freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
302 Moved Temporarily 154 B URL HTTP/1.1 freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
Analyzer Verdict Alert fortinet Malware
GET /Soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 04 Nov 2022 16:59:39 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7be8442ec1e518ccc80739495f6d047
7a9d24b9d4046262c7753c49afaf9c19f4840626
b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7065
Expires: Fri, 04 Nov 2022 18:57:24 GMT
Date: Fri, 04 Nov 2022 16:59:39 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5593
Cache-Control: max-age=151479
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 16:59:39 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 11:04:18 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3604
Expires: Fri, 04 Nov 2022 17:59:43 GMT
Date: Fri, 04 Nov 2022 16:59:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2NI8Fm9eVwWNi/6FLQZPNjXWEnybbIQFtoENOishvDWCnGWhZo7UDt0UdZh8jR3fmDaH3eAtcjA=
x-amz-request-id: NGQSZK6CA8FE8YSF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 04 Nov 2022 16:46:51 GMT
age: 768
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 16:59:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
404 Not Found 417 B URL HTTP/2 freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
Analyzer Verdict Alert fortinet Malware
GET /Soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Fri, 04 Nov 2022 16:59:39 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 936ef98ee95d8d45da84cc27d30ebd14
0aef6d9f231d370dd05d24d06f4632e36b2d3959
5373c67fb14e29a5550e42727aa2c33bf9e78277cbb1d4a3890e00ce74cf6efc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5373C67FB14E29A5550E42727AA2C33BF9E78277CBB1D4A3890E00CE74CF6EFC"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2007
Expires: Fri, 04 Nov 2022 17:33:07 GMT
Date: Fri, 04 Nov 2022 16:59:40 GMT
Connection: keep-alive
parking-static.jino.ru/static/components/page/icons/page_404.svg
200 OK 499 B URL HTTP/2 parking-static.jino.ru/static/components/page/icons/page_404.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (499), with no line terminators
Hash 7efb6e8eda87a19d2028aa758f88ff10
81d7902d5881f729691b344c2c9044029a495181
81e371f6addeef07303702e4a876628776991a5906914b81e797319b224eab92
GET /static/components/page/icons/page_404.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 16:59:40 GMT
content-type: image/svg+xml
content-length: 499
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-1f3"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 42a0adacced30df52cf7cad3e200036d
f7b4114defc61f806dbb74fd228bca155d52362a
e4928481739a2a75dce86c03b355c6dff507426e8d851cba5ca8537b1be87c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5207
Cache-Control: max-age=146034
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 16:59:40 GMT
Etag: "6364c817-1d7"
Expires: Sun, 06 Nov 2022 09:33:34 GMT
Last-Modified: Fri, 04 Nov 2022 08:06:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 344aeec38312486b2dc31e17bc01649e
e31a56ef12007bff5c76fb0a4a5bc2a07f76f484
2b6a8634a5dc2cb7015c71caec454d02c4ce818ae7b3a2decc918ec40d2e6596
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B6A8634A5DC2CB7015C71CAEC454D02C4CE818AE7B3A2DECC918EC40D2E6596"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13779
Expires: Fri, 04 Nov 2022 20:49:19 GMT
Date: Fri, 04 Nov 2022 16:59:40 GMT
Connection: keep-alive
freesoftrus.ru/favicon.ico
404 Not Found 417 B URL HTTP/2 freesoftrus.ru/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
GET /favicon.ico HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Fri, 04 Nov 2022 16:59:40 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5bfe5400701f8c2f3e28a39c3d41dc0d
1251dbc1aeb54cddafb64843c0317c94101d30ae
244d8e5167f51da91106da6af1acab15dfd3c577104cde1ae817b53959f7eaf7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 16:59:40 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 08 Nov 2022 12:42:35 GMT
ETag: "1251dbc1aeb54cddafb64843c0317c94101d30ae"
Last-Modified: Fri, 04 Nov 2022 12:42:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3066
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 764ee6cbaa7f1c0a-OSL
jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
200 OK 62 kB URL HTTP/2 jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61600, version 2.328\012- data
Hash 5d12c58fffdb5ac7fd41f05ee0180a8e
b147b184608a46e13bd50c9f7b2e9bede4eba085
84baa1b0c5914a65ef3b6049d5d06cd64c44eb35151e6558940d505b9c5ad8af
GET /static/lib/fonts/ptsans-sub/ptsans-regular.woff2 HTTP/1.1
Host: jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: application/octet-stream
date: Fri, 04 Nov 2022 16:59:40 GMT
etag: "6353aac8-f0a0"
expires: Sat, 04 Nov 2023 16:59:40 GMT
last-modified: Sat, 22 Oct 2022 08:33:12 GMT
server: nginx/1.10.3
content-length: 61600
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 7b111c54e4ca74c6afb01dccb16a6011
4348abbb3e927a3d20291a71a5e019bbd93923a3
3ad93d272b1bd1296c76105a47276b028046efb94daf54f6b9bef537626a381c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57770
date: Fri, 04 Nov 2022 16:59:40 GMT
access-control-allow-origin: *
etag: "63575841-e1aa"
expires: Fri, 04 Nov 2022 17:59:40 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d03912d23238a54a63e1fbf9b9815682
cbcc5cf72ac0d2e16b3fe20556fc0cd728674025
7dbeb8c1203b85072514939d00ce4e3b66178cf23ac45da17f3ca16d4bb7fcea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 16:59:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 02 Nov 2022 21:40:41 GMT
Expires: Wed, 09 Nov 2022 21:40:40 GMT
Etag: "cbcc5cf72ac0d2e16b3fe20556fc0cd728674025"
Cache-Control: max-age=448259,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 764ee6cc7cdd0b65-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jxrHyfDfsLctAQ4Kxa1FJA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NKJgNJWG7qT7eT4kHTrhyv6RPoM=
cache.betweendigital.com/code/1x1.gif
200 OK 43 B URL HTTP/2 cache.betweendigital.com/code/1x1.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /code/1x1.gif HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 16:59:41 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 08 Oct 2019 15:27:01 GMT
etag: "5d9caac5-2b"
x-cdn-edge-cache: HIT
x-cdn-edge-id: 210
x-cdn-request-id: 16eb5402a9c7ee6e9f410f45a8362f26
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 04 Nov 2022 16:59:41 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Fri, 04 Nov 2022 17:59:41 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1010%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165939%3Aet%3A1667581180%3Ac%3A1%3Arn%3A212865082%3Arqn%3A1%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C104%2C49%2C0%2C355%2C0%2C%2C526%2C3%2C%2C%2C%2C1044%3Ans%3A1667581178366%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581180%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1010%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165939%3Aet%3A1667581180%3Ac%3A1%3Arn%3A212865082%3Arqn%3A1%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C104%2C49%2C0%2C355%2C0%2C%2C526%2C3%2C%2C%2C%2C1044%3Ans%3A1667581178366%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581180%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash b8145d4f0aab7413adcc036e41032814
b78c6f16db7eb840a4f9b2588b0d7f8d125a3e32
caa611281ff0e07845eddad0a5a7b64c358ab0bf27d34d07eafc797ebc661afa
GET /watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1010%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165939%3Aet%3A1667581180%3Ac%3A1%3Arn%3A212865082%3Arqn%3A1%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C104%2C49%2C0%2C355%2C0%2C%2C526%2C3%2C%2C%2C%2C1044%3Ans%3A1667581178366%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581180%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1010%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165939%3Aet%3A1667581180%3Ac%3A1%3Arn%3A212865082%3Arqn%3A1%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C104%2C49%2C0%2C355%2C0%2C%2C526%2C3%2C%2C%2C%2C1044%3Ans%3A1667581178366%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581180%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 04 Nov 2022 16:59:41 GMT
access-control-allow-origin: https://freesoftrus.ru
set-cookie: yandexuid=98460781667581181; Expires=Sat, 04-Nov-2023 16:59:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=98460781667581181; Expires=Sat, 04-Nov-2023 16:59:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=124593641667581181; Path=/; SameSite=None; Secure
i=xZGPd9taSFQuKkeiOc2mlnTYd0/K3C42KLlB6yUpOMzikuFhuuIqOzx5JjtuRWaouwxZUqIMAg1guaFoxF15G/JVUQ0=; Expires=Mon, 01-Nov-2032 16:59:40 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1699117181.yrts.1667581181#1699117181.yrtsi.1667581181; Expires=Sat, 04-Nov-2023 16:59:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 04-Nov-2022 16:59:41 GMT
last-modified: Fri, 04-Nov-2022 16:59:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 5571c3d3c06695037f2e8f981535f53d
cf890155564e5bcee0c47b59d15fe8fe151b3530
a13f4084031a5c183adf8952c636fe613f22162a2aa41e617e86a80ca248845e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4852
Cache-Control: max-age=91670
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 16:59:41 GMT
Etag: "6363f51f-117"
Expires: Sat, 05 Nov 2022 18:27:31 GMT
Last-Modified: Thu, 03 Nov 2022 17:06:39 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
200 OK 1.6 kB URL HTTP/2 pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP
File type ASCII text, with very long lines (3553)
Hash 2cf0e76f8c42b71535783c61d51156df
94ce2042927b2aa2f472672adadc7e5ffab3e78e
da941f235eeb36d3165129dfc2a25271aca37f763ebc568cb9586cf2704f1689
GET /fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 04 Nov 2022 16:59:41 GMT
content-type: application/javascript
content-length: 1597
last-modified: Wed, 12 Oct 2022 22:47:42 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 3029
expires: Fri, 04 Nov 2022 18:59:41 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 764ee6ceaaacb503-OSL
X-Firefox-Spdy: h2
pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
301 Moved Permanently 26 B URL HTTP/2 pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 04 Nov 2022 16:59:41 GMT
location: https://pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
cache-control: max-age=3600
expires: Fri, 04 Nov 2022 17:59:41 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 764ee6ce9a93b503-OSL
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581181_0f08e0688cb12b81c8b71bc84239069b8e94d4d34571ce1ea737c0c6bbfa83de&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165940%3Aet%3A1667581180%3Ac%3A1%3Arn%3A277251129%3Arqn%3A2%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581178366%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581180&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581181_0f08e0688cb12b81c8b71bc84239069b8e94d4d34571ce1ea737c0c6bbfa83de&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165940%3Aet%3A1667581180%3Ac%3A1%3Arn%3A277251129%3Arqn%3A2%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581178366%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581180&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581181_0f08e0688cb12b81c8b71bc84239069b8e94d4d34571ce1ea737c0c6bbfa83de&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1072822600833%3Ahid%3A676057471%3Az%3A0%3Ai%3A20221104165940%3Aet%3A1667581180%3Ac%3A1%3Arn%3A277251129%3Arqn%3A2%3Au%3A1667581180581734637%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581178366%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581180&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 48
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 04 Nov 2022 16:59:41 GMT
access-control-allow-origin: https://freesoftrus.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 04-Nov-2022 16:59:41 GMT
last-modified: Fri, 04-Nov-2022 16:59:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 1ce0c23384080b6baea075ec56707f64
5a74c7bb7be9e14376144f93327947f47a8dc4df
0d963c5ec2068f9aaaa1010097e3970997d91b0fdd7e4c109d83bcc6ef7eebc7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 16:59:41 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 08 Nov 2022 15:09:30 GMT
ETag: "5a74c7bb7be9e14376144f93327947f47a8dc4df"
Last-Modified: Fri, 04 Nov 2022 15:09:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 727
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 764ee6cf3d2f1c0a-OSL
www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036
302 Found 0 B URL HTTP/2 www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: ms-counter-3.3.5/1.20.2
date: Fri, 04 Nov 2022 16:59:41 GMT
content-type: image/gif
content-length: 0
location: https://www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036
set-cookie: guid=D1591739636544FDX1667581181; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
strict-transport-security: max-age=2678400
X-Firefox-Spdy: h2
www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036
200 OK 43 B URL HTTP/2 www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/99947036 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ms-counter-3.3.5/1.20.2
date: Fri, 04 Nov 2022 16:59:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9966
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 16:59:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9966
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 16:59:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9965
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 16:59:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9965
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 16:59:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca6c7517d7015fbc35fa290c1c2d6afd
594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c
a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: f2e39db1-fb8a-4a9b-8a1d-ee08000ddeb6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC1VyFHuIAMF5Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636435be-7a03ef677f8dbd680f72de90;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:42:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: I6mALhsUwtQqMP_p_HxFaiCyfRDTtVzPIJjeDrKSEq7Tc_d5EcNw3Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:53:00 GMT
age: 68802
etag: "594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae1ac87f2e6534322ba259d6e06fcaa5
c721a00ae618e6ed997e102fa3d977ef830cac05
2f4cab8b925f6a79ed96b08edc00f04186d33ed9cfd4ba565884a931e83ae408
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7601
x-amzn-requestid: bec1a71e-c5bd-4332-ac60-18b49304a5a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a275aEHYoAMFwlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635f736f-1b36c60a43415790430fbecf;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 07:04:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qU7wyWD8EdHphWbT-IrDcYYXxqUgabGPLXE5_CRJ1rwnbQMC93r4dw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 04:09:51 GMT
age: 46191
etag: "c721a00ae618e6ed997e102fa3d977ef830cac05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cache.betweendigital.com/code/async_rtb.js
200 OK 97 kB URL HTTP/2 cache.betweendigital.com/code/async_rtb.js
IP
Hash c7a09cc0ef7da924067d7e5a2dc95d5b
8ee4341271cb773a154bb59fb5d4166460609751
8fcb7080ec051f5ca36a9bb8318f968df1143b8bdd1ff1609174979e8792e224
GET /code/async_rtb.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 16:59:41 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 20:57:41 GMT
etag: W/"63375845-4cea3"
cache-control: public, max-age=7200, immutable
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 210
x-cdn-request-id: c285b3748962ee29470d3478871d5ae1
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5aedde5b1d003651d773c89833460868
29ca25963b777fd7463c65d8cde6d65172c996e1
04b95b954d7d992e6547d05d052c6f3f8a4cfb4a5988f9e6c6629969053bf7b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11188
x-amzn-requestid: 72e0a128-e0c4-4a93-8e29-01a574b2d1c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC0XNHPcoAMFkNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364342d-341a40d37b7bcc9153749d67;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eo3FBGjoivBN1-4xP1UiTocKbLd87acRtOX2AQrPr1a4yDboDrXYRA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:53:19 GMT
age: 68783
etag: "29ca25963b777fd7463c65d8cde6d65172c996e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a763d44e05fa357713a41ab1388974a
d4d2ee1aa9beb5bbd19aaaf590c8a0832fb180cd
f351b7e90e5435af071892b62af3ac591bc553281b3ea63b1ae067a3d03f572d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7703
x-amzn-requestid: 4f835957-6df6-4001-9c34-ed9749000b46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC0RpFGwoAMF0-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364340a-3f7b7dd36cb07d057b64ec2f;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5_POzz6quaFlv3R4djTMvwuiLWqmvHLCrZ58DtyQPJG8yWQoxV0LjQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:53:11 GMT
etag: "d4d2ee1aa9beb5bbd19aaaf590c8a0832fb180cd"
content-type: image/jpeg
age: 68791
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c472942cb4b85610a3e83edf7527f923
8191eb019b21bed2b9f53c755e1c24d08dc70760
0dc7f9902567b0130c1c34b6e356b8239f8e6c83e1d38ac9b74588270000279c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10810
x-amzn-requestid: 85c9096f-2671-4f0e-94a3-607254d036d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC057E5yIAMFcXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364350c-3c93b6e56e6141a63d1285eb;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:39:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Rr6GO1Bb6pdxYxNFuwmG2Srs9uGM7tOTffgnyWys0zDjGCDrONRxUA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:53:00 GMT
etag: "8191eb019b21bed2b9f53c755e1c24d08dc70760"
content-type: image/jpeg
age: 68802
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash fd26af071b3ff5bc99c75632fdabd8ae
660532b794c4eb98d9ab6ca7b8fb6bcfa4ea55dc
81fd42ea092de1a9f7f317e9480a4551a0c0210eb2f8c21a7cec559bef5ce17d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 16:59:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 16:09:20 GMT
Expires: Fri, 11 Nov 2022 16:09:19 GMT
Etag: "660532b794c4eb98d9ab6ca7b8fb6bcfa4ea55dc"
Cache-Control: max-age=601176,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 764ee6d40b890b65-OSL
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
302 Found 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
tuuid=c235773a-be44-5234-bbcc-8d31d8a9c9cf; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VE_gAEiChcI64kZcUFWCjRx3qXsGmTmEb08g==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ads.betweendigital.com/js?en=anNfcnVu&context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&tld=ZnJlZXNvZnRydXMucnU=
200 OK 68 B URL HTTP/2 ads.betweendigital.com/js?en=anNfcnVu&context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&tld=ZnJlZXNvZnRydXMucnU=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /js?en=anNfcnVu&context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&tld=ZnJlZXNvZnRydXMucnU= HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
tuuid=7013ce66-fd55-5234-9779-d39bf41c9765; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VE_gAGRXgTMY6yE1TiHyp3eeuVra8V7U2Rxg==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a370a39f45ca0f8e93635801c8f920
eda5561283d9c750ef1ee54b838c5867aab86ad1
e79151ef032901281b74f54d7fe51d0b980b61c3b51c4a54cccd6e96992ddc29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E79151EF032901281B74F54D7FE51D0B980B61C3B51C4A54CCCD6E96992DDC29"
Last-Modified: Thu, 03 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3950
Expires: Fri, 04 Nov 2022 18:05:32 GMT
Date: Fri, 04 Nov 2022 16:59:42 GMT
Connection: keep-alive
parking.jino.ru/static/bnr/728x90-joomla.jpg
200 OK 18 kB URL HTTP/2 parking.jino.ru/static/bnr/728x90-joomla.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 728x90, components 3\012- data
Hash d393de258d04bcb6084bfeccb73a1dcd
f92d66055a50f20402b085f49d769c7311876e45
50924754d49e9b12150bc9ec55c4352187925ab89da508c572aa9cc28092b2ed
GET /static/bnr/728x90-joomla.jpg HTTP/1.1
Host: parking.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 16:59:42 GMT
content-type: image/jpeg
content-length: 17592
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-44b8"
accept-ranges: bytes
X-Firefox-Spdy: h2
cache.betweendigital.com/pmListener.js
200 OK 1.3 kB URL HTTP/2 cache.betweendigital.com/pmListener.js
IP
Hash c3ca1d17e7e0943313603cc2b86d99e4
d6ee0072bd563693b203bd815c7c963c07ac234b
5ba8275bae82709d320f2be45157b24ad4f551ac6efb7de062759acbd1527289
GET /pmListener.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 16:59:42 GMT
content-type: application/javascript
last-modified: Wed, 03 Feb 2021 14:20:14 GMT
etag: W/"601ab11e-caf"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 210
x-cdn-request-id: 46d79c739088e9ca3935afe264d812da
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAADi4dXlhdgACdwA0AtVTvW_TQBS3H1ZUlaigqgMDg4XAAok4d7bjj1ZWUakAIbVFVSuqLpFjnxNTY4e7a9J2ihgQbEisDMwIIQaExFD-BcLGzF_AwMjAOR9tFCE2hj6fn_1-9-7uvd97B_c8y0YNh3iVht1oVCzLcyuBYduVWs32DMuNHMsMAP9-9fZT-f2zd5-fBzOdhHQlCW62OG-zxWo1poSwPOZ0n-l0H_S_41W45GHdQ7pl6LhmwRt5LT9K0jSo1nSkXn-YZFHeZer6loqRjpZUAdjWknpQKNpZxEi43VDvknAvrxoIIzGweiehJM4PqoNZmDUtZDknn5rjmjaURTI124AP5-GjDBIoAEJLcHkqbAnmKenUWSugBAANvQopNCgYwQzCQivrGzCzwdIcFGQWjgrJYOE0fAAMc6uE7fG8DbMbvEXoYB9Y6L_sH3972v_SPx5vK0Hp9oM1GBjwA8bEBRHTG4R3CcmipJnwINXD_LGAk-WYpj7S2jnzAx5r_EgYcYHkNPKxbXuOi10HY9MyHFN3NUr9SFAUci3OQx9rtM7IE-HO08jfze6nuzvrnd1s8zDaWdsPs-1r5qrGg-bWYZv44jSt6zuGq7V8D2nMH_KoPWLcDxItpLGPBUUX4yBNG0G4J4gtaC1jw0bIkQb8Dd5RptIozblRzaAkijaYGdI8Yvssyc_lSWs6fmH3lsewPMoTrr6Wbokfa0VgMLFGLjz-9w3pKdL0KcXZPaW0ub0ynR1cybM0yUg9addbOeNJ1gQJ_lEm-de5MS9yWTTOgYdK83LvxdFo1dcLxRjK_ARp8F0ZtogsGkY-nTi9fichKeKRpUlRTmoxxv8A&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:43 GMT; Path=/; Domain=.betweendigital.com
tuuid=3adb3478-e631-5234-b49e-6a71d7fb2e8e; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:43 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VE_wAHZog5XiYGCsrnHQ_EHalewjhKIGu5mg==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:43 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
parking-static.jino.ru/static/main.js
200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/main.js
IP
GET /static/main.js HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 16:59:40 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-1b7f3"
content-encoding: gzip
X-Firefox-Spdy: h2
parking-static.jino.ru/static/components/page/logo.svg
200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/components/page/logo.svg
IP
GET /static/components/page/logo.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 16:59:40 GMT
content-type: image/svg+xml
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-a26"
content-encoding: gzip
X-Firefox-Spdy: h2
cache.betweendigital.com/sections/2/266562.js
200 OK 0 B URL HTTP/2 cache.betweendigital.com/sections/2/266562.js
IP
GET /sections/2/266562.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 16:59:40 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 08:41:04 GMT
etag: W/"5d9705a0-2176"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 210
x-cdn-request-id: 15813c19e9d36f6de1d31f191da9634e
X-Firefox-Spdy: h2
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
200 OK 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
IP
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=1669781871134273.8&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
tuuid=331ae89d-16b5-5234-8179-eb63e21caf9d; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VE_gAFgig6ER7IcBz72RU40ZhUD_EUNwP3pg==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 16:59:42 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
81.177.140.243
188.42.191.196
23.36.77.32
34.160.144.191
104.16.201.58
93.184.220.29