alawar.my1.ru/news/2012-06
195.216.243.23301 Moved Permanently 178 B URL HTTP/1.1 alawar.my1.ru/news/2012-06
IP 195.216.243.23:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
Analyzer Verdict Alert fortinet Malware
GET /news/2012-06 HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Dec 2022 02:26:01 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://alawar.my1.ru/news/2012-06
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12868
Expires: Thu, 01 Dec 2022 06:00:30 GMT
Date: Thu, 01 Dec 2022 02:26:02 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 246
Cache-Control: max-age=115763
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:02 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 10:35:25 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15877
Expires: Thu, 01 Dec 2022 06:50:39 GMT
Date: Thu, 01 Dec 2022 02:26:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 02:18:06 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 476
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: V2c7esFlxOR8LGp5Cbw1cQtufRVTXXyEtGGpzQiijrTx/hBXjHYAcqw/Xi8HvfAvJWTQdt1xxq4=
x-amz-request-id: 9WZD72E5G04RGXTX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 01:46:05 GMT
age: 2397
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 02:26:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 02:08:56 GMT
cache-control: public,max-age=3600
age: 1026
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
alawar.my1.ru/news/2012-06
195.216.243.23200 OK 30 kB URL HTTP/1.1 alawar.my1.ru/news/2012-06
IP 195.216.243.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (44337), with CRLF, LF line terminators
Hash a0023bddc5c131a4672cec8c71c635b5
1dbf6b27fb7f8b5e7ee48d466f7238cbee927b41
bc0aa9858b653bfc344ec6e43bb1d5c2536392e97a25735f289e01880a9b6d70
Analyzer Verdict Alert fortinet Malware
GET /news/2012-06 HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 5alawaruCoz=; path=/; expires=Tue, 01-Dec-2020 02:26:02 GMT; Secure; HttpOnly; domain=.alawar.my1.ru
5alawaruCoz=; path=/; expires=Tue, 01-Dec-2020 02:26:02 GMT; Secure; HttpOnly; domain=.alawar.my1.ru
5alawaruzll=1669861562; path=/; expires=Fri, 01-Dec-2023 02:26:02 GMT; Secure; domain=.alawar.my1.ru
5alawarpushi=1; path=/; expires=Fri, 02-Dec-2022 01:26:02 GMT; Secure
Pragma: no-cache
Vary: host
Last-Modified: Sat, 30 Jun 2012 18:32:35 GMT
Cache-Control: no-cache,no-store, private
Content-Encoding: gzip
alawar.my1.ru/?ZgkIBG5QVbzIOd3%211ak8vfVm9ugX4PM5NSadq7uB6iqTVNN5xMspQJUD%21%5Ep%5EFzz1ZqmmmWa%21FtONpctrAZ%3BqAiAle4AfMPgqrDbdpiwRJ3hmBpHHMi0YPnfCb4Hx%5EXpJ%5Efppy%5E5u%3BiQW6qpODeWbwu3sEyQKYTKpPbsSu2gwSHMfQsYakng1undkbziBb7M7cQelXYcKJrKruuU8GYGhNxko
195.216.243.23200 OK 1.2 kB URL HTTP/1.1 alawar.my1.ru/?ZgkIBG5QVbzIOd3%211ak8vfVm9ugX4PM5NSadq7uB6iqTVNN5xMspQJUD%21%5Ep%5EFzz1ZqmmmWa%21FtONpctrAZ%3BqAiAle4AfMPgqrDbdpiwRJ3hmBpHHMi0YPnfCb4Hx%5EXpJ%5Efppy%5E5u%3BiQW6qpODeWbwu3sEyQKYTKpPbsSu2gwSHMfQsYakng1undkbziBb7M7cQelXYcKJrKruuU8GYGhNxko
IP 195.216.243.23:0
Hash 977ca253b591302ebadc7dcf1d84b9fe
a45d40fd009c22c5c6b9e2782a7e121f658b79b8
542559239ccc5b6472467590273fea1ab978b143b53f556a214ae8108dfbda30
GET /?ZgkIBG5QVbzIOd3%211ak8vfVm9ugX4PM5NSadq7uB6iqTVNN5xMspQJUD%21%5Ep%5EFzz1ZqmmmWa%21FtONpctrAZ%3BqAiAle4AfMPgqrDbdpiwRJ3hmBpHHMi0YPnfCb4Hx%5EXpJ%5Efppy%5E5u%3BiQW6qpODeWbwu3sEyQKYTKpPbsSu2gwSHMfQsYakng1undkbziBb7M7cQelXYcKJrKruuU8GYGhNxko HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 264
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Last-Modified: Thu, 01 Dec 2022 02:21:40 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 16c3ad4a2bc7f419fb354b37778f8b2f
d193a1336556dcf6b4975a057e7c849037eef0ff
5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
alawar.my1.ru/_st/my.css
195.216.243.23200 OK 4.2 kB IP 195.216.243.23:0
Hash 390d683725a1b09ef79f43b87138e28b
4ff8bf40dfa1c4f6a4f4860757e1ba30f5cc2282
d653fe4890d4fe412680e7af7ae859f0e02ddbe8541b6f742501e53dc6cbb7fc
GET /_st/my.css HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Sat, 19 Sep 2009 08:37:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"4ab4983f-493b"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/?28JBRap4rrCXWAR5%21N9%3BRKpmyb%3BIw4bU5Xsi5iBiW2P9ujVXzLFtvB6%3B8N0X4ebFXihWBh9tCzHBN43zC%3B%3B%213Ks%5E7d%5EI8kkmOldTtKQ5%21cEvgyDZJFy6IbZ6t%3B2GU43aWvNEdPKlYAik%5E19Obl%5EKa7fQcBnYdPEGCfhs%5EsN8cYY8aRbEnKdGtrpUgxTI5470EakqUUpeWe%3B%21Kqmq6Cko
195.216.243.23200 OK 811 B URL HTTP/1.1 alawar.my1.ru/?28JBRap4rrCXWAR5%21N9%3BRKpmyb%3BIw4bU5Xsi5iBiW2P9ujVXzLFtvB6%3B8N0X4ebFXihWBh9tCzHBN43zC%3B%3B%213Ks%5E7d%5EI8kkmOldTtKQ5%21cEvgyDZJFy6IbZ6t%3B2GU43aWvNEdPKlYAik%5E19Obl%5EKa7fQcBnYdPEGCfhs%5EsN8cYY8aRbEnKdGtrpUgxTI5470EakqUUpeWe%3B%21Kqmq6Cko
IP 195.216.243.23:0
Hash 4a33e7cd7558f3f5a86d0fc27aee8c90
50fc0ad44d3917690997ca278091e53d0d575362
d6304d22c2821d367e3697cb9fa4e6dbeb093b8634fccd35312664d30d72b330
GET /?28JBRap4rrCXWAR5%21N9%3BRKpmyb%3BIw4bU5Xsi5iBiW2P9ujVXzLFtvB6%3B8N0X4ebFXihWBh9tCzHBN43zC%3B%3B%213Ks%5E7d%5EI8kkmOldTtKQ5%21cEvgyDZJFy6IbZ6t%3B2GU43aWvNEdPKlYAik%5E19Obl%5EKa7fQcBnYdPEGCfhs%5EsN8cYY8aRbEnKdGtrpUgxTI5470EakqUUpeWe%3B%21Kqmq6Cko HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
142.250.74.132200 OK 579 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
IP 142.250.74.132:0
File type ASCII text, with very long lines (905), with no line terminators
Hash fe0e23ea2d335147e24f50690aa39c7c
ef74d6655ba8efb294f7ed55e6be16d315381edd
fcccb37edb611bf2580bf74646d25e4fb3660d305c66de3c8571bedfc2dac228
GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 01 Dec 2022 02:26:03 GMT
date: Thu, 01 Dec 2022 02:26:03 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 579
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
alawar.my1.ru/.s/src/base.min.css
195.216.243.23200 OK 6.1 kB URL HTTP/1.1 alawar.my1.ru/.s/src/base.min.css
IP 195.216.243.23:0
File type ASCII text, with very long lines (24443), with no line terminators
Hash 629527310ba26cfc236c016e14662321
7a87daed5934db9729f12653e67c8de9d4365d58
134e836199a74c0b501c4e1a46dd3625f4696dc608d1052136ee455c2c2d2509
GET /.s/src/base.min.css HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Tue, 11 Oct 2022 13:44:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"63457343-5f7b"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/src/ulightbox/ulightbox.min.css
195.216.243.23200 OK 1.4 kB URL HTTP/1.1 alawar.my1.ru/.s/src/ulightbox/ulightbox.min.css
IP 195.216.243.23:0
File type ASCII text, with very long lines (4552), with no line terminators
Hash 9c03edbcbefe3eea8902981444de96f7
ca39997a1765ab084fb7e6740858176b9385c4ca
8487aa6ee4bd261bdf1f5b681cf96d347cd980ed45183c5a2a9571db6c891a08
GET /.s/src/ulightbox/ulightbox.min.css HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"628cd15d-11c8"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/src/social.css
195.216.243.23200 OK 610 B URL HTTP/1.1 alawar.my1.ru/.s/src/social.css
IP 195.216.243.23:0
File type ASCII text, with very long lines (442)
Hash af855dcd18719bcf0da15a9029755af1
d74d0ed8d96f2ebe46a7671564bf80eea6865103
9add1a323772a7c09260b63a21732472cb0204105c1d2bee763ea1429f0e26e9
GET /.s/src/social.css HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Dec 2021 11:13:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"61a758f3-9b8"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/src/ulightbox/ulightbox.min.js
195.216.243.23200 OK 7.6 kB URL HTTP/1.1 alawar.my1.ru/.s/src/ulightbox/ulightbox.min.js
IP 195.216.243.23:0
File type ASCII text, with very long lines (22291), with no line terminators
Hash 3bb3aaa5262067cec461b32298975b05
4e11bfe49cd05fcdbd1e692fc87788da07e62161
61fa91bb508bfda7ee487ffaf0e38aa71cfab1ce78bb108d6c6140dc9b35ab22
Analyzer Verdict Alert fortinet Malware
GET /.s/src/ulightbox/ulightbox.min.js HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/javascript
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"628cd15d-5713"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/src/layer7.min.css
195.216.243.23200 OK 7.1 kB URL HTTP/1.1 alawar.my1.ru/.s/src/layer7.min.css
IP 195.216.243.23:0
File type ASCII text, with very long lines (25596), with no line terminators
Hash 3c1935984757d00f76ff96d9829e2f6d
7dd11a9eb28ccb100f044ed513c077820689ccd5
a1c0d21bfbcfb164e9029fa989f63926eba780cc6e780322ebdf88040c45ec1a
GET /.s/src/layer7.min.css HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Thu, 24 Mar 2022 08:18:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"623c2953-63fc"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
alawar.my1.ru/.s/src/jquery-1.12.4.min.js
195.216.243.23200 OK 34 kB URL HTTP/1.1 alawar.my1.ru/.s/src/jquery-1.12.4.min.js
IP 195.216.243.23:0
File type ASCII text, with very long lines (32077)
Hash eed194bd33958fd0768352b877915a40
db7a4073a53efb53155652219d948940efe6baa7
9eaac8a63f3851efef83bd151a558f6c8d8e6bb75c7725625cf8892b6312aa06
Analyzer Verdict Alert fortinet Malware
GET /.s/src/jquery-1.12.4.min.js HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/javascript
Last-Modified: Thu, 01 Sep 2022 17:43:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"6310ef52-17b8b"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/src/uwnd.min.js
195.216.243.23200 OK 57 kB URL HTTP/1.1 alawar.my1.ru/.s/src/uwnd.min.js
IP 195.216.243.23:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20adfead3a54ad11599adb1bab3d6fc6
23bb516448d5c643cb186ad9aec426388aa79dfd
b49b11429b509cf608a66bbcebc13cf63fa444b998c1a678d1bebfe33f7c2ff4
Analyzer Verdict Alert fortinet Malware
GET /.s/src/uwnd.min.js HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/javascript
Last-Modified: Mon, 25 Apr 2022 10:32:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"626678ba-3334b"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
alawar.my1.ru/.s/t/431/2.jpg
195.216.243.23200 OK 449 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/2.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x13, components 3\012- data
Hash 2ea1bb455fd958e43a58e0fe0a91c806
165fea8437ca8e034ce99153ebc4b22189d42a22
5f00dd10cc3f895e0ea2c58ebc0cbcf86f2b8662a419840502d25e9974fe8843
GET /.s/t/431/2.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 449
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1c1"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/30.jpg
195.216.243.23200 OK 1.6 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/30.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x33, components 3\012- data
Hash b67bb7f051c21777795aa7394364e781
0029f36e322d82b029633ad9c76033ae63f5c9a6
ad855f53a4619052d9caf6fb42dbefdd096e285707871b2c05790031c7bdc6e0
GET /.s/t/431/30.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1572
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-624"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/10.jpg
195.216.243.23200 OK 443 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/10.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x13, components 3\012- data
Hash 7e6939088d7dbecacee4ebf324b36d04
5113b72052a75a51e5a4e8d0c5eb08b9f5023ba5
5325488c209f84626ecfdc9bf71a3622415cf475ccefe2d33cb4b5a55a11e959
GET /.s/t/431/10.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 443
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1bb"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/29.jpg
195.216.243.23200 OK 1.6 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/29.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x33, components 3\012- data
Hash 46017605226c5098560936621573c236
566d6d07daa1cbc0be0bcc149893402756b16a60
bbc4f00c0c67a6d89fb0dc660416e60931a314c89f8066c1a36d0975ef874b3a
GET /.s/t/431/29.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1584
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-630"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/18.jpg
195.216.243.23200 OK 464 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/18.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 9x25, components 3\012- data
Hash c767410dc68395967d850441dde9ec8f
0858d314bd763f92fd2b1ed544c5241401b72b70
e8f577f72c60f6351947f712ff44be3142f26fb93e442357faa6bc2ceac43e00
GET /.s/t/431/18.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 464
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1d0"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/27.gif
195.216.243.23200 OK 4.8 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/27.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 217 x 31\012- data
Hash ebca0df728de8391546fc91bbef86f95
cf6e9d9274069b71512adbaff72f47e90026f7d4
31a94c29c5f9fe08250d0b38444fd2cbea14434ccb5b12e8d0264eb650a55ae5
GET /.s/t/431/27.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 4806
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-12c6"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/14.gif
195.216.243.23200 OK 43 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/14.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /.s/t/431/14.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-2b"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/17.jpg
195.216.243.23200 OK 1.2 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/17.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 41x25, components 3\012- data
Hash 940be75309d9e6861e2d6291e83f6a05
9883e1c7833a49fa09fc0ce5186d8c604b619894
5b7018dd8a4d1f51f36f46f3457d3d5c1550d63e8e2c0a648e6fc8c0e60ac349
GET /.s/t/431/17.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1171
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-493"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/4.jpg
195.216.243.23200 OK 453 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/4.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x13, components 3\012- data
Hash 9230be9124b962881c817034d387de61
8b8915b84fef3fb7432b37c3fcff8c1f7f660ddc
1e58d1110c90e50f836dac5378bf1a0f290219f1e6537e9a871d9de3ffa97826
GET /.s/t/431/4.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 453
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1c5"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/8.jpg
195.216.243.23200 OK 445 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/8.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x13, components 3\012- data
Hash fec8094e56e4e519f75da9757035f159
8e551d59ea4f43e2195d04823a11a2317531545e
7ee671ee6e6ed7bc6413a5dd69464f5f71ddab82a08cac1601deff14cf169ee2
GET /.s/t/431/8.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 445
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1bd"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/24.jpg
195.216.243.23200 OK 1.6 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/24.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 91x25, components 3\012- data
Hash 7e61daac66cef5fac6689548e22bdf6d
62c7ad30edfd1c3cae3e46349202aa9d5d5cdd6f
0e9c378cff091349f0e97ca8cb36b568c9a6938d8b5d46e3d91269e8a4f7b253
GET /.s/t/431/24.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1574
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-626"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/23.jpg
195.216.243.23200 OK 1.2 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/23.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 41x25, components 3\012- data
Hash 639db2e7573f1960669d1823177062e7
8df89f437425fbee5964480419a969e5453eb747
2e509be3d70137440849aca2fc566e4d0fe5eb0c299d8e0df4a2709768c6c7d3
GET /.s/t/431/23.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1180
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-49c"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/16.jpg
195.216.243.23200 OK 1.4 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/16.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 90x25, components 3\012- data
Hash 95aeaa7f65ff8f65687febe18305fe58
fc1e3ee1e0673e91da9e97d06685f622bd5db208
3ce5f7cc12c554c9bd7670175630c5d8c6b318b605aba7bf49a748c3d672cca8
GET /.s/t/431/16.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1416
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-588"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/1.jpg
195.216.243.23200 OK 3.2 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/1.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 190x178, components 3\012- data
Hash 3ae8563339efaee23a13e7968b63f712
65b67684d5cbcfd2ddd9cb968e2f0da4217f3d19
693e41ae5392fb71d8888e73fe5669ebb2d4f9b0ba9684af516ec6d2b0fd60ea
GET /.s/t/431/1.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 3222
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-c96"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/21.jpg
195.216.243.23200 OK 491 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/21.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 9x25, components 3\012- data
Hash 3cc2cfb7f38d76a4996c63f2981513ef
c7fb54728b4cb30aa9af77389a6cf0e678dc5e72
3f50817dac7fee52c028fa70f356981dbf9702557397d614ca1dc80e5f4fc025
GET /.s/t/431/21.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 491
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1eb"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/20.jpg
195.216.243.23200 OK 1.2 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/20.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 41x25, components 3\012- data
Hash 2968dc0f127e5e7d2d777fcc5988eba8
82354e3c86e073277a76055b6f6067b69dfd1d5e
933c50cc80a7a505a0f407ccfd290aefb60c3da042dc1bc9ec7765615e9d844a
GET /.s/t/431/20.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1173
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-495"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/3.jpg
195.216.243.23200 OK 1.6 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/3.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 179x13, components 3\012- data
Hash ebb051fbd3f7c953819beaf3114ec0d5
3f2189d734e80cbd298b3a66d9b3f4362c54b2c2
8f8199b3c0e5cc5acf02c3de7b94789d8a0b230a0ec10fab72149e3f60063c8f
GET /.s/t/431/3.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1556
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-614"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
push.services.mozilla.com/
54.187.31.159101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.31.159:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GfJQvhqQuZMiFWS8YCwJCA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HtZj4eVouqaBXTQAVRqCaH1QpUI=
alawar.my1.ru/stat/1669861561935?01
195.216.243.23302 Found 219 B URL HTTP/1.1 alawar.my1.ru/stat/1669861561935?01
IP 195.216.243.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 485476133d8ea08a8100e173105685ea
26fbc6d34427225a77133b1b07d5257148293e12
fc78bff1e0d5dfb4b601b6aaa4cdf888192d56402ebe081c5017e964ca742d19
GET /stat/1669861561935?01 HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 5alawarucnid=x9vGC4texN; domain=alawar.my1.ru; path=/stat/955204761; expires=Thu, 01-Dec-2022 02:26:12 GMT
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://alawar.my1.ru/stat/955204761?11
alawar.my1.ru/.s/t/431/12.jpg
195.216.243.23200 OK 33 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/12.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 377x200, components 3\012- data
Hash efd5c0fa6f4860e76f7a41b9e8805013
46f0b9dddac31015b7912da14d952e9db004fe56
a1b90d9f58244a35592d04dcd858fd2fee3d94d3c7cedcdd8dca32275daf525c
GET /.s/t/431/12.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 32976
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-80d0"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/9.jpg
195.216.243.23200 OK 1.5 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/9.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 180x13, components 3\012- data
Hash cb207b7e30d66351f4098a1faaaffad9
5a153fa1f3cd17dc5e950f34cc1cc7b22ac90f3a
c464999cae8fd63a4a7905d174cb1c087dcf5b262c0fe4753c7dd0f31f458a30
GET /.s/t/431/9.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1471
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-5bf"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/11.jpg
195.216.243.23200 OK 7.8 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/11.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 1da1350b23f968f4b10dd6a3324c3f1f
48f1c355e92226caca4c197ae45209fe223bb15c
c903ca035ca5abaa4c924783076b8554416514ec2821665066f41ed29740bed7
GET /.s/t/431/11.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 7756
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1e4c"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/5.jpg
195.216.243.23200 OK 1.5 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/5.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x186, components 3\012- data
Hash 685806365003486b62e15f2735d73e4b
f5757699d5c22ed386762ab5e372faffe72e33d0
d890db588cec165aa3bbdbfa8d117a2908d515208ba4b6b8e7a89d6c7face9e7
GET /.s/t/431/5.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1498
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-5da"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/6.jpg
195.216.243.23200 OK 7.7 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/6.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash ddedf8f698ebc552ba9adf3449eeebbb
cafbf459645a48f4be24f3b617d81ee88ea6f798
f97779d93b8bf8c2805f589f15ab53f40e570521d2fc19df122ab764c2334251
GET /.s/t/431/6.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 7704
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1e18"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/7.jpg
195.216.243.23200 OK 1.4 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/7.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x179, components 3\012- data
Hash 8786310b15e155bcb58413e3cbe896b2
7e9d968d3cbf0ac71063762710706e64ea779022
b95cca929be35a0139535ca22e2b5ce42df89bcb36af15be233a55545e661a4b
GET /.s/t/431/7.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 1432
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-598"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/13.jpg
195.216.243.23200 OK 9.8 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/13.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 151x200, components 3\012- data
Hash aab4e6a575d1aece8e614afd3b08516c
0495652c5cedd315ae50e13f8247c85523c5de59
436741a93cbe6ba5b44bf0c2d3f791f04da9a1a0556b8c1ee14010b6460e96e9
GET /.s/t/431/13.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 9801
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-2649"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/25.gif
195.216.243.23200 OK 594 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/25.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 217 x 4\012- data
Hash 8dbd53a0633fc9adda6f3d8bf35895fb
0f5c9aec4f8bdfec0614bf0a479e28e42c7b71f3
26f41df58c1cf16ad62a7c07c3b06a5caf78570d53866594edbd161af053401f
GET /.s/t/431/25.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 594
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-252"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/26.gif
195.216.243.23200 OK 5.0 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/26.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 217 x 32\012- data
Hash 69d613c8112554567040974340be8ae2
5c851bb3d6dda974bcd4fbcdec3f68a83edec329
355f00479324bf88b69ca80626014e1025585b821c2a82c55b958a337a220d74
GET /.s/t/431/26.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 5014
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-1396"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/32.gif
195.216.243.23200 OK 168 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/32.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 8 x 8\012- data
Hash 7910a0109ca2508a8d51bbd72a3f6186
05f71c68da4421eca9dded0fffb63934400b16b7
e1861950d64816778b63a52ecd1b79809a3770c4ec1048e55edaae0cf5887040
GET /.s/t/431/32.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/_st/my.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 168
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-a8"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/u.svg
195.216.243.23200 OK 612 B URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/u.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 1e726893f02be39b70d24d502a3a9998
98c6fcf43a67426ed7e9c7a839e8115494ca8072
d0608cf0c4aff79f20a198427f7df73300d643face9bea72b8d406b432b84df9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/u.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 612
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-264"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/15.jpg
195.216.243.23200 OK 15 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/15.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 322x175, components 3\012- data
Hash b480ec3fab424a5f43d569c1f098e7b7
8788eada517a9b8805c7db0ffce898a9c54e990a
a7fdb91de132b93904010cc643e40d2fab4a19c2c8fe0596204c6ebd6b41ee48
GET /.s/t/431/15.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 14954
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-3a6a"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/vk.svg
195.216.243.23200 OK 772 B URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/vk.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7c4eb8cae0b565c023c4406add5f8041
079ce5d3277df672b57a73476a28d0bf0b1c1fe2
05a3f8587400860aa87bb18c9a9cd5b22a45ca4fc4a37a7922d29e48549b2fc9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/vk.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 772
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-304"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/fb.svg
195.216.243.23200 OK 611 B URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/fb.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash d178cc46dcbcf2b6f19445674fe3fe58
26f9747489d9e796926f7bbe11817c420afda3af
a9265d79c9ff74d4deeab5dce9643ed838018a6b4346605e002867858534f4bf
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/fb.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 611
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-263"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/ya.svg
195.216.243.23200 OK 660 B URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/ya.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7676c3eee5bd955efe08fd05367a443b
595e4e8dbf5ff472606434d0f45806d088de4c0c
b72d3f61ac56b4aa27bad5769589705004aff1f0ad341785ca72dc46ba16de5b
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/ya.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 660
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-294"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/ok.svg
195.216.243.23200 OK 1.9 kB URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/ok.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 08bbc2fa9b08463b0d061041d62b408e
370c53ccc3edd296cd35fb9e3de20dabfdae78d9
e1369586f1d82834ecc0ccab2f5f1a6f7565f2c715243d956bd7eb1404c8fba9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/ok.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 1858
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-742"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/img/icon/social/gp.svg
195.216.243.23200 OK 550 B URL HTTP/1.1 alawar.my1.ru/.s/img/icon/social/gp.svg
IP 195.216.243.23:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (534), with no line terminators
Hash 10d296226de121de55180e5b1b7d9d49
5980293f4f290734d09459d068a8c3996e43fe40
a657a4d5d05c6cd9b9f881ab6941e71f725c7eb451c9f37ceb514e45fdfd441d
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/gp.svg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/.s/src/social.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/svg+xml
Content-Length: 550
Last-Modified: Fri, 01 Feb 2019 12:57:26 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c544236-226"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/35.gif
195.216.243.23200 OK 48 B URL HTTP/1.1 alawar.my1.ru/.s/t/431/35.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 5 x 5\012- data
Hash 48ceb1657c8cc341fb75d55acf5c2818
55cc1d1f4f0ecef025fda8690598d8a54adcc8a3
5105aaa02db905c930bf63c763c264dce43f9dcc5d3ffc4644cab8392479cd8f
GET /.s/t/431/35.gif HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/_st/my.css
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Content-Length: 48
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-30"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/.s/t/431/28.jpg
195.216.243.23200 OK 2.9 kB URL HTTP/1.1 alawar.my1.ru/.s/t/431/28.jpg
IP 195.216.243.23:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 173x33, components 3\012- data
Hash b3663bb4beb1206109ab7383deab35dd
a8832f66de2793273a151ef66631feb09e8c3846
8de635682661b1991314e4d29d3e0f3b026cbfa7e92d867b0f315f59c975d941
GET /.s/t/431/28.jpg HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/jpeg
Content-Length: 2926
Last-Modified: Tue, 23 Feb 2016 13:19:52 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "56cc5c78-b6e"
Expires: Wed, 21 Dec 2022 02:26:02 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
alawar.my1.ru/?v6Xi%21pnFWIkm8kbefNetFWBkh%3B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%3Bdbr%3Boo
195.216.243.23200 OK 798 B URL HTTP/1.1 alawar.my1.ru/?v6Xi%21pnFWIkm8kbefNetFWBkh%3B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%3Bdbr%3Boo
IP 195.216.243.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 637d6ad6a53912353aeb7d863ca139fb
320944b88fa1edcfa67ea29932784941a6039be6
0cf2b7bfe6fbe422e209975ac2728a8a535db5cc1099e934ccb11d157d1c0ba4
GET /?v6Xi%21pnFWIkm8kbefNetFWBkh%3B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%3Bdbr%3Boo HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
alawar.my1.ru/stat/955204761?11
195.216.243.23200 OK 400 B URL HTTP/1.1 alawar.my1.ru/stat/955204761?11
IP 195.216.243.23:0
File type GIF image data, version 87a, 88 x 31\012- data
Hash a90259efcc662fa5e184c1665753e569
bac65463a3507a07c18076d218df0ceab2a7c8cc
548b968a396f66f31834a55d0d0b94fa498d832c053f67bc9ea598064112b59d
Analyzer Verdict Alert fortinet Malware
GET /stat/955204761?11 HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alawar.my1.ru/news/2012-06
Connection: keep-alive
Cookie: 5alawarucnid=x9vGC4texN; 5alawaruzll=1669861562; 5alawarpushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ucvid=BP4ma2pwBX; domain=my1.ru; path=/; expires=Fri, 01-Dec-2023 02:26:02 GMT
s23.ucoz.net/adv/dummy/000/css/style.css
195.216.243.23200 OK 1.6 kB URL HTTP/1.1 s23.ucoz.net/adv/dummy/000/css/style.css
IP 195.216.243.23:0
Hash 50406c447ccad47ca9e5d53eff612ffb
16e3921585135a87a1066689c9c67a312d96c92d
01a0732bba96fb38be885a1d233fecf52e32c7e07e48cd05f6f07a3690ea304c
GET /adv/dummy/000/css/style.css HTTP/1.1
Host: s23.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2019 14:28:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"5c9a36f8-19eb"
Content-Encoding: gzip
alawar.my1.ru/favicon.ico
195.216.243.23200 OK 894 B URL HTTP/1.1 alawar.my1.ru/favicon.ico
IP 195.216.243.23:0
File type MS Windows icon resource - 1 icon, 16x16\012- data
Hash a3a0510761359bcc2613a45c76546d42
c66b17eac9b5b07d4c3242448b079adc2949128e
e50d733849b9ff216b9cb7d884bffe006c908a71106455f7a25f297fce487f32
GET /favicon.ico HTTP/1.1
Host: alawar.my1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/news/2012-06
Cookie: 5alawaruzll=1669861562; 5alawarpushi=1; ucvid=BP4ma2pwBX
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/x-icon
Content-Length: 894
Last-Modified: Wed, 25 Feb 2009 14:44:31 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "49a5594f-37e"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfa86a83740e065e1520c64753df3869
3b7ec8fc3eba7173cafaed1b384b8ad2e82889ea
4d461b9ab4a10a5a1ee6e25ddc519c74f069503f37d9adec105fe9fc19e3390d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D461B9AB4A10A5A1EE6E25DDC519C74F069503F37D9ADEC105FE9FC19E3390D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18802
Expires: Thu, 01 Dec 2022 07:39:25 GMT
Date: Thu, 01 Dec 2022 02:26:03 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash 2b92127a6a1bb4ca7282682c82b44644
debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0
25b597a392a2e1816673f54bb24cee553c524c1535330749e564665bfa6b0c3e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 04 Dec 2022 23:54:00 GMT
ETag: "debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0"
Last-Modified: Wed, 30 Nov 2022 23:54:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 228
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77286034c8c3b4f3-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfa86a83740e065e1520c64753df3869
3b7ec8fc3eba7173cafaed1b384b8ad2e82889ea
4d461b9ab4a10a5a1ee6e25ddc519c74f069503f37d9adec105fe9fc19e3390d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D461B9AB4A10A5A1EE6E25DDC519C74F069503F37D9ADEC105FE9FC19E3390D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3041
Expires: Thu, 01 Dec 2022 03:16:44 GMT
Date: Thu, 01 Dec 2022 02:26:03 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash 2b92127a6a1bb4ca7282682c82b44644
debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0
25b597a392a2e1816673f54bb24cee553c524c1535330749e564665bfa6b0c3e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 04 Dec 2022 23:54:00 GMT
ETag: "debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0"
Last-Modified: Wed, 30 Nov 2022 23:54:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 228
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77286034cfafb4e8-OSL
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash 2b92127a6a1bb4ca7282682c82b44644
debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0
25b597a392a2e1816673f54bb24cee553c524c1535330749e564665bfa6b0c3e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 04 Dec 2022 23:54:00 GMT
ETag: "debe2bd6b71c18b76f44932f6d2ed4e5aa36aec0"
Last-Modified: Wed, 30 Nov 2022 23:54:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 228
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77286034d8c9b4f3-OSL
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js
142.250.74.35200 OK 167 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (1329)
Size 167 kB (167119 bytes)
Hash e269c265007dcb5ecc3f2aa6155bc52a
cb8eed3b2684c2767bf45d652f6d630740051d04
85d7f1b40b063a3a07449151918eb63b85f2c6ff5d54936618a1a737ab5c7dbf
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://alawar.my1.ru
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 167119
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 20:27:34 GMT
expires: Tue, 28 Nov 2023 20:27:34 GMT
cache-control: public, max-age=31536000
age: 194309
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rot.spotsniper.ru/?src=ujs6
31.172.81.160200 OK 1 B URL HTTP/1.1 rot.spotsniper.ru/?src=ujs6
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6 HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
rot.spotsniper.ru/?src=ujs6&s_subid=btn
31.172.81.160200 OK 1 B URL HTTP/1.1 rot.spotsniper.ru/?src=ujs6&s_subid=btn
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6&s_subid=btn HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
counter.yadro.ru/hit;zone_my1ru?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561734
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;zone_my1ru?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561734
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;zone_my1ru?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561734 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
counter.yadro.ru/hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoz_desktop_ad?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
counter.yadro.ru/hit;clickgate08?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861562062
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;clickgate08?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861562062
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;clickgate08?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861562062 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit;ucoznet?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoznet?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoznet?r;s1280*1024*24;uhttps%3A//alawar.my1.ru/news/2012-06;1669861561733 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
142.250.74.97200 OK 60 kB URL HTTP/2 themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP 142.250.74.97:0
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://alawar.my1.ru
Connection: keep-alive
Referer: https://s23.ucoz.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 60332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 20:08:33 GMT
expires: Thu, 30 Nov 2023 20:08:33 GMT
cache-control: public, max-age=31536000
age: 22650
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 02:26:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s23.ucoz.net/adv/dummy/000/img/bg.gif
195.216.243.23200 OK 1.3 kB URL HTTP/1.1 s23.ucoz.net/adv/dummy/000/img/bg.gif
IP 195.216.243.23:0
File type GIF image data, version 89a, 485 x 3\012- data
Hash b19967d808ed7c42b41316d6c8474f55
18d80748bd4041b13a3373a429281ec65347a0e2
16c9962c4ecd52efc16d9d639d52fc60b9e427b6e454190d162f1aa1d220ad50
GET /adv/dummy/000/img/bg.gif HTTP/1.1
Host: s23.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s23.ucoz.net/adv/dummy/000/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 1268
Last-Modified: Tue, 26 Mar 2019 14:28:08 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36f8-4f4"
Accept-Ranges: bytes
s23.ucoz.net/adv/dummy/000/img/ucoz-logo.png
195.216.243.23200 OK 4.6 kB URL HTTP/1.1 s23.ucoz.net/adv/dummy/000/img/ucoz-logo.png
IP 195.216.243.23:0
File type PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash 14d37a3409afc2c450c62b97bc8019da
43fc12bf16a292d6d10b17ab7d1e37785288858c
fc4f998c5fcacc6cf161f1bedf46ec55e56273670ecce8b59e947b68d3c5bdb2
GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1
Host: s23.ucoz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Dec 2022 02:26:02 GMT
Content-Type: image/png
Content-Length: 4585
Last-Modified: Tue, 26 Mar 2019 14:28:08 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36f8-11e9"
Accept-Ranges: bytes
counter.yadro.ru/hit;ucoz_topline_worldwide?rhttps%3A//alawar.my1.ru/news/2012-06;s1280*1024*24;uhttps%3A//alawar.my1.ru/%3Fv6Xi%2521pnFWIkm8kbefNetFWBkh%253B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%253Bdbr%253Boo;1669861562370
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;ucoz_topline_worldwide?rhttps%3A//alawar.my1.ru/news/2012-06;s1280*1024*24;uhttps%3A//alawar.my1.ru/%3Fv6Xi%2521pnFWIkm8kbefNetFWBkh%253B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%253Bdbr%253Boo;1669861562370
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;ucoz_topline_worldwide?rhttps%3A//alawar.my1.ru/news/2012-06;s1280*1024*24;uhttps%3A//alawar.my1.ru/%3Fv6Xi%2521pnFWIkm8kbefNetFWBkh%253B3bX31vW4hl186z9jtPfzSl3rtZEcqW4vQTLTOpl64Qi42evPy3ifZwD%253Bdbr%253Boo;1669861562370 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alawar.my1.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 01 Dec 2022 02:26:03 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Tue, 30 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7514
Expires: Thu, 01 Dec 2022 04:31:18 GMT
Date: Thu, 01 Dec 2022 02:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7514
Expires: Thu, 01 Dec 2022 04:31:18 GMT
Date: Thu, 01 Dec 2022 02:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7514
Expires: Thu, 01 Dec 2022 04:31:18 GMT
Date: Thu, 01 Dec 2022 02:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7514
Expires: Thu, 01 Dec 2022 04:31:18 GMT
Date: Thu, 01 Dec 2022 02:26:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7514
Expires: Thu, 01 Dec 2022 04:31:18 GMT
Date: Thu, 01 Dec 2022 02:26:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d0219e6bee2a28f003f396f872eecf0
b3d22d146c6094cb539de40a72b9c5a140802ee5
41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7609
x-amzn-requestid: 1a464872-7c15-42d3-a12a-f344adf99662
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91PHVUoAMFf4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-3f77f387752222b212d6e2a5;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mh5slfAqC8Jrbw6WLAI_GN9oftGPLXy0W75ZvD_XBcoBukkYT9wVsQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 05:21:42 GMT
age: 75862
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 10:53:00 GMT
age: 55984
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7837c610-4f38-4ecd-b984-5752ff89a1f8.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7837c610-4f38-4ecd-b984-5752ff89a1f8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 37004182402c955f288eb1fa8df7aef4
01a07f9a5725f608fafeced7b3d1ebdbcb776c29
c90c80dd5cadbde3fef20a9c4561b1efa47401e5f6bdf64c91246553c50204f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7837c610-4f38-4ecd-b984-5752ff89a1f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7957
x-amzn-requestid: 54f43d6b-cf41-4067-b459-6b8d98869354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91PGgNIAMF2Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-069ac54c22797a511c69a220;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: B4x-V_KZGERwIhr_eGik5Npj5mKN6CbI9pdrNU2I8gFCGYKQVuu3dA==
via: 1.1 6c90b631453c435bd0022caa657b67e8.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 05:38:39 GMT
age: 74845
etag: "01a07f9a5725f608fafeced7b3d1ebdbcb776c29"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F350e8884-8903-4779-8a0c-bb74e9168bfb.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F350e8884-8903-4779-8a0c-bb74e9168bfb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fd5f7a9e04d27654062b3e18b8aecca
07fafbd614cdb49f20bceea29d5e684725d3bdf6
0cb64a9a33f66b92eed5a591b6c368f3d74363941d8876e553a8ea6aaa547590
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F350e8884-8903-4779-8a0c-bb74e9168bfb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4199
x-amzn-requestid: d7983896-c4a5-4133-9b0e-51ac412cf732
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZttXFcZIAMFmJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386f655-139cd6a82eaa934d5d411029;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 06:21:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 91_Pv2sUA4286BEZXTKFctgZOrzWy6VWFDGiUV3_p_QnyckRDFb-lw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:51:29 GMT
age: 16475
etag: "07fafbd614cdb49f20bceea29d5e684725d3bdf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:21:34 GMT
age: 47070
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8802d5080eb35e4052ef31cf7658650
1e78566f2e69268c5f753fb49112ab07aae3eccf
9c96906ee1dea353198c9069fa7e42b100e4fa766e5be8e4d8db036033961086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc551f651-39d0-4021-90ed-915a79168ea0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4409
x-amzn-requestid: dc9ccdbf-a051-49ce-a535-c100b8ee6f12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz81EHdoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-0b06c368156b828e0c663081;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UsYYNMsulshDYcUC9N2Q3fnxjdZd5ki-0_LlXRchIsNSq0FruNhFqw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:09 GMT
age: 16675
etag: "1e78566f2e69268c5f753fb49112ab07aae3eccf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2