dl1a.gamedl.ru/download/x9dxnbur8s5wc9gs8ecumoa4inwrxlvr/H1/7e9b2a7649a98fbd1c9b7959e0a8dd6b446a5dd41530e6c2e651f8114a30fbff/1150012/Baldurs.Gate.3.v4.1.1.Plus.15.Trainer-FLiNG.zip
301 Moved Permanently 146 B URL User Request GET HTTP/1.1 dl1a.gamedl.ru/download/x9dxnbur8s5wc9gs8ecumoa4inwrxlvr/H1/7e9b2a7649a98fbd1c9b7959e0a8dd6b446a5dd41530e6c2e651f8114a30fbff/1150012/Baldurs.Gate.3.v4.1.1.Plus.15.Trainer-FLiNG.zip
IP
Certificate IssuerLet's Encrypt
Subjectvideo.playground.ru
FingerprintDE:93:0F:B8:9C:F1:69:69:92:78:0B:9F:DA:8E:7D:34:BE:55:1A:00
ValidityThu, 14 Sep 2023 04:36:06 GMT - Wed, 13 Dec 2023 04:36:05 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash e8b76ad0d5c4f5d53f4fb11bec94c3c5
56fab40931992169ebb1d48f7527f2b714b74072
46d9822027f8923d57eeb872956b319f84688fa853ff813e9cd2dc96433dddf1
GET /download/x9dxnbur8s5wc9gs8ecumoa4inwrxlvr/H1/7e9b2a7649a98fbd1c9b7959e0a8dd6b446a5dd41530e6c2e651f8114a30fbff/1150012/Baldurs.Gate.3.v4.1.1.Plus.15.Trainer-FLiNG.zip HTTP/1.1
Host: dl1a.gamedl.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.3
Date: Sun, 24 Sep 2023 00:25:13 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 146
Connection: keep-alive
Location: https://www.playground.ru/redirect/post/1150012
www.playground.ru/img/ui/playground-logo-3d.png
200 OK 3.5 kB URL GET HTTP/2 www.playground.ru/img/ui/playground-logo-3d.png
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type PNG image data, 90 x 69, 8-bit colormap, non-interlaced\012- data
Hash 81cd05ad0550e6c375f317ca9ba2921a
72c77a5237809e1bef59dfa271651db9218242ad
f0e5cbbcf10a8f0ec89aa0ead8e3e95c5b95886e921a350e8573ecce376e277a
GET /img/ui/playground-logo-3d.png HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: image/png
content-length: 3478
last-modified: Fri, 13 Nov 2020 13:16:13 GMT
etag: "5fae871d-d96"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
www.playground.ru/img/logo-mobile.svg
200 OK 10 kB URL GET HTTP/2 www.playground.ru/img/logo-mobile.svg
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (443)
Hash 73ac8ee32f5cbcd45d9f89f1c1e52ff0
481b1e6bd70cd0fd6e22bd04fc259521d2461f1d
f4cf899262d1ea4a337429212b1b2c7e69cc1df07d8a3768d8c2a33edb59853e
GET /img/logo-mobile.svg HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: image/svg+xml
content-length: 10271
last-modified: Thu, 04 Aug 2022 13:08:11 GMT
etag: "62ebc4bb-281f"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
i.playground.ru/e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?90x125
200 OK 6.0 kB URL GET HTTP/2 i.playground.ru/e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?90x125
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 90x125, components 3\012- data
Hash 388515ae3dac628fdc013831c7c80a62
1d182c0943a5ccaf0c81d95e7707b42dc6688e2c
dbbae641c625fc16e0af9c35fb795f6d862de2cdf2e85b4afe24b9b03b5ecea3
GET /e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?90x125 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: image/jpeg
content-length: 5962
last-modified: Sun, 20 Aug 2023 17:36:24 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:14 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
www.playground.ru/js/api.js?9832
200 OK 549 B URL GET HTTP/2 www.playground.ru/js/api.js?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Hash c685ae2c9855adf657ba27742742e3e9
2284e144ca58ac26f842623e1d8027693e799e82
28e8d0c9daed30967f828118e7238284da69ab39f1bc490bc61a02db5031e09d
GET /js/api.js?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
content-length: 549
last-modified: Wed, 16 Feb 2022 16:23:42 GMT
etag: "620d250e-225"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
i.playground.ru/e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?120x166
200 OK 9.1 kB URL GET HTTP/2 i.playground.ru/e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?120x166
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 120x166, components 3\012- data
Hash a4b60c20f086c86bb040f316a4103822
ba18a253d9755ae09b642886a3532975cc8d6aac
072642c2d283b012eca662f2e1f079643838824b109154f104cccd4ed7b3ba79
GET /e/s6ZsFnxtpunIdBS0PFhnNw.jpeg?120x166 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: image/jpeg
content-length: 9118
last-modified: Sun, 20 Aug 2023 17:36:24 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:14 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/a/uNhXkDZXlov3kJLjRWYn9w.png?26x26
200 OK 1.9 kB URL GET HTTP/2 i.playground.ru/a/uNhXkDZXlov3kJLjRWYn9w.png?26x26
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash f8a07a0327cc7dcec8e7fae345df9487
f9a9d2b8f300b6131c87f936d21877dfc2868749
1c4cc450ed93d3702f0c213b9a2baf25631b77b2a1bb8ff9ed69b66d05c257cb
GET /a/uNhXkDZXlov3kJLjRWYn9w.png?26x26 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: image/png
content-length: 1856
last-modified: Tue, 12 Sep 2023 10:56:15 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:14 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
s3.wi-fi.ru/mtt/configs/sites/playground.js
200 OK 6.7 kB URL GET HTTP/1.1 s3.wi-fi.ru/mtt/configs/sites/playground.js
IP
ASN #202173 MaximaTelecom JSC
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.wi-fi.ru
FingerprintC3:4D:B9:7A:59:2E:40:9B:D1:C2:D3:47:F3:F1:E3:53:27:6A:8A:B8
ValidityMon, 26 Sep 2022 14:21:56 GMT - Sat, 28 Oct 2023 14:21:55 GMT
File type ASCII text, with very long lines (23206), with no line terminators
Hash 2d942338c3364156fa3473e912925b50
f7c2841e3bd30f126623723b255db3873329bc3d
91559cff582aa811e8970bedd3d43eb1f8dff892fb8c9aa92066404a1a941675
GET /mtt/configs/sites/playground.js HTTP/1.1
Host: s3.wi-fi.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sun, 24 Sep 2023 00:25:15 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
Etag: W/"ec94b826b5667d5d901f3a68ef9eeda4"
Last-Modified: Tue, 19 Sep 2023 14:01:20 GMT
Vary: Accept-Encoding, Origin
X-Amz-Request-Id: 178651A73177A200
X-Minio-Deployment-Id: ae9e4692-ccf9-495e-ad65-b797e6550821
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
www.playground.ru/css/vendor/fancybox/jquery.fancybox.min.css?9832
200 OK 19 kB URL GET HTTP/2 www.playground.ru/css/vendor/fancybox/jquery.fancybox.min.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 848babbb3c00a3ba141b427cb859ef5a
fcaa84ab6c35888eb2e63978735e46d1b4827df6
6302d0d5029cea353036704dec4580e93180d562bc03bb59aa03fed1d6a92232
GET /css/vendor/fancybox/jquery.fancybox.min.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Thu, 14 Sep 2023 14:01:22 GMT
etag: W/"65031232-33c8"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 41d47531a53830929519cbac6bcf752a
c39e4c34f34823397d064f1dd018625b2321f892
77798848ecc76001633e9d6571748a6c58fc655abb7509c4deb52932479e93ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.playground.ru/css/font-icons.css?9832
200 OK 17 kB URL GET HTTP/2 www.playground.ru/css/font-icons.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 5b0375a0362489bdd1e069db479b8e71
29fb8441de46bf318abdb75d84e1858ee5533fbe
e059a09074bc5390edd5fe37c24baf4f80453a97d2d3cdcf88f4c6d24f692c6d
GET /css/font-icons.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Mon, 02 Nov 2020 15:47:03 GMT
etag: W/"5fa029f7-1b67"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/css/post.css?9832
200 OK 19 kB URL GET HTTP/2 www.playground.ru/css/post.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 15167c9ee215d2b619b1739d9cff9419
a9ce489d5bb903c649ddf0d0853055cff09451e6
700f0c378dee45b1cf7af6dd0d94fcdcc6b8a721be1f23224b023fba4052f014
GET /css/post.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 20:36:42 GMT
etag: W/"6508b4da-9275"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/js/main.js?9832
200 OK 12 kB URL GET HTTP/2 www.playground.ru/js/main.js?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 1fe3b42b9bd77f9105793ebce901f5a6
4b5d5727f8bebaaa9ae76f8ec655b71dec9fbdfa
65d24c20fd45fc4a669faba4b3349b80bde70f8a2f2670296301b0609dfca274
GET /js/main.js?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Fri, 22 Sep 2023 12:13:41 GMT
etag: W/"650d84f5-189b"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/css/vendor/bootstrap/3.3.4/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL GET HTTP/2 www.playground.ru/css/vendor/bootstrap/3.3.4/fonts/glyphicons-halflings-regular.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /css/vendor/bootstrap/3.3.4/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/vendor/bootstrap/3.3.4/css/bootstrap.min.css
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 18028
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: "5e209521-466c"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
www.playground.ru/css/jquery-ui-1.10.3.custom.min.css?9832
200 OK 83 kB URL GET HTTP/2 www.playground.ru/css/jquery-ui-1.10.3.custom.min.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 11f04539349c5dd894c5a0caf4203210
a4662ee5f49a4993362a3a6511b0529d45a862cc
dd2f798c8cf9f632bba03404574734da6d3f75a027340651af281eff25606f3d
GET /css/jquery-ui-1.10.3.custom.min.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: W/"5e209521-6a07"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 41d47531a53830929519cbac6bcf752a
c39e4c34f34823397d064f1dd018625b2321f892
77798848ecc76001633e9d6571748a6c58fc655abb7509c4deb52932479e93ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.playground.ru/css/font/icomoon.ttf?qhjbvv
200 OK 22 kB URL GET HTTP/2 www.playground.ru/css/font/icomoon.ttf?qhjbvv
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 2d50cae51157a9ff9aa3e8c2c6b98c5b
39fbf6f285edce478fe8a114f7a43fe92fde167c
ca8cced7ab0d64a7ffc3b2f1955433a2668bdb3533227db3308e38997ac2871b
GET /css/font/icomoon.ttf?qhjbvv HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/font-icons.css?9832
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 21812
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: "5e209521-5534"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.playground.ru/js/post.js?9832
200 OK 49 kB URL GET HTTP/2 www.playground.ru/js/post.js?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash dacafe24513ae39e23fb38077ed2c74a
9c58da85a3071252fe0ee493fb1697bf444b02f4
3c0ad591c41a6c409cc65cfef40bfd3ffa6c33c7b2fad19aa829a4c20b5dcbe2
GET /js/post.js?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Thu, 16 Jan 2020 16:54:00 GMT
etag: W/"5e209528-642"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/build/page/support.18d191b5.js
200 OK 724 B URL GET HTTP/2 www.playground.ru/build/page/support.18d191b5.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Unicode text, UTF-8 text, with very long lines (694), with no line terminators
Hash b144358419a371abe8edf197a41eb00e
add2eccb2cc2d04cba0077c1847be3b681475b92
eef9c312efacf851c6f3134dda133596dddb31a0df44d4f1ac49628e30377b21
GET /build/page/support.18d191b5.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
content-length: 724
last-modified: Fri, 02 Oct 2020 13:49:53 GMT
etag: "5f773001-2d4"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash c17d1900febb134482f5f3fdc9fd4b69
18d8f12fa6991f23477832a6c6a356fadd6e8508
19d15be13fbb8add8926f12e5c810a16851ee487bb211efa193d1ea199ecf0ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.playground.ru/js/vendor/jquery.fancybox.min.js?9832
200 OK 26 kB URL GET HTTP/2 www.playground.ru/js/vendor/jquery.fancybox.min.js?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash dd0974e50f577c212b15b55cd0790bf8
de2c8d8feae2db50f50ab5b92f0371b156ef31b8
6712ce5a6140aada4a41a606a417738de4d2e9659ec87bb26beb72d189c4a811
GET /js/vendor/jquery.fancybox.min.js?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Thu, 28 Apr 2022 08:40:46 GMT
etag: W/"626a530e-10a9d"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/js/vendor/bootstrap/3.4.1/bootstrap.min.js
200 OK 103 kB URL GET HTTP/2 www.playground.ru/js/vendor/bootstrap/3.4.1/bootstrap.min.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Size 103 kB (102776 bytes)
Hash c9e40f3d40e360dd5eb6e88c160fcb99
1dd5ca05a96f373a3214225cd2c0e3e51a4df97a
2adcb47a76461835c0c8b66548d6f23b201b7bd99257a2fcef98b5954b49da8c
GET /js/vendor/bootstrap/3.4.1/bootstrap.min.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Thu, 16 Jan 2020 16:54:00 GMT
etag: W/"5e209528-9b05"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
s3.wi-fi.ru/mtt/banners/libs/1.11.2/all.js
200 OK 33 kB URL GET HTTP/1.1 s3.wi-fi.ru/mtt/banners/libs/1.11.2/all.js
IP
ASN #202173 MaximaTelecom JSC
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.wi-fi.ru
FingerprintC3:4D:B9:7A:59:2E:40:9B:D1:C2:D3:47:F3:F1:E3:53:27:6A:8A:B8
ValidityMon, 26 Sep 2022 14:21:56 GMT - Sat, 28 Oct 2023 14:21:55 GMT
File type Unicode text, UTF-8 text, with very long lines (65347), with no line terminators
Hash faeb51caed12c352378f58ce8584aec5
d59ce7e43197c357ad710d3237cdccb1895579fe
b6a58bd957777c9c6cd4327120d7d8e03ee921f49605b35012acd9d99fcbb7f7
GET /mtt/banners/libs/1.11.2/all.js HTTP/1.1
Host: s3.wi-fi.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sun, 24 Sep 2023 00:25:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
Etag: W/"330f3953ca8e9611b706126384305536"
Last-Modified: Mon, 15 May 2023 15:38:56 GMT
Vary: Accept-Encoding, Origin
X-Amz-Request-Id: 175F953027251841
X-Minio-Deployment-Id: ae9e4692-ccf9-495e-ad65-b797e6550821
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
ocsp.sectigo.com/
472 B IP
Hash ec6aa093ae0146d9c14f310ab9421fdf
106511c4ada5450a089772ec198abba137a3b357
19b3c5b5d451460c299aff3e37e876e66ffd267b876b18db39a53f9bfd0de172
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 24 Sep 2023 00:25:16 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 21 Sep 2023 14:34:41 GMT
Expires: Thu, 28 Sep 2023 14:34:40 GMT
Etag: "106511c4ada5450a089772ec198abba137a3b357"
Cache-Control: max-age=396803,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80b6e3a3edb5b50f-OSL
cdn.afp.ai/ssp/sync-urls.js
200 OK 66 kB URL GET HTTP/1.1 cdn.afp.ai/ssp/sync-urls.js
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerSectigo Limited
Subject*.afp.ai
FingerprintE4:42:C0:67:33:F1:F8:E2:ED:FD:C9:61:33:86:BC:46:CC:69:87:5A
ValidityFri, 23 Sep 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 6b39d2f624d9fb883ca52e398e383884
1b234d486f003c77ba778134ba5e893eb6c0c2e5
1a690b02e90e8d4bfa23d2bf178a28632c3f076a72bc48c09142e92171703b72
GET /ssp/sync-urls.js HTTP/1.1
Host: cdn.afp.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sun, 24 Sep 2023 00:25:16 GMT
Content-Type: application/javascript
Content-Length: 65841
Last-Modified: Fri, 22 Sep 2023 13:18:46 GMT
Connection: keep-alive
ETag: "650d9436-10131"
Expires: Tue, 24 Oct 2023 00:25:16 GMT
Cache-Control: max-age=2592000, public
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash a919451a4b737e61a8d4798732bd25ca
81887ca8ba5721aae92b25155ee72fb2950bc328
85f10626a1276cce94e6e3fd439fb0d982645177ba3ed0cb9d554ce6432bd16f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.playground.ru/redirect/post/1150012/
301 Moved Permanently 20 kB URL User Request GET HTTP/2 www.playground.ru/redirect/post/1150012/
IP
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Hash 47215157f09385f3b1be8833fc993330
639de2daaa49db6a2d52edea1c41f976507375db
cfc7d0c26904bc36bbdb2d50b692377e187ce33e4643058f8a36c2ef689d0400
GET /redirect/post/1150012/ HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx/1.16.1
content-type: text/html; charset=UTF-8
date: Sun, 24 Sep 2023 00:25:13 GMT
location: /baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
x-uid: 0
expires: Sun, 24 Sep 2023 00:25:13 GMT
cache-control: max-age=0, must-revalidate, private
X-Firefox-Spdy: h2
www.playground.ru/favicon.ico
200 OK 1.2 kB URL GET HTTP/2 www.playground.ru/favicon.ico
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 3e116815ee2bb83ab98b90b51e334e01
1b2a84b67230331aac911a3d10aa84ef2ed76c0e
7adf84b0a8c865608e4e9979c9bdce1702a1f7d085b2be4c33bd15cc4f8d817e
GET /favicon.ico HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Fri, 28 Feb 2020 15:19:19 GMT
etag: "5e592f77-47e"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16686
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/eU46B-9iIR4ORh9PkXvIZw.jpeg.webp?212x130
200 OK 9.9 kB URL GET HTTP/2 i.playground.ru/e/eU46B-9iIR4ORh9PkXvIZw.jpeg.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8c5e9827a2dc744039efde90a92580bf
42a4e775dadf16e5304648846cc8abf5ce254f85
5edecb1aed044298c8c2ff5ab67879eede7fa02fea13b734a1c4259232db55a6
GET /e/eU46B-9iIR4ORh9PkXvIZw.jpeg.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 9914
last-modified: Tue, 18 Jul 2023 06:16:03 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/68lZF1Ho-vVqR_1zJjlyyg.png.webp?212x130
200 OK 7.1 kB URL GET HTTP/2 i.playground.ru/e/68lZF1Ho-vVqR_1zJjlyyg.png.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 985ce8ce569fda2c589e8cf4d2e24d3a
7ae90b51a74cb32e05770f57bb5944af246910d4
14e5e8841a7ef8fdf72bf14cbeb45728463b630060c4d7983fd908e99c87a3b7
GET /e/68lZF1Ho-vVqR_1zJjlyyg.png.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 7094
last-modified: Sat, 26 Aug 2023 13:28:56 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/BZSVXkmlUEosfsx9peh20w.jpeg.webp?212x130
200 OK 8.8 kB URL GET HTTP/2 i.playground.ru/e/BZSVXkmlUEosfsx9peh20w.jpeg.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 14e66b8895d5cff29f5986fb8a4009d4
4086dc05c8643c5f628d27316f41b79f9a4d9ca7
a20e01923002cdb7d0f3579399ca48d80f90e6576e6d75be7f4612b91256d470
GET /e/BZSVXkmlUEosfsx9peh20w.jpeg.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 8832
last-modified: Tue, 29 Aug 2023 06:42:48 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/rhZG6-a_45LPo5HxCWupnw.png.webp?212x130
200 OK 5.8 kB URL GET HTTP/2 i.playground.ru/e/rhZG6-a_45LPo5HxCWupnw.png.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 88f7047616da2a28b5acf7476b59c4d7
2d441819772e45e69b7982f6a1f9a84f73f4692d
fb9cb07809d21e5b02977be483d55c50808b02eb205a23e1fd2b9b9a290b8c91
GET /e/rhZG6-a_45LPo5HxCWupnw.png.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 5808
last-modified: Fri, 04 Aug 2023 08:32:15 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/Ax9EQPcL75vZPc1A5_QDGw.webp?212x130
200 OK 9.2 kB URL GET HTTP/2 i.playground.ru/e/Ax9EQPcL75vZPc1A5_QDGw.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0ee48a36f099fea15810fea3c402d836
744a8eeda01179ff5ce31acdcac589fa2b003f99
c1c5508b9ba3f675716e4ed98768bbf70dba7306bf2393bd0fa22ee90f091963
GET /e/Ax9EQPcL75vZPc1A5_QDGw.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 9214
last-modified: Mon, 14 Aug 2023 11:38:56 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
i.playground.ru/e/hjgzyIKCEr4sn7u2fFd-gg.png.webp?212x130
200 OK 6.9 kB URL GET HTTP/2 i.playground.ru/e/hjgzyIKCEr4sn7u2fFd-gg.png.webp?212x130
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x130, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d68a8c99d1695cdf044080b3de222fb6
2221d6cb543604df34432fe4128bb043f7063839
2318ccdb479dcecfc0af23bdedb8d1681cac3a3d39c97bf3a49e30f48cf4728f
GET /e/hjgzyIKCEr4sn7u2fFd-gg.png.webp?212x130 HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: image/webp
content-length: 6944
last-modified: Sun, 27 Aug 2023 12:30:57 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:16 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
www.playground.ru/js/vendor/jquery/jquery-migrate-3.3.2.min.js
200 OK 84 kB URL GET HTTP/2 www.playground.ru/js/vendor/jquery/jquery-migrate-3.3.2.min.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Hash 156dd814ad4ea4c2a83ae42207d8d10e
ca1b1e414dd97520d3d3be784d2618ea15afd322
f6f76deba1761c2a567ada2f44c1abea86ba27556622814206a2add588c60041
GET /js/vendor/jquery/jquery-migrate-3.3.2.min.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Wed, 23 Nov 2022 16:11:38 GMT
etag: W/"637e463a-2bd8"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssp.afp.ai/api/sync_urls
200 OK 230 B IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerSectigo Limited
Subject*.afp.ai
FingerprintE4:42:C0:67:33:F1:F8:E2:ED:FD:C9:61:33:86:BC:46:CC:69:87:5A
ValidityFri, 23 Sep 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0a6bda86a7f0afb796a343edbcc4f062
e0666d4776c783d5ea0540a5773d7d1a03b2346f
e5e4eeaef5a9649caaab0f660190e73bbf6e13558114292316da8b21278121f4
GET /api/sync_urls HTTP/1.1
Host: ssp.afp.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 24 Sep 2023 00:25:16 GMT
Content-Type: application/json
Content-Length: 230
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin: https://www.playground.ru
Access-Control-Allow-Credentials: true
yastatic.net/partner-code-bundles/873447/8725c2032e58bb35ba78.js
200 OK 4.8 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/8725c2032e58bb35ba78.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (14274)
Hash 23d4bb8374db6b205101ce1c76d9363d
7b166d0fb25ac13a6ce5ef85aa2f5aa9c689bed4
1baec7884457b52afefe81ac6529256d6fbf03c7f70a66edc28c48882b46a62a
GET /partner-code-bundles/873447/8725c2032e58bb35ba78.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 4776
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "e0e82f17dc8474dce6ca51c6d638d4fd"
expires: Tue, 23 Sep 2053 07:00:25 GMT
last-modified: Thu, 21 Sep 2023 16:29:18 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&_gaz=1&cid=310941509.1695515117&ul=en-us&sr=1280x1024&_s=1&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&en=page_view&_fv=1&_nsi=1&_ss=1&ep.userAuthorisationStatus=NOTauthorized&ep.post_author=_Mr.Marshal_&ep.post_date=20230818&ep.post_category=%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%D1%8B&ep.page_type=cheat&ep.game_title=Baldur%26%23039%3Bs%20Gate%203&ep.post_Origin=copy&ep.user_ID=
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&_gaz=1&cid=310941509.1695515117&ul=en-us&sr=1280x1024&_s=1&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&en=page_view&_fv=1&_nsi=1&_ss=1&ep.userAuthorisationStatus=NOTauthorized&ep.post_author=_Mr.Marshal_&ep.post_date=20230818&ep.post_category=%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%D1%8B&ep.page_type=cheat&ep.game_title=Baldur%26%23039%3Bs%20Gate%203&ep.post_Origin=copy&ep.user_ID=
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&_gaz=1&cid=310941509.1695515117&ul=en-us&sr=1280x1024&_s=1&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&en=page_view&_fv=1&_nsi=1&_ss=1&ep.userAuthorisationStatus=NOTauthorized&ep.post_author=_Mr.Marshal_&ep.post_date=20230818&ep.post_category=%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%D1%8B&ep.page_type=cheat&ep.game_title=Baldur%26%23039%3Bs%20Gate%203&ep.post_Origin=copy&ep.user_ID= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.playground.ru
date: Sun, 24 Sep 2023 00:25:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/873447/9e79773b1979425b9f71.js
200 OK 8.0 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/9e79773b1979425b9f71.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (24505)
Hash 39d08c409cce962611b57b3951f66598
739f535be9121e7436c4b5d9dc304202e6fe9d6c
0c581896cc5a9c9bf3eb024ac3999e9067855e55604c03929de9fee12912888f
GET /partner-code-bundles/873447/9e79773b1979425b9f71.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 7955
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f971c42eb5da31753c0e985c511cc86a"
expires: Tue, 23 Sep 2053 07:00:25 GMT
last-modified: Thu, 21 Sep 2023 16:29:18 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/873447/f084e1ba44a1d4448848.js
200 OK 26 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/f084e1ba44a1d4448848.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (65494)
Hash 56fc1f642dce1aa0f2fce08ecdf5cb31
ee4d40f8274526c6e4d36237b4bbba52a6121146
e8a061bd4df8d34def6813c316b9431ac23a3bc0f74290eaa2750bde6a143d92
GET /partner-code-bundles/873447/f084e1ba44a1d4448848.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 26398
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "1b799e52f9d35f6d2dac5f30c9713173"
expires: Tue, 23 Sep 2053 07:00:40 GMT
last-modified: Thu, 21 Sep 2023 16:29:18 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d82f304bb3184a26ae49e14ad4d87091
2caa05bdfd03064e8f336795d17b8f0070b24fe4
b51043325f565bc1b55e5c5baf171a375b07ce61dccb39b7ba273da508d0f328
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yastatic.net/share2/share.js
200 OK 48 kB URL GET HTTP/2 yastatic.net/share2/share.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64803), with no line terminators
Hash d3196e5fdf7ec9c1102756335bb32ed6
9369ca4ad7753759a256bd5feb08c4c66a8c9b61
73f50f75f8e010529d7194189dcce691ffb68d79b50f089df97970684398f8c0
GET /share2/share.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=216009
content-encoding: br
etag: W/"d3196e5fdf7ec9c1102756335bb32ed6"
expires: Tue, 26 Sep 2023 12:24:38 GMT
last-modified: Thu, 08 Jun 2023 22:37:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-content-type-options: nosniff
x-robots-tag: noindex, noarchive, nofollow
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
200 OK 26 kB URL GET HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Hash 7f0cdaf91230f9789ca4162aedff612e
965de571aa794dab64076c3cc64dc8894b843f23
033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Mon, 23 Sep 2024 06:13:30 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: ca16036e7eb38294
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
200 OK 45 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data\012- data
Hash 764670a54443dac7667dd556cfc4fcb9
86606ff0d7bd0c9148567ad21d093f04b54d6513
8dbcd3ce9bbb19f275b873d51d45a09cfeaf98e7b9de613d156679d120c7fd7a
GET /recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
content-security-policy: script-src 'nonce-qPeUWNdVl8_XXXm51HD3Mg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
200 OK 152 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data\012- data
Size 152 kB (152454 bytes)
Hash ff1f0fe63867f8bb0ec928ba6c17eacd
ddf3fad04cad27f2314306729cd1089f1e100afe
8f3b6138e0121227b17830772a51641e85e3667761b7b48999d5c4cdafac35b2
GET /recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
content-security-policy: script-src 'nonce-IBtcfENkygTUdFPhf029xQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GB82WN5FWQ&cid=310941509.1695515117>m=45je39k2&aip=1&z=821075520
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GB82WN5FWQ&cid=310941509.1695515117>m=45je39k2&aip=1&z=821075520
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintF8:21:85:85:E7:A3:F0:03:9E:50:77:60:8D:CB:66:7C:41:ED:3D:28
ValidityMon, 04 Sep 2023 08:25:22 GMT - Mon, 27 Nov 2023 08:25:21 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GB82WN5FWQ&cid=310941509.1695515117>m=45je39k2&aip=1&z=821075520 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 24 Sep 2023 00:25:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/css
vary: Accept-Encoding
age: 16687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash d82f304bb3184a26ae49e14ad4d87091
2caa05bdfd03064e8f336795d17b8f0070b24fe4
b51043325f565bc1b55e5c5baf171a375b07ce61dccb39b7ba273da508d0f328
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.acint.net/rmatch?dp=261&euid=894641f2-8770-4789-8701-d71c44d6aad8&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D%24%7BUSER_ID%7D
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?dp=261&euid=894641f2-8770-4789-8701-d71c44d6aad8&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D%24%7BUSER_ID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintB8:F0:FC:C7:37:EC:45:14:38:CF:C1:E7:EA:4C:22:2A:D1:98:EE:DB
ValiditySat, 12 Aug 2023 02:11:54 GMT - Fri, 10 Nov 2023 02:11:53 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=261&euid=894641f2-8770-4789-8701-d71c44d6aad8&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/html
content-length: 154
location: /rmatch?r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D&dp=261&tc=1&euid=894641f2-8770-4789-8701-d71c44d6aad8
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sun, 24-Sep-23 00:35:17 GMT
aid=fwAAAWUPge1M9ga0hUieAsPur8NN9H9GUcAIBuNafLfc1mEh; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.playground.ru/js/vendor/jquery-ui/1.13.2/jquery-ui.min.js
200 OK 133 kB URL GET HTTP/2 www.playground.ru/js/vendor/jquery-ui/1.13.2/jquery-ui.min.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type gzip compressed data, from Unix\012- data
Size 133 kB (133330 bytes)
Hash 7c0eba8bb92a3ef0c18bdc3fbc578a2c
05efac97dc6b7ee94d7712a48a07ab08dd3f5cad
41a1a2a900bd1cfd3dd6b7301a40c50c2d432cc536de61f7dee4874e757711f7
GET /js/vendor/jquery-ui/1.13.2/jquery-ui.min.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Wed, 23 Nov 2022 16:11:38 GMT
etag: W/"637e463a-7fa8"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/rmatch?r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D&dp=261&tc=1&euid=894641f2-8770-4789-8701-d71c44d6aad8
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D&dp=261&tc=1&euid=894641f2-8770-4789-8701-d71c44d6aad8
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintB8:F0:FC:C7:37:EC:45:14:38:CF:C1:E7:EA:4C:22:2A:D1:98:EE:DB
ValiditySat, 12 Aug 2023 02:11:54 GMT - Fri, 10 Nov 2023 02:11:53 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D&dp=261&tc=1&euid=894641f2-8770-4789-8701-d71c44d6aad8 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWUPge1M9ga0hUieAsPur8NN9H9GUcAIBuNafLfc1mEh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fssp.afp.ai%252Fapi%252Fopenrtb%252Fmatch%252Fsape%253Fid%253D$%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1695515117; expires=Tue, 24-Oct-23 00:25:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fssp.afp.ai%252Fapi%252Fopenrtb%252Fmatch%252Fsape%253Fid%253D$%257BUSER_ID%257D&dp=14
302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fssp.afp.ai%252Fapi%252Fopenrtb%252Fmatch%252Fsape%253Fid%253D$%257BUSER_ID%257D&dp=14
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subject*.sape.ru
Fingerprint5B:FF:7D:F3:EA:A8:35:A6:2E:5B:8A:B6:EC:10:EE:5D:EF:84:DA:60
ValidityWed, 09 Aug 2023 01:42:20 GMT - Tue, 07 Nov 2023 01:42:19 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fssp.afp.ai%252Fapi%252Fopenrtb%252Fmatch%252Fsape%253Fid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 24 Sep 2023 00:25:18 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=1203420AEE810F658A00E69F02A1DB13&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDEmUPge6f5gCKE9uhAqO14rSw6twDlFKlb3XhkJBS9XIb; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:24:26 GMT
expires: Fri, 20 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 205252
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 05:45:56 GMT
expires: Wed, 18 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 412762
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:45:56 GMT
expires: Fri, 20 Sep 2024 04:45:56 GMT
cache-control: public, max-age=31536000
age: 243562
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 14:42:45 GMT
expires: Fri, 29 Sep 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 121353
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1631243323&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.334%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiur&slotNumber=4&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 16 kB URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1631243323&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.334%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiur&slotNumber=4&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 5620d0fa84444c8efdb8fa862505d1c6
45a6e93182e3a8ddac2fd3f49aa8f4d7094bf8bd
01ac8dd28f3b476c93dbfbec9814c5784df6c019836b53fc1dbd7a187b8fdfec
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1631243323&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.334%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiur&slotNumber=4&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118253383-120585748437349839-balancer-l7leveler-kubr-yp-vla-91-BAL-5094
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=kArahnLkXuBnA+rcwcWb13DC1VjVTTtGWtbU5poejbYJROqUnN1AtyQz2phyCa44Q/IT/dd5C2n3IWPL65OrJN26QmE=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9373498391695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=3215412684&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.321%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A0%2C%22req_no%22%3A1%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hpxm&slotNumber=2&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 10 kB URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=3215412684&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.321%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A0%2C%22req_no%22%3A1%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hpxm&slotNumber=2&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 2eadfd34c0d6e1e3d529c3f86ad7a4ee
c1d8a235ed745c6b0c001f9e505c9ea8f8fc9d77
7f8faeaadcf81a29337d9a7020c85825a7d5ad12c87956e4e6dac364f39596f1
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=3215412684&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.321%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A0%2C%22req_no%22%3A1%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hpxm&slotNumber=2&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118253023-2568323834718451332-balancer-l7leveler-kubr-yp-vla-91-BAL-1412
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=BX7APMGlncQ7bYQ2N5Qu1FEJMlEk+aapLPaQ5mXA9qYYkuoZ5hZex6yUQxNc3AO+uPNEpJ/GUG5++iinHWWE1j+FKss=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7184513321695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1893478063&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.328%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiuq&slotNumber=3&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 320 B URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1893478063&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.328%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiuq&slotNumber=3&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b2a2f5b854f6e55fc91e71946f74611e
569633b45d1c46c67ac16558c1a9ac24f9f950cc
71f3e938165a278f563d303180a310cfaed0dadcdd34d1074b75918aa76ba915
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1893478063&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.328%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiuq&slotNumber=3&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118228208-9829863216215103517-balancer-l7leveler-kubr-yp-vla-91-BAL-5306
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=UM4jpZbzwf6kaQ+4ucT8SweHlwZDaJ3Gqgp18NJICUlnqD58/KU3EGnJz0hUvlAj8iEuipci90Fx7sLbGK3FnXJilfo=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3151035171695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=2117802657&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.340%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1270%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A10%2C%22top%22%3A1014%2C%22req_no%22%3A4%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&p1=czbdo&p2=incf&slotNumber=5&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 18 kB URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=2117802657&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.340%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1270%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A10%2C%22top%22%3A1014%2C%22req_no%22%3A4%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&p1=czbdo&p2=incf&slotNumber=5&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash f434cf96557dc5521b4db8fbf2b024b4
fced11a9abe13674f3d6618af1d409db0cc308fa
1313f76d44485fc2c31d1580b97bc595c9244baf4ec69d2b5e0a6eb8014c0d7f
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=2117802657&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.340%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1270%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A10%2C%22top%22%3A1014%2C%22req_no%22%3A4%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&p1=czbdo&p2=incf&slotNumber=5&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118262420-13243785248636109110-balancer-l7leveler-kubr-yp-vla-91-BAL-6933
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=6j95lpgt0YAm/294GtmI5YOg3p+JDTPENo4VCJ0U83Pr5fEDARDjUP4dMGV/EWQ/IhcA0rMIp6mGqFKoVVzBcAop78E=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9361091101695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=4159427387&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.346%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A5%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hrne&slotNumber=6&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 16 kB URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=4159427387&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.346%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A5%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hrne&slotNumber=6&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 6e7245cc097edd2701667d1af9ae8922
188e8c184f3e1414723124fb98bbd06cfaf2ae10
9ba7f6a88a2615394f8686d532c8baa503c73513a5195a7f802e9ea65532acbf
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=4159427387&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.346%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A29205%2C%22req_no%22%3A5%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hrne&slotNumber=6&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118263275-12937530948540392301-balancer-l7leveler-kubr-yp-vla-91-BAL-8091
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=0TFptGnpQ4fNfdyKKscyei8z0WRl7AuyI5qIK4ODYNbXLPYdXNJykp8d3XTEOvZFhprB0vA/QMMlMMPCDM/dxw+jNUc=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3403923011695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.8 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:45:56 GMT
expires: Fri, 20 Sep 2024 04:45:56 GMT
cache-control: public, max-age=31536000
age: 243562
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 05:45:56 GMT
expires: Wed, 18 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 412762
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/873447/4ebb93f4a41d1e311b6a.js
200 OK 3.6 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/4ebb93f4a41d1e311b6a.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (9173)
Hash 11e4bc21fcf303ea7fc1d2d57766bdf4
1f2d8b25ac76144c1e935b21920276f788e236cd
10997f6744de7d7ffa2651910b98c1c54ee7e846db5193a2f2db6d4bdf250746
GET /partner-code-bundles/873447/4ebb93f4a41d1e311b6a.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:18 GMT
content-type: text/javascript; charset=utf-8
content-length: 3562
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "9c76d423c16cb307c7d500e8d21555e4"
expires: Tue, 23 Sep 2053 07:00:28 GMT
last-modified: Thu, 21 Sep 2023 16:29:17 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16688
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16688
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ssp.afp.ai/api/openrtb/match/sape?id=0100007FED810F65B406F64C029E4885
204 No Content 0 B URL GET HTTP/1.1 ssp.afp.ai/api/openrtb/match/sape?id=0100007FED810F65B406F64C029E4885
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerSectigo Limited
Subject*.afp.ai
FingerprintE4:42:C0:67:33:F1:F8:E2:ED:FD:C9:61:33:86:BC:46:CC:69:87:5A
ValidityFri, 23 Sep 2022 00:00:00 GMT - Tue, 24 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/openrtb/match/sape?id=0100007FED810F65B406F64C029E4885 HTTP/1.1
Host: ssp.afp.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 24 Sep 2023 00:25:18 GMT
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Set-Cookie: afp_cookie=gAAAAABlD4HuMW7JD3T5MsmYk6BNHAVh6Xe7MavCdfRj6dR2ZtL1F2MbEYL9zAx5LReyOUxueBiDuJZ3WthKzGRHOvF3QMh-2cM_GEMzdhkJZeoR-zreeCpLkNfhDeFr2l6GZRi9TAu9_niqzyN2h6lVpQ0XFZ0q5O82FcsZrjFwhz4p98Nq45DRrpKYtm-tsRo5_aJaOhO-GeCCtBCBw8BiFFb5YY938EGtT64tUbn_jjwgIKz17DM=; expires=Tue, 24 Oct 2023 00:25:18 GMT; path=/; secure; SameSite=None
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
200 OK 190 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type HTML document, ASCII text, with very long lines (1557)
Size 190 kB (190318 bytes)
Hash 7f0aaf6f439d9647f905d902af406c4f
bd758fb6689eca94324c6a4f795dcbd434d1700c
1c338bb108ff204e4951e041a9bba342ba5342a5712948a0cdb0c1278fcdb11c
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 19:47:10 GMT
expires: Sun, 22 Sep 2024 19:47:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16688
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1404828212&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.254%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A40%2C%22top%22%3A561%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiut&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
200 OK 670 B URL GET HTTP/2 yandex.ru/ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1404828212&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.254%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A40%2C%22top%22%3A561%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiut&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3007ee1641e6a2f6e00a1615fc494fb4
03513c63b6546ebc8cc869b797f645158016feeb
f5a11e33f810a30f3438bd9075b9a742b4bd2d19a217ea0fa6bd5ed3ec7cb807
GET /ads/adfox/326836/getBulk/v2?pr=4237382633&pr1=1404828212&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&prr=&extid_loader=&extid_tag_loader=www.playground.ru&date=2023-09-24T00%3A25%3A17.254%2B00%3A00&pd=24&pw=0&pv=0&pdw=1280&pdh=1024&ylv=0.873447&ybv=0.873447&ytt=549206058205189&is-turbo=0&skip-token=&ad-session-id=6368781695515117233&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A40%2C%22top%22%3A561%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=873447&yaru=true&pp=g&ps=fqvu&p2=hiut&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&use-server-side-rendering=1&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118218488-16264623892893593041-balancer-l7leveler-kubr-yp-vla-91-BAL-3260
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=zQx7u6RnCkuSk+UHLzVm42VneCJSy+21luA4dj5oHI9HGYnRAo31QD4jQaPgi+vMntZHIgISJHKLe7rFsJhrqu8YycM=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=4935930411695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
200 OK 50 kB URL GET HTTP/1.1 vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (38405)
Hash 13d05ac5c1bafab9373d20a398b55177
80511e2f60a56ab1373e39ed36e6335aa19600c2
9b8cde181ca2e0abd8cb3e7ac20a265eb3c8267e8f98d2ed533607df21997592
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5 HTTP/1.1
Host: vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: _clientId=4793ee3d-f59b-4fab-87f0-429eb2711edd; Max-Age=315360000; Domain=.vkplay.live; Path=/; Expires=Wed, 21 Sep 2033 00:25:18 GMT; Secure
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://cspreport.mail.ru/xxssprotection
X-WebKit-CSP-Report-Only: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript:
Content-Encoding: gzip
static.vkplay.live/css/styles-077d828.css?v=
200 OK 98 kB URL GET HTTP/1.1 static.vkplay.live/css/styles-077d828.css?v=
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2b2d3ba24cadb0b2a1ac2df06af72ecb
20468f7034d37dc91a91361b58e9ebb6f135044e
38b07adafcefa97928c0b3164ddf693b12e0e00f13589003a72d6c8aeabe1b43
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/styles-077d828.css?v= HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: text/css
Content-Length: 98511
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-180cf"
Content-Encoding: gzip
Expires: Sun, 08 Oct 2023 00:25:19 GMT
Cache-Control: max-age=1209600
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Referrer-Policy: no-referrer-when-downgrade
static.vkplay.live/js/icons-397f6bd.js?v=
200 OK 150 kB URL GET HTTP/1.1 static.vkplay.live/js/icons-397f6bd.js?v=
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 150 kB (150462 bytes)
Hash 5c82f50ed57e3a94bf0b32f78f83a040
c2753e9fe3d687112b9ec3687e686f89dcbce0cd
3dc408896ac862fa7c066e139ff3185e6ca0c1f8738adb4c710bd34ff2493e08
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/icons-397f6bd.js?v= HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: application/javascript
Content-Length: 150462
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-24bbe"
Content-Encoding: gzip
Expires: Sun, 08 Oct 2023 00:25:19 GMT
Cache-Control: max-age=1209600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
yandex.ru/ads/meta/471349?target-ref=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&charset=utf-8&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&imp-id=2&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=549206058074114&ad-session-id=6368781695515117233&target-id=50172651&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&pcode-version=873447&pcodever=873447&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A728%2C%22h%22%3A90%2C%22width%22%3A0%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A810%2C%22top%22%3A383%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&uniformat=true&callback=Ya%5B4366219990459%5D
200 OK 719 kB URL GET HTTP/2 yandex.ru/ads/meta/471349?target-ref=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&charset=utf-8&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&imp-id=2&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=549206058074114&ad-session-id=6368781695515117233&target-id=50172651&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&pcode-version=873447&pcodever=873447&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A728%2C%22h%22%3A90%2C%22width%22%3A0%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A810%2C%22top%22%3A383%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&uniformat=true&callback=Ya%5B4366219990459%5D
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65027)
Size 719 kB (718789 bytes)
Hash 0b9cda2e0033431c22b853e595668fe9
515218e602f7500c77791e3aae77b86174ab1b61
e8ab9c74cbff1189cc190cbda55741cb43d89bf2aa22cd10792946346218daec
GET /ads/meta/471349?target-ref=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&charset=utf-8&pcode-test-ids=866488%2C0%2C78%3B869500%2C0%2C47%3B868052%2C0%2C94%3B866774%2C0%2C98%3B866401%2C0%2C51%3B868216%2C0%2C45%3B872877%2C0%2C53%3B865356%2C0%2C25%3B862663%2C0%2C47%3B874051%2C0%2C68%3B873986%2C0%2C25%3B870496%2C0%2C56%3B857150%2C0%2C4%3B865552%2C0%2C59%3B870754%2C0%2C82%3B861952%2C0%2C54%3B873447%2C0%2C23%3B863660%2C0%2C57&pcode-flags-map=eJy1WGlz2zgS%2FS%2F6HGV5ACSYbyAJShjz0AKgHGUqhaITxeMtH1uOMzubVP77NgDqoOyBZjKzLpdM0uoHoI%2FXr%2FlttqZSy2V3qWmpa5qzWled0LzVOW1bJmZvfv42%2B3W4%2FbKdvZkp0bPZq9nT9vMT%2Fwj3SRLHKJ19f%2F%2FqALMSXdkXSuqu1SvaS%2BZFSMMMxQ6h5JLmNdNF17dKC1ZywQoFO6GrlR8jChCK9ruAJXXT14qLrq4BrVXmggl9SVWxZKVWvGG6qyrJlB83joL0cDrBlNiYU7VMXXbiQjMhOr9%2FUpygNNsjsNYeUBYUPmt%2BAZe9WLMNIF7qkkm%2BaP1wSZDG6TO4v4IBDikuIO6brlda1h188HdM5xCDkgrOpB8sJSEKLZhxqsFYCWb9fojAmpes0%2BP%2FJ3BhAD8TvCzO0uAMXt5XFUSTNSu1AS82%2FBT0TyOuV5SXf%2F8Oqx6ufxS1NeXzN%2B%2F0dzD%2FUnxexvz%2FeeBHo2%2BSfSFormvWLtRyYgT8QY7NSECCFJ3WmRIUSmXNZU9rR3WGKNlbxUQLT0rpZykSRknwA6D2gaQV05WgjZ9N7RquuIUw1CfhG8ChsKAy%2FL6iBgKwpUWlfck7XQhGFV%2BfKXWCgijE%2B%2B3vgqQ64EWpqFCGGSsuYKFi2bcXuqK8niDiacQJitLoAEiVMjGVfwYx9gHCWaERFDVn0E1qtgBv8rbq9OWS2ybTrhks4ZLf%2BOfM6XFAyFEraEtIQpobF9DSIHEJD3pRm01fsrw75800QIfGsGBwxl6qrtHrhq723l3Tup9GPDmpG5LgODn0PvCbySrYkOTdtBGQJMMYTWzTKCUuIzcUDvRWi16XXUP51HL727%2BPzXCQRnHyopmGHq4Ez73mURgku1WNpTPRtL6kG%2Bm1BKWQuW6zKrrSBlFCdP02OAqCib4YdUUhhdcwC3fOseTj1JDuW15x0BC8hSqqaMH8GCQaBYTpzoJVkNlLXXcLXvjskpDEo4vgiFACjc43u6QzhQu0mPPSCwFejsLJuUEXCbow1eCaviFnCcXPWi1PuOvZfrIQjfuhtUnxXQFU4AXNLTHBsWjJ%2FJtKSZa4rDcirQJ90Zb1xhGbkZynSs9vn19YseK4zBUyYBRdk3d%2BlAyNJGlQagbECAiN1yYhKHHuPHLbQkAzBs11oTr%2FvkmCwvjYf1Y6AhUByBFeC%2FLLBnzRg%2FyFVmdkcMGAm71uTcMApXjH%2Bi7TVC%2FaMTxAgRBttRRdv1h6WSkNwx0r1fTdxkZU21I7Nvs2%2B7R9%2BvBLMzxe39zP3oQ4eDW7e7i6ud3KD8Ptzf317E30fYKKoQwsqmwMrf%2BzZz2DHrfSeW26X82n7Pvz7G64uX39%2BAX29t%2Fh%2FuP2N7j%2Bx83dcL39PHl0PdzZJx%2B%2Fbu%2Fd14dfb54e3OXd66Obj%2Fc341ODvEeAB4%2FD19uHr7%2BM%2F%2F766P5%2BeRxe32%2F%2F8%2FnZF%2F41PNzdWNP3Lx%2Bxtb1UN0wszGfJqVZ04eU1mDOiMblsWTCIPfTkQgGFnzHEceDIH2YZyMSKAlVB54Ol277JmZfhUhzGoziyc5qdtMASGljOCleRIEw4cMcZmDRw2Qc0At2wMQS3sJTDy4q%2BEN5gSwY0pGgepQGZIxxfza%2FQ9sM8yHA64CAaABKWwHkVFTSN5kWOgzkqwnieM0LmOMYMfnNKCYavJeGwDbbbaH41bPEcfYo%2BzQeS4nk0bEl6FZEkSPA0WgTjbFSFE9Y4rkXV9cXSVWTdSesVJ0oE%2Bwnax5mKhIJH5KUVnMQDEshN5q%2FgA55YpcNbrl4YKZ8hI4TDKfLRri0t8oWmEhJCWnr0omUhpNAZTxjMQlENvf7wjmAcq%2F3p%2BQL6EW7NF0sQkEvW%2FNE9ArvtZl7INCtqRx3nBwD2jkbBATFUvHA1ltcdxAAoHCShYi%2FkqZjzeYSyEOaDeQiQx%2FfRyX18co%2FsPZ1HGGYdyOFwkoIkyJLQaaiKvwW30pWlDTd89wvfeUgIogYd8alRj7wxRW%2Fc4gjIC4BDlDmASkKxdjBj8Ld%2BizgeG9jIb8BOZmIxfZPa9DUJAWMLUF7b%2B6FQFgV7ulCsLYwkGWFDHfmNkziNJ6rmJ6mXHaSAtlTFa642E4Sn64epXo7DkWvHVLCyxb7wOqOCSBJh4hZfUlFaBerOL4F6FS2WXmtg%2BSTZa8HFSmmoA77ypq4xyg4zY9k5QjJzl%2FG1qVZF%2FYMGqP7gMAEzqG5bzHaobICHzliTAEfPra2lvuRqaTfyQxjjxGA2UlNolhOQQtVTjCQ9Gsjde0bbs0Ajqc6hWCZxLwb8YUxQcOi2JTOBLB2b7N96wpXpon4cEo0lTEtZXqxPui1MVyRNT%2BYtkk5UQiXAGW4emdh%2BeLo9HfJwMn1JakXdOB1QdTrsPQOA3Bs5lDVQLlqATTv2CX8GomDsNy7oRi6Df%2FIOSuAZbdw%2FcKPSTlI4I8ne3csSbIVh%2FpZJaTuC9O7czMnOfKR%2B2qtOr0A4QrTbg%2BixZO6HwiDTgmOoMQquOZkUKt%2BxM37EeMzlXSByKlmCgDtgGqLewReOko68fdTFYALSBfjyTA2F2biulePPcy1G6CTX7JPv77%2F%2FD6nW8PA%3D&pcode-icookie=Qu9kpD9BWvDSnXYMgy%2BJeKIjlgaZj24p47jDRCRVW%2FYtd3mee8O2ir9giBQOZcG62vyPbi5AIyar5pC3Nxfy27nObn4%3D&imp-id=2&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=549206058074114&ad-session-id=6368781695515117233&target-id=50172651&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&pcode-version=873447&pcodever=873447&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22supportHDRBrightness%22%3Afalse%2C%22isInIframe%22%3Afalse%2C%22w%22%3A728%2C%22h%22%3A90%2C%22width%22%3A0%2C%22height%22%3A90%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A810%2C%22top%22%3A383%2C%22ad_no%22%3A0%2C%22req_no%22%3A0%7D&grab-orig-len=2596&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKlpLDkuOsB1LiBFryck9FG98ZRpd-rlWVfv2u3quApIU5CnUKUElFeV1U70sh-ZVTVa1neu2oNK4n05-M_MaBnArjCGBMlUzJlL51YXhW8z2HGzIxRIEZvqz7WFRarvteVxRqXcdEtjbwRtihEeADpQqoHvS4qTQp28hx13J_vnQ1KyNDUDVJTNnXI8GDxCzgfZF5BAUGBdzwydi6eF0AraEMryG_j5wPpQUCNqkTJAbzVHqBh1fW4_rzWdTTOqiemtNTGZZY735Tlcc9jNM4Gt5GFdE0RMvD8YPpG2YgaSYsOPlVT8zxb3GvdN8AbUUjdCF9q4Bbx_KGubKSN4DYghfTX8oHZG4ymOoQiPNo_WsWuXlPqkP7IyJriG1Ah7eEgDBHtMs_zC3yDuUVv0V-VFXhDh_DcIcFrwmmXbomlMzJlaZV4u9p1e1AFc1YxBpnv6ZuKOknQOLW1oTt82rxmNtdycEfVjbWmiJ0Wa1Uyyzd8wgD_kdaS5Oa0zqujsNcW69HKieJM61hUTFlR1NqkyyGXgzjsmkK-o6vL3HH7paHeTO6SfGGBMpZpEjuKztyLw1mUcpxVmmmrjCl36DPm69moKQoHU1nFes9kst04MxiK_lWZ1Oai3zSXd9KQIaSeKbztyLDreq5x4iZ1DKFfkinFjdBTh7HQlJXUhj5Ly2T3C-mOivI61uRJzHiDf9IP8crb4c1geXbun0HtC0JOycbrSocBFx0Scwbio8i7eGI2JLjI2ZjK2KTHRXGhQHLho27KEGFIuyHnunwU5yIbPe5EUMfh1Yd0dDGCi4D80o5_Hk4Qwgu8y3X5rpxhHFp9zqdyQxjI81AEO5aX0K4psFmFv_1YVoAG2DgG8fgJgv33H29bOiI_mr2QnBNE1z31bV5TxLe7PqMOaCV27nepD4FtbBDbreDoVThvNYhbupDqfl0xZaObie_aJXuyX_xJh542zXRZ3Ct5MHlcvIy77kBoS1OsSe-47DIgE22dy3xmv8lpYc10z13UuYnxjoRV35-rZC6T9Sc-q30XgusHmGhI2nssoMfNaO6pVpOzPL8NHTosIMgW16mx7EUl-qY4wWBjxQLKyHtSVvu9nMxl8bwe9ILYlwYWhKpITwzoCT3FGEgVOHdfVrOlwT5HOw80W3CdOkWD4X7fa0aUh3cMiDuB3NAQrKEJqd3XKc-YkNyx0c-huhwrtPMW5RRwHUgpfhVY30HOIdzGUi3if5NtbwvpPTeB9LCA4PElCB0bcI9zrMVplhskI63BmuLi353OwZ5SmJeJvqcJz3PosyROPjM-ys70nBdC38h-A9cv9wLDP8q7OkWI2FPZ58iqxYe0Ti8sBh5JHxbxCNJh8jd-FJwQyU18wJoaTJnJnSQiun3QTlXOmB7UvDTo42crC5ZkkbkufVUt-BDa0_ZU13L0oyauPhecBeGmTSER6fsSQuxL6uB-6jHNjHIUvQAG219n1CG94Ada7Q2582xCb0KCNXKXabzeyK6zDTuywO4RbWOrxB846VQxElYeKf3hfBjIG_RGGZRhtWyi9fDNF_7UhnTLQSoVV-cF1CHiD9TmANUJMVmrSwZx3p8spAqBe660NmT5GVOuzKCrn1-qQ2GcD_QN3eDAMd_97PURrZbsdlww5uzl9-2OJaTDrcK6b8IerVN9WVPgBCOFN1WuNn1DaBTPFQ5dnmD1zYlsKcQB0u-B6XuMYiS31UPG-_EnnKOfptcr1nJH873r6ZDm-BuhYzDdP_plOqpTMXy_4OomlpM18NL3yDiQc3KiPM83sZQ39Wm1Iziid5ygKCAsX5j4fLnUiGf0VGvY9bVOd37Ka8Nos9m2mwtmxCeXk6y2MG7xwdWMdoB_xwj5yko__HV-YU0Cdw4Cf6dYsVzh5530KiUbT93UGP-GvORto4EF3-_cPFEd7X4u_Qiqk8xRyPdA9luEZcW9aQAlS-_lH9RMZ67jX6by5R9-CGcbDUTB644w-KybYU8GEsYPtGiSoM9JO8RANlYGOVtv8mNt8WPvqLB5ZUBcJQ5Sj_OI9m9CmrF2BOAYtx7CjyOhS7roQNFoOJPT81lXqWGZn0rxbxEtVjdCWCMj0EwMRW6PQDNaqcob6eoN5WXZIXR7G2gTusSSzHbhSDeik-3Ye6a9CGUvakZDmmnySljyHIBLlpBqhw-8STcbaRsSmO_0pTkwbg5FviKmL_2KkZ6gHMHwLUNEYnXDM4uuxJC3iI69FfH75IFBPPPn8tdQZVoeHW5dEBOfv0g8XhQOhXR5OcYy7aJnUF5nPS9qUf9imfRl6sf6_qynZT_y-p4_BV_sTVij85Ngtv9fiVcxDHHiMV1i_QMCujyFL1ueViTerSjmm-mHWR8tE8N9GZhAdhAnGcIZTrXYW1fPqUtAgImvXxSuhKrsyaMwPju4p61LyutYQA91nT53yvjowZcNoBlTTLuA_sV8DgBnGG10I5K56Bs4sFjmwIfjuOz4K_4yVlBwu933Mu7IAsHwITB2wIkP4XsAS6Fa-EZwG2lMIQ7we55ZHB4eLyHOUracLQHAjQtDwcDug1_eB4BoA_o%3D&uniformat=true&callback=Ya%5B4366219990459%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: None
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: https://www.playground.ru
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1695515118263685-15231135402157299692-balancer-l7leveler-kubr-yp-vla-91-BAL-2037
last-modified: Sun, 24 Sep 2023 00:25:18 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Sun, 24 Sep 2023 00:25:18 GMT
set-cookie: i=82Wf7qrmrv2lGCJRQz33pCsOcbHxAhaSzONJfE6qn804/CAanbM47APILS2FsmUE+iMlmNB6N1JU1oJcxOPwQxCHRP4=; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2572996921695515118; Expires=Tue, 23-Sep-2025 00:25:18 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
content-type: application/json; charset=utf-8
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
expires: Sun, 24 Sep 2023 00:25:18 GMT
X-Firefox-Spdy: h2
www.playground.ru/build/12.6f384641.js
200 OK 439 kB URL GET HTTP/2 www.playground.ru/build/12.6f384641.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Unicode text, UTF-8 text, with very long lines (65510), with no line terminators
Size 439 kB (438628 bytes)
Hash 40af8ac66b2e1e5072b8c319c24cfbf5
1ebade8ee57f5c5e383159943b5812d23a8622ed
bee743b5d00c412553e1470670dfd2a7bce9c1383e0f99c101f45c48077598e5
GET /build/12.6f384641.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
last-modified: Fri, 22 Sep 2023 12:13:41 GMT
etag: W/"650d84f5-d06"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
mytop.vkplay.live/js/code.js
200 OK 13 kB URL GET HTTP/1.1 mytop.vkplay.live/js/code.js
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type ASCII text, with very long lines (34975), with no line terminators
Hash 38989af6ff01b184d7d703ab1de3fc4d
522c29592e9e3b17f39e7ea589a2b9ab448e43f2
62ad0b847374bcea9752013dd5f9466e8cc18d6c0f1b8e512d9e559041fdaf02
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/code.js HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: application/javascript
Content-Length: 13337
Last-Modified: Thu, 21 Sep 2023 16:57:01 GMT
Connection: keep-alive
ETag: "650c75dd-3419"
Content-Encoding: gzip
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Referrer-Policy: no-referrer-when-downgrade
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
1l-hit.vkplay.ru/v1/hit/103801.js?r=https%3A%2F%2Fwww.playground.ru%2F&l=https%3A%2F%2Fvkplay.live%2Fapp%2Fembed%2Frandom%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5&u=&rnd=0.5556062655867324
200 OK 423 B URL GET HTTP/1.1 1l-hit.vkplay.ru/v1/hit/103801.js?r=https%3A%2F%2Fwww.playground.ru%2F&l=https%3A%2F%2Fvkplay.live%2Fapp%2Fembed%2Frandom%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5&u=&rnd=0.5556062655867324
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subjectvkplay.ru
Fingerprint5C:05:75:39:F2:33:4D:20:0D:30:45:D0:3C:3E:A4:22:5B:99:E1:9E
ValidityWed, 24 May 2023 09:38:28 GMT - Mon, 24 Jun 2024 09:38:27 GMT
File type ASCII text, with very long lines (423), with no line terminators
Hash 0c8ce432a6831e8f8f64dfbaae35fd30
7125b77cb852882dc3c7db4240f07c7cef0e8f62
b92ba40836b629aee5fb265d345e933c48df1359910f801d4f59c414e93de4f8
GET /v1/hit/103801.js?r=https%3A%2F%2Fwww.playground.ru%2F&l=https%3A%2F%2Fvkplay.live%2Fapp%2Fembed%2Frandom%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5&u=&rnd=0.5556062655867324 HTTP/1.1
Host: 1l-hit.vkplay.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: mr1lad=650f81f0e9c2d33-100-100-; expires=Sun, 01 Oct 2023 00:25:20 GMT; path=/; domain=.vkplay.ru; SameSite=None; Secure
mr1lext=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.vkplay.ru; SameSite=None; Secure
Expires: Sun, 24 Sep 2023 00:25:19 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
static.vkplay.live/assets/fonts/Inter-Regular.a7e06560e456e6b1d13f3a7139b2e179.woff2
200 OK 89 kB URL GET HTTP/1.1 static.vkplay.live/assets/fonts/Inter-Regular.a7e06560e456e6b1d13f3a7139b2e179.woff2
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type Web Open Font Format (Version 2), TrueType, length 89212, version 1.0\012- data
Hash bffaed793493dc46bf0789e2275909ac
21178040c070176c06653b76d42b1e19810c2df0
77ca56870309a85759fb7116aef2119a26e358145e808868543ca1fe16c27720
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/fonts/Inter-Regular.a7e06560e456e6b1d13f3a7139b2e179.woff2 HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://static.vkplay.live/css/styles-077d828.css?v=
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: font/woff2
Content-Length: 89212
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-15c7c"
Expires: Sun, 08 Oct 2023 00:25:19 GMT
Cache-Control: max-age=1209600
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
mytop.vkplay.live/mc?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799
302 Moved Temporarily 0 B URL POST HTTP/1.1 mytop.vkplay.live/mc?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mc?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Length: 0
Location: https://mytop.vkplay.live/mc2?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799
Connection: keep-alive
Set-Cookie: FTID=1Vezc80SrV2K/1RMYgQ0tkIIK:1695515120:3252494:::; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mc?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648
302 Moved Temporarily 0 B URL POST HTTP/1.1 mytop.vkplay.live/mc?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mc?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Length: 0
Location: https://mytop.vkplay.live/mc2?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648
Connection: keep-alive
Set-Cookie: FTID=1Vezc80SrV2K/1RMYgQ0tkIIK:1695515120:3247783:::; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mc2?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648
200 OK 43 B URL GET HTTP/1.1 mytop.vkplay.live/mc2?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /mc2?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120411%3A2%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.10429353024869648 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Cookie: FTID=1Vezc80SrV2K/1RMYgQ0tkIIK:1695515120:3247783:::; mr1lad=650f81f0e9c2d33-100-100-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEHIdgNFBPV2A2X0v3p9KuAwaYOr3DIlKPnHt4E4gEY2WHtWoc9UxeGopqDj2BY5vlNSQPLzuW-w2irqXYAfuTUwXEi3rDmP7aL-1_bLsSqPItVNPH1T1E_bOk0BHGvG2qXtZBMLGI-4kMlt-6kDwAYiGJQ; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
FTID=0; path=/; expires=Thu, 01-Jan-70 00:00:01 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3361718;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22category%22%3A%22live%22%2C%22action%22%3A%22uid%22%2C%22label%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%2C%22VKPlayID%22%3A%22%22%7D;lvid=1695515120369%3A1695515120423%3A4%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7260905920208952;e=RG%3A/vkplay
200 OK 43 B URL POST HTTP/1.1 mytop.vkplay.live/mt?js=13;id=3361718;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22category%22%3A%22live%22%2C%22action%22%3A%22uid%22%2C%22label%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%2C%22VKPlayID%22%3A%22%22%7D;lvid=1695515120369%3A1695515120423%3A4%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7260905920208952;e=RG%3A/vkplay
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3361718;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22category%22%3A%22live%22%2C%22action%22%3A%22uid%22%2C%22label%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%2C%22VKPlayID%22%3A%22%22%7D;lvid=1695515120369%3A1695515120423%3A4%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7260905920208952;e=RG%3A/vkplay HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: FTID=1VezcB0QrVIK/1RMYgQ0tkIIK:1695515120:3361718:::; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mc?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875
302 Moved Temporarily 0 B URL POST HTTP/1.1 mytop.vkplay.live/mc?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mc?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Length: 0
Location: https://mytop.vkplay.live/mc2?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875
Connection: keep-alive
Set-Cookie: FTID=1Vezc90UrV2K/1RMYgQ0tkIIK:1695515120:3254134:::; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mc2?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799
200 OK 43 B URL GET HTTP/1.1 mytop.vkplay.live/mc2?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /mc2?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120409%3A1%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.3815435592293799 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Cookie: FTID=1Vezc80SrV2K/1RMYgQ0tkIIK:1695515120:3252494:::; mr1lad=650f81f0e9c2d33-100-100-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=0WeHDJ2dnAIK00000w1qT4IK:::0-0-0-a29dab0:CAASEBocxL043PhXah0baybE9lAaYOxGUA5ljcbMKSLIZecrQxSmStfp1d44hMroVLuE5fEuza1Fk5bny2X2G-TsYUh5z4gL7-NnXl8Drp43O1VacsgEqj4Mp6Qn7LVhCvxe0n6ss384jo9leJsdcvIxGd5GUg; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
FTID=0; path=/; expires=Thu, 01-Jan-70 00:00:01 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mc2?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875
200 OK 43 B URL GET HTTP/1.1 mytop.vkplay.live/mc2?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /mc2?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515120412%3A3%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.12611454340774875 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEHIdgNFBPV2A2X0v3p9KuAwaYOr3DIlKPnHt4E4gEY2WHtWoc9UxeGopqDj2BY5vlNSQPLzuW-w2irqXYAfuTUwXEi3rDmP7aL-1_bLsSqPItVNPH1T1E_bOk0BHGvG2qXtZBMLGI-4kMlt-6kDwAYiGJQ; FTID=1VezcB0QrVIK/1RMYgQ0tkIIK:1695515120:3361718:::
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASENihzuRlkz7Z6CXS31HGGZ8aYDF2IEZi-mbsz0zRj1CmgjVgq1TtIaoc7OvyMw8Nfm1OocbsmuNXJ2QW65-PTTjb0M8vW0goYeLUoRLJwPpu1zXCvAigaukv1Ao4zPChIu-Hcv1CHrq54z3Uoj-l1gB6Ng; path=/; expires=Tue, 24-Sep-24 00:25:20 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
FTID=0; path=/; expires=Thu, 01-Jan-70 00:00:01 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121579%3A5%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.18961672527403628;e=RT/load;et=1695515121577
200 OK 43 B URL POST HTTP/1.1 mytop.vkplay.live/mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121579%3A5%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.18961672527403628;e=RT/load;et=1695515121577
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121579%3A5%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.18961672527403628;e=RT/load;et=1695515121577 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASENihzuRlkz7Z6CXS31HGGZ8aYDF2IEZi-mbsz0zRj1CmgjVgq1TtIaoc7OvyMw8Nfm1OocbsmuNXJ2QW65-PTTjb0M8vW0goYeLUoRLJwPpu1zXCvAigaukv1Ao4zPChIu-Hcv1CHrq54z3Uoj-l1gB6Ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:21 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEMEaXh8SjNO9aWxmLH_UtyoaYDULT0Qhk1xhgpn0h5mZ1juENraMcQ5AIh3dGSt80UswhwJeUj6FB2xTnieg-bcMC4dTjZBcowtxk4EqhQ_CYBWSnUPPH8wIp6m0g7CG9yVRbNyJeuz8zPDA4y2nzZ9otA; path=/; expires=Tue, 24-Sep-24 00:25:21 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121580%3A6%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.2814539498621995;e=RT/load;et=1695515121577
200 OK 43 B URL POST HTTP/1.1 mytop.vkplay.live/mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121580%3A6%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.2814539498621995;e=RT/load;et=1695515121577
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121580%3A6%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.2814539498621995;e=RT/load;et=1695515121577 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASENihzuRlkz7Z6CXS31HGGZ8aYDF2IEZi-mbsz0zRj1CmgjVgq1TtIaoc7OvyMw8Nfm1OocbsmuNXJ2QW65-PTTjb0M8vW0goYeLUoRLJwPpu1zXCvAigaukv1Ao4zPChIu-Hcv1CHrq54z3Uoj-l1gB6Ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:21 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEB4f52zMP-cXAmNi8Js1agwaYGwLzn9xMtbiRtriPDV2kPiLQXEnXtS3-0oe7mgeoXTKj4hhoLHoj6ddNNDd9lc6d1xo3HV6W_ySj6wX5IpVTsqUH-uoG7mnG2ZR8SxTS7bh66kBEVNIv1rCagqzIHF05w; path=/; expires=Tue, 24-Sep-24 00:25:21 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121584%3A7%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7201376879118163;e=RT/load;et=1695515121577
200 OK 43 B URL POST HTTP/1.1 mytop.vkplay.live/mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121584%3A7%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7201376879118163;e=RT/load;et=1695515121577
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;nt=0/0/1695515118725/////4/30/52/52/207/129/207/275/418/390/1218/2846/2850/2851/2851/2851;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;lvid=1695515120369%3A1695515121584%3A7%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7201376879118163;e=RT/load;et=1695515121577 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASENihzuRlkz7Z6CXS31HGGZ8aYDF2IEZi-mbsz0zRj1CmgjVgq1TtIaoc7OvyMw8Nfm1OocbsmuNXJ2QW65-PTTjb0M8vW0goYeLUoRLJwPpu1zXCvAigaukv1Ao4zPChIu-Hcv1CHrq54z3Uoj-l1gB6Ng
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:21 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg; path=/; expires=Tue, 24-Sep-24 00:25:21 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
api.vkplay.live/v1/catalog/schema
200 OK 0 B URL OPTIONS HTTP/1.1 api.vkplay.live/v1/catalog/schema
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/catalog/schema HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:21 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
accounts.google.com/gsi/status?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&as=ItOXoFLrC%2BjdnE8qG3YKvg
200 OK 917 B URL GET HTTP/3 accounts.google.com/gsi/status?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&as=ItOXoFLrC%2BjdnE8qG3YKvg
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type Unicode text, UTF-8 text, with very long lines (3031)
Hash 5c57b66044e778e7aa8176491e6c030f
e46bd7bcb90454db9fa9835fffb5ea2db5b292c3
13f684ec7444ae331139323a55b20f50e85b119ace3285a8ce3dc53568460f1e
GET /gsi/status?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&as=ItOXoFLrC%2BjdnE8qG3YKvg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
access-control-allow-methods: GET
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 00:25:21 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-XGbH-w_heDWEF3HixFFAOg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
200 OK 27 kB URL GET HTTP/3 fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
IP
Requested by https://accounts.google.com/gsi/iframe/select?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=ItOXoFLrC%2BjdnE8qG3YKvg&is_itp=true&channel_id=9d585e3ab089f17ea58eb98039976190e12c3fb4e31a0e98cefc6cafd57d0bf9&origin=https%3A%2F%2Fwww.playground.ru
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google SansRegularGoogle;GoogleSans-RegularGoogle\012- data
Hash 20f7180ebc95ade510a7fbd4cbdc35b6
6cfc5afa73095577a20461de09d2a8f4b34d80e0
8087cf253743d85d9153ba12ce624c2e460e966c40a61928b3a036a2d452f45a
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27191
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 13:32:28 GMT
expires: Thu, 19 Sep 2024 13:32:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:42:54 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 298373
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
200 OK 27 kB URL GET HTTP/3 fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
IP
Requested by https://accounts.google.com/gsi/iframe/select?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=ItOXoFLrC%2BjdnE8qG3YKvg&is_itp=true&channel_id=9d585e3ab089f17ea58eb98039976190e12c3fb4e31a0e98cefc6cafd57d0bf9&origin=https%3A%2F%2Fwww.playground.ru
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google Sans MediumRegularGoogle;GoogleSans-Medium\012- data
Hash 9ecc1a07aa9e5e87f04d31b49ca09897
a030a565d2168e505861d6f1de260dc1adf8b77b
ebeace42646aa327b1fa6225f70120658993d4796cc9103484a6f068d3a58a6d
GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:23:51 GMT
expires: Tue, 17 Sep 2024 17:23:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:43:31 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 457290
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.vkplay.live/v1/public_video_stream/random?type=game
200 OK 0 B URL OPTIONS HTTP/1.1 api.vkplay.live/v1/public_video_stream/random?type=game
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/public_video_stream/random?type=game HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:21 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
region1.analytics.google.com/g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&cid=310941509.1695515117&ul=en-us&sr=1280x1024&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&_s=2
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&cid=310941509.1695515117&ul=en-us&sr=1280x1024&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&_s=2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GB82WN5FWQ>m=45je39k2&_p=563433337&cid=310941509.1695515117&ul=en-us&sr=1280x1024&sid=1695515116&sct=1&seg=0&dl=https%3A%2F%2Fwww.playground.ru%2Fbaldurs_gate_3%2Fcheat%2Fbaldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Baldur%27s%20Gate%203%20%22%D0%A2%D1%80%D0%B5%D0%B9%D0%BD%D0%B5%D1%80%20%2B21%22%20%5B4.1.1%20-%20UPD%3A%2018.08.2023%5D%20%7BFLiNG%7D&_s=2 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 593
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.playground.ru
date: Sun, 24 Sep 2023 00:25:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pubsub.vkplay.live/connection/websocket
0 B URL pubsub.vkplay.live/connection/websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /connection/websocket HTTP/1.1
Host: pubsub.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://vkplay.live
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qT/9oN3l7QBJExiq4QvHJA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kzplQ+2mh0C0T05JxR2JmsnRcqc=
Referrer-Policy: no-referrer-when-downgrade
api.vkplay.live/v1/public_video_stream/random?type=game
200 OK 27 B URL OPTIONS HTTP/1.1 api.vkplay.live/v1/public_video_stream/random?type=game
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6cd0b39735d9af91643af594ad84bcb0
3331b048a96433d08c0d7c451deebf20278d09fb
c2fae74809852f4e3c8eaffb42964250c76ca8827277d2ac92aae2dc9b46cf54
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v1/public_video_stream/random?type=game HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
X-From-Id: 4793ee3d-f59b-4fab-87f0-429eb2711edd
X-App: streams_web_embed
X-Referer: playground.ru
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 27
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
api.vkplay.live/v1/blog/kopernik/public_video_stream?
200 OK 0 B URL GET HTTP/1.1 api.vkplay.live/v1/blog/kopernik/public_video_stream?
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/blog/kopernik/public_video_stream? HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
api.vkplay.live/v1/blog/kopernik/public_video_stream?
200 OK 1.3 kB URL GET HTTP/1.1 api.vkplay.live/v1/blog/kopernik/public_video_stream?
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4300), with no line terminators
Hash 440fad88e4e4c76f5aab31be07844310
6051b5afcc7c28952bd53185c983c28555d6116f
4f11d5485238558eec5b7d1630dc3f03b5c3eac72f9b62b1e93063842e8d18b5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /v1/blog/kopernik/public_video_stream? HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
X-From-Id: 4793ee3d-f59b-4fab-87f0-429eb2711edd
X-App: streams_web_embed
X-Referer: playground.ru
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
api.vkplay.live/v1/stat/ClientInfo/
200 OK 0 B URL POST HTTP/1.1 api.vkplay.live/v1/stat/ClientInfo/
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/stat/ClientInfo/ HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
api.vkplay.live/v1/stat/ClientInfo/
200 OK 17 B URL POST HTTP/1.1 api.vkplay.live/v1/stat/ClientInfo/
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f5c8924c9fc3e3e3eb3b6dabd570c91
737fe84db1484de92ee44287354b2cbcb1901e3c
c0165c942db5d1d6bebdd4c050db13d84846ab84eb032d33761f486151bd5cab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /v1/stat/ClientInfo/ HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: application/x-www-form-urlencoded
X-From-Id: 4793ee3d-f59b-4fab-87f0-429eb2711edd
X-App: streams_web_embed
X-Referer: playground.ru
Content-Length: 721
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 17
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
static.vkplay.live/js/81-da5bbcd.js
200 OK 235 kB URL GET HTTP/1.1 static.vkplay.live/js/81-da5bbcd.js
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type Unicode text, UTF-8 text, with very long lines (65467)
Size 235 kB (235416 bytes)
Hash e9a929879cb4caecafd2f581f81f52c1
35dd58b21cd94d25b46154d732d69b1a99480931
a726ee8cabcb60816b663ed1cd049192917690f11ff406ac0fac9023d55cae1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/81-da5bbcd.js HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Content-Type: application/javascript
Content-Length: 235416
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-39798"
Content-Encoding: gzip
Expires: Sun, 08 Oct 2023 00:25:22 GMT
Cache-Control: max-age=1209600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true
404 Not Found 0 B URL PUT HTTP/1.1 api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:23 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true
404 Not Found 63 B URL PUT HTTP/1.1 api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 64ab1552db0fefeae5285c07701c3e73
160aa1e56de8bdcaa2b2946bbff96995b6535bd0
14a0a8231ef06ad00165eaec500d21d7ed9b9184f9a72ae6460c9e18b53521eb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
PUT /v1/blog/null/public_video_stream/heartbeat/viewer?immortal=true HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: application/x-www-form-urlencoded
X-From-Id: 4793ee3d-f59b-4fab-87f0-429eb2711edd
X-App: streams_web_embed
X-Referer: playground.ru
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 24 Sep 2023 00:25:23 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 63
Connection: keep-alive
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
images.vkplay.live/public_video_stream/12896850/preview?change_time=1695515066
200 OK 90 kB URL GET HTTP/1.1 images.vkplay.live/public_video_stream/12896850/preview?change_time=1695515066
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash bd24d988fa46698d8709ef121e7ed49f
dfc55314857719aada88d08bc52164a65cea8ce4
7828cf77a6283fcc3a5a9d53729d61a42fe5c8fb3b8977da031ece08dc5b7e98
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /public_video_stream/12896850/preview?change_time=1695515066 HTTP/1.1
Host: images.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:23 GMT
Content-Type: image/jpeg
Content-Length: 89499
Connection: keep-alive
Expires: Sun, 08 Oct 2023 00:25:23 GMT
Last-Modified: Sun, 24 Sep 2023 00:25:23 GMT
X-Host: filed3.my.mail.ru 24
Referrer-Policy: no-referrer-when-downgrade
accounts.google.com/gsi/iframe/select?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=ItOXoFLrC%2BjdnE8qG3YKvg&is_itp=true&channel_id=9d585e3ab089f17ea58eb98039976190e12c3fb4e31a0e98cefc6cafd57d0bf9&origin=https%3A%2F%2Fwww.playground.ru
200 OK 65 kB URL GET HTTP/3 accounts.google.com/gsi/iframe/select?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=ItOXoFLrC%2BjdnE8qG3YKvg&is_itp=true&channel_id=9d585e3ab089f17ea58eb98039976190e12c3fb4e31a0e98cefc6cafd57d0bf9&origin=https%3A%2F%2Fwww.playground.ru
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data, max compression\012- data
Hash 3692f671941cc812ce4c24d48e2cfa1c
3111f94399ea992b9a1f3e6f4d23be99b158b148
4e064f4869bc8fdcbb755a1b9ece487ab2c811156f842cd9a39fc7fe24734bd6
GET /gsi/iframe/select?client_id=525895288003-qpgodvibi6pvb5a4qo3lvtva52hfnpce.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=ItOXoFLrC%2BjdnE8qG3YKvg&is_itp=true&channel_id=9d585e3ab089f17ea58eb98039976190e12c3fb4e31a0e98cefc6cafd57d0bf9&origin=https%3A%2F%2Fwww.playground.ru HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 00:25:21 GMT
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-lPi1sD67KFxxFlHz8cPcEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.vkplay.live/v1/graphite/api_error_404/
200 OK 17 B URL POST HTTP/1.1 api.vkplay.live/v1/graphite/api_error_404/
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f5c8924c9fc3e3e3eb3b6dabd570c91
737fe84db1484de92ee44287354b2cbcb1901e3c
c0165c942db5d1d6bebdd4c050db13d84846ab84eb032d33761f486151bd5cab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /v1/graphite/api_error_404/ HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:23 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 17
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
api.mycdn.me/fb.do
200 OK 252 B IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9239920fd581dfd0fa07a10bc37092f3
a7eb0f1dde176a4e3f5f39eb60cad5e40d5fe6b2
983e2b30d91fab4376bf7ff08a831eb3fe526fe2b64cf95f82e35224c67f2fdb
POST /fb.do HTTP/1.1
Host: api.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 242
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Sun, 24 Sep 2023 00:25:23 GMT
content-type: application/json;charset=utf-8
content-length: 252
access-control-allow-origin: https://vkplay.live
access-control-allow-headers: Content-Type, X-OK-Proxy
x-content-type-options: nosniff
strict-transport-security: max-age=16000000;includeSubdomains
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
content-language: en-US
X-Firefox-Spdy: h2
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=322482096
200 OK 359 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=322482096
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 8efcb101d59c9de06293cfec234f1e38
1adb7ebd8936438c13beba6b1d76603ed24da640
9046f7400ca8e5a939b511787ae5c8b9881b278b5689afa075b8b922f82db333
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=322482096 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:23 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "0-650f81f2-5ee"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=13553831
200 OK 217 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=13553831
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text, with very long lines (382)
Hash f5cda13a6f670b2d76fbc3aff8c5efc9
69d647d95c80ade1810a523f64a24b55a3a9f491
5fa9afa359f8f3ac2ea8ef72947bfe1a54361f9a5c1a67ee90946819575a55a7
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=13553831 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:23 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/json
etag: "650f81f2-17f"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
200 OK 483 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash d776ea3e1206f02eb4964f08fee3f063
3c4f3454c99ae17dcaa979a60d5601dfb90a32f7
9b46dbff714ffb348edcd5fe58b9027dfd6fa0e16f76b8cf29cace053ec4d9fb
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:23 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "650f4e21-504"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash
200 OK 196 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 196 kB (195656 bytes)
Hash 850b90e4e6655678862a36674b4ada7e
739e824ae990ac73ff1f547993fe069e919cddfa
883d7a5b5660a953af9fe4e62da07ba7006f04dd7113c09661ebc43e4fd551b8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:23 GMT
access-control-allow-origin: https://vkplay.live
content-length: 195656
expires: Sun, 24 Sep 2023 00:26:09 GMT
content-type: application/octet-stream
etag: "650f81ee-2fc48"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
200 OK 199 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 199 kB (199080 bytes)
Hash 9b0c43e7e508cd439ba4539917e3ecb3
b3513c4f508a56dfbd45850667c4d9dfa63554f3
53890f392535d4f65605a631f2afb7aae21d49820e5b2756f7849e6d75d524d8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
content-length: 199080
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f0-309a8"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
184 kB URL GET vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 184 kB (183659 bytes)
Hash 1ea8971bbb5ea77b7d3da3560dfbafb7
6fdd11b190d2fb8a9ddda66842a13e8e1bd325f5
d555e11afd70fe4395484f0da1ccea48ede10b2e3c85a1db9b0d23eb7e6ba25e
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
content-length: 183659
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f2-2cd6b"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=426057695
200 OK 359 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=426057695
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 8efcb101d59c9de06293cfec234f1e38
1adb7ebd8936438c13beba6b1d76603ed24da640
9046f7400ca8e5a939b511787ae5c8b9881b278b5689afa075b8b922f82db333
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=426057695 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "0-650f81f2-5ee"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=958140962
200 OK 217 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=958140962
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text, with very long lines (382)
Hash f5cda13a6f670b2d76fbc3aff8c5efc9
69d647d95c80ade1810a523f64a24b55a3a9f491
5fa9afa359f8f3ac2ea8ef72947bfe1a54361f9a5c1a67ee90946819575a55a7
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=958140962 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/json
etag: "650f81f2-17f"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
200 OK 483 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash d776ea3e1206f02eb4964f08fee3f063
3c4f3454c99ae17dcaa979a60d5601dfb90a32f7
9b46dbff714ffb348edcd5fe58b9027dfd6fa0e16f76b8cf29cace053ec4d9fb
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:25 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "650f4e21-504"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash
200 OK 196 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 196 kB (195656 bytes)
Hash 850b90e4e6655678862a36674b4ada7e
739e824ae990ac73ff1f547993fe069e919cddfa
883d7a5b5660a953af9fe4e62da07ba7006f04dd7113c09661ebc43e4fd551b8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221951.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
content-length: 195656
expires: Sun, 24 Sep 2023 00:26:09 GMT
content-type: application/octet-stream
etag: "650f81ee-2fc48"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
200 OK 199 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 199 kB (199080 bytes)
Hash 9b0c43e7e508cd439ba4539917e3ecb3
b3513c4f508a56dfbd45850667c4d9dfa63554f3
53890f392535d4f65605a631f2afb7aae21d49820e5b2756f7849e6d75d524d8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:24 GMT
access-control-allow-origin: https://vkplay.live
content-length: 199080
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f0-309a8"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=529328596
200 OK 359 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=529328596
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 8efcb101d59c9de06293cfec234f1e38
1adb7ebd8936438c13beba6b1d76603ed24da640
9046f7400ca8e5a939b511787ae5c8b9881b278b5689afa075b8b922f82db333
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=529328596 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "0-650f81f2-5ee"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=494770231
200 OK 221 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=494770231
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text, with very long lines (396)
Hash 0f8b09732b08886631e0c8acf3290159
b522d8d73cb814fc129cac478301c5f5b6bcddd4
954134d3c59f3db668a358b4e8aea0e8f82f3d989b4d082f723f2d1acd88c81a
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=494770231 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/json
etag: "650f81f4-18d"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
200 OK 483 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash d776ea3e1206f02eb4964f08fee3f063
3c4f3454c99ae17dcaa979a60d5601dfb90a32f7
9b46dbff714ffb348edcd5fe58b9027dfd6fa0e16f76b8cf29cace053ec4d9fb
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "650f4e21-504"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
200 OK 199 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 199 kB (199080 bytes)
Hash 9b0c43e7e508cd439ba4539917e3ecb3
b3513c4f508a56dfbd45850667c4d9dfa63554f3
53890f392535d4f65605a631f2afb7aae21d49820e5b2756f7849e6d75d524d8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
content-length: 199080
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f0-309a8"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
184 kB URL GET vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 184 kB (183659 bytes)
Hash 1ea8971bbb5ea77b7d3da3560dfbafb7
6fdd11b190d2fb8a9ddda66842a13e8e1bd325f5
d555e11afd70fe4395484f0da1ccea48ede10b2e3c85a1db9b0d23eb7e6ba25e
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
content-length: 183659
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f2-2cd6b"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=871695435
200 OK 359 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=871695435
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 8efcb101d59c9de06293cfec234f1e38
1adb7ebd8936438c13beba6b1d76603ed24da640
9046f7400ca8e5a939b511787ae5c8b9881b278b5689afa075b8b922f82db333
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=871695435 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "0-650f81f2-5ee"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=848853492
200 OK 221 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=848853492
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text, with very long lines (396)
Hash 0f8b09732b08886631e0c8acf3290159
b522d8d73cb814fc129cac478301c5f5b6bcddd4
954134d3c59f3db668a358b4e8aea0e8f82f3d989b4d082f723f2d1acd88c81a
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=848853492 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/json
etag: "650f81f4-18d"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
200 OK 483 B URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash d776ea3e1206f02eb4964f08fee3f063
3c4f3454c99ae17dcaa979a60d5601dfb90a32f7
9b46dbff714ffb348edcd5fe58b9027dfd6fa0e16f76b8cf29cace053ec4d9fb
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:27 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "650f4e21-504"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
200 OK 199 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 199 kB (199080 bytes)
Hash 9b0c43e7e508cd439ba4539917e3ecb3
b3513c4f508a56dfbd45850667c4d9dfa63554f3
53890f392535d4f65605a631f2afb7aae21d49820e5b2756f7849e6d75d524d8
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221952.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:25 GMT
access-control-allow-origin: https://vkplay.live
content-length: 199080
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f0-309a8"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
184 kB URL GET vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 184 kB (183659 bytes)
Hash 1ea8971bbb5ea77b7d3da3560dfbafb7
6fdd11b190d2fb8a9ddda66842a13e8e1bd325f5
d555e11afd70fe4395484f0da1ccea48ede10b2e3c85a1db9b0d23eb7e6ba25e
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
content-length: 183659
expires: Sun, 24 Sep 2023 00:26:10 GMT
content-type: application/octet-stream
etag: "650f81f2-2cd6b"
connection: Keep-Alive
cache-control: must-revalidate
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash
200 OK 192 kB URL GET HTTP/1.1 vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 192 kB (192247 bytes)
Hash 13933fca1d15a147785d8a913503865c
59ec419a0a6708609578bb57e40021139809199c
bef264e1178f26e6fa15baa5aeec47f5a4f131f952b17b20d4074d4b7b6aedab
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
content-length: 192247
expires: Sun, 24 Sep 2023 00:26:11 GMT
content-type: application/octet-stream
etag: "650f81f4-2eef7"
connection: Keep-Alive
cache-control: must-revalidate
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=294023674
200 OK 359 B URL GET HTTP/1.1 vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=294023674
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 8efcb101d59c9de06293cfec234f1e38
1adb7ebd8936438c13beba6b1d76603ed24da640
9046f7400ca8e5a939b511787ae5c8b9881b278b5689afa075b8b922f82db333
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/video?_rnd=294023674 HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:28 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "0-650f81f2-5ee"
connection: Keep-Alive
cache-control: must-revalidate
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=428425099
200 OK 175 B URL GET HTTP/1.1 vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=428425099
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type JSON data\012- , ASCII text
Hash 98c0d97d608385729425e836eb698fd2
b16ff941f2e6d45a075dc81dc1d6488a3fbe032d
2c7f109a0b78b2b127cf4280b30b345cd1972780cf347c9192af2d42ba813857
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=428425099 HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:28 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/json
etag: "650f81f6-f3"
connection: Keep-Alive
cache-control: must-revalidate
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
200 OK 483 B URL GET HTTP/1.1 vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash d776ea3e1206f02eb4964f08fee3f063
3c4f3454c99ae17dcaa979a60d5601dfb90a32f7
9b46dbff714ffb348edcd5fe58b9027dfd6fa0e16f76b8cf29cace053ec4d9fb
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.hdr HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
expires: Sun, 24 Sep 2023 00:25:28 GMT
transfer-encoding: chunked
content-encoding: gzip
content-type: application/octet-stream
etag: "650f4e21-504"
connection: Keep-Alive
cache-control: must-revalidate
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
200 OK 184 kB URL GET HTTP/1.1 vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 184 kB (183659 bytes)
Hash 1ea8971bbb5ea77b7d3da3560dfbafb7
6fdd11b190d2fb8a9ddda66842a13e8e1bd325f5
d555e11afd70fe4395484f0da1ccea48ede10b2e3c85a1db9b0d23eb7e6ba25e
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221953.dash HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:26 GMT
access-control-allow-origin: https://vkplay.live
content-length: 183659
expires: Sun, 24 Sep 2023 00:26:12 GMT
content-type: application/octet-stream
etag: "650f81f2-2cd6b"
connection: Keep-Alive
cache-control: must-revalidate
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash
200 OK 192 kB URL GET HTTP/1.1 vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Size 192 kB (192247 bytes)
Hash 13933fca1d15a147785d8a913503865c
59ec419a0a6708609578bb57e40021139809199c
bef264e1178f26e6fa15baa5aeec47f5a4f131f952b17b20d4074d4b7b6aedab
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221954.dash HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Accept, Range
Access-Control-Expose-Headers: Date
date: Sun, 24 Sep 2023 00:25:27 GMT
access-control-allow-origin: https://vkplay.live
content-length: 192247
expires: Sun, 24 Sep 2023 00:26:13 GMT
content-type: application/octet-stream
etag: "650f81f4-2eef7"
connection: Keep-Alive
cache-control: must-revalidate
api.mycdn.me/fb.do
200 OK 0 B IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fb.do HTTP/1.1
Host: api.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 5751
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Sun, 24 Sep 2023 00:25:28 GMT
content-type: application/json;charset=utf-8
content-length: 0
access-control-allow-origin: https://vkplay.live
access-control-allow-headers: Content-Type, X-OK-Proxy
x-content-type-options: nosniff
strict-transport-security: max-age=16000000;includeSubdomains
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
content-language: en-US
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f5e8c4f8f278f9efbee06f1da6ca6afa
07cea281d3989868b6a516d85d886f223231c690
207b4b722f6e6827f867905eb8f9d07bb251106fd318bba1b063d0127920444a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash f5e8c4f8f278f9efbee06f1da6ca6afa
07cea281d3989868b6a516d85d886f223231c690
207b4b722f6e6827f867905eb8f9d07bb251106fd318bba1b063d0127920444a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 00:25:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
0 B URL play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Sun, 24 Sep 2023 00:25:31 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+296; expires=Tue, 23-Sep-2025 00:25:31 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 24 Sep 2023 00:25:31 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
131 B URL play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 445
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sun, 24 Sep 2023 00:25:32 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+034; expires=Tue, 23-Sep-2025 00:25:31 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 24 Sep 2023 00:25:32 GMT
X-Firefox-Spdy: h2
mytop.vkplay.live/mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136589%3A8%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.485464695712683;e=PVT/15
43 B URL mytop.vkplay.live/mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136589%3A8%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.485464695712683;e=PVT/15
IP
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3252494;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136589%3A8%3A9745f2ca2fd66df15b5412b70e08b390;visible=true;_=0.485464695712683;e=PVT/15 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEK3azwKDq9iPSFIiqMm3IMIaYC7XWxFD-iHVZcMgwOew-ffnY6iD8zRGD-fNUQBxYSSZRk_zyNUq94VxnsfdAvWsfQkhcmJAU-KAM90t0AriUSv8fAf_GdYBR8GhcEX4ci494DRQBQ24P7CtN6ZyAZ20aA; path=/; expires=Tue, 24-Sep-24 00:25:36 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136592%3A9%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7829571177919848;e=PVT/15
43 B URL mytop.vkplay.live/mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136592%3A9%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7829571177919848;e=PVT/15
IP
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3247783;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136592%3A9%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.7829571177919848;e=PVT/15 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEMAKMkIrTUXZ98CJs3Jq-UwaYPBmgX2LRS_v_xoxK2MgFJjHWJDrz09ZQNfx54hm_8Mgj8seNU91Z3NMjQ7k2dXF4jkrDsuk9tREZy3d6e3tm4Y8eIh0ZNEPEQxHw8OdsGXURm3msoM5e_okcsPfzRjK9g; path=/; expires=Tue, 24-Sep-24 00:25:36 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mytop.vkplay.live/mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136593%3A10%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.3384443707391981;e=PVT/15
43 B URL mytop.vkplay.live/mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136593%3A10%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.3384443707391981;e=PVT/15
IP
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /mt?js=13;id=3254134;u=https%3A//vkplay.live/app/embed/random%3Ftype%3Dgame%26autoplay%3Dtrue%26muted%3Dtrue%26mt_link_id%3Dpizlv5;r=https%3A//www.playground.ru/;st=1695515119943;userid=;title=VK%20Play%20Live%20-%20%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9%20%D0%B3%D0%BE%D1%80%D0%B8%D0%B7%D0%BE%D0%BD%D1%82%20%D1%81%D1%82%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0;s=1280*1024;vp=360*202;touch=0;hds=1;frame=1;flash=;sid=3e3830b0fbc241fe;ver=60.3.0;tz=0%2FUTC;ni=;params=%7B%22VKPlayID%22%3A%22%22%2C%22from_id%22%3A%224793ee3d-f59b-4fab-87f0-429eb2711edd%22%7D;detect=0;lvid=1695515120369%3A1695515136593%3A10%3A9745f2ca2fd66df15b5412b70e08b390;opts=sec;visible=true;_=0.3384443707391981;e=PVT/15 HTTP/1.1
Host: mytop.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:36 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASED_Ud2Vf9CzIkHoLH2tFQJ8aYECQ-WRmC2vxEVEYbcn8I3ikkPPJZU4UhwXjP59_Dp3GNXMMByq1wOQUNYdooZqmqzkeFwCmw-N-nA5uQEs_WVM2-S3-KjNoKNfPinQrLRM6QQyamySiNV5uVq3M7WaWig; path=/; expires=Tue, 24-Sep-24 00:25:36 GMT; domain=.vkplay.live; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: https://vkplay.live
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: https://vkplay.live
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?stop=true
0 B URL api.vkplay.live/v1/blog/null/public_video_stream/heartbeat/viewer?stop=true
IP
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /v1/blog/null/public_video_stream/heartbeat/viewer?stop=true HTTP/1.1
Host: api.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: x-app,x-from-id,x-referer
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:38 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate, private
Access-Control-Allow-Origin: https://vkplay.live
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type,X-App,X-From-Id,X-Referer,Authorization,X-Locale,X-Invite,X-Currency
Access-Control-Expose-Headers: X-New-User
Access-Control-Allow-Credentials: true
yandex.ru/ads/system/header-bidding.js
200 OK 113 kB URL GET HTTP/2 yandex.ru/ads/system/header-bidding.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type ASCII text, with very long lines (65479)
Size 113 kB (113441 bytes)
Hash 28c4c3ec74694ccd4c1d902bcbaa2838
86cd0a5389c535a095ce40861cc3ebed43c56886
0699d79f55b16cb9adfbe25c1fed1f370cb5f26f32a55587b7fdb5c56e097d64
GET /ads/system/header-bidding.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=AztjvCck2uuY8mPTPgFug2f6K5xKrrMKBB7dEpPmHxfBHnjay46GaP/2HlSZ54sVqSYSmJZKnWtMgWhvE0KnRmzUuMI=; Expires=Tue, 23-Sep-2025 00:25:16 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1774545471695515116; Expires=Tue, 23-Sep-2025 00:25:16 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
expires: Sun, 24 Sep 2023 01:25:16 GMT
x-yandex-req-id: 1695515116653034-849429125177454547-balancer-l7leveler-kubr-yp-vla-91-BAL-9753
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
www.playground.ru/build/page/game-list.524f7de8.js
200 OK 10 kB URL GET HTTP/2 www.playground.ru/build/page/game-list.524f7de8.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Unicode text, UTF-8 text, with very long lines (10232), with no line terminators
Hash 94e986382e65ffd43112176bd9018968
c96b734fb68a72fa1618d9b29ed5d337e3af6b2e
99a25994327c7c9a23eb06afc6ed9195c85f34ba3eba6336b629d7129e487a91
GET /build/page/game-list.524f7de8.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Sep 2023 10:29:32 GMT
etag: W/"64f5b18c-2872"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221955.dash
0 B URL GET vsd104.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221955.dash
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/frag-low-10221955.dash HTTP/1.1
Host: vsd104.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.playground.ru/img/icons/icon-192x192.png
200 OK 20 kB URL GET HTTP/2 www.playground.ru/img/icons/icon-192x192.png
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 41665a82a620f3d2739fa8a9a363201d
cf25645919a8d72020fdb396db2af337b5a7ccfa
23f62fcd57e69f4284ba9ea76c979965dcbb91e7f6e0fd281b9ff598ec872e1a
GET /img/icons/icon-192x192.png HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: image/png
content-length: 19912
last-modified: Thu, 29 Jul 2021 13:51:49 GMT
etag: "6102b275-4dc8"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
200 OK 53 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44268)
Hash d9ef78a62dba57df228c7a3e58a47464
648176fb699475376c5fa8dbf28fe2d2ed05df23
8b3e01a066a3464f2538ef47f8b55c1234cb84806179ee4df7d61d30d546fa78
GET /recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
content-security-policy: script-src 'nonce-7fKc7yZeZ4uLnle-CMIRmQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with no line terminators
Hash 8eed6633a8068b9a6e6ef578a1d0fe9e
6592e87cf689c54970072ef51fff5171b1ccae0e
40c5169b0cd134e74f47c6a2934ee31d80a3f76c8048de41beea17fb5798b6c8
GET /recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=elhqxbkxas0c
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 24 Sep 2023 00:25:18 GMT
date: Sun, 24 Sep 2023 00:25:18 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.playground.ru/css/vendor/bootstrap/3.3.4/css/bootstrap.min.css
200 OK 117 kB URL GET HTTP/2 www.playground.ru/css/vendor/bootstrap/3.3.4/css/bootstrap.min.css
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type ASCII text, with very long lines (65371)
Size 117 kB (117306 bytes)
Hash 052f2e53c3becebd70f18b7bc089c7b5
f648ce53e0d18001b516c0f5e353942dfa54275e
58eab6061893e760713bd20c9f2dce0481a6adf5126bb739c7554a70dad828b4
GET /css/vendor/bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Fri, 13 Nov 2020 13:16:13 GMT
etag: W/"5fae871d-1ca3a"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit&hl=ru
200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=ru
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash bfb8cc96ca2e8dec2edd8edcbe4f823e
e389ac75930a913d0e4d8e139bf51ec86649dcf5
b59c03c5183d7374eb817781ea38852d48e54c78f91eb601868b8903ac1e585d
GET /recaptcha/api.js?render=explicit&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 24 Sep 2023 00:25:16 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/astralab
204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/astralab
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/astralab HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.17.10
date: Sun, 24 Sep 2023 00:25:17 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.playground.ru/js/vendor/jquery/jquery-3.5.1.min.js
200 OK 90 kB URL GET HTTP/2 www.playground.ru/js/vendor/jquery/jquery-3.5.1.min.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /js/vendor/jquery/jquery-3.5.1.min.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Fri, 31 Jul 2020 17:54:32 GMT
etag: W/"5f245ad8-15d84"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/build/8.9cbaa881.js
200 OK 183 kB URL GET HTTP/2 www.playground.ru/build/8.9cbaa881.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Size 183 kB (182889 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /build/8.9cbaa881.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Tue, 13 Oct 2020 09:01:29 GMT
etag: W/"5f856ce9-2ca69"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
200 OK 9.7 kB URL GET HTTP/2 www.playground.ru/css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Hash d572b531f0823555818998b466028e08
788073fb7656c7b44a3d67468fc355ceb618290e
bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
GET /css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/main.css?9832
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 9692
last-modified: Thu, 24 Nov 2022 17:47:16 GMT
etag: "637fae24-25dc"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
i.playground.ru/p/NTK2E03elSBMtGFImIlVzQ.png.webp?760-auto
200 OK 48 kB URL GET HTTP/2 i.playground.ru/p/NTK2E03elSBMtGFImIlVzQ.png.webp?760-auto
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 760x397, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 80d1f831c3e90bf3cfff467442aa628a
6dae259b6e79d7eac3f7cca3bf8fb0e1c15115c0
542ffb00df0c4de17094fa3c9be68b5c6f1025c001c97f626c9d38326a52704a
GET /p/NTK2E03elSBMtGFImIlVzQ.png.webp?760-auto HTTP/1.1
Host: i.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: image/webp
content-length: 48468
last-modified: Wed, 16 Aug 2023 04:03:50 GMT
accept-ranges: bytes
expires: Tue, 24 Oct 2023 00:25:15 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with no line terminators
Hash 8eed6633a8068b9a6e6ef578a1d0fe9e
6592e87cf689c54970072ef51fff5171b1ccae0e
40c5169b0cd134e74f47c6a2934ee31d80a3f76c8048de41beea17fb5798b6c8
GET /recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=qee4zrb3xoc
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 24 Sep 2023 00:25:18 GMT
date: Sun, 24 Sep 2023 00:25:18 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.playground.ru/css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL GET HTTP/2 www.playground.ru/css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /css/font/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/main.css?9832
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 15700
last-modified: Thu, 24 Nov 2022 17:47:16 GMT
etag: "637fae24-3d54"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-GB82WN5FWQ&l=dataLayer&cx=c
200 OK 263 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-GB82WN5FWQ&l=dataLayer&cx=c
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (5788)
Size 263 kB (263304 bytes)
Hash d246abf22695c8a1ef41123de315fdd0
260f6a6749a0e2f3689a79b455e1baf68819ebba
2a01501649539e2b90a988e528fbf184c971c0fea957e725cf3eb9e7d4fa990d
GET /gtag/js?id=G-GB82WN5FWQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 24 Sep 2023 00:25:16 GMT
expires: Sun, 24 Sep 2023 00:25:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90049
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.playground.ru/redirect/post/1150012
301 Moved Permanently 776 kB URL User Request GET HTTP/2 www.playground.ru/redirect/post/1150012
IP
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Size 776 kB (776084 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/post/1150012 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx/1.16.1
content-type: text/html; charset=UTF-8
location: https://www.playground.ru/redirect/post/1150012/
date: Sun, 24 Sep 2023 00:25:13 GMT
x-uid: 0
expires: Sun, 24 Sep 2023 00:25:13 GMT
cache-control: max-age=0, must-revalidate, private
set-cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; expires=Fri, 22-Sep-2028 00:25:13 GMT; Max-Age=157680000; path=/; domain=.playground.ru; httponly; samesite=lax
pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; path=/; domain=.playground.ru; httponly; samesite=lax
X-Firefox-Spdy: h2
www.playground.ru/css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCAYb8td.woff2
200 OK 9.6 kB URL GET HTTP/2 www.playground.ru/css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCAYb8td.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Web Open Font Format (Version 2), TrueType, length 9592, version 1.0\012- data
Hash 41c6cb1c29434de56b819ce8b1f8a909
cabcc9cb30f35f3ef9b789182569f6c91786df8c
ad7b38d9f963e0eb028bda9b8394ccd0077fc06bf69fe02675943b2f9ff0e555
GET /css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCAYb8td.woff2 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/main.css?9832
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 9592
last-modified: Thu, 24 Nov 2022 17:47:16 GMT
etag: "637fae24-2578"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
200 OK 776 kB URL User Request GET HTTP/2 www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
IP
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Size 776 kB (776084 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
content-type: text/html; charset=UTF-8
cache-control: max-age=0, must-revalidate, private
date: Sun, 24 Sep 2023 00:25:13 GMT
x-uid: 0
expires: Sun, 24 Sep 2023 00:25:13 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
200 OK 202 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint2F:C1:71:0A:05:D9:0F:38:EF:D1:16:F7:50:AF:41:48:6B:F9:BA:B5
ValidityMon, 04 Sep 2023 08:23:30 GMT - Mon, 27 Nov 2023 08:23:29 GMT
File type ASCII text, with very long lines (3006)
Size 202 kB (201581 bytes)
Hash 55899c9e6d80b44a03bdd495ac03e783
629910d847078c08ed0f3bdc2690b3e78aa26403
8575afd2f549859d159326f2c54ecae5d882a8362aadf61991f5427ff126c8f0
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Sun, 24 Sep 2023 00:25:16 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
cache-control: private, max-age=1800
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-w90hloyN3b__3cIM_ShbcQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.playground.ru/css/comments_new.css?9832
200 OK 15 kB URL GET HTTP/2 www.playground.ru/css/comments_new.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type ASCII text, with very long lines (359)
Hash a641113e86d4ca5e6d08501cd6850472
7f7159b248ce8b8d67f499b8f4cb04100340ec75
0247d2d9c07f5fc40bab0411b229576b98015842592d535ba80c8e8b3b9cee56
GET /css/comments_new.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 20:36:42 GMT
etag: W/"6508b4da-38f1"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/build/comments/main.79e1e5d8.js
200 OK 63 kB URL GET HTTP/2 www.playground.ru/build/comments/main.79e1e5d8.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /build/comments/main.79e1e5d8.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
last-modified: Tue, 15 Aug 2023 08:02:55 GMT
etag: W/"64db312f-f7a2"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/873447/80c779507b1c5a24ddcb.js
200 OK 60 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/80c779507b1c5a24ddcb.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (60189)
Hash 04a05fa503f98145726d1cf2e97d424d
df97e5ee6974b07d74d6a026cd67138af9eea6dd
b99c78348e91278aeb02e3e1b50c91a2f42e0623136c2a27feab855170eefed8
GET /partner-code-bundles/873447/80c779507b1c5a24ddcb.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 14824
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "23a15468fa4463de4dbf3246d099dc45"
expires: Tue, 23 Sep 2053 07:00:25 GMT
last-modified: Thu, 21 Sep 2023 16:29:18 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
static.vkplay.live/js/app-8da0adb.js?v=
200 OK 2.5 MB URL GET HTTP/1.1 static.vkplay.live/js/app-8da0adb.js?v=
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Size 2.5 MB (2503255 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/app-8da0adb.js?v= HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: application/javascript
Content-Length: 437069
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-6ab4d"
Content-Encoding: gzip
Expires: Sun, 08 Oct 2023 00:25:19 GMT
Cache-Control: max-age=1209600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
event2.playground.ru:3102/.well-known/mercure?topic=https://event2.playground.ru:3102/activity/2229
0 B URL GET event2.playground.ru:3102/.well-known/mercure?topic=https://event2.playground.ru:3102/activity/2229
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectevent.playground.ru
Fingerprint4B:A7:0C:42:FA:F2:89:C7:AE:FE:79:B7:46:3A:EE:F7:37:0C:7C:FF
ValiditySat, 12 Aug 2023 04:34:39 GMT - Fri, 10 Nov 2023 04:34:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.well-known/mercure?topic=https://event2.playground.ru:3102/activity/2229 HTTP/1.1
Host: event2.playground.ru:3102
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/event-stream
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Sun, 24 Sep 2023 00:25:15 GMT
Content-Type: text/event-stream
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Expire: 0
Pragma: no-cache
Content-Security-Policy: default-src 'self'
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Access-Control-Allow-Origin: https://www.playground.ru
pubsub.vkplay.live/connection/websocket
101 Switching Protocols 0 B URL GET HTTP/1.1 pubsub.vkplay.live/connection/websocket
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /connection/websocket HTTP/1.1
Host: pubsub.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://vkplay.live
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qT/9oN3l7QBJExiq4QvHJA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: mr1lad=650f81f0e9c2d33-100-100-; VID=3V5o3O2plJIK00000v1oT42K:::0-0-0-a29dab0:CAASEGjWYShjwgB4GhUFyffcYjwaYJ9I7PNTGDJSBnj0IvGhJYKv-FFTjsskZpZ39mo7Da6R9s7yMYBWUts_1to6RBpVgKCxJq0uBmvr16D2jRVi3AeDidhe31c0sA_om87Jxno011XsTP8TkrAwSJFpNQjUOg
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sun, 24 Sep 2023 00:25:22 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kzplQ+2mh0C0T05JxR2JmsnRcqc=
Referrer-Policy: no-referrer-when-downgrade
www.playground.ru/css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL GET HTTP/2 www.playground.ru/css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /css/font/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/css/main.css?9832
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/octet-stream
content-length: 15660
last-modified: Thu, 24 Nov 2022 17:47:16 GMT
etag: "637fae24-3d2c"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with no line terminators
Hash 8eed6633a8068b9a6e6ef578a1d0fe9e
6592e87cf689c54970072ef51fff5171b1ccae0e
40c5169b0cd134e74f47c6a2934ee31d80a3f76c8048de41beea17fb5798b6c8
GET /recaptcha/api2/webworker.js?hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc6EY8UAAAAAEZ3D_4Qky1yKOA1YO4p0BF_RWlD&co=aHR0cHM6Ly93d3cucGxheWdyb3VuZC5ydTo0NDM.&hl=ru&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=d73whu2zyc3m
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Sun, 24 Sep 2023 00:25:18 GMT
date: Sun, 24 Sep 2023 00:25:18 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.playground.ru/css/main.css?9832
200 OK 158 kB URL GET HTTP/2 www.playground.ru/css/main.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Size 158 kB (157964 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/main.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Fri, 22 Sep 2023 12:13:41 GMT
etag: W/"650d84f5-2690c"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
yastatic.net/vh-player/loader.js
200 OK 11 kB URL GET HTTP/2 yastatic.net/vh-player/loader.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (10937), with no line terminators
Hash e6b1716cccd15cdfd68b4639af3fcbbb
4ac610acb0a298428abce31ed5595b95129aa55e
e5ff60ea45281bc7ef528dd0a445f77ec28a79b85e158c5d3697d30ccda8b57a
GET /vh-player/loader.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:16 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
etag: W/"e6b1716cccd15cdfd68b4639af3fcbbb"
expires: Sun, 24 Sep 2023 01:22:43 GMT
last-modified: Wed, 14 Jul 2021 13:04:25 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-version-id: null
x-nginx-request-id: 80e44f027708d329
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/873447/bc06fe7cee357a245a87.js
200 OK 648 kB URL GET HTTP/2 yastatic.net/partner-code-bundles/873447/bc06fe7cee357a245a87.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (65497)
Size 648 kB (648475 bytes)
Hash df879ad40056a9d74ffcbfac45e84bf0
ab03c1335aeaf3608d0cd95cd78e4dac234aa582
a7093b027910f0b4bde4708a67ab9af92b76fa3aab1b982d03f78ec99aca000f
GET /partner-code-bundles/873447/bc06fe7cee357a245a87.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 123351
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "c231200f4c374a09052161ef9289a0eb"
expires: Tue, 23 Sep 2053 07:00:25 GMT
last-modified: Thu, 21 Sep 2023 16:29:18 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yandex.ru/ads/system/context.js
200 OK 317 kB URL GET HTTP/2 yandex.ru/ads/system/context.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.xn--d1acpjx3f.xn--p1ai
FingerprintE4:BA:B2:7F:BF:93:B8:22:10:26:70:37:9C:03:1A:9D:FB:23:17:24
ValidityWed, 21 Jun 2023 13:42:48 GMT - Tue, 19 Dec 2023 20:59:59 GMT
File type ASCII text, with very long lines (65492)
Size 317 kB (317153 bytes)
Hash 65b08f83271f85f84b03bea0b51ea90a
e36196ee7e38f53361917d5a68fc8892ebf6aad3
eaaadfdeac5319df41b1975c767349921248322553c595f3dc27192d882e9999
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=FpY/rFZghrNNAzqxXy5pcBEY+jdS+XjhZD3pSLf9pKXDgfLnYryFgYc4zEd1ZYh24lT+807+JhyVXMsuReK3VBxYQ8E=; Expires=Tue, 23-Sep-2025 00:25:16 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1489109151695515116; Expires=Tue, 23-Sep-2025 00:25:16 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
expires: Sun, 24 Sep 2023 01:25:16 GMT
x-yandex-req-id: 1695515116591770-17834319999048910915-balancer-l7leveler-kubr-yp-vla-91-BAL-2535
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
www.playground.ru/css/plugins-styles.css?9832
200 OK 61 kB URL GET HTTP/2 www.playground.ru/css/plugins-styles.css?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type ASCII text, with very long lines (52592)
Hash 9c8650951a78ee197f83932c6e57337a
b3a83792a761b571f7f125ce152f8feefd0fde7d
9f30d19ca18dd5dffce15fbbd0744cd7af7125df289960cf17c590a2216b4815
GET /css/plugins-styles.css?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: text/css
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: W/"5e209521-ed5c"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/api/tzr.get_float_teasers?game_id=2229
200 OK 525 B URL GET HTTP/2 www.playground.ru/api/tzr.get_float_teasers?game_id=2229
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type ASCII text, with very long lines (604), with no line terminators
Hash b57a69eb1f530641c3974a03d6c5bcaa
63501839621dc2599b49ac46ede50450e435a946
f4221f049e561a7d1a9f48a315dd25ccd9ee16ce0d3a9a8bb2ed7ac2f9a77a78
GET /api/tzr.get_float_teasers?game_id=2229 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
DNT: 1
Connection: keep-alive
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs; _ga_GB82WN5FWQ=GS1.1.1695515116.1.0.1695515116.60.0.0; _ga=GA1.1.310941509.1695515117
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
content-type: application/json
cache-control: max-age=0, must-revalidate, private
date: Sun, 24 Sep 2023 00:25:14 GMT
x-uid: 0
expires: Sun, 24 Sep 2023 00:25:14 GMT
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 34 kB URL GET HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGlobalSign nv-sa
Subject*.yastatic-net.ru
FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0
ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File type ASCII text, with very long lines (33703), with no line terminators
Hash 2435549eac66915d7464ee7b9efce038
e390598fb192583622a8ea079d5c96dffdb34fb5
34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 24 Sep 2023 00:25:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Tue, 23 Sep 2053 07:00:18 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
www.playground.ru/js/plugins.js?9832
200 OK 29 kB URL GET HTTP/2 www.playground.ru/js/plugins.js?9832
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/plugins.js?9832 HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Tue, 17 Nov 2020 15:39:22 GMT
etag: W/"5fb3eeaa-70c7"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/build/components/game-rating.1955aa9d.js
200 OK 1.8 kB URL GET HTTP/2 www.playground.ru/build/components/game-rating.1955aa9d.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Unicode text, UTF-8 text, with very long lines (1802), with no line terminators
Hash 2f9aea42a7aeba91853018d7275b074c
61dadcdecb213329172c5bab582946b0fe44c305
aebf9137ac5dfe6b09a642dfec38a4f74c6a9076dd541f79c5b6ae88e3c5768b
GET /build/components/game-rating.1955aa9d.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
last-modified: Fri, 26 Aug 2022 15:43:14 GMT
etag: W/"6308ea12-720"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.playground.ru/build/app.dccd81a3.js
200 OK 154 kB URL GET HTTP/2 www.playground.ru/build/app.dccd81a3.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
Size 154 kB (153638 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /build/app.dccd81a3.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:14 GMT
content-type: application/x-javascript
last-modified: Fri, 22 Sep 2023 12:40:54 GMT
etag: W/"650d8b56-25826"
expires: Sun, 01 Oct 2023 00:25:14 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
static.vkplay.live/js/vendor-f87081a.js?v=
200 OK 2.4 MB URL GET HTTP/1.1 static.vkplay.live/js/vendor-f87081a.js?v=
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerLet's Encrypt
Subjectvkplay.live
Fingerprint95:65:13:19:4A:7A:4B:B9:0D:1E:55:BB:97:25:0D:72:73:DD:6E:60
ValiditySat, 09 Sep 2023 11:01:50 GMT - Fri, 08 Dec 2023 11:01:49 GMT
Size 2.4 MB (2402775 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/vendor-f87081a.js?v= HTTP/1.1
Host: static.vkplay.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 24 Sep 2023 00:25:19 GMT
Content-Type: application/javascript
Content-Length: 718506
Last-Modified: Thu, 21 Sep 2023 17:02:00 GMT
Connection: keep-alive
ETag: "650c7708-af6aa"
Content-Encoding: gzip
Expires: Sun, 08 Oct 2023 00:25:19 GMT
Cache-Control: max-age=1209600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Credentials: true
acint.net/rmatch?dp=14&euid=1203420AEE810F658A00E69F02A1DB13&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D
302 Found 0 B URL GET HTTP/2 acint.net/rmatch?dp=14&euid=1203420AEE810F658A00E69F02A1DB13&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintB8:F0:FC:C7:37:EC:45:14:38:CF:C1:E7:EA:4C:22:2A:D1:98:EE:DB
ValiditySat, 12 Aug 2023 02:11:54 GMT - Fri, 10 Nov 2023 02:11:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rmatch?dp=14&euid=1203420AEE810F658A00E69F02A1DB13&r=https%3A%2F%2Fssp.afp.ai%2Fapi%2Fopenrtb%2Fmatch%2Fsape%3Fid%3D$%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWUPge1M9ga0hUieAsPur8NN9H9GUcAIBuNafLfc1mEh; cSyncDp14v4=1695515117
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Sun, 24 Sep 2023 00:25:18 GMT
content-type: text/html
content-length: 154
location: https://ssp.afp.ai/api/openrtb/match/sape?id=0100007FED810F65B406F64C029E4885
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=410913530
0 B URL GET vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=410913530
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=410913530 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.googletagmanager.com/gtm.js?id=GTM-NGFSGD9
200 OK 225 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NGFSGD9
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Size 225 kB (224856 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtm.js?id=GTM-NGFSGD9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 24 Sep 2023 00:25:15 GMT
expires: Sun, 24 Sep 2023 00:25:15 GMT
cache-control: private, max-age=900
last-modified: Sun, 24 Sep 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76718
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=776360250
0 B URL GET vsd197.mycdn.me/dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=776360250
IP
Requested by https://vkplay.live/app/embed/random?type=game&autoplay=true&muted=true&mt_link_id=pizlv5
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dash/stream_5434400967381/stream.manifest/sig/fgGpX1F-J1o/expires/1695601522363/srcIp/91.90.42.154/urls/45.136.21.61/clientType/36/srcAg/GECKO/mid/6755604580309/stream-low.jidx?_rnd=776360250 HTTP/1.1
Host: vsd197.mycdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vkplay.live
DNT: 1
Connection: keep-alive
Referer: https://vkplay.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.playground.ru/build/9.641950a1.js
200 OK 2.0 kB URL GET HTTP/2 www.playground.ru/build/9.641950a1.js
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerLet's Encrypt
Subjectwww.playground.ru
Fingerprint87:E2:7B:C2:EF:33:2D:3C:73:22:8A:86:D2:35:44:E3:4D:27:5E:D8
ValiditySun, 10 Sep 2023 04:35:10 GMT - Sat, 09 Dec 2023 04:35:09 GMT
File type Unicode text, UTF-8 text, with very long lines (2101), with no line terminators
Hash 0f4ebc121c3db858ede3c431b6f21b12
5a073a1acc842b97acb1ba08f93928e16f8236cd
4b06cdba0410cca4626316c5f6adabd6922b0388f3b3b5a1a9392b0ed329a8a6
GET /build/9.641950a1.js HTTP/1.1
Host: www.playground.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Cookie: pg_device=K4qaOlAyG2ahJW32ve532X6LTHLiRms5DbBvGXwtnp4; pg_session=ivfll5g0h08av0ohoiep70d7f1th5ibs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 24 Sep 2023 00:25:15 GMT
content-type: application/x-javascript
last-modified: Tue, 19 Sep 2023 20:05:09 GMT
etag: W/"6509fef5-7f8"
expires: Sun, 01 Oct 2023 00:25:15 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/gsi/style
200 OK 530 B URL GET HTTP/3 accounts.google.com/gsi/style
IP
Requested by https://www.playground.ru/baldurs_gate_3/cheat/baldurs_gate_3_trejner_21_4_1_1_upd_18_08_2023_fling-1150012
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (530), with no line terminators
Hash 6ce3c682ce6b9e0b88670395a63345c8
8cbfc0856a52320e3567792dfe2487748ac07458
524f1ea2ac242c6fae3c1cc52c7ae7d05a8a7db466fe3c7b46e8efcfc2d95e53
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
expires: Sun, 24 Sep 2023 00:25:16 GMT
date: Sun, 24 Sep 2023 00:25:16 GMT
cache-control: private, max-age=86400
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-Dfs_84Ipa7oiydrGs_48Tw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
212.42.38.245
142.132.138.213
142.250.74.35
0.0.0.0
0.0.0.0