.106200 OK 10 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 46e70cb7b1e30a591d84344c701f56af
aa1e4969f3df49cf1c40832002421511cd618616
2a2c262350404f7e34da0df83c48328895e769dc82f92b33e85737cde89382dd
GET /css?family=Roboto:300&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2
142.250.74.35200 OK 11 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 10628, version 1.0\012- data
Hash 1bfb5b86ca92fbd3673b83c5d031337e
8ea714a65af79a9a72f88e908a158662aecba8c3
4663ff1019b4b07b0edfe3f998056205ba15fdf16ef7aab4e911daed8dbd98b0
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 18:35:15 GMT
expires: Wed, 31 Jan 2024 18:35:15 GMT
cache-control: public, max-age=31536000
age: 524875
last-modified: Mon, 15 Aug 2022 18:11:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 18:52:41 GMT
expires: Tue, 06 Feb 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 5429
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
142.250.74.35200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 16748, version 1.0\012- data
Hash 62d24b94de2fd801742f49d8c6306ba2
d4b841b136adad3051b58a66692f7c5942cf6deb
1b2f88142c19df560f487368810bba2d41c5d6948df584abaa2e0091c0b2245b
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 02:06:58 GMT
expires: Tue, 06 Feb 2024 02:06:58 GMT
cache-control: public, max-age=31536000
age: 65772
last-modified: Mon, 15 Aug 2022 18:14:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed:regular&subset=latin,cyrillic
142.250.74.106200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:regular&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 86dfc7088204e41434410a275bb66d99
4ef91730cac2c3e72f5bd591e6d157aabe7b066f
6736454339c4d0ceb2f568e0263daf810ccc60af5402f91dcce0f9fa470ba741
GET /css?family=Roboto+Condensed:regular&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 70d7e4cd91d9f630c160410d22c1cede
82f5d0fbb11bcde09c107b6c1cbc6e014bb08b85
b8679be6c92167c51793ca4a8774caf0a50949737a99652243208fcfda917faf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5R6FWDL
172.217.21.168200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5R6FWDL
IP 172.217.21.168:0
File type ASCII text, with very long lines (1759)
Hash 27a656ae83189a4ed760f4b86e78e5f3
e56a3b7e0204d4480f77eb425e00abbc21d1790f
ff722c27d4d9716fd6dc486a989c8028e9ba50c37be87f470970aeb1bd861b03
GET /gtm.js?id=GTM-5R6FWDL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 20:23:10 GMT
expires: Mon, 06 Feb 2023 20:23:10 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Feb 2023 19:29:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 70d7e4cd91d9f630c160410d22c1cede
82f5d0fbb11bcde09c107b6c1cbc6e014bb08b85
b8679be6c92167c51793ca4a8774caf0a50949737a99652243208fcfda917faf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d249c609528317bd6a8b6b8c3acbea11
b3fd94b40300ea7e4ff474e0cb76dd138f0091e4
4f471c3e780d98eb861a0c828db6dfb0d123deabe66376145a95fe1490282242
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F471C3E780D98EB861A0C828DB6DFB0D123DEABE66376145A95FE1490282242"
Last-Modified: Sun, 05 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17811
Expires: Tue, 07 Feb 2023 01:20:01 GMT
Date: Mon, 06 Feb 2023 20:23:10 GMT
Connection: keep-alive
welcome.landbot.io/visitors/
34.76.160.62201 Created 1.1 kB URL HTTP/2 welcome.landbot.io/visitors/
IP 34.76.160.62:0
File type JSON data\012- , ASCII text, with very long lines (1086), with no line terminators
Hash 196284886e09dd2d5d1ca454c23df23a
2776acf47aefc0641f1af29466f8d2569d2b3397
c3ec6468b6e5a7d05a5bb0b38a4ba503778048af4f74c9ac293bfe611c05bb63
POST /visitors/ HTTP/1.1
Host: welcome.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://landbot.io/
Content-Type: text/plain;charset=UTF-8
Origin: https://landbot.io
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 201 Created
date: Mon, 06 Feb 2023 20:23:10 GMT
content-type: application/json
content-length: 1086
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
69.16.175.10200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-latest.min.js
IP 69.16.175.10:0
File type ASCII text, with very long lines (32086)
Hash a39e9fcc2a78d5b1ed25b5f853c17a22
f1d1d30d35146a7adee855becba02b776366f169
a0581d3f2c05cfb302f81d2894c114da758e14a290bd4f240c7b63628469ee8d
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:10 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1675714990.dop069.sk1.t,1675714990.cds243.sk1.hn,1675714990.cds256.sk1.c
X-Firefox-Spdy: h2
welcome.landbot.io/visitors/
34.76.160.62201 Created 1.1 kB URL HTTP/2 welcome.landbot.io/visitors/
IP 34.76.160.62:0
File type JSON data\012- , ASCII text, with very long lines (1086), with no line terminators
Hash a332516d14c8e405af39928354eb02c0
d7fcef7435eb20ca64a47cede61029375deec57d
2f7cd4ecca6dca8a5e3d31b5a94572b717d34058de5ae84eb3c9424b91d970f8
POST /visitors/ HTTP/1.1
Host: welcome.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://landbot.io/
Content-Type: text/plain;charset=UTF-8
Origin: https://landbot.io
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 201 Created
date: Mon, 06 Feb 2023 20:23:10 GMT
content-type: application/json
content-length: 1086
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
welcome.landbot.io/visitors/
34.76.160.62201 Created 1.1 kB URL HTTP/2 welcome.landbot.io/visitors/
IP 34.76.160.62:0
File type JSON data\012- , ASCII text, with very long lines (1086), with no line terminators
Hash fffe8efc42cefda478facd1a5879754c
7b4690241339a643a8a1393b78554deff74b8a42
51c8558b1c39c1a51030f7133b52bbebd7b98e8d051a84f8f7e7219fc72b8988
POST /visitors/ HTTP/1.1
Host: welcome.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://landbot.io/
Content-Type: text/plain;charset=UTF-8
Origin: https://landbot.io
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 201 Created
date: Mon, 06 Feb 2023 20:23:10 GMT
content-type: application/json
content-length: 1086
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6190
Cache-Control: max-age=92705
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:08:16 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9a60d6016cd998299b6665a91c01695f
6602b5a94afbe5ff3b999196d726e6424db77339
e290f612ebf43358e7d4e0f9f329f6d4b17550c61f7e0e0e62a5e6b57a42f260
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 789
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 20:10:02 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1301
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 20:01:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2910
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 19:34:41 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3253
Cache-Control: max-age=89768
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 21:19:19 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css
104.17.25.14200 OK 8.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css
IP 104.17.25.14:0
File type ASCII text, with very long lines (30200), with CRLF line terminators
Hash 5374f874b8059be7e293a93b30a67e8c
3912fadaf62a0e8c2b9b4cddaa4b91eecc393570
0a2ff75cae943d389ba696c6a9ea7b08df53bafd372a456fd557b6eab95d94f9
GET /ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: text/css; charset=utf-8
content-length: 975
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-fe0"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 246898
expires: Sat, 27 Jan 2024 20:23:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vklhqm9ruNWNLxDqQ6x81g%2FAx3IAk8%2BvCo2sVoZqXmrnrRf21QkldSTMHiH2aoBVaPwcAL6QcUl9b49HuyxoB8iuoWXyrato6avahdZeqXt8u8zsAOPdZtYiABhCMInfz79EKkps"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79569a2718720b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js
104.17.25.14200 OK 16 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (35906), with no line terminators
Hash 49ec17e437a14dc5367a16c3c8ee3104
dc2533ec007fd77efda80e5f4f77db516644b610
abb0641ee92b478a39b5e1da2e61cb4734fb5637cddecf7b5175e2bf9541a888
GET /ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 5978
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-5148"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1610309
expires: Sat, 27 Jan 2024 20:23:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rkgRhfwQYFyIMpR%2BYP252S%2F%2BI05LIcO%2FhRBVCYJEwB26IZwOOdELNx9aecibpQvhwdw09g%2F4e6weMekd7Ghpw0h1Zxn0KcBkRGZZW8kk028pCwOneP0GEU4A5Nvac%2FJE%2F7V25k1J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79569a2738d00b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lity/2.3.1/lity.min.js
104.17.25.14200 OK 2.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/lity/2.3.1/lity.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (6485)
Hash d43fb00b47fc023e743cf5d08765eda9
4575928b81a34e63b5e83303cecd8e624a525bfa
56b5d2b1c55c89cbf34e584e52d926e680338ad4fc6b8d233891a2ac5752cff3
GET /ajax/libs/lity/2.3.1/lity.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 2515
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed2-19c9"
last-modified: Mon, 04 May 2020 16:12:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4587153
expires: Sat, 27 Jan 2024 20:23:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hwo50TojpmOXWTir04zFHa5wB72WPxD6pdRruQedThRXeQhyzXdfIZmnJygxs%2F206n2bRcXkXvveS6uXrG1F7Ojk0kwPFmkOUz7D6T9WwwH4bJkPzB5H4WtsWyFCS%2FCiwreUUJcx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79569a2738c90b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.205.11200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: pnpw0SEpkCrwFlLIQSDl+bdu7KYQ8IJXngdUPbFa/MaqyMjSI5cq8L8wdaeQ9y7vOncDZj0LMtHPR1JYuC3XNw==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1679558926
date: Mon, 06 Feb 2023 20:23:11 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lity/2.3.1/lity.min.css
104.17.25.14200 OK 795 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/lity/2.3.1/lity.min.css
IP 104.17.25.14:0
File type ASCII text, with very long lines (3324)
Hash f8eb626ab24434caf4ad2308696b66f9
08b066fa11bc3e2837dac0b2167a9e8c9e0ee1c3
2f7a45fc7c3163fcdd29999edb4bdbcd423c9393bd8765a58506e91b56d04d3c
GET /ajax/libs/lity/2.3.1/lity.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: text/css; charset=utf-8
content-length: 795
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed2-d37"
last-modified: Mon, 04 May 2020 16:12:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2170408
expires: Sat, 27 Jan 2024 20:23:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UHJ3i5AIsrcBvY49e3Wn01JVJOJEVQA6JA9wbO7PFPfQrb5ZWyV%2BfikLzNJU3zU3oEDmKSKQAT9Vzpr0BzT10ih5Kiz%2BxwWtdf4DiV1R7ydVOBXIQEDOGcpACY3Sy7%2BntDW9M3Bd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79569a2738e90b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1301
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 20:01:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9a60d6016cd998299b6665a91c01695f
6602b5a94afbe5ff3b999196d726e6424db77339
e290f612ebf43358e7d4e0f9f329f6d4b17550c61f7e0e0e62a5e6b57a42f260
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 789
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 20:10:02 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 9d61097ad4fa306db5a35fda728345a9
7698394acf7018f3f566279796944e7d24017013
d20328bbb0ae1fc87a4287cf7aa42f9d398aa9a8e11562dd2665b18e64a3d199
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 20:23:11 GMT
Last-Modified: Mon, 06 Feb 2023 19:48:16 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: twji11P1lAWkQ2O07CsRkD9EnJ51L1KhtjPoYHa_vIihj5JLntISuw==
Age: 2095
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash e1049592f04ac57ebde585ff09663437
de406408f0591df4100a00f0f0ea98459f4e600e
e4c6fb94ef7bb8d654703c5643a761926c9576a0df9d8148a612cab1703c5099
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 20:23:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 01:34:54 GMT
Expires: Sun, 12 Feb 2023 01:34:53 GMT
Etag: "de406408f0591df4100a00f0f0ea98459f4e600e"
Cache-Control: max-age=450101,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79569a278ef80b59-OSL
cdn.heapanalytics.com/js/heap-3681942550.js
54.230.111.41200 OK 37 kB URL HTTP/2 cdn.heapanalytics.com/js/heap-3681942550.js
IP 54.230.111.41:0
File type ASCII text, with very long lines (65502)
Hash 91e5e6e7038f6f28f73e2afc1e259486
172b3dcc4c42f247a7d0ed7c27a7592e7378436f
34d18f8c527501b0c42517bdd210db8252158af7880ad492fa3bec94ae42baaf
GET /js/heap-3681942550.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 06 Feb 2023 20:23:11 GMT
server: nginx
x-powered-by: Express
etag: W/"1bba9-M0sa90jF9A3BnDdjB0GR3Q"
cache-control: public, max-age=120
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Jjc1fSEKpE8P66uq44stEfNb6g1k31RlxemXr3tky7yoAvPLYZTANg==
X-Firefox-Spdy: h2
s3.amazonaws.com/downloads.mailchimp.com/js/goal.min.js
52.216.56.200200 OK 40 kB URL HTTP/1.1 s3.amazonaws.com/downloads.mailchimp.com/js/goal.min.js
IP 52.216.56.200:0
Hash a99e081d0daa27be2278c6e46012cb63
425f7c7a15a8bca686bc2a9a977571aea4cb78c6
f38e10686a0e3deb149053b8843e2d261bad196e85eb0e77249307f07a610a3a
GET /downloads.mailchimp.com/js/goal.min.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aiBe8r7Wk3YCOG7v9qMacG5GnHZasNw/CbDEBOybJyg/J3IiCgWIXkuUWOm7krEvQOU0myiX7aQ=
x-amz-request-id: 9WXJDG7PS9NMY3P3
Date: Mon, 06 Feb 2023 20:23:12 GMT
Last-Modified: Mon, 20 Aug 2018 17:42:37 GMT
ETag: "db78cc3fefd4dc191250a00cf7b530a3"
Cache-Control: public,max-age=2592000
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 2699
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 7afb8eb5dcbd727fb69c14bfabe20e72
d4b1cc1973e4200a371f0aa8c5ec8232d780a77b
ca0a46edfe267973b60ff163d696fe7c0e862e56ee3f90f098bf309f276c987f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1028934098/?random=1675715037598&cv=11&fst=1675715037598&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&auid=1295968354.1675715038&rfmt=3&fmt=4
142.250.74.34200 OK 906 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1028934098/?random=1675715037598&cv=11&fst=1675715037598&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&auid=1295968354.1675715038&rfmt=3&fmt=4
IP 142.250.74.34:0
File type ASCII text, with very long lines (2071), with no line terminators
Hash 76a6bf1b9e51020230b8ccdef5ce9673
3c1abbaa1d66512f992a485b5f8d7bce64be90db
b82e5e907489bf69c404f92ee519fb88babb99049fbd93b201e588746dec7b7c
GET /pagead/viewthroughconversion/1028934098/?random=1675715037598&cv=11&fst=1675715037598&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&auid=1295968354.1675715038&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Feb 2023 20:23:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 906
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 06-Feb-2023 20:38:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash f60925f7a931665cd26fac41318fa21e
e292279a406129efcdf36a57f58f1e23a69fc5c3
e148fac57700d1f682f9afc2d4c940759b5e16b5d32bbabb390a47ce882df844
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 20:23:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 10 Feb 2023 18:20:43 GMT
ETag: "e292279a406129efcdf36a57f58f1e23a69fc5c3"
Last-Modified: Mon, 06 Feb 2023 18:20:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 399
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79569a2a18b01bfe-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash b30b1fd46209a407384b1d7884ac5003
feb268806f145c8559fc44488443398563dec3e0
e84d7acc84a25422096fd56e145498ea9c80aeb62be56338acd894422985a0ec
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 20:23:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 10 Feb 2023 16:53:08 GMT
ETag: "feb268806f145c8559fc44488443398563dec3e0"
Last-Modified: Mon, 06 Feb 2023 16:53:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3284
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79569a2a1cc6fabc-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash da121da6bca59e3c4091268d1ef444f2
40b8e5dbab3b96253de86cdfc0f232c55bb8371e
806a464e3d049fd1e307df58d82b769bb6dc82fb5a27edbb7eb745ecd1c3cd43
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 20:23:11 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Fri, 10 Feb 2023 19:15:31 GMT
ETag: "40b8e5dbab3b96253de86cdfc0f232c55bb8371e"
Last-Modified: Mon, 06 Feb 2023 19:15:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 356
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79569a2a1f07b4eb-OSL
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 0 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-client-version
Referer: https://landbot.io/
Origin: https://landbot.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://landbot.io
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-client-version
access-control-max-age: 3600
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?159
87.240.132.72200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?159
IP 87.240.132.72:0
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js?159 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Fri, 10 Feb 2023 20:23:11 GMT
cache-control: max-age=345600
x-frontend: front220206
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 0 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-client-version
Referer: https://landbot.io/
Origin: https://landbot.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://landbot.io
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-client-version
access-control-max-age: 3600
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 0 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-client-version
Referer: https://landbot.io/
Origin: https://landbot.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://landbot.io
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-client-version
access-control-max-age: 3600
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
87.250.251.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Mon, 06 Feb 2023 20:23:11 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Mon, 06 Feb 2023 21:23:11 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash f1d07f5359ff84e22c8ffaebb256a3c3
48ca6485c7d56c8c79dc651e4c53c6e61a46afeb
0531b90fd00f97623bb69b8222d80c79604c596b4df5fa4748b75e55f23dd90c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 20:23:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 21:37:25 GMT
Expires: Sat, 11 Feb 2023 21:37:24 GMT
Etag: "48ca6485c7d56c8c79dc651e4c53c6e61a46afeb"
Cache-Control: max-age=435852,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79569a2acb670b59-OSL
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 867 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
File type JSON data\012- , ASCII text, with very long lines (801)
Hash 07b1336a097623c602dfa6eadea60713
b6846398ba59af0c2ed00b3a3ebffeb81f7cd8dd
9e800eb84d033e4bf8f93686718460c18bf5c56bfb4d9386f48e4c95618c6d87
POST /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Client-Version: Firefox/JsCore/5.0.4/FirebaseCore-web
Content-Length: 948
Origin: https://landbot.io
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:11 GMT
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 867
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://landbot.io
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 870 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
File type JSON data\012- , ASCII text, with very long lines (801)
Hash 388fe642ca4fd605ee7a5a869ad8701b
b7ffed5e3e093240e8724cce16ee8408e5811360
bf0250b5c5c6071fa7e21b16d7bd752cfd807f5ab7c4ede321f87f9e2560159f
POST /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Client-Version: Firefox/JsCore/5.0.4/FirebaseCore-web
Content-Length: 948
Origin: https://landbot.io
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
date: Mon, 06 Feb 2023 20:23:11 GMT
pragma: no-cache
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 870
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://landbot.io
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
142.250.74.10200 OK 865 B URL HTTP/2 www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg
IP 142.250.74.10:0
File type JSON data\012- , ASCII text, with very long lines (801)
Hash 05599de0c340cea43de1542d4bcf12e5
a4f38ab4339fbbe3d85181105a3fd8f59a57456e
30d07e6e2905b3ac1a09277a1d66da9d79da13a3bdd52811214150f636172af1
POST /identitytoolkit/v3/relyingparty/verifyCustomToken?key=AIzaSyAzT_5GGsNISwUvpqpIMGhpqFmhsMMjuxg HTTP/1.1
Host: www.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Client-Version: Firefox/JsCore/5.0.4/FirebaseCore-web
Content-Length: 948
Origin: https://landbot.io
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
pragma: no-cache
date: Mon, 06 Feb 2023 20:23:11 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 865
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://landbot.io
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.hotjar.com/modules.bca0d1c28285412bb689.js
143.204.55.68200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.bca0d1c28285412bb689.js
IP 143.204.55.68:0
File type Unicode text, UTF-8 text, with very long lines (49086)
Hash e923aa360dc485b9df86355bd040c998
03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
GET /modules.bca0d1c28285412bb689.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sQ-Jr6T6lNPM3yp8LeIT8HfOKBIUZCqlzgt5Mper-ZjbUS4ZQkoT1g==
age: 285185
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 4.3 kB IP 216.58.211.3:0
Hash 452f98b36a55afe34fc09a8c0af1bf34
81d29926f07581fd031f782f2e9b02cea9f8a92c
cfbcae6fd275751a8f29703b7c3b0ebcddb320ece9c674fd2f46c1fba3be221b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=0&ipr=y
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=0&ipr=y
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Feb 2023 20:23:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=1&ipr=y
142.250.74.67200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=1&ipr=y
IP 142.250.74.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1028934098/?random=1675715037598&cv=11&fst=1675713600000&bg=ffffff&guid=ON&async=1>m=45He3210&u_w=1280&u_h=1024&frm=1&url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&tiba=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&fmt=3&is_vtc=1&random=1057623435&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Feb 2023 20:23:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 683 B IP 216.58.211.3:0
Hash dbfd1872aefe640ca92646c674d57812
1c0276643b04f58292e45bd29ef076976c147ddb
609efe708334f075a2c66bf9d9f6c7e73bdbbde4a147d9a7e4d51d16d4496aa0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash a9c0864c2be05b42f451b6b4a9bbb233
523bd6748b4939700ae2c52789b5f54d51541845
3801e852995788ddeaa9f7e545d492d75d5b696b3816e5c09b15a2365f58a2ed
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123368
Date: Mon, 06 Feb 2023 20:23:12 GMT
Etag: "63e09073-1d7"
Expires: Wed, 08 Feb 2023 06:39:20 GMT
Last-Modified: Mon, 06 Feb 2023 05:30:27 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KM0bEtypmZq7K9QK3-qr4TbNAIwS06wJO0yF1uALFFiK36qpAwaJug==
Age: 4133
static.hotjar.com/c/hotjar-861862.js?sv=7
54.230.111.8200 OK 5.7 kB URL HTTP/2 static.hotjar.com/c/hotjar-861862.js?sv=7
IP 54.230.111.8:0
Hash a63914f26b5fa507855f0ff5be4c7779
20274aded5e2ec257b2e954c0cbbc373e46e7a99
2c1128752d8add6d818a2d175b349c5de2e61e7dd360fa228c5fa9dc953c6b4d
GET /c/hotjar-861862.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Mon, 06 Feb 2023 20:23:11 GMT
cache-control: max-age=60
etag: W/9088252c4debbfebecad8cdff9ade4cb
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ELlJdMSjpvD8wK3iNeSzHIpvJG8SwjBq7CjxDPvSNd4Wrg4WH-iuMw==
X-Firefox-Spdy: h2
api.carrotquest.app/v1/jsconnect
95.213.158.106200 OK 3.5 kB URL HTTP/2 api.carrotquest.app/v1/jsconnect
IP 95.213.158.106:0
ASN #49505 OOO Network of data-centers Selectel
Hash 96cd84f1bb01d29f469604855384970d
74a2fddac3a147e50620bf4d36efabb094633fcf
545ed12b6bd08179fc4f555379deb42d0ebef1afdfbc1eec6fa1902533d512a7
POST /v1/jsconnect HTTP/1.1
Host: api.carrotquest.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------6289868401368480910516897113
Content-Length: 1626
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:07 GMT
content-type: application/json
allow: GET, POST, OPTIONS
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb.js
151.139.128.10301 Moved Permanently 0 B URL HTTP/2 cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb.js
IP 151.139.128.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /projects/f051b304-de59-454b-bf31-a9f9e60b0bdb.js HTTP/1.1
Host: cdn.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 06 Feb 2023 20:23:12 GMT
accept-ranges: bytes
content-length: 0
location: https://cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb_eu.js
cache-control: max-age=86400
x-hw: 1675714992.cds010.sk1.hn,1675714992.cds014.sk1.c
x-hw-loc: https://cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb.js
access-control-allow-origin: *
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?144
87.240.132.72200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?144
IP 87.240.132.72:0
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js?144 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Fri, 10 Feb 2023 20:23:12 GMT
cache-control: max-age=345600
x-frontend: front220206
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 93e27510e7cfc4de5061cc3fc94a590e
8638a90724b86a693e5346fec7bb2d7166360fd8
696cc2c20a05999f597abd00ea88e7cad9b714a1f6247d8b15d26959e0e480b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "696CC2C20A05999F597ABD00EA88E7CAD9B714A1F6247D8B15D26959E0E480B8"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9756
Expires: Mon, 06 Feb 2023 23:05:48 GMT
Date: Mon, 06 Feb 2023 20:23:12 GMT
Connection: keep-alive
www.facebook.com/tr/?id=386121072004168&ev=PageView&dl=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&rl=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&if=true&ts=1675715038970&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1675715038969.559157219&it=1675715038001&coo=false&rqm=GET
157.240.205.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=386121072004168&ev=PageView&dl=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&rl=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&if=true&ts=1675715038970&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1675715038969.559157219&it=1675715038001&coo=false&rqm=GET
IP 157.240.205.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=386121072004168&ev=PageView&dl=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&rl=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&if=true&ts=1675715038970&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1675715038969.559157219&it=1675715038001&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 06 Feb 2023 20:23:12 GMT
X-Firefox-Spdy: h2
vk.com/rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&metatag_title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81
87.240.132.72200 OK 65 B URL HTTP/2 vk.com/rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&metatag_title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81
IP 87.240.132.72:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ec4341fe3a8b2c4880fbfe0ef9cde34f
a0947414eb426b2939ca1a05fc870763f6bfc63f
01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&metatag_title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.113251
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Wed, 07 Feb 2024 18:34:06 GMT; path=/; domain=.vk.com
remixstlid=9112422422333934275_RXGZku4EiRWh30TAVx8Es8cCVbFHZaL4iF0wsgi4NSP; expires=Tue, 06 Feb 2024 20:23:12 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
static.helloumi.com/umiwebchat/umiwebchat.js?v=1534959908932
35.190.21.72200 OK 34 kB URL HTTP/2 static.helloumi.com/umiwebchat/umiwebchat.js?v=1534959908932
IP 35.190.21.72:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0528c5151d0073e3fdfe79d261c2dd28
dbf85af28b09f7956c2ff95e80cf9d34267685d1
655c8e9e14aa7dd9ff7fbcab4a4b37dcd4c4d9f22263c20f1caa80881280ff86
GET /umiwebchat/umiwebchat.js?v=1534959908932 HTTP/1.1
Host: static.helloumi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdstPt-QCwsnW4gDSPP5uoYCa-uxtMC0f0P8NXMWvZ2r4w0j8eS2hYzxF36dE4CbS_UPjOnglmE0yCwVk4cU6_O6nyvu-6Ql
date: Mon, 06 Feb 2023 20:23:12 GMT
cache-control: max-age=3600
expires: Mon, 06 Feb 2023 21:23:12 GMT
last-modified: Fri, 29 Jun 2018 10:17:05 GMT
etag: "0528c5151d0073e3fdfe79d261c2dd28"
vary: Accept-Encoding
x-goog-generation: 1530267425860647
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 34008
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=CEadow==, md5=BSjFFR0Ac+P9/nnSYcLdKA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 34008
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715034090/////1/1/1/1/1/1/196/581/582/585/2900/2962/2967/3107/3107/3109;ni=;lvid=1675715038986%3A1675715039032%3A2%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.703139788808606;e=RT/load;et=1675715039031
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715034090/////1/1/1/1/1/1/196/581/582/585/2900/2962/2967/3107/3107/3109;ni=;lvid=1675715038986%3A1675715039032%3A2%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.703139788808606;e=RT/load;et=1675715039031
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715034090/////1/1/1/1/1/1/196/581/582/585/2900/2962/2967/3107/3107/3109;ni=;lvid=1675715038986%3A1675715039032%3A2%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.703139788808606;e=RT/load;et=1675715039031 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714992:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 93e27510e7cfc4de5061cc3fc94a590e
8638a90724b86a693e5346fec7bb2d7166360fd8
696cc2c20a05999f597abd00ea88e7cad9b714a1f6247d8b15d26959e0e480b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "696CC2C20A05999F597ABD00EA88E7CAD9B714A1F6247D8B15D26959E0E480B8"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9756
Expires: Mon, 06 Feb 2023 23:05:48 GMT
Date: Mon, 06 Feb 2023 20:23:12 GMT
Connection: keep-alive
top-fwz1.mail.ru/counter?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569
95.163.52.67302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569
set-cookie: FTID=1RMYgQ0tkIIF:1675714992:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
heapanalytics.com/h?a=3681942550&u=8361804737586509&v=3680051046771465&s=868838583243942&b=web&tv=4.0&z=0&r=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ts=1675715038229&d=www.akson-vent.ru&h=%2Fru%2FContacts%2FAskAQuestionForm&t=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&st=1675715039140
34.195.230.215200 OK 37 B URL HTTP/2 heapanalytics.com/h?a=3681942550&u=8361804737586509&v=3680051046771465&s=868838583243942&b=web&tv=4.0&z=0&r=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ts=1675715038229&d=www.akson-vent.ru&h=%2Fru%2FContacts%2FAskAQuestionForm&t=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&st=1675715039140
IP 34.195.230.215:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=3681942550&u=8361804737586509&v=3680051046771465&s=868838583243942&b=web&tv=4.0&z=0&r=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ts=1675715038229&d=www.akson-vent.ru&h=%2Fru%2FContacts%2FAskAQuestionForm&t=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&st=1675715039140 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 06 Feb 2023 20:23:12 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Mon, 06 Feb 2023 21:23:12 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vk.com/rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&metatag_title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2
87.240.132.72200 OK 65 B URL HTTP/2 vk.com/rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&metatag_title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2
IP 87.240.132.72:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ec4341fe3a8b2c4880fbfe0ef9cde34f
a0947414eb426b2939ca1a05fc870763f6bfc63f
01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?p=VK-RTRG-284427-eVIZU&metatag_url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&metatag_title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.113251
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sun, 04 Feb 2024 04:51:43 GMT; path=/; domain=.vk.com
remixstlid=9061616189038085129_Z1QVIApziwqsM6utl8Wc5rk9iBMlwNQJDmUumKGtGSH; expires=Tue, 06 Feb 2024 20:23:12 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
api.carrotquest.app/v1/jsconnect
95.213.158.106200 OK 3.5 kB URL HTTP/2 api.carrotquest.app/v1/jsconnect
IP 95.213.158.106:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (19341), with no line terminators
Hash 03ef33ba9fa9a733c3c00f1a9c105fca
5fc3014776aaa6fab6d735fdea20240b7ed41661
4b1df8ce8ad12af4ce6e3fa1847b506db9283c5b3a9a380fe37b127abd914dc3
POST /v1/jsconnect HTTP/1.1
Host: api.carrotquest.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------380160312633386243761548302122
Content-Length: 1969
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: application/json
allow: POST, OPTIONS, GET
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
content-encoding: gzip
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715033133/////788/788/788/788/788/788/794/854/900/871/3574/3615/3621/4497/4497/4499;ni=;lvid=1675715038986%3A1675715039344%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.6952489485194494;e=RT/load;et=1675715039342
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715033133/////788/788/788/788/788/788/794/854/900/871/3574/3615/3621/4497/4497/4499;ni=;lvid=1675715038986%3A1675715039344%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.6952489485194494;e=RT/load;et=1675715039342
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675715033133/////788/788/788/788/788/788/794/854/900/871/3574/3615/3621/4497/4497/4499;ni=;lvid=1675715038986%3A1675715039344%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.6952489485194494;e=RT/load;et=1675715039342 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:12 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714992:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:12 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039029%3A1%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.782640106655569 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.akson-vent.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714993:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:13 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb_eu.js
151.139.128.10200 OK 56 kB URL HTTP/2 cdn.mouseflow.com/projects/f051b304-de59-454b-bf31-a9f9e60b0bdb_eu.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (59323), with CRLF line terminators
Hash f11c1398f051254bbbc5900c5005000c
7ecc83f4ba31c2c96c253bd72cf5c1f3b6a875d5
1a0492c2c5b76b24a9394e34bcd5167be4773adfecc78014e7d1c30ba5ff678a
GET /projects/f051b304-de59-454b-bf31-a9f9e60b0bdb_eu.js HTTP/1.1
Host: cdn.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.akson-vent.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:13 GMT
cache-control: max-age=86400
content-encoding: gzip
content-length: 55987
content-type: application/javascript; charset=utf-8
last-modified: Tue, 24 Jan 2023 11:19:32 GMT
accept-ranges: bytes
etag: "30dd99bbe52fd91:0"
server:
x-hw: 1675714992.cds010.sk1.hn,1675714993.cds252.sk1.pr
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
142.250.74.35200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 07:08:09 GMT
expires: Sat, 03 Feb 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 306904
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:600&subset=latin,cyrillic
142.250.74.106200 OK 1.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:600&subset=latin,cyrillic
IP 142.250.74.106:0
Hash 7a0e75901402c8240d9034ecc3b4a369
2723a996f065deb2379da6b7697985fd8490f8af
30815de02b88c471b17bedbcbc895c3cad8c10957775a58cf94125bc39d0a088
GET /css?family=Open+Sans:600&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715039568%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.41561001436613865;e=detect
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715039568%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.41561001436613865;e=detect
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715039568%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.41561001436613865;e=detect HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714993:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:13 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&page-ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A661380635%3Aphid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A829360461%3Arqn%3A2%3Au%3A167571503945588337%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C387%2C0%2C%2C0%2C%2C2318%2C5%2C3108%2C3108%2C1%2C2963%3Aco%3A0%3Ans%3A1675715034090%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3A%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(0)fip(1)ti(2)
87.250.251.119302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&page-ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A661380635%3Aphid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A829360461%3Arqn%3A2%3Au%3A167571503945588337%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C387%2C0%2C%2C0%2C%2C2318%2C5%2C3108%2C3108%2C1%2C2963%3Aco%3A0%3Ans%3A1675715034090%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3A%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(0)fip(1)ti(2)
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 71c31dafd5ae3eec1539202cb856ed28
359713252434869f4c043133420c682ecbb3096b
0b223fc359f901ab699a9327ed3d95ff83627c14fb88e37a89472ce66882d9ae
GET /watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&page-ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A661380635%3Aphid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A829360461%3Arqn%3A2%3Au%3A167571503945588337%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C387%2C0%2C%2C0%2C%2C2318%2C5%2C3108%2C3108%2C1%2C2963%3Aco%3A0%3Ans%3A1675715034090%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3A%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(0)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/14020963/1?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&page-ref=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A661380635%3Aphid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A829360461%3Arqn%3A2%3Au%3A167571503945588337%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C387%2C0%2C%2C0%2C%2C2318%2C5%2C3108%2C3108%2C1%2C2963%3Aco%3A0%3Ans%3A1675715034090%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3A%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%280%29fip%281%29ti%282%29
date: Mon, 06 Feb 2023 20:23:13 GMT
access-control-allow-origin: https://www.akson-vent.ru
set-cookie: yabs-sid=1706606481675714993; Path=/; SameSite=None; Secure
i=WjDl/zM4hVVL2Jij/9tMb42iIoA1w0W4D2wudUJ4oAjiFjZ5/n3huxkCMBL7LQQbHfABUivRHR/fWiPdUQZbM4fKkW0=; Expires=Thu, 03-Feb-2033 20:23:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5183126571675714993; Expires=Tue, 06-Feb-2024 20:23:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5183126571675714993; Expires=Tue, 06-Feb-2024 20:23:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707250993.yc.1675714993#1707250993.yrts.1675714993#1707250993.yrtsi.1675714993; Expires=Tue, 06-Feb-2024 20:23:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 06-Feb-2023 20:23:13 GMT
last-modified: Mon, 06-Feb-2023 20:23:13 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14020963/1?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.251.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/14020963/1?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash c1b8c2813a1ae80a3ccbd9edda90ae37
8c281e9171d12f2af97244c2832f20c758487657
0c3ce195697453ec5ec78a43591a0f2d7861848dff24f415ee8c4c8531cf09b8
GET /watch/14020963/1?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.akson-vent.ru
Referer: https://www.akson-vent.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Mon, 06 Feb 2023 20:23:13 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.akson-vent.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 06-Feb-2023 20:23:13 GMT
last-modified: Mon, 06-Feb-2023 20:23:13 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039341%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9608141858607732
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039341%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9608141858607732
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675715038986%3A1675715039341%3A3%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9608141858607732 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.akson-vent.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714993:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:13 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
o2.mouseflow.com/init?v=17.81&p=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&ret=0&u=5966b2a84c237b5f0b71de9de3be3a06&href=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&url=www.akson-vent.ru%2Fhtml%2Fmotivators.htm&ref=&title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&res=1280x1024&tz=0&to=0&dnt=0&ori=&dw=1268&dh=939&time=5641&pxr=1&gdpr=1
185.17.186.161200 OK 0 B URL HTTP/2 o2.mouseflow.com/init?v=17.81&p=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&ret=0&u=5966b2a84c237b5f0b71de9de3be3a06&href=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&url=www.akson-vent.ru%2Fhtml%2Fmotivators.htm&ref=&title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&res=1280x1024&tz=0&to=0&dnt=0&ori=&dw=1268&dh=939&time=5641&pxr=1&gdpr=1
IP 185.17.186.161:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /init?v=17.81&p=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&ret=0&u=5966b2a84c237b5f0b71de9de3be3a06&href=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&url=www.akson-vent.ru%2Fhtml%2Fmotivators.htm&ref=&title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&res=1280x1024&tz=0&to=0&dnt=0&ori=&dw=1268&dh=939&time=5641&pxr=1&gdpr=1 HTTP/1.1
Host: o2.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: text/plain; charset=Windows-1252
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
x-recorder: rec-12-eu
server: Mouseflow
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 977 kB URL HTTP/2 mc.yandex.ru/watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size 977 kB (976645 bytes)
Hash b7acabb6fc679927f2bacd58054d1973
f7591a3b64e1890a3cfd009c08d471baacec6a31
c5fe4646516f754ba4422628b4c8882c505ff9d99f30d55f188ac8151ddfab60
GET /watch/14020963?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/14020963/1?wmode=7&page-url=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A3584%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A192211315254%3Ahid%3A845136042%3Az%3A0%3Ai%3A20230206202359%3Aet%3A1675715039%3Ac%3A1%3Arn%3A36097020%3Arqn%3A1%3Au%3A167571503945588337%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C60%2C0%2C789%2C0%2C%2C2720%2C6%2C4498%2C4498%2C1%2C3615%3Aco%3A0%3Ans%3A1675715033133%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-a81f3b9bcdd80a361c14af38dc09b309-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675715039%3At%3AAKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Mon, 06 Feb 2023 20:23:12 GMT
access-control-allow-origin: https://www.akson-vent.ru
set-cookie: yabs-sid=1839897581675714992; Path=/; SameSite=None; Secure
i=Az3r/WXoM5GUJshKPs9CIm+RwEHHFiqwDVOoJH+kovlybquV6/4Byq/n0vJNc5MwqGVtPJtFQp+hVdAoybnAtPdBcGE=; Expires=Thu, 03-Feb-2033 20:23:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3877938821675714992; Expires=Tue, 06-Feb-2024 20:23:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3877938821675714992; Expires=Tue, 06-Feb-2024 20:23:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707250992.yc.1675714992#1707250992.yrts.1675714992#1707250992.yrtsi.1675714992; Expires=Tue, 06-Feb-2024 20:23:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 06-Feb-2023 20:23:12 GMT
last-modified: Mon, 06-Feb-2023 20:23:12 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
heapanalytics.com/h?a=3681942550&u=8361804737586509&v=5423453699022160&s=868838583243942&b=web&tv=4.0&z=2&h=%2FHtml%2Fmotivators.htm&d=www.akson-vent.ru&t=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&ts=1675715039756&sp=r&sp=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&sp=ts&sp=1675715038229&sp=d&sp=www.akson-vent.ru&sp=h&sp=%2Fru%2FContacts%2FAskAQuestionForm&st=1675715039756
34.195.230.215200 OK 37 B URL HTTP/2 heapanalytics.com/h?a=3681942550&u=8361804737586509&v=5423453699022160&s=868838583243942&b=web&tv=4.0&z=2&h=%2FHtml%2Fmotivators.htm&d=www.akson-vent.ru&t=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&ts=1675715039756&sp=r&sp=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&sp=ts&sp=1675715038229&sp=d&sp=www.akson-vent.ru&sp=h&sp=%2Fru%2FContacts%2FAskAQuestionForm&st=1675715039756
IP 34.195.230.215:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=3681942550&u=8361804737586509&v=5423453699022160&s=868838583243942&b=web&tv=4.0&z=2&h=%2FHtml%2Fmotivators.htm&d=www.akson-vent.ru&t=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&ts=1675715039756&sp=r&sp=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&sp=ts&sp=1675715038229&sp=d&sp=www.akson-vent.ru&sp=h&sp=%2Fru%2FContacts%2FAskAQuestionForm&st=1675715039756 HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-PqzQEyMQ6kTK11azeKO8Bw"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 21b38ed843ccebc344a25cbfabe46566
8ae35f71a103d8c2cefc613a38d49db100c0a57f
acc0c9b0a1f27d9b718507861e30d9ddbe9b947ab30403d721cfb3940799bbea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/media.helloumi.com/brands/helloumi.png
216.58.211.16200 OK 15 kB URL HTTP/2 storage.googleapis.com/media.helloumi.com/brands/helloumi.png
IP 216.58.211.16:0
File type PNG image data, 189 x 189, 8-bit/color RGBA, non-interlaced\012- data
Hash d77a2753e3589bf6484d8543d2816ad6
3f26b6b97af65e981421ddbcc7caff23db51ef91
f00a7768faffc5ddf7d0e88fbbefde4348a25092b6dda1f5d5e2246103ae91b8
GET /media.helloumi.com/brands/helloumi.png HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsu5RrOs9g2kPGOGDboYkm3Q-pgQz0Q7zq6zt-7FQMfjQWiqawYTlbZsbloJco3slgfJHXUEnhip9oDlEaGChk-gw
vary: X-Goog-Allowed-Resources
x-goog-generation: 1649150429966321
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15150
x-goog-hash: crc32c=JkgouA==, md5=13onU+NYm/ZITYVD0oFq1g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 15150
server: UploadServer
date: Mon, 06 Feb 2023 19:35:05 GMT
expires: Mon, 06 Feb 2023 20:35:05 GMT
cache-control: public, max-age=3600
age: 2888
last-modified: Tue, 05 Apr 2022 09:20:30 GMT
etag: "d77a2753e3589bf6484d8543d2816ad6"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 4bae592e05a6c391335c92f02691e762
857f3858594ba49814466dbd71005391bd710501
2f6d44eeb1e8fe3c4fb3708e684d28804b594937b786c424585d3f23edff61ba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtime-services-chat-1.carrotquest.app/websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A10%20GMT&tag=
82.202.218.98101 Switching Protocols 0 B URL HTTP/1.1 realtime-services-chat-1.carrotquest.app/websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A10%20GMT&tag=
IP 82.202.218.98:0
ASN #49505 OOO Network of data-centers Selectel
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A10%20GMT&tag= HTTP/1.1
Host: realtime-services-chat-1.carrotquest.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.akson-vent.ru
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: N4DDaBAjvo7V1D3Gyjdttw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate
Upgrade: WebSocket
Connection: Upgrade
Sec-WebSocket-Accept: bKF6W5GVKZ1VlH3kOUqTb5dpKaE=
realtime-services-chat-1.carrotquest.app/websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A11%20GMT&tag=
82.202.218.98101 Switching Protocols 0 B URL HTTP/1.1 realtime-services-chat-1.carrotquest.app/websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A11%20GMT&tag=
IP 82.202.218.98:0
ASN #49505 OOO Network of data-centers Selectel
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/app_online_changed.20412/chat_bot_conversation_finished.20412.1372434921074723857/conversation_notify.20412.1372434921074723857/conversation_read.20412.1372434921074723857/conversation_reply_changed.20412.1372434921074723857/conversation_typing.20412.1372434921074723857/ping/run_script.20412.1372434921074723857/users_removed.20412.1372434921074723857/conversation_parts_batch.20412.1372434921074723857/message_conversation_started.20412.1372434921074723857?auth_token=user.1372434921074723857.20412-b8c2d4216504819fa5837040a3.9d9cbe695d5302bf8544c195f4b4c30099f3be2593735941&time=Mon%2C%2006%20Feb%202023%2020%3A23%3A11%20GMT&tag= HTTP/1.1
Host: realtime-services-chat-1.carrotquest.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.akson-vent.ru
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bopU1pM1mtdKNOzRp+dk7w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate
Upgrade: WebSocket
Connection: Upgrade
Sec-WebSocket-Accept: jv0nZ7N1Ye+KPsHpOcWACYpgO14=
welcome.landbot.io/visitors/
34.76.160.62201 Created 1.1 kB URL HTTP/2 welcome.landbot.io/visitors/
IP 34.76.160.62:0
File type JSON data\012- , ASCII text, with very long lines (1086), with no line terminators
Hash 096351b8b79e38014555c0c1c24eaa9a
0a8d4d52f726cf88c6f446c9c4761994379908c2
121907c8db0f06dd346b50b94c339c3d2eb36ca9ce67bec123fee68a4a884c98
POST /visitors/ HTTP/1.1
Host: welcome.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://landbot.io/
Content-Type: text/plain;charset=UTF-8
Origin: https://landbot.io
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 201 Created
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 1086
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/v_VQG5OMB60
216.58.211.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/v_VQG5OMB60
IP 216.58.211.3:0
Hash 5c4d67655cfdf81316f0852a46389536
57bc5c3a632b7a87518dc44dc617f9a292cb070c
a9d5a011b1adae7630f08cb2a154e6a449379993b82c7ff556ded653c71b4e0b
POST /s/gts1d4int/v_VQG5OMB60 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 20:23:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.landbot.io/visitors/
34.76.160.62201 Created 1.1 kB URL HTTP/2 welcome.landbot.io/visitors/
IP 34.76.160.62:0
File type JSON data\012- , ASCII text, with very long lines (1086), with no line terminators
Hash 5ebe2c2efa4c54930820e4d24d5b2138
84dfce55c2d3c2a31b76739753244f98deb35009
6204021ab756e81daed6b308d3bee10c1292f585a5283457b65f89abe8af1b9e
POST /visitors/ HTTP/1.1
Host: welcome.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://landbot.io/
Content-Type: text/plain;charset=UTF-8
Origin: https://landbot.io
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 201 Created
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 1086
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
daisho.firebaseio.com/.ws?v=5
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 daisho.firebaseio.com/.ws?v=5
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5 HTTP/1.1
Host: daisho.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://landbot.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PHrKjOBR3QPz/zPipTmsng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Mon, 06 Feb 2023 20:23:13 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IxfhOlCiBlMX5VZYQb0uPUlW8mY=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 29af19f4d35dda344776c6f6db66c235
164bc64453a7e1e9c960982ff07d116ccf11434f
64ead99aef7098e547907e17edee7de198173e5951a82f91a038a562b50d1486
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158655
Date: Mon, 06 Feb 2023 20:23:13 GMT
Etag: "63e11bdf-1d7"
Expires: Wed, 08 Feb 2023 16:27:28 GMT
Last-Modified: Mon, 06 Feb 2023 15:25:19 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NtLYHCec9pNW6JpP-qyw2jkfwgU_JKhM8Wxmt1wAq4yK1Ky2ma3sdg==
Age: 3729
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8104c47dc110b47a3fc7c2136fe6d55b
3d0affc0e0e43923ee9047d8e078cb4c90b226c0
8437845af2b1161eeba002e8990cc44eb2eab45600f416b9080b41d974962a13
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8437845AF2B1161EEBA002E8990CC44EB2EAB45600F416B9080B41D974962A13"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15987
Expires: Tue, 07 Feb 2023 00:49:41 GMT
Date: Mon, 06 Feb 2023 20:23:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8104c47dc110b47a3fc7c2136fe6d55b
3d0affc0e0e43923ee9047d8e078cb4c90b226c0
8437845af2b1161eeba002e8990cc44eb2eab45600f416b9080b41d974962a13
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8437845AF2B1161EEBA002E8990CC44EB2EAB45600F416B9080B41D974962A13"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15987
Expires: Tue, 07 Feb 2023 00:49:41 GMT
Date: Mon, 06 Feb 2023 20:23:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8104c47dc110b47a3fc7c2136fe6d55b
3d0affc0e0e43923ee9047d8e078cb4c90b226c0
8437845af2b1161eeba002e8990cc44eb2eab45600f416b9080b41d974962a13
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8437845AF2B1161EEBA002E8990CC44EB2EAB45600F416B9080B41D974962A13"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15987
Expires: Tue, 07 Feb 2023 00:49:41 GMT
Date: Mon, 06 Feb 2023 20:23:14 GMT
Connection: keep-alive
api.carrottrack.app/users/$self_user/props
95.213.158.107200 OK 201 B URL HTTP/2 api.carrottrack.app/users/$self_user/props
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with no line terminators
Hash 612a9e4742684d61065c5197897da8e9
527bce5b1f6125fd2b7f5e229c0fc6ba85c3e63d
e5dbbbabad13da1c41366fa7c19398508fc83315995fca8c67cbbc71cef2ebf7
POST /users/$self_user/props HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------5940648133327827754198606936
Content-Length: 776
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 201
allow: POST, OPTIONS
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/861862/visit-data?sv=7
3.248.90.71200 OK 403 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/861862/visit-data?sv=7
IP 3.248.90.71:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 76ecf8ee24b7f708cc1f23ab16af8e53
aba83249ee15689aa6f9c96364c2b32e3bcb6a63
5386b997465edbb3ecb42670658d3c04c556f6f5fe061a7f3447b77b7feedd8e
POST /api/v2/client/sites/861862/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 811cce02e0e592bed9f2143783c1ac93
5580ec725997f59f428dd0ef76ba95add2077de8
2a1004d5701b47e2f06d241ce28757c3fef654a550d8be84f4037f51e8801260
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 20:23:14 GMT
Last-Modified: Mon, 06 Feb 2023 18:34:59 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O08wPuDTLAvtPjC1vtclxg5GdsQInAqx89zIzRRKP2jX5NrfDlMFAA==
Age: 6495
api.carrottrack.app/users/$self_user/events
95.213.158.107200 OK 377 B URL HTTP/2 api.carrottrack.app/users/$self_user/events
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (377), with no line terminators
Hash b86c3f0ed3829db19cd3d3efaa3f23db
f3551dc41c722daec25cef3c266d0da4edcd527b
2bf7e1b6a30fcd2adb2d3bee41d4b5e2c63e7d2838965c032618244782aa228d
POST /users/$self_user/events HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------201369552314967580162154581327
Content-Length: 1022
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 377
allow: POST, OPTIONS, GET
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
api.carrottrack.app/users/$self_user/props
95.213.158.107200 OK 201 B URL HTTP/2 api.carrottrack.app/users/$self_user/props
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with no line terminators
Hash 612a9e4742684d61065c5197897da8e9
527bce5b1f6125fd2b7f5e229c0fc6ba85c3e63d
e5dbbbabad13da1c41366fa7c19398508fc83315995fca8c67cbbc71cef2ebf7
POST /users/$self_user/props HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------65597221828980344622360189537
Content-Length: 772
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 201
allow: OPTIONS, POST
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
api.carrottrack.app/users/$self_user/events
95.213.158.107200 OK 378 B URL HTTP/2 api.carrottrack.app/users/$self_user/events
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (378), with no line terminators
Hash 2ce336df369fa1804eb4eacadd2e024d
cbd55cf22f0a3b74a78ae6f1f14de43c3cd1d1a6
3c7762b34861b276b60b1f584b29cf667183f17cd02ffc527a1d1a42b11b33ff
POST /users/$self_user/events HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------392159229931450681101898843478
Content-Length: 991
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 378
allow: GET, OPTIONS, POST
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
api.carrottrack.app/users/$self_user/events
95.213.158.107200 OK 368 B URL HTTP/2 api.carrottrack.app/users/$self_user/events
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (368), with no line terminators
Hash d2474cc1daef7f7b47f0dd462ff1f09e
b74ccda12b1fe0a700fad75e6a798801effa9577
14452b8b3eb98f84044d953da6f79d6de9082d832e58947c593872296d7fdbdd
POST /users/$self_user/events HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------81382918519952708371395336209
Content-Length: 997
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 368
allow: OPTIONS, POST, GET
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
ws18.hotjar.com/api/v2/client/ws
34.251.168.110101 Switching Protocols 0 B URL HTTP/1.1 ws18.hotjar.com/api/v2/client/ws
IP 34.251.168.110:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v2/client/ws HTTP/1.1
Host: ws18.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.akson-vent.ru
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5EXwf/CTU0AcwasRZJRBkQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/octet-stream
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TWFiw8zzyYFKbUTlZ4mXaFUIUW0=
Sec-WebSocket-Extensions: permessage-deflate
daisho.firebaseio.com/.lp?start=t&ser=24913121&cb=1&v=5
34.120.160.131200 OK 423 B URL HTTP/1.1 daisho.firebaseio.com/.lp?start=t&ser=24913121&cb=1&v=5
IP 34.120.160.131:0
Hash 0d6515f77f8d83803bb2986a6f2dd8d5
1ceeced50a0eef0c0a1dbb205f7d2b1f3174faf1
97cfb538a103e2d8c0abaf0cf572387ae3f36d9f435a0335bd9be109a9534b79
GET /.lp?start=t&ser=24913121&cb=1&v=5 HTTP/1.1
Host: daisho.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 423
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
daisho.firebaseio.com/.lp?start=t&ser=64926371&cb=1&v=5
34.120.160.131200 OK 423 B URL HTTP/1.1 daisho.firebaseio.com/.lp?start=t&ser=64926371&cb=1&v=5
IP 34.120.160.131:0
Hash 32fa316175dd6fc3d35a7c473d14195b
ca79367ea0c4961a8e95839a65f53c6562c9a341
22cbcd623cd3608b2ed33a85a3b71ab3439c651175d8ccec0e4cf8ec8fb6f1fe
GET /.lp?start=t&ser=64926371&cb=1&v=5 HTTP/1.1
Host: daisho.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 423
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
ws21.hotjar.com/api/v2/client/ws
99.80.89.129101 Switching Protocols 0 B URL HTTP/1.1 ws21.hotjar.com/api/v2/client/ws
IP 99.80.89.129:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v2/client/ws HTTP/1.1
Host: ws21.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.akson-vent.ru
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: w65u44Ljk9jKlGTfwb8Uwg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/octet-stream
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TbU680ntXL8LNfySPGKDhCOk3wk=
Sec-WebSocket-Extensions: permessage-deflate
api.carrottrack.app/users/$self_user/events
95.213.158.107200 OK 308 B URL HTTP/2 api.carrottrack.app/users/$self_user/events
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (308), with no line terminators
Hash 3e3e05e17fba2baba79c702d605f4717
89602e2095a8a398515cefda918c79b317fddcd0
6c34082d68fa712ee7ccacd66efaeb87fb8984cdf86f350a7d7d820af42bdc3b
POST /users/$self_user/events HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------393359112711877276351735093292
Content-Length: 976
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 308
allow: OPTIONS, POST, GET
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
content.hotjar.io/
34.252.123.111200 OK 56 B IP 34.252.123.111:0
File type JSON data\012- , ASCII text, with no line terminators
Hash c1e8392000ec8d3376400306e5e342b4
764f5f8cb5e19414facd5a898749f48db0b54bf6
54cada39ae311bac8e1cdee0fd0e5eec8ac08e88686885457622c6dc4ebef1c7
POST / HTTP/1.1
Host: content.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 33128
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:14 GMT
content-type: application/json
content-length: 56
vary: Origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.carrottrack.app/users/$self_user/events
95.213.158.107200 OK 384 B URL HTTP/2 api.carrottrack.app/users/$self_user/events
IP 95.213.158.107:0
ASN #49505 OOO Network of data-centers Selectel
File type JSON data\012- , ASCII text, with very long lines (384), with no line terminators
Hash 21539d32118aaf36d068536a1457696c
ce20aacf59b8941117cfa9e8d5262afadef0699f
1c173830c455126ef7fe910555312a57065d215c11b47f8104eb47c9edeb4356
POST /users/$self_user/events HTTP/1.1
Host: api.carrottrack.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------21080071043901760804482531206
Content-Length: 977
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
content-length: 384
allow: OPTIONS, POST, GET
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
X-Firefox-Spdy: h2
content.hotjar.io/
34.252.123.111200 OK 56 B IP 34.252.123.111:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 81d17b3e37f1d5933a6f4e38aaac775d
4f428ddc2f25fd105c9515606ec798f5f15d35b1
0ff9a5f3b1a49fabb9e0165303cae32f829c7ef1c247e8753a64ae771c2c1a52
POST / HTTP/1.1
Host: content.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 462510
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:14 GMT
content-type: application/json
content-length: 56
vary: Origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194369&pw=hOhaPPiwLO&ns=daisho
34.120.160.131200 OK 420 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194369&pw=hOhaPPiwLO&ns=daisho
IP 34.120.160.131:0
File type HTML document text\012- HTML document, ASCII text
Hash 4640407b5cc2eb509e70d33eb2a0a12c
34eb571983f23622cf13fe658276203480042002
432a509df7c4a34b0c73a5933edeec87f00b86e8345389fe59ded13d2174edb2
GET /.lp?dframe=t&id=1194369&pw=hOhaPPiwLO&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 420
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711124&ns=daisho
34.120.160.131200 OK 15 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711124&ns=daisho
IP 34.120.160.131:0
Hash 8a88cd33fea996224c64296a44405ed1
9984c011d8c6dafe173da8bebb41fad05ca14d0b
3d14e96bd08692f39b357173c908dcb0b21ee11d0bdb29b963ce7fcc836eb4fd
GET /.lp?id=1194369&pw=hOhaPPiwLO&ser=26711124&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 15
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711125&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
34.120.160.131200 OK 58 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711125&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
IP 34.120.160.131:0
Hash 09e6f3e6fa555776a84c7f10806ca5bd
a926e7aeb1d1034abe087c5ab31914c9dba39352
ef824052cc54e24358011a6d1f363813e99264883d6a019f5c98f75e43f78dc9
GET /.lp?id=1194369&pw=hOhaPPiwLO&ser=26711125&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 58
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194371&pw=7LRH7HAqEo&ns=daisho
34.120.160.131200 OK 420 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194371&pw=7LRH7HAqEo&ns=daisho
IP 34.120.160.131:0
File type HTML document text\012- HTML document, ASCII text
Hash aa638866b8d9c81b9fee1cfe0cd310d9
b295084423834fa90e5a8bb8c2edc9edcf5fe622
8d4cd1e2e00320369be06422aaa5599e7be27ea1de82f5d15766eecb3ec6fd33
GET /.lp?dframe=t&id=1194371&pw=7LRH7HAqEo&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 420
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=Dm1FnCSOlIMQbl6YB3yNUcwajVH95ly7&ns=daisho
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=Dm1FnCSOlIMQbl6YB3yNUcwajVH95ly7&ns=daisho
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5&s=Dm1FnCSOlIMQbl6YB3yNUcwajVH95ly7&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://landbot.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +Hs/l19P7ghlGcio0dnt/g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tfZ6CN6nBbkkzdH7sCjuvJrBx88=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711126&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjUyNTExOCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
34.120.160.131200 OK 430 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711126&ns=daisho&seg0=1&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MiwiYSI6ImF1dGgiLCJiIjp7ImNyZWQiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWpWaE5UQTVaakF4T1dZM01HUTNOemxrT0RCbU1UVXlaREZoTldRek16Z3hNV0ZpTjJObFpqY2lMQ0owZVhBaU9pSktWMVFpZlEuZXlKMmFYTnBkRzl5WDNWcFpDSTZJbll0T0RRNE1USXdOREl6SWl3aWFYTnpJam9pYUhSMGNITTZMeTl6WldOMWNtVjBiMnRsYmk1bmIyOW5iR1V1WTI5dEwyWnBjbVZpWVhObExXUmhhWE5vYnlJc0ltRjFaQ0k2SW1acGNtVmlZWE5sTFdSaGFYTm9ieUlzSW1GMWRHaGZkR2x0WlNJNk1UWTNOVGN4TkRrNU1Td2lkWE5sY2w5cFpDSTZJak0wTURJNElpd2ljM1ZpSWpvaU16UXdNamdpTENKcFlYUWlPakUyTnpVM01UUTVPVEVzSW1WNGNDSTZNVFkzTlRjeE9EVTVNU3dpWm1seVpXSmhjMlVpT25zaWFXUmxiblJwZEdsbGN5STZlMzBzSW5OcFoyNWZhVzVmY0hKdmRtbGtaWElpT2lKamRYTjBiMjBpZlgwLkt2dWQtM0d6enlQT0lkcU4wZm5pMklIQXZCd2lzQ0xOUEtyTGxDdGVnT1VmRU1GdE9ObVRkZHZ2bTc4bmNwY3hnS2JVeG9vdG1WOG1RZGVsSkFwNy1WSU96MEpETzBlanpUQmhpdVpKejd6d0VJcHpBZEVmT29Kc1FVQkdRNHRVS0d0V2JCa01pWkpEQ28zdGRsOUp1dVpSN2FWclFfV1BBcU55aFhEUmVhdEh3UkVkazVxRUg2cm50X3Y3ajRFbWpPRW00ejRpMm8yWG5ibU4wT0NxRGE2UERyQjdURlJZSmY5SFFtWEFWdnBfcTdkTlBqX1ZCWGVleElkYS1yejBQTVpST0VMVXJuSnRCZE1maFdpTzlFT01JVU9JaHpSeUFRYTV4ZlNSV0VtTllRVXBiUG5COTBaLUxmVU5uV3ZPNmEwUmo5Vi1WemRYS3VuaUh5bmtYQSJ9fX0.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjUyNTExOCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
IP 34.120.160.131:0
File type ASCII text, with very long lines (429)
Hash bb6e389dc9c2f3f7ad297a787610ec47
bad69c26c1a46da2c87fe4ffafb03a9829f0d841
51826ebc926b14787fff767ec0315bc4d0b4fc36153e6ce836118302f3cc2feb
GET /.lp?id=1194369&pw=hOhaPPiwLO&ser=26711126&ns=daisho&seg0=1&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MiwiYSI6ImF1dGgiLCJiIjp7ImNyZWQiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWpWaE5UQTVaakF4T1dZM01HUTNOemxrT0RCbU1UVXlaREZoTldRek16Z3hNV0ZpTjJObFpqY2lMQ0owZVhBaU9pSktWMVFpZlEuZXlKMmFYTnBkRzl5WDNWcFpDSTZJbll0T0RRNE1USXdOREl6SWl3aWFYTnpJam9pYUhSMGNITTZMeTl6WldOMWNtVjBiMnRsYmk1bmIyOW5iR1V1WTI5dEwyWnBjbVZpWVhObExXUmhhWE5vYnlJc0ltRjFaQ0k2SW1acGNtVmlZWE5sTFdSaGFYTm9ieUlzSW1GMWRHaGZkR2x0WlNJNk1UWTNOVGN4TkRrNU1Td2lkWE5sY2w5cFpDSTZJak0wTURJNElpd2ljM1ZpSWpvaU16UXdNamdpTENKcFlYUWlPakUyTnpVM01UUTVPVEVzSW1WNGNDSTZNVFkzTlRjeE9EVTVNU3dpWm1seVpXSmhjMlVpT25zaWFXUmxiblJwZEdsbGN5STZlMzBzSW5OcFoyNWZhVzVmY0hKdmRtbGtaWElpT2lKamRYTjBiMjBpZlgwLkt2dWQtM0d6enlQT0lkcU4wZm5pMklIQXZCd2lzQ0xOUEtyTGxDdGVnT1VmRU1GdE9ObVRkZHZ2bTc4bmNwY3hnS2JVeG9vdG1WOG1RZGVsSkFwNy1WSU96MEpETzBlanpUQmhpdVpKejd6d0VJcHpBZEVmT29Kc1FVQkdRNHRVS0d0V2JCa01pWkpEQ28zdGRsOUp1dVpSN2FWclFfV1BBcU55aFhEUmVhdEh3UkVkazVxRUg2cm50X3Y3ajRFbWpPRW00ejRpMm8yWG5ibU4wT0NxRGE2UERyQjdURlJZSmY5SFFtWEFWdnBfcTdkTlBqX1ZCWGVleElkYS1yejBQTVpST0VMVXJuSnRCZE1maFdpTzlFT01JVU9JaHpSeUFRYTV4ZlNSV0VtTllRVXBiUG5COTBaLUxmVU5uV3ZPNmEwUmo5Vi1WemRYS3VuaUh5bmtYQSJ9fX0.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjUyNTExOCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjMvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 430
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash f0f6286ba28426640be7882238e65080
af2a2994dafcabae65d849ff56d6997ca9edfca6
9dc1e9876f09c39cc15f785bedd16c425675d353ebf96d241a6407664c59dda8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118393
Date: Mon, 06 Feb 2023 20:23:14 GMT
Etag: "63e07740-1d7"
Expires: Wed, 08 Feb 2023 05:16:27 GMT
Last-Modified: Mon, 06 Feb 2023 03:42:56 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QLl0bdxL6JDS4vbj-qh_QPM5QHPVLnr_3EflE-NeI0ShHqclKyT7DQ==
Age: 5611
o2.mouseflow.com/html?website=f051b304-de59-454b-bf31-a9f9e60b0bdb&session=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&gz=1
185.17.186.161200 OK 0 B URL HTTP/2 o2.mouseflow.com/html?website=f051b304-de59-454b-bf31-a9f9e60b0bdb&session=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&gz=1
IP 185.17.186.161:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /html?website=f051b304-de59-454b-bf31-a9f9e60b0bdb&session=c509f23f2a0f78b0a680a0a97fa9860b&page=02065945f63b6626cd139086c18e0c77a450a7a3&gz=1 HTTP/1.1
Host: o2.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 62136
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:14 GMT
content-type: text/plain; charset=Windows-1252
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
x-recorder: rec-09-eu
server: Mouseflow
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=5d98df67-b72c-c3c2-b559-ed26898cb533&u0=5d98df67-b72c-c3c2-b559-ed26898cb533&c0=89545428&t0=1675715038155&ur0=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&ti0=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&r0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&re0=1280&re0=1024&o0=landscape-primary
34.247.124.64200 OK 37 B URL HTTP/2 new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=5d98df67-b72c-c3c2-b559-ed26898cb533&u0=5d98df67-b72c-c3c2-b559-ed26898cb533&c0=89545428&t0=1675715038155&ur0=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&ti0=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&r0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&re0=1280&re0=1024&o0=landscape-primary
IP 34.247.124.64:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 637eb2cda011678b8ccd6b5b3c6e3570
300ffa6cb3b70adc05038ef2a4e9936978459ff2
49059d42ad3423fb9f04b2330cdce035e4d555aa9ea7a7ceae097de0c69be05d
GET /e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=5d98df67-b72c-c3c2-b559-ed26898cb533&u0=5d98df67-b72c-c3c2-b559-ed26898cb533&c0=89545428&t0=1675715038155&ur0=https%3A%2F%2Fwww.akson-vent.ru%2Fru%2FContacts%2FAskAQuestionForm&ti0=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81&r0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&re0=1280&re0=1024&o0=landscape-primary HTTP/1.1
Host: new-collect.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:14 GMT
content-type: image/gif
content-length: 37
X-Firefox-Spdy: h2
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790045&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
34.120.160.131200 OK 58 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790045&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
IP 34.120.160.131:0
Hash 09e6f3e6fa555776a84c7f10806ca5bd
a926e7aeb1d1034abe087c5ab31914c9dba39352
ef824052cc54e24358011a6d1f363813e99264883d6a019f5c98f75e43f78dc9
GET /.lp?id=1194371&pw=7LRH7HAqEo&ser=53790045&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 58
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790044&ns=daisho
34.120.160.131200 OK 15 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790044&ns=daisho
IP 34.120.160.131:0
Hash 8a88cd33fea996224c64296a44405ed1
9984c011d8c6dafe173da8bebb41fad05ca14d0b
3d14e96bd08692f39b357173c908dcb0b21ee11d0bdb29b963ce7fcc836eb4fd
GET /.lp?id=1194371&pw=7LRH7HAqEo&ser=53790044&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 15
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=5lqWSRs4iWMcgZFXwC6lvANU1iantU5N&ns=daisho
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=5lqWSRs4iWMcgZFXwC6lvANU1iantU5N&ns=daisho
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5&s=5lqWSRs4iWMcgZFXwC6lvANU1iantU5N&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://landbot.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GdpjR4UETv/D3MmkCKO9sQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SoSpunQQYD9tkREdLxaDTVhpuRI=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?start=t&ser=88697928&cb=1&v=5&ns=daisho
34.120.160.131200 OK 423 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?start=t&ser=88697928&cb=1&v=5&ns=daisho
IP 34.120.160.131:0
Hash 440f7f58b82566d2d0ac6d918a5c935a
62ca87447020c1e0e3d6b9f560e33bdabfab5317
04bb0c34d905cf54233091d14522732355c5e22123c43b4ab332dcef8bc72552
GET /.lp?start=t&ser=88697928&cb=1&v=5&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 423
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?start=t&ser=25915950&cb=1&v=5&ns=daisho
34.120.160.131200 OK 423 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?start=t&ser=25915950&cb=1&v=5&ns=daisho
IP 34.120.160.131:0
Hash 7fe8108582bdfc24b010edfb748af177
0dc94f2dbccba9a720cd5c7dfedbf7a7cd486178
f48212834899f6c5a6d12afcea12431ca41966f03d7ee085f11ee74b8099083a
GET /.lp?start=t&ser=25915950&cb=1&v=5&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 423
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711127&ns=daisho
34.120.160.131200 OK 146 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711127&ns=daisho
IP 34.120.160.131:0
Hash 8c187ce3e8c9e79b5ea926fab42841d9
4fb5dc81006afe99d986eb955eb1063ddcb82c58
83cde2cdcb79fe64065f81db36cad934876509c509f22b941fbbcf2e7913455b
GET /.lp?id=1194369&pw=hOhaPPiwLO&ser=26711127&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 146
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790046&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjU0ODg2MywiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
34.120.160.131200 OK 430 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790046&ns=daisho&seg0=1&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MiwiYSI6ImF1dGgiLCJiIjp7ImNyZWQiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWpWaE5UQTVaakF4T1dZM01HUTNOemxrT0RCbU1UVXlaREZoTldRek16Z3hNV0ZpTjJObFpqY2lMQ0owZVhBaU9pSktWMVFpZlEuZXlKMmFYTnBkRzl5WDNWcFpDSTZJbll0T0RRNE1USXdOREkzSWl3aWFYTnpJam9pYUhSMGNITTZMeTl6WldOMWNtVjBiMnRsYmk1bmIyOW5iR1V1WTI5dEwyWnBjbVZpWVhObExXUmhhWE5vYnlJc0ltRjFaQ0k2SW1acGNtVmlZWE5sTFdSaGFYTm9ieUlzSW1GMWRHaGZkR2x0WlNJNk1UWTNOVGN4TkRrNU1Td2lkWE5sY2w5cFpDSTZJak0wTURJNElpd2ljM1ZpSWpvaU16UXdNamdpTENKcFlYUWlPakUyTnpVM01UUTVPVEVzSW1WNGNDSTZNVFkzTlRjeE9EVTVNU3dpWm1seVpXSmhjMlVpT25zaWFXUmxiblJwZEdsbGN5STZlMzBzSW5OcFoyNWZhVzVmY0hKdmRtbGtaWElpT2lKamRYTjBiMjBpZlgwLlc0ZHNaaEZtN1p3RmtfVHppNTRpNWVaeW5jZVBfTE9yNnBFaW9Tb014czNBcjU5cF9hLUV5MG1MXzhaLWtVdnpEcFRIdDMtemw4akdiZFNQdzc0TE1VT0xNNWNGY0dKMThCY0pQQTVoZUhtemJ0TVRGVjlmdXF3eUxmd0lLa0hha25PSmNmbjFxdkg5X1JQTENIQ1ZrUmp0Y1J0bDdmbVhhNk9EeXRIQWtBNnRUQU44aWtiSGNQUUJIaFF2d29WeWZhbUJoNEZ4YmFielNnTHhDdUVoNXlYRnZfMmxkQ0I1cERoUTBNQnRNOXV4RmhzcnNOV24xdDd2c2JCS3lvMk56b0lzeWVNNkRyWmxqTXE0UnJ1ZjZ3N29ncGhQdTF6a3VkQl9xd2Y0c0dISUhKZmo4ckJobXFIQmtsQ0J0R0JmcDFzbkZ4d1FCb0J1Z3FWWVd5SWxDUSJ9fX0.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjU0ODg2MywiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
IP 34.120.160.131:0
File type ASCII text, with very long lines (429)
Hash 64a51a1ba6bc162e1157ce0d69e6dec1
203363bbe75f7ea86538d8cda76c81d97be87186
0eb1ecb4ccb65588eedc3d8332802773f91676d3cb7f8f5ea7ee3196e05ee1d2
GET /.lp?id=1194371&pw=7LRH7HAqEo&ser=53790046&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkwLjU0ODg2MywiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA0MjcvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 430
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194385&pw=6QSzZ8tedy&ns=daisho
34.120.160.131200 OK 420 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194385&pw=6QSzZ8tedy&ns=daisho
IP 34.120.160.131:0
File type HTML document text\012- HTML document, ASCII text
Hash 2913768819a392d0bfacabdafcd29040
987ef2c55f4e0358db41e4a17726072fff311c19
d2037a4dd67ce3cff355753e254aa8dea244042cd4efefbf84a7d15c8004193d
GET /.lp?dframe=t&id=1194385&pw=6QSzZ8tedy&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 420
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711128&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
34.120.160.131200 OK 70 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194369&pw=hOhaPPiwLO&ser=26711128&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
IP 34.120.160.131:0
Hash 42d0c2cc0d7af9b43390e1cc15649b25
463c834d8c6d14473a8fcc4520de2edc4f75a624
efb03fd285c04565fb592bea3f05d43eb45da9f03af6f94e01d3c10ba14f288e
GET /.lp?id=1194369&pw=hOhaPPiwLO&ser=26711128&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19 HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 70
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371660&ns=daisho
34.120.160.131200 OK 15 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371660&ns=daisho
IP 34.120.160.131:0
Hash 8a88cd33fea996224c64296a44405ed1
9984c011d8c6dafe173da8bebb41fad05ca14d0b
3d14e96bd08692f39b357173c908dcb0b21ee11d0bdb29b963ce7fcc836eb4fd
GET /.lp?id=1194385&pw=6QSzZ8tedy&ser=88371660&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 15
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371661&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
34.120.160.131200 OK 58 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371661&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
IP 34.120.160.131:0
Hash 09e6f3e6fa555776a84c7f10806ca5bd
a926e7aeb1d1034abe087c5ab31914c9dba39352
ef824052cc54e24358011a6d1f363813e99264883d6a019f5c98f75e43f78dc9
GET /.lp?id=1194385&pw=6QSzZ8tedy&ser=88371661&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 58
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194388&pw=YBymWKf2QT&ns=daisho
34.120.160.131200 OK 420 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194388&pw=YBymWKf2QT&ns=daisho
IP 34.120.160.131:0
File type HTML document text\012- HTML document, ASCII text
Hash bdb23be066d5fb31c83b901e8d579825
94ff02cb57087cfd534dfff309b38d3adf0c78f4
0064cf532ad19cfdb7117e71a1d4879d420810351f5102fc4cc2d4c019b5737c
GET /.lp?dframe=t&id=1194388&pw=YBymWKf2QT&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 420
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340430&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
34.120.160.131200 OK 58 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340430&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ..
IP 34.120.160.131:0
Hash 0d9854da1fbcde2f83c0c2244fc7e782
b2d2b86e019ec2eb9c82304ce53e686f7554d828
30bd0120e57f70174a17629a1703bb0d29bd1660f244aa45d0542637d5b960d7
GET /.lp?id=1194388&pw=YBymWKf2QT&ser=11340430&ns=daisho&seg0=0&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MSwiYSI6InMiLCJiIjp7ImMiOnsic2RrLmpzLjUtMC00IjoxfX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 58
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340429&ns=daisho
34.120.160.131200 OK 15 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340429&ns=daisho
IP 34.120.160.131:0
Hash 9989eb61fd15ffba09e61b9d2be6f92c
75d1c6a068f2b6fa539f1ab4c2ccf0b98816fab3
416ebdae1319a43b48e3caf0a24100ab786aa6432e276fb735da780aa435b300
GET /.lp?id=1194388&pw=YBymWKf2QT&ser=11340429&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 15
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=JMOLA4isLAnxt3nv9lesvyFo8eIqxcpz&ns=daisho
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=JMOLA4isLAnxt3nv9lesvyFo8eIqxcpz&ns=daisho
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5&s=JMOLA4isLAnxt3nv9lesvyFo8eIqxcpz&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://landbot.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uBxuVKQS8AOiy07tsQKLcQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rAE9vWB3Yaf7Hir8DIde7M7mkr4=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194369&pw=hOhaPPiwLO
34.120.160.131200 OK 97 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194369&pw=hOhaPPiwLO
IP 34.120.160.131:0
Hash 226b98148c9645d66e31fb4edceefa54
a9ed5e61ba984f8be468bd8ab131da95b84805ef
7125831521bfdf841744965a3f872dad55b2de617c73d5a9f5fbbeb7033e4fdb
GET /.lp?disconn=t&id=1194369&pw=hOhaPPiwLO HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194369&pw=hOhaPPiwLO&ns=daisho
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 97
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790047&ns=daisho
34.120.160.131200 OK 146 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790047&ns=daisho
IP 34.120.160.131:0
Hash 8c187ce3e8c9e79b5ea926fab42841d9
4fb5dc81006afe99d986eb955eb1063ddcb82c58
83cde2cdcb79fe64065f81db36cad934876509c509f22b941fbbcf2e7913455b
GET /.lp?id=1194371&pw=7LRH7HAqEo&ser=53790047&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 146
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790048&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
34.120.160.131200 OK 70 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194371&pw=7LRH7HAqEo&ser=53790048&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
IP 34.120.160.131:0
Hash 42d0c2cc0d7af9b43390e1cc15649b25
463c834d8c6d14473a8fcc4520de2edc4f75a624
efb03fd285c04565fb592bea3f05d43eb45da9f03af6f94e01d3c10ba14f288e
GET /.lp?id=1194371&pw=7LRH7HAqEo&ser=53790048&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19 HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 70
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371662&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjYzMDMyNSwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
34.120.160.131200 OK 430 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371662&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjYzMDMyNSwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
IP 34.120.160.131:0
File type ASCII text, with very long lines (429)
Hash 6d8e60032af178ba1e3d69d9048b738e
24f91983197834c05614c12fb48ae00453467c17
789451ac428041e56a63bbb042de9583a3f0bd52824593dfe7aefb163d0ff07b
GET /.lp?id=1194385&pw=6QSzZ8tedy&ser=88371662&ns=daisho&seg0=1&ts0=1&d0=eyJ0IjoiZCIsImQiOnsiciI6MiwiYSI6ImF1dGgiLCJiIjp7ImNyZWQiOiJleUpoYkdjaU9pSlNVekkxTmlJc0ltdHBaQ0k2SWpWaE5UQTVaakF4T1dZM01HUTNOemxrT0RCbU1UVXlaREZoTldRek16Z3hNV0ZpTjJObFpqY2lMQ0owZVhBaU9pSktWMVFpZlEuZXlKMmFYTnBkRzl5WDNWcFpDSTZJbll0T0RRNE1USXdOVEl5SWl3aWFYTnpJam9pYUhSMGNITTZMeTl6WldOMWNtVjBiMnRsYmk1bmIyOW5iR1V1WTI5dEwyWnBjbVZpWVhObExXUmhhWE5vYnlJc0ltRjFaQ0k2SW1acGNtVmlZWE5sTFdSaGFYTm9ieUlzSW1GMWRHaGZkR2x0WlNJNk1UWTNOVGN4TkRrNU5Dd2lkWE5sY2w5cFpDSTZJak0wTURJNElpd2ljM1ZpSWpvaU16UXdNamdpTENKcFlYUWlPakUyTnpVM01UUTVPVFFzSW1WNGNDSTZNVFkzTlRjeE9EVTVOQ3dpWm1seVpXSmhjMlVpT25zaWFXUmxiblJwZEdsbGN5STZlMzBzSW5OcFoyNWZhVzVmY0hKdmRtbGtaWElpT2lKamRYTjBiMjBpZlgwLkhaR1ZVR2FlQjhFeVdMUVRBM2I1N01oc2YzeV9nbElZdnhEZXRZYzFTTzloc18tS2o0Y1VuQkRFR2NJQnQ1YmMwYUswTEE5THB0QzU5YlJzUFpvZXhQenZCZl9OeDZoclQ2ZmFwRFR1aVhOdF9tcFFrRkw4NUtkcVVuOGhLaVVQSEZNeXFrRGZIOThVbk10Y1VnVzNIQlpqR2ZsbnBWZjBjNm9YMmpvVnloRkRUVWJRaVhNVzEtQWQ5bFNRT2w4YWJsbGZ1R0NvQ0pjay1PMHVtV0R6RllSLUR1d28xUDBxU1U2SWZpdGhPVHF1X2QxTmpwNW1yWHIwbmZENXN5U2xwRGtSNDNKX1dWMTFBdTQydllVTzNNNUtvNG1WamgySEkxbl9ZTWRYc3BaU2xBLWZhWFg2ZWU4NktKbXdTa1BCZVRUV1VlNGRNVktrWUpOeEtYOWtjZyJ9fX0.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjYzMDMyNSwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjIvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 430
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340431&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjcyOTIyNCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
34.120.160.131200 OK 430 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340431&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjcyOTIyNCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ..
IP 34.120.160.131:0
File type ASCII text, with very long lines (429)
Hash 4d7a492b1fbd9d73c6c1f2a669bb1796
694c4656a7133ca3981fa109fb13c14a6063336f
63bf4ddb86af969d5f72a8eaf385969627e01b3b9f81f4f51b2e2197686cfdae
GET /.lp?id=1194388&pw=YBymWKf2QT&ser=11340431&ns=daisho&seg0=1&ts0=1&d0=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.&seg1=2&ts1=1&d1=eyJ0IjoiZCIsImQiOnsiciI6MywiYSI6InEiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvbWVzc2FnZXMiLCJxIjp7InNwIjoxNjc1NzE0OTkzLjcyOTIyNCwiaSI6InRpbWVzdGFtcCJ9LCJ0IjoxLCJoIjoiIn19fQ..&seg2=3&ts2=1&d2=eyJ0IjoiZCIsImQiOnsiciI6NCwiYSI6InAiLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjp0cnVlfX19&seg3=4&ts3=1&d3=eyJ0IjoiZCIsImQiOnsiciI6NSwiYSI6Im8iLCJiIjp7InAiOiIvMzQwMjgvbWVzc2FnZXMvdi04NDgxMjA1MjUvcHJlc2VuY2UiLCJkIjpmYWxzZX19fQ.. HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 430
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=93jSCeEdpRVJb0emn2Ed2eqz6QRCvkof&ns=daisho
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.ws?v=5&s=93jSCeEdpRVJb0emn2Ed2eqz6QRCvkof&ns=daisho
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5&s=93jSCeEdpRVJb0emn2Ed2eqz6QRCvkof&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://landbot.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: etcv8jOK3Z5qMkEKOuG1wQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X53JVwQVunSYVQFiHEySyUogGqg=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194371&pw=7LRH7HAqEo
34.120.160.131200 OK 97 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194371&pw=7LRH7HAqEo
IP 34.120.160.131:0
Hash 226b98148c9645d66e31fb4edceefa54
a9ed5e61ba984f8be468bd8ab131da95b84805ef
7125831521bfdf841744965a3f872dad55b2de617c73d5a9f5fbbeb7033e4fdb
GET /.lp?disconn=t&id=1194371&pw=7LRH7HAqEo HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194371&pw=7LRH7HAqEo&ns=daisho
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 97
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340432&ns=daisho
34.120.160.131200 OK 146 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194388&pw=YBymWKf2QT&ser=11340432&ns=daisho
IP 34.120.160.131:0
Hash 8c187ce3e8c9e79b5ea926fab42841d9
4fb5dc81006afe99d986eb955eb1063ddcb82c58
83cde2cdcb79fe64065f81db36cad934876509c509f22b941fbbcf2e7913455b
GET /.lp?id=1194388&pw=YBymWKf2QT&ser=11340432&ns=daisho HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 146
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371663&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
34.120.160.131200 OK 202 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?id=1194385&pw=6QSzZ8tedy&ser=88371663&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19
IP 34.120.160.131:0
Hash 0af40ec5d1f927985bb7649a9297701c
8bd2a0250de37212120311eaaafb8ba02e5acbba
fe2c24f246a2f0d9f9c1e0097a4236b6ba42dfe710e2ea572ee14e0587229d36
GET /.lp?id=1194385&pw=6QSzZ8tedy&ser=88371663&ns=daisho&seg0=5&ts0=1&d0=eyJ0IjoiYyIsImQiOnsidCI6Im4iLCJkIjp7fX19 HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://landbot.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 202
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&u0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&c0=89545428&t0=1675715039336&ur0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ti0=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&re0=1280&re0=1024&o0=landscape-primary
34.247.124.64200 OK 37 B URL HTTP/2 new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&u0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&c0=89545428&t0=1675715039336&ur0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ti0=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&re0=1280&re0=1024&o0=landscape-primary
IP 34.247.124.64:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 637eb2cda011678b8ccd6b5b3c6e3570
300ffa6cb3b70adc05038ef2a4e9936978459ff2
49059d42ad3423fb9f04b2330cdce035e4d555aa9ea7a7ceae097de0c69be05d
GET /e.gif?s=JSCollector%2C3.1.2&e0=pageview&ci0=cadd8dc4-25f9-25c0-72e1-2fc22961e824&v0=dc7cb946-c5ea-1cb3-e59f-84f989b09dac&p0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&u0=d7737046-61ff-3eb8-a9db-d0ba497dedf9&c0=89545428&t0=1675715039336&ur0=https%3A%2F%2Fwww.akson-vent.ru%2FHtml%2Fmotivators.htm&ti0=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2&re0=1280&re0=1024&o0=landscape-primary HTTP/1.1
Host: new-collect.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:15 GMT
content-type: image/gif
content-length: 37
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042294%3A5%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-ym-vk;visible=true;_=0.6426735874704305;e=RT/unload;et=1675715042290;pvt=5583;vtauto=2953
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042294%3A5%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-ym-vk;visible=true;_=0.6426735874704305;e=RT/unload;et=1675715042290;pvt=5583;vtauto=2953
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036707;title=AKSON-vent%20%7C%20%D0%9F%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%92%D0%B5%D0%BD%D1%82%D0%B8%D0%BB%D1%8F%D1%86%D0%B8%D0%B8%2C%20%D0%9E%D1%82%D0%BE%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%A2%D1%80%D1%83%D0%B1%D0%BE%D0%BF%D1%80%D0%BE%D0%B2%D0%BE%D0%B4%D0%BE%D0%B2;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=32c67eec179ec8d4;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042294%3A5%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-ym-vk;visible=true;_=0.6426735874704305;e=RT/unload;et=1675715042290;pvt=5583;vtauto=2953 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:15 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714995:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:15 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
o2.mouseflow.com/events?w=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&p=02065945f63b6626cd139086c18e0c77a450a7a3&q=1&li=0&lh=0&ls=0&d=AAACABEAAA4OfSi_BDwABQADqwpeFA**..
185.17.186.161200 OK 0 B URL HTTP/2 o2.mouseflow.com/events?w=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&p=02065945f63b6626cd139086c18e0c77a450a7a3&q=1&li=0&lh=0&ls=0&d=AAACABEAAA4OfSi_BDwABQADqwpeFA**..
IP 185.17.186.161:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /events?w=f051b304-de59-454b-bf31-a9f9e60b0bdb&s=c509f23f2a0f78b0a680a0a97fa9860b&p=02065945f63b6626cd139086c18e0c77a450a7a3&q=1&li=0&lh=0&ls=0&d=AAACABEAAA4OfSi_BDwABQADqwpeFA**.. HTTP/1.1
Host: o2.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:15 GMT
content-type: text/plain; charset=Windows-1252
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-origin: https://www.akson-vent.ru
x-recorder: rec-10-eu
server: Mouseflow
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194385&pw=6QSzZ8tedy
34.120.160.131200 OK 97 B URL HTTP/1.1 s-usc1a-nss-2022.firebaseio.com/.lp?disconn=t&id=1194385&pw=6QSzZ8tedy
IP 34.120.160.131:0
Hash 226b98148c9645d66e31fb4edceefa54
a9ed5e61ba984f8be468bd8ab131da95b84805ef
7125831521bfdf841744965a3f872dad55b2de617c73d5a9f5fbbeb7033e4fdb
GET /.lp?disconn=t&id=1194385&pw=6QSzZ8tedy HTTP/1.1
Host: s-usc1a-nss-2022.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s-usc1a-nss-2022.firebaseio.com/.lp?dframe=t&id=1194385&pw=6QSzZ8tedy&ns=daisho
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 20:23:15 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 97
Connection: keep-alive
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13572f84ad268caedcc897f2ad7b9baf
afb91ab43953e8915a2169618d2ab5e330cde0a1
0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F-bdQPU-zYhIlXtxcW_TiqE8ifPg3i0cg8gFuvJSfwoMDTe-Hqy1jg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:02:47 GMT
age: 80428
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042456%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9127242921084727;e=RT/unload;et=1675715042454;pvt=5464;vtauto=3476
95.163.52.67200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042456%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9127242921084727;e=RT/unload;et=1675715042454;pvt=5464;vtauto=3476
IP 95.163.52.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3057091;u=https%3A//www.akson-vent.ru/ru/Contacts/AskAQuestionForm;r=https%3A//www.akson-vent.ru/Html/motivators.htm;st=1675715036990;title=%D0%97%D0%B0%D0%B4%D0%B0%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81;s=1280*1024;vp=0*0;touch=0;hds=1;frame=1;flash=;sid=73516a77fe1beffe;ver=60.3.0;tz=0%2FUTC;ni=;detect=1;lvid=1675715038986%3A1675715042456%3A4%3Ab7d899175fcaeac4e4e117cf0a56619e;opts=dl%2Cjst-gtag-ga-vk;visible=true;_=0.9127242921084727;e=RT/unload;et=1675715042454;pvt=5464;vtauto=3476 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:15 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675714995:3057091:::; path=/; expires=Wed, 07-Feb-24 20:23:15 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
95.163.52.67200 OK 0 B URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP 95.163.52.67:0
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 13:29:54 GMT
set-cookie: FTID=1RMYgQ0tkIIF:1675714991:0:::; path=/; expires=Wed, 07-Feb-24 20:23:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"63beb9d2-85cc"
expires: Mon, 06 Feb 2023 21:23:11 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.carrotquest.app/img/ru/collapsed-animate/default/horizontal-funnel.png
92.223.126.57200 OK 0 B URL HTTP/2 cdn.carrotquest.app/img/ru/collapsed-animate/default/horizontal-funnel.png
IP 92.223.126.57:0
ASN #199524 G-Core Labs S.A.
GET /img/ru/collapsed-animate/default/horizontal-funnel.png HTTP/1.1
Host: cdn.carrotquest.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: image/png
last-modified: Thu, 26 Jan 2023 08:08:10 GMT
etag: W/"63d234ea-5a9e"
content-encoding: gzip
expires: Mon, 06 Feb 2023 20:53:13 GMT
access-control-allow-origin: *
cache-control: max-age=1800, must-revalidate
cache: HIT
x-cached-since: 2023-01-27T10:46:08+00:00
x-id: am3-up-gc95
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
104.18.11.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP 104.18.11.207:0
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 21156587
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79569a16e981b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/861862/visit-data?sv=7
3.248.90.71200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/861862/visit-data?sv=7
IP 3.248.90.71:0
POST /api/v2/client/sites/861862/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://www.akson-vent.ru
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:13 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto+Condensed:300&subset=latin,cyrillic
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:300&subset=latin,cyrillic
IP 142.250.74.106:0
GET /css?family=Roboto+Condensed:300&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 20:23:09 GMT
date: Mon, 06 Feb 2023 20:23:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.carrotquest.io/api.min.js
92.223.126.57200 OK 0 B URL HTTP/2 cdn.carrotquest.io/api.min.js
IP 92.223.126.57:0
ASN #199524 G-Core Labs S.A.
GET /api.min.js HTTP/1.1
Host: cdn.carrotquest.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 20:23:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 27 Jan 2023 10:38:06 GMT
etag: W/"63d3a98e-8da18"
expires: Mon, 06 Feb 2023 20:53:11 GMT
access-control-allow-origin: *
cache-control: max-age=1800, must-revalidate
cache: HIT
x-cached-since: 2023-02-04T10:46:27+00:00
x-id: am3-up-gc95
content-encoding: gzip
X-Firefox-Spdy: h2
www.akson-vent.ru/Html/motivators.htm
104.21.86.16200 OK 0 B URL HTTP/2 www.akson-vent.ru/Html/motivators.htm
IP 104.21.86.16:0
GET /Html/motivators.htm HTTP/1.1
Host: www.akson-vent.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ARRAffinity=83b6150f0d56f74b042780c77ba244e1739c6b591b9f52c9b18874c36ae01cec; ARRAffinitySameSite=83b6150f0d56f74b042780c77ba244e1739c6b591b9f52c9b18874c36ae01cec
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 20:23:07 GMT
content-type: text/html
cache-control: public,max-age=2592000
last-modified: Sat, 23 Jul 2022 15:55:01 GMT
vary: Accept-Encoding
x-powered-by: Orckestra CMS, ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tk7I20z3zTSqMCzQ%2BYOMhM6z9Yj40ft2rmi2lfSvgDK1Ox5%2FvOrh2BRh6u%2FVpwEHD%2FTMz5BiTM%2B20StbviWEqpPHCS%2B%2Fwa0I0kkicrPvS16FssltRAl%2Boai2rL8DXZTPSCX0hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79569a0f99c6b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
142.250.74.174200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP 142.250.74.174:0
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.akson-vent.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Mon, 06 Feb 2023 20:23:11 GMT
date: Mon, 06 Feb 2023 20:23:11 GMT
cache-control: private, max-age=0
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Y3po20ruTkE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=IiaEKvWUxtg; Domain=.youtube.com; Expires=Sat, 05-Aug-2023 20:23:11 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TnpFME1UQTROVFF4TURJd01qZzJPUT09EK/DhZ8GGK/DhZ8G; Domain=.youtube.com; Expires=Sat, 05-Aug-2023 20:23:11 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+251; expires=Wed, 05-Feb-2025 20:23:11 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2