r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1273d41c84b2b39f78a8033130d00282
556757697b70e019ed502585fcc888e2403f3229
ee3c03cc0a659fbc43d34feaa79a8ad6627b9c525d675956cdb434c1590db89e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EE3C03CC0A659FBC43D34FEAA79A8AD6627B9C525D675956CDB434C1590DB89E"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2963
Expires: Thu, 06 Oct 2022 21:50:44 GMT
Date: Thu, 06 Oct 2022 21:01:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
54.230.111.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z8WlrwsHLsgHpc7ugmkNm1WiVQwHqPDaYBDtO9xVG8Cb9ZEhFIEtPQ==
Age: 105243
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8513
Expires: Thu, 06 Oct 2022 23:23:14 GMT
Date: Thu, 06 Oct 2022 21:01:21 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: m3NyaPtpBbp0YGC/7GDVUkIBnTDkFj0K/zRIqdvcPgTFWeAP6FF2snpAjNLN0qdnnIi+UstX9bU=
x-amz-request-id: VST1M77PKPFK7FEP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 20:30:55 GMT
age: 1826
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 21:01:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
nizhtex.ru/
172.67.156.216200 OK 11 kB IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash d466f69ea7b9bd5fef4704d11182c362
513b1feccc27de000319c2be0c31a9e12fe7e8db
0f84adea912db05ccb817369c345db6a848ce2632b6c87ad34987cf89c3d2a6f
GET / HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: shield-notbot-nonce=e5c670affb; expires=Thu, 06-Oct-2022 21:01:36 GMT; Max-Age=15; path=/
PHPSESSID=7ncgk4s07b17iv25rdik1d2coo; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Referrer-Policy: unsafe-url, no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff, nosniff
Link: <http://nizhtex.ru/wp-json/>; rel="https://api.w.org/", <http://nizhtex.ru/wp-json/wp/v2/pages/5>; rel="alternate"; type="application/json", <http://nizhtex.ru/>; rel=shortlink
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=69XMj80m6mENrB2%2FUkxXRt6OaEygpVpH0QqpP2EM1QPNWQkK7ho%2Fl4Lr2n0hr5wLwRI9Gz3fOYvCbjJXoZ4Ncdontosp%2FSustVqnzGtpMgF31zup%2F2XYIfGTnAlC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 756154ef6951b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 20:29:41 GMT
Expires: Thu, 06 Oct 2022 20:54:53 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0AV6pkbUTZUOD_MpXn5UCD7oaFDlZNC2jbtQ6X1uQVt9_6v6XW9wsg==
Age: 1900
nizhtex.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
172.67.156.216200 OK 12 kB URL HTTP/1.1 nizhtex.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 172.67.156.216:0
File type ASCII text, with very long lines (43771)
Hash f25c24f7b375ea5a62984d4143bb47b1
55923e21a160361a89cdd5b145b3366eeccfe1f5
c04f1a8379fd2b5435e1a9bbe5a4074901126aafad7b1a8cb6eb6b3c1dc383da
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 13 Jul 2022 03:58:24 GMT
ETag: W/"62ce42e0-15b64"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8mLPhQe4u6XqZfN3JQHg3MqYyrKJndsQLIMEHOiD3vp5jlYFlbHGqtyiPRNv81SjaUplxBO85KPRYcemcZmRH%2FAfDzva8Nxk5M5I64If7BzsjX5UQkP7SDvhQ42u"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f3efc7b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
172.67.156.216200 OK 5.0 kB URL HTTP/1.1 nizhtex.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 172.67.156.216:0
File type ASCII text, with very long lines (15660)
Hash bbb097231c0fb01c0d2f6b36ed6671f8
c816b9446535131259db1107069b5096354f993b
aca781b166c02a50a9de1f82c51f0ebbd808b59e58e6dfe5f29ae84c881926c5
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 25 May 2022 03:57:26 GMT
ETag: W/"628da926-48b9"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wwOBRgnz9HkXOejPoWHTb720zvbvGdHCmSYhE%2BtF%2FeLfjzmeV8UbK5r9xGhxCsuV72TXbclHsTKM8DCvkVLmspRUFQSsfoIHkUsR1fzxeDn6yh%2Bv6qbsQ0VnA%2FDQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f41cc2b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 18e0e019cd697bb16806d8f00408a319
60ceb13c31595e6cf9bb6800657e4593a1fbd670
7cb0778c80be637b67a5d198ca180a76bbfa4c32e502a0fa472a4c6946ffb56e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nizhtex.ru/wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js?ver=16.1.9&mtime=1664380935
172.67.156.216200 OK 1.4 kB URL HTTP/1.1 nizhtex.ru/wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js?ver=16.1.9&mtime=1664380935
IP 172.67.156.216:0
File type ASCII text, with CRLF line terminators
Hash e2fcd8cf412efcb35f21c89743c3a8d7
01b2ce561c901f3ed87b39b02b334143473238c3
6210839d0dfd692e8fa5ce74b7696ef4b0e02a4222705fd1273d63107bfc2d63
GET /wp-content/plugins/wp-simple-firewall/resources/js/shield/notbot.js?ver=16.1.9&mtime=1664380935 HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 16:02:15 GMT
ETag: W/"63347007-ebf"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGC4m%2BYaGY9DEqQOj1Jp09ch1cRopo0vxYH8egckE7wHoV%2F%2BZu6xByKfnbojYr1ybkDTDI1T1ttHpjTFwqKNxarowKwpSwwiAKq7vZIlgaTRbImgyTu3Li95DyL3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f44a08b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/js/hashchange.js
172.67.156.216200 OK 2.0 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/js/hashchange.js
IP 172.67.156.216:0
File type ASCII text, with very long lines (3315)
Hash b068f9697032ecf3c02a80331c385a9b
46fe9ebe5a7d5286f3cbe31a88ea2a1c86f11514
9b4ee02e0e1a50cd2574f8fd792b53f950486df2594ed3e901f1aa7e6baafcb0
GET /wp-content/themes/carnizsmwptheme/js/hashchange.js HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: W/"546cbf02-cf4"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7N9lOWnymE4DaHHUsJeDW8jnEYn%2BKheygvd9phQBATxjQVjnK1iR4hTUjAH1Ui7%2BN5g3s8FX9uYIoi%2BqZMNtduTe7CkD3kXM0ubER8fnHeIzqysq%2BSm%2BEhOBJ5Et"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f44a520b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/js/dpagination.js
172.67.156.216200 OK 820 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/js/dpagination.js
IP 172.67.156.216:0
File type ASCII text, with very long lines (1324)
Hash bbf253b460bce619a7f7ac2db7afb3da
a8b4b72b47afd6c5fa4ce953f00cbd6ea221cb56
bd113c60737d4426c00c673d5d88eb51ad7aae71f906a1c5f5a8d02110ee7aa5
GET /wp-content/themes/carnizsmwptheme/js/dpagination.js HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: W/"546cbf02-52d"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tCEVnuUyxew6ks0vwXThwdrNJrW33kos5SO2JSru0jrvbO%2BF0A66c7Ambtvxqfy3J0q9y0lQ7Z7pCBIsi36IUaxC4MrkA8wW4declzcp%2BEEoMMMt%2BgTPtfXxcQPV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f44e450b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
172.67.156.216200 OK 3.3 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
IP 172.67.156.216:0
File type Unicode text, UTF-8 text, with very long lines (335)
Hash 87301f9ff7d78f839c6fdf84b4faa475
9d442f1a561ef5e8cbfbdf973c36f15b557f4a1e
012f093519504073e76762c4b2fe1faf1be54ef147c57213faf66415b67c1466
GET /wp-content/themes/carnizsmwptheme/css/index.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-3668"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UxQeW%2BhU1DM8ZB8VNMDVJVRowZaYg6INmLZ4%2BaAFpalRgE%2FU1AiBfA%2BMIN0ZoejclaIBmuA%2BjJKMRrcMlrUeWsIC4WoRNy8A5v17W6fioCSkKnq4G%2BjcvvNDKIoQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f44e460b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/wide.css
172.67.156.216200 OK 886 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/wide.css
IP 172.67.156.216:0
File type ASCII text, with very long lines (433), with CR line terminators
Hash f79d898602e943470f88b06662452ace
6af7047107beab84931425d2c2636af011b3e5cd
abfc7eda84d154e131aaf7cd099d8b6f344fde6f01c427630e7e9b843d8234e4
GET /wp-content/themes/carnizsmwptheme/css/wide.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-9b4"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHM3A3oENjxt5IrZ0nUn74jN%2F%2Bw5XiDpGyZe6lP6rj316yooain6FAARoZ83I7yOWyWRIwzRIwRo6xYDE1NMzd1OXJ4Bo6v1XeEDiTK9fxY7OVOIywshm43GgYAh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f46873b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/shortcode.css
172.67.156.216200 OK 1.9 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/shortcode.css
IP 172.67.156.216:0
Hash 0c4bd6e50f1fc3b04b88b05728b627f6
e87fdfbacbbb5a88a109b6c328701f8075a37a0a
284b337d9989193353207add11fd8a127bec28c53f316c2eaa2990b0d8389fb7
GET /wp-content/themes/carnizsmwptheme/css/shortcode.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-3213"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pWA1DIJG2UTkNWB%2B4kvMxSqonGfNAWi1n6VmwREJ6Mhn1s%2FQL3gjrCsHYsUHzR6lo28QKXTQjdlUkoq45QjZVJ9C2Q3M6f6qdu%2BxmOKv2BkAUnpSTnDRMekGsvya"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f4ba85b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js?ver=6.0.2
142.250.74.10200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js?ver=6.0.2
IP 142.250.74.10:0
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js?ver=6.0.2 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 22:42:51 GMT
expires: Wed, 04 Oct 2023 22:42:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 166711
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
172.67.156.216200 OK 2.8 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
IP 172.67.156.216:0
Hash 25485129c1cf796ce27587080f9119cf
1ef5855e56bee746134bfabbad8d158ea30c6b01
3a7f9523ec38463ea27176a56b093ee782cb2edf205b113c16ae0e07066351ca
GET /wp-content/themes/carnizsmwptheme/style.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: W/"546cbf02-2a0d"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tiEpTqXY2AYmUS8ekYi8k6MtzdnmQxs1HjB4YQtWHjKQnQZgvNebsBooBd2I8Yy%2Bjb2KaB%2B%2Bjh7oYpKc0vzHOeb0o0fzcssfhQqgtR%2B1Ww4L3cObTNo1x9krWF82"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f49d70b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
maps.google.com/maps/api/js?sensor=false&ver=3
216.58.211.14200 OK 54 kB URL HTTP/2 maps.google.com/maps/api/js?sensor=false&ver=3
IP 216.58.211.14:0
File type ASCII text, with very long lines (2518)
Hash 0c735855cadf49a48854021456b482b7
40fe61e040390f787ace2f70b4ef35aea4eea37b
cce7abd382735beb68da68e6b17c18bfdb09e85794c27fa2b92ffa72a79cfcb5
GET /maps/api/js?sensor=false&ver=3 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 06 Oct 2022 21:01:22 GMT
expires: Thu, 06 Oct 2022 21:31:22 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53719
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=12
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nizhtex.ru/wp-content/themes/carnizsmwptheme/js/superfish.js?ver=3.3.1
172.67.156.216200 OK 1.5 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/js/superfish.js?ver=3.3.1
IP 172.67.156.216:0
Hash 25aa569c7f711ada9d6e2d53888787d5
efeed42559ac63fb8c838ca00aaf15b119326cf8
6cbf802b3cf18423a6fcf3fe7db891d5be3118ad79f975e33b16b932c8ac093d
GET /wp-content/themes/carnizsmwptheme/js/superfish.js?ver=3.3.1 HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: W/"546cbf02-e82"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OhPEe3RJfScK5eAYiMkX94hmmVVCmOEJF3bsg6AywR5EiZC5wTGCc6aYiJ1KhQ47gBwSRTXCP1Ek3Qj3zp3m%2FDu9aCRgDEZh5c%2F8oB9IwVslPrUMOjvR0xNG6Tr3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f4bad00b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/js/jquery.cycle.all.js
172.67.156.216200 OK 14 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/js/jquery.cycle.all.js
IP 172.67.156.216:0
Hash 1704b18c0ea82dbbaf26195b3271832d
41a4fc794838e081082176308c2868813c02b8c0
62bac21a8588080b00568e6ae9f0a90920534d6335b5ff9ccec5a1f3781a09dc
GET /wp-content/themes/carnizsmwptheme/js/jquery.cycle.all.js HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: W/"546cbf02-c92a"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2m%2Bpwb8AhgFQa5Xj%2F9fKiUs7dautqf06SfH6JBGYG9oLGSB6O7J9xCDGNcSTpJEg%2FOZyZPR6KBocTFEftj2G56nGRGqtGGEMtAuzzpLxNNaoKxlXg7Qssk3EMXxJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f4bea50b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-includes/js/comment-reply.min.js?ver=6.0.2
172.67.156.216200 OK 1.3 kB URL HTTP/1.1 nizhtex.ru/wp-includes/js/comment-reply.min.js?ver=6.0.2
IP 172.67.156.216:0
File type ASCII text, with very long lines (2946)
Hash 1cfd4f485ffd20e7ee7693364fef33f9
a8c5d35ad20664ccfe03d7acfcbdb0a1e28d3fd8
b433efd57400d409a207820e22b93662fa48a0737a96eb44a4c6ce3b46ee7403
GET /wp-includes/js/comment-reply.min.js?ver=6.0.2 HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 25 May 2022 03:57:26 GMT
ETag: W/"628da926-ba5"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kk9NbS0XVLoF3VI2FwIzQNbnKebfuLBab002jDCR4cRJBol5%2ByNqcAcj5mKcKqEzXFaFHfxRjsz9oisaz5tiseq0y5t%2BXwwYsFEgLLDSyXNfWoQb%2BpaWZ%2FuTYb53"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f4bea60b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4109
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Last-Modified: Thu, 06 Oct 2022 19:52:53 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 18e0e019cd697bb16806d8f00408a319
60ceb13c31595e6cf9bb6800657e4593a1fbd670
7cb0778c80be637b67a5d198ca180a76bbfa4c32e502a0fa472a4c6946ffb56e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash be37f0457a4fd7d301a1b2467df74639
a83055ef591109a1065f7197e6dd049313acaeb5
35fee3015fa0d4549d200539eb00c21ab60f9f0a287486a1f0bae897d07532d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35FEE3015FA0D4549D200539EB00C21AB60F9F0A287486A1F0BAE897D07532D8"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13780
Expires: Fri, 07 Oct 2022 00:51:02 GMT
Date: Thu, 06 Oct 2022 21:01:22 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nizhtex.ru/wp-content/uploads/2014/11/5.jpg
172.67.156.216200 OK 105 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2014/11/5.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2014:11:19 22:48:21], baseline, precision 8, 990x409, components 3\012- data
Size 105 kB (105294 bytes)
Hash 42b4e6f98f1b518fff880526de8b23b3
0fc19f83ee938f78c3e6da2a731669986692cc9a
aa1005b37eb66c86e891892e1d2bb76a670d444b6233e19d73df9ad7262e0a01
GET /wp-content/uploads/2014/11/5.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 105294
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 20:49:24 GMT
ETag: "546d0254-19b4e"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iIkjEOG3GMdPZ0YtEi%2FRyUo1OISj9Ki8Oc%2BYxu7ZEhQQIdAhZ09BMzabd%2BfGgcCCocPW88Ksj2M%2F3I0b7WUVKNgGizJMx%2B2P3dqJBQlsqqxyfvy9whSs9VP3PLe2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f55b60b4ee-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/arrow-up.png
172.67.156.216200 OK 2.7 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/arrow-up.png
IP 172.67.156.216:0
File type PNG image data, 40 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a88457152b29c957306ef51324bf300
850cdcd8eb0f3bc474594f49f6c7ca14fa0ce30e
2cc4f88a5c6519c9aafc2e9c7d063e8f229058764e4a9c212c03a616562c32f1
GET /wp-content/themes/carnizsmwptheme/images/smt/arrow-up.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 2739
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-ab3"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vtfDOgWIjvyVJyxMmacYrjrYqMmR7wFEskcIevfwS8tV5D7N4WYAJxgq1nUvq%2B2B58HR%2BfV%2FlqTQ2LNrK6v65QqlurezDQpkTK3nuoQGwKkN6%2FNfvXNgQg61Hwhz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f55f190b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2014/11/3.jpg
172.67.156.216200 OK 62 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2014/11/3.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2014:11:19 22:48:10], baseline, precision 8, 990x409, components 3\012- data
Hash da4eb6a7aadbedfcba138beba39babb2
69272f7c7dfaaf7875aa12b0ee110aeae76fb073
38c995320d62dd15a95c051cd09d65b649a3f72094b0c4c38ba28b7c79dc1e36
GET /wp-content/uploads/2014/11/3.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 62473
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 20:49:13 GMT
ETag: "546d0249-f409"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DwsghxoaAxR7Owny%2BpocI5%2Fu0Uw%2Bq7wEO0ynWI6qbfbPm8GCHeVKkG2cJ0K9twizXWb%2FGCKqyT8i%2FS7sZ9ljugOMoq7Ih61cwCKGvAaBDxed8UYcsFBv6%2FOrs5oJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f55b6e0b45-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/font.css
172.67.156.216200 OK 236 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/font.css
IP 172.67.156.216:0
Hash c99a3c3626aa9493397af36fd69fb10f
3d50cd28a0e11de7148663c49fd3d2072d0e9b24
591608c1af34bbd10438022a906df1e2acd194642da5ef347cc49fa02621d50c
GET /wp-content/themes/carnizsmwptheme/css/font.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-34a"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vXnOaZRvW9N1zNh28sQe%2Fn3rcyRqgS3pg0jqgj8TGRWnWN8ve2%2BfqEh8jhRVYOWOXSmDUYyzIuBxzbYKRsr6gH8QCh9WfvEue%2B3ciEESKbUjbVxiauv94gNWIX9%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f5dbdeb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2014/11/2.jpg
172.67.156.216200 OK 338 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2014/11/2.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2014:11:19 22:48:27], progressive, precision 8, 990x409, components 3\012- data
Size 338 kB (337803 bytes)
Hash e329a5ea926eae40548c407fe515e65b
03c9a7cf921ce2e94407d88810ba4c69bd03eba0
5c3c9daff0662176562ce5186fea7ddfd638dd1c7fee659f2d863f1219e51049
GET /wp-content/uploads/2014/11/2.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 337803
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 20:49:07 GMT
ETag: "546d0243-5278b"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifSbly5dlnEpY9umnyI4T1FBLtBcty%2BeHoPy0vJ6AA57%2F%2F3qWIOMpIqXLxvFPntG534UL8JRA1vytqd2fyQx029FgmNcQrxquynQLaBgzpvgLEwBHy2jqTO2lK4d"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f55e8ab4fa-OSL
alt-svc: h2=":443"; ma=60
w.uptolike.com/widgets/v1/zp.js?pid=1473452
95.163.114.203200 OK 11 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/zp.js?pid=1473452
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (585)
Hash c6c894728ce3986570c559e7baeda82a
3c688080b1926eb688a8c3b5bf42d625f923e6b3
ebcfbfb70458eb8ad838389e8e635632fd022c2fd8911c1e1c4f90fbfb17770f
GET /widgets/v1/zp.js?pid=1473452 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=29087017891; Expires=Sat, 05 Oct 2024 21:01:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="; Expires=Sat, 05 Oct 2024 21:01:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=31556926
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
nizhtex.ru/wp-content/uploads/2014/11/4.png
172.67.156.216200 OK 559 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2014/11/4.png
IP 172.67.156.216:0
File type PNG image data, 990 x 409, 8-bit/color RGB, non-interlaced\012- data
Size 559 kB (558923 bytes)
Hash 2495b13ec313245f6efe5c927cd717b8
dde7bf99f56686b6482276dbdf7f4c19fb440e3a
0c85bdf45587417df1f4d93fbfadef2a3b22080c6aaf063ad8dda0e324546d3d
GET /wp-content/uploads/2014/11/4.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 558923
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 20:49:19 GMT
ETag: "546d024f-8874b"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9rW8xknaKEWtoCFXUzxyDtfPKC61EBYouPL59R5HEY%2BQzKTVxr1XxoX%2BC1iQ1gODIoCUklZyGhjzQw%2FKPINeFSUmjXPs4u9VVhqJmjYmcHG3dqkp1XK5nWC5Gz41"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f559d0b523-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/tablet.css
172.67.156.216200 OK 1.1 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/tablet.css
IP 172.67.156.216:0
File type ASCII text, with very long lines (341)
Hash d75cef8dd104a534e1ade001083db430
612a0ac8f8fe138b83cf87d21a2c42d7cdfb7b04
09e7113d9c49a0ae279e7d677bbb16af0cce56cb7e35519633653617c30cd0a9
GET /wp-content/themes/carnizsmwptheme/css/tablet.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-d45"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OaBe0rXldF%2Fgut6Y6cZoko%2BtdBnbapVU9oJJI6l7xu5A1dg6g1n99yt%2FPe1DxvqUUGdvsVMklEr174UeYMkjvh3pha2v0gPl5D0JLbv6FvdzgWCU0GM6gCsqPonO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f668480b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/back-top.png
172.67.156.216404 Not Found 694 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/back-top.png
IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 45f56936d4d844cf5ec09a3cff7c3da0
4135f6d24ab85d61b02dd51db07a8dd5f54d2c83
c172a8acf99bb2eaa9bcd2424f2891c90ebc58de8db8166e2cf0739a8189f64c
GET /wp-content/themes/carnizsmwptheme/images/back-top.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 404 Not Found
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wrc533nTPPgEpCimcgOqL3k5DfEbSoiEsyTJJrCqd4Z2mVnGfN07COmhteV2LSEqVQcJ7o0kIflSJ%2BVHbiYAb3ag207FY4d9d%2BOlRO1FK5XXBLpgRaFUQFPffSEr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f66807b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2014/11/1.png
172.67.156.216200 OK 540 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2014/11/1.png
IP 172.67.156.216:0
File type PNG image data, 990 x 409, 8-bit/color RGB, non-interlaced\012- data
Size 540 kB (540015 bytes)
Hash 22bf60381c8ab0505ff83fb318fc70d4
784af5a1b2d1702dc74d6f887eb0f7c6703085b5
1aba909c889653c723c1ba2af8c3a2c640605fc79e33128ccabbf086d669e6c2
GET /wp-content/uploads/2014/11/1.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 540015
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 20:48:53 GMT
ETag: "546d0235-83d6f"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWPXXJ8rfb1yWBRL1dIsqCyHCYFiwg8d%2BbriicTGiL4lnAqyVVRAhCxrjMdSsMBRmVpslLLmzGDuHIZy%2B91U8zSkKyGsrS%2FTWnX%2BGrPSs8YGFPiV5CIb5fKHcTkf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f55f170b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/mobile.css
172.67.156.216200 OK 970 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/mobile.css
IP 172.67.156.216:0
Hash a39f642d1ef924c8af22a3ddd28fb109
db9ada61e1e04798df4ed0604a3b67f581b21186
fa1da5efadfdbe95e334a372cc4e7aae7428eaf35498d91bdef66344bbaf20db
GET /wp-content/themes/carnizsmwptheme/css/mobile.css HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: W/"546cbf01-ac2"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9G2BxRMluFkFGxdOrSTEkNqdoxCw4Quub773Nyf09P2nkRGNSMT%2BQQgf%2FKIioirDMQsSbdigLAV65M%2BzCoG%2B187LBYMq2PwKMRpTP30ldPiA0%2Fsrvv4MgWAq4LZc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f66c87b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/search.png
172.67.156.216200 OK 1.1 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/search.png
IP 172.67.156.216:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e14f9d7dea12a7df42d00ee32e8b513
8fc7a53a3dd7a13f5fe3b0c0fe0bfd3c6c7e3697
49049eef4b1e37ebab8cabff034557d848dc3dee4d98ae416db23ab0c018c55a
GET /wp-content/themes/carnizsmwptheme/images/search.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 1122
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-462"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WjmosO%2BnZM4OE9CjMbcACnfIwXf2Tx6pPqwKqvRYGdWDEPSQFPEGFv235ZitNpo48AIIuj97G1EaeagDfw%2FI7c7NpMWb5%2BGE5%2F7UtzgtMusXyyMsRk2euOHJCLaY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6b868b4fa-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slide-right.png
172.67.156.216404 Not Found 694 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slide-right.png
IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 45f56936d4d844cf5ec09a3cff7c3da0
4135f6d24ab85d61b02dd51db07a8dd5f54d2c83
c172a8acf99bb2eaa9bcd2424f2891c90ebc58de8db8166e2cf0739a8189f64c
GET /wp-content/themes/carnizsmwptheme/images/slide-right.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 404 Not Found
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iEk9bv%2B95GxAymJUJ9jBrUA34baov%2FUosTaW%2BiDz6nzazSK90eYZg2aJOf114EWlVgZxL9OMx9lErVlbFjNQMb5gaxPIbhRt9JlT9BkOVfavfxV9AwFAYzzcAnoM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6dd0cb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slide-left.png
172.67.156.216404 Not Found 694 B URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slide-left.png
IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 45f56936d4d844cf5ec09a3cff7c3da0
4135f6d24ab85d61b02dd51db07a8dd5f54d2c83
c172a8acf99bb2eaa9bcd2424f2891c90ebc58de8db8166e2cf0739a8189f64c
GET /wp-content/themes/carnizsmwptheme/images/slide-left.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 404 Not Found
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oDASCxG%2BgwTag%2FgFboATbhPNdKT3jRv6mRb7%2B%2B%2BZAFqlahI6UrF20VDDpjOhHwqoM82GZjRdDC%2BEEKv6hYCCWgDMrqkaeptofQckxKqdjApZvilSdlms74%2FhArOw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6e8c7b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/Oswald-Regular-webfont.woff
172.67.156.216200 OK 25 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/Oswald-Regular-webfont.woff
IP 172.67.156.216:0
File type Web Open Font Format, TrueType, length 24888, version 1.0\012- data
Hash 9bbf8ce75b156acc5d1a49b8cdfdaf37
58869559acece3a06360d83efa97ebab206433fa
bfcf271d349b3ccba095baf29453dbfa5792a58649e2c637d6ea1258d7131076
GET /wp-content/themes/carnizsmwptheme/css/Oswald-Regular-webfont.woff HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/font.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: font/woff
Content-Length: 24888
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: "546cbf01-6138"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2FCKk8KMiVbykGeUfVqDa7cq%2BsKhzX2chxtNIaQnno3v5YPB3Y1f8X2SJ2iUT4V6LF50TjRc5%2B7L%2BYmi0SHp11SWLl0ktvEaU1hKJ2YX5%2BnZx9QxV%2BFzgsT%2FdsD5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6a8a60b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/css/ufonts.com_pt-sans-webfont.woff
172.67.156.216200 OK 27 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/css/ufonts.com_pt-sans-webfont.woff
IP 172.67.156.216:0
File type Web Open Font Format, TrueType, length 27416, version 1.0\012- data
Hash 60f310e821efd78fec1111ac86f5c70c
465d9541aee4b7cd0978644338365d80003fbf40
e9e6ad495341feaddd84a33916fba778cefd8ad43fac3ff962f169399ec15778
GET /wp-content/themes/carnizsmwptheme/css/ufonts.com_pt-sans-webfont.woff HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/font.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: font/woff
Content-Length: 27416
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:09 GMT
ETag: "546cbf01-6b18"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=44XVLuPqFN7gyYhX0RL3fjuix0KNesK5gu6fSgmwh6bXw2DLD%2FodZkfN8ixn%2BceOrvXJzHDdntASmKcfRl%2BEsr2NVZ5Oj6xXX3EWMn5fgutD%2FgQs516%2BhavUrK1u"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6abe5b523-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
35.167.231.108101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.167.231.108:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iFTmNegH/79H4EgiGqqNPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: v/QkpYczXpWB4ISwqXVWE/KsoQQ=
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slider.png
172.67.156.216200 OK 62 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/slider.png
IP 172.67.156.216:0
File type PNG image data, 1136 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash e55562c804c012e025660e5df96bcd41
3441fc02706a00b4ee4140c3a47de95f4a37dc84
985b144d2a710cdfc5c8126298a817dc7060754720a16ef7ae17a0a5f67db01e
GET /wp-content/themes/carnizsmwptheme/images/slider.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 61478
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-f026"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTUVU9QrKL61U9MtF58lRrX1SxO5Cf1BadgUQxTwMaQoRPuDYnyrJcLJ7RMOGMsa8hGFx5D7jeyzVit46CWT8AqOzi3KF%2FM86kUD3p%2BUvWL00wa5Zhwp9vFHMppY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f6d8c90b59-OSL
alt-svc: h2=":443"; ma=60
w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1665090082416495
95.163.114.203200 OK 84 B URL HTTP/1.1 w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1665090082416495
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
File type ASCII text, with no line terminators
Hash f2919a3995c8c9e0455fe9882001ba46
948797f2f4d3642150702214e9a7dbf4e47bd5e7
f9eea4f3149410c0b3c89d593a12be3186f20db8b27a26bfddc580b1393b9af2
GET /widgets/v1/version.js?cb=cb__utl_cb_share_1665090082416495 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Cookie: utl_id2=29087017891; utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 06 Oct 2022 16:40:49 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29087017891; Expires=Sat, 05 Oct 2024 21:01:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="; Expires=Sat, 05 Oct 2024 21:01:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/menu-li.png
172.67.156.216200 OK 1.1 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/menu-li.png
IP 172.67.156.216:0
File type PNG image data, 11 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 7daf40a2b1f5601682a08d366ff6df5d
11dbedee68d1dce11f2c8d7b3ba6a46ee3fbbf92
bc91600f12174cae81ec28e90d64ab3363e0ef0c81940fa0f676ee085ce99e62
GET /wp-content/themes/carnizsmwptheme/images/menu-li.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/style.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 1060
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-424"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MMytR2gzci8NGCZN7bE3xaUJ8Dz3VvlzqhdUkOqr33PUSMvt8W15ZQ547hqWXWvMMGLsHRb0OBLHCDS%2BTKvpmPZXNTyvmW3SX2CcVsjaKNh38%2B0x6vORhMRw2erX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f75dafb4ee-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/slider-page-active.png
172.67.156.216200 OK 1.1 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/slider-page-active.png
IP 172.67.156.216:0
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash ed19016b5e5a6d61ef899668a68636dc
42494faabc265ab8faf3b5e1ff50b9db20a0ff28
9b4c2d3e57b424b164ad3bb4f6c9291d28838a7acd458c5629799b56eb3e6f8e
GET /wp-content/themes/carnizsmwptheme/images/smt/slider-page-active.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 1137
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-471"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wSmdf7Iw110FStQfXLYYInwpMLwQ6TvE0EQ25pnqImwSXMrR2uMmM5DgZpPzBXkMeu9gR6KcbN%2FpzEK6f7D33EbFJSIKo50Vjhiz4yJ82ofai12DA08819IJLHHl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f769b7b4fa-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2019/03/chto-takoe-aramidnaya-tkan-150x150.jpg
172.67.156.216200 OK 13 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2019/03/chto-takoe-aramidnaya-tkan-150x150.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Windows), datetime=2017:10:23 11:43:47], baseline, precision 8, 150x150, components 3\012- data
Hash 01bcea214a2d14cd49eb4227f293fb69
ae49f44abf37bd6dbcb8bc6ef3faf38fc9b34996
e7edf3c4ac78a1a0ee0cac52741ec363ae51a91793ffb801132ccc57d8680580
GET /wp-content/uploads/2019/03/chto-takoe-aramidnaya-tkan-150x150.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 13088
Connection: keep-alive
Last-Modified: Tue, 19 Mar 2019 19:52:23 GMT
ETag: "5c914877-3320"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TcYhB7OIscfH8kb0Z9VZuis%2Fp%2Fz3pGwQpqg2jEwz2OSiXuZv%2Fh7HHja1AhC3cC4%2BYne%2B%2Fjjhr7tdtbq%2F1QMm0hu6IvaLK6E9FKhicCtSFVJF1QDXhg88k8W%2FLSVk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f7a9880b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/slider-page.png
172.67.156.216200 OK 1.1 kB URL HTTP/1.1 nizhtex.ru/wp-content/themes/carnizsmwptheme/images/smt/slider-page.png
IP 172.67.156.216:0
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 59bd8cc4e9b58d8acd64293af6e32d5c
90a75e73f2ae45d61fa7348c243d93dae33a2d9e
903f8bf4f279c20ea1f31988e38b3daef98a7f383e636ffef21dc666e5801f76
GET /wp-content/themes/carnizsmwptheme/images/smt/slider-page.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/wp-content/themes/carnizsmwptheme/css/index.css
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 1104
Connection: keep-alive
Last-Modified: Wed, 19 Nov 2014 16:02:10 GMT
ETag: "546cbf02-450"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BpJjBp5o%2Fyu2nOMtI5F0atWfflX%2BdoW8tMGvllKKBFpeoUpXTxac4IdWLkuvKESwdieW4RY28aj0nP8SSVNeXNLIAxU1zZYXPOxl2GTtonAANprSPuATV%2FQmLjwL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f769530b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2019/03/tild3562-3838-4330-b262-343833653635__e5fb9ed8c5aefacb314e-150x150.png
172.67.156.216200 OK 25 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2019/03/tild3562-3838-4330-b262-343833653635__e5fb9ed8c5aefacb314e-150x150.png
IP 172.67.156.216:0
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 241f533c4e66f60b8d9addc7332a7818
f286f8a56e1aa7670af8df50f6c983027b51bf90
a1292b194439a2403229e1d8a0ecc6dfdb7badb3c277b4cec8ebb5e4e267938b
GET /wp-content/uploads/2019/03/tild3562-3838-4330-b262-343833653635__e5fb9ed8c5aefacb314e-150x150.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/png
Content-Length: 24880
Connection: keep-alive
Last-Modified: Sat, 30 Mar 2019 08:43:58 GMT
ETag: "5c9f2c4e-6130"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pTcoxfmsM%2BCUB1NS6rXABI1M4zoG4BHWI7QCxAhLpG4FpgyyscIMZlzzLNNbdfpNbjKdQ6AA2iFJJ6u7IgqcrdAJ48O8XV28olTRBZu4h0g5uPxelzQRXreTtECZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f77d27b523-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2018/10/11-150x150.jpg
172.67.156.216404 Not Found 694 B URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2018/10/11-150x150.jpg
IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 45f56936d4d844cf5ec09a3cff7c3da0
4135f6d24ab85d61b02dd51db07a8dd5f54d2c83
c172a8acf99bb2eaa9bcd2424f2891c90ebc58de8db8166e2cf0739a8189f64c
GET /wp-content/uploads/2018/10/11-150x150.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 404 Not Found
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQBp%2FPsafpmlqz%2FM%2Fs4G8xrwm%2B2nj2HPfcJjHsLxVWx8OAuLxIoakQxa2YkClNm4xEEN0xdqIZzdmLGcXWXIOs7xQkuJq%2B3bROsiOqufQOYsekeHrEc%2BWQqrsUBY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f7ea7eb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2018/09/11-150x150.jpg
172.67.156.216200 OK 5.9 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2018/09/11-150x150.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash a05a4d219f34580d1d88c09ebb79a2f4
1b64a4df421289e41105277f536c70df741b4f86
bbe9d6b73d11c6be41d5cce724158ba2d78c05638bf94059725bef0c90dd408f
GET /wp-content/uploads/2018/09/11-150x150.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 5949
Connection: keep-alive
Last-Modified: Mon, 24 Sep 2018 03:29:25 GMT
ETag: "5ba85a15-173d"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=saqEtqhbvh4Vzpl46YvWYY2nVwAB5Y56TlApXto%2BO2HKbHPL8gaWk%2Bs5z62FobRinONNZGAKio8tyKHx8wY0wXJiTJtyq9rbuC5KnXLZUT5yQKJjFwbv4R%2BsIv9D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f7f9cf0b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2019/02/Vulkan-Neon-200x200-logo_96ac6bc950ac26b09e4e1be641c2d15f-150x150.jpg
172.67.156.216200 OK 5.3 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2019/02/Vulkan-Neon-200x200-logo_96ac6bc950ac26b09e4e1be641c2d15f-150x150.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash 357afeef66445bd4231da4ce262fd011
3df5028c09fbcd91b740a21e68f716b16e029dbc
8dc6b1d6280e81979942dae40899ce8a5d31723a8e89c27120ffbe833d40b60a
GET /wp-content/uploads/2019/02/Vulkan-Neon-200x200-logo_96ac6bc950ac26b09e4e1be641c2d15f-150x150.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 5269
Connection: keep-alive
Last-Modified: Thu, 14 Feb 2019 18:49:01 GMT
ETag: "5c65b81d-1495"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2B%2F3USGr0RmHCDWHmGEqidtAyCjZTUoFB7HrBZ%2F2zCwPCB%2BFkDq3PE1vk7XDLx2uDs1Va5VyDaRMHKfrcaNgsk%2FML9rTTaG046wJm%2BO3MfXxtMLiI%2BK2JFWnjLfC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f7f9d00b59-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/wp-content/uploads/2019/01/792795763-polotentse-vafelnoe-otbelennoe-45-80-pvo-0003-magnateks-600x429-150x150.jpg
172.67.156.216200 OK 16 kB URL HTTP/1.1 nizhtex.ru/wp-content/uploads/2019/01/792795763-polotentse-vafelnoe-otbelennoe-45-80-pvo-0003-magnateks-600x429-150x150.jpg
IP 172.67.156.216:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:10:11 12:13:04], baseline, precision 8, 150x150, components 3\012- data
Hash 803c059230425960a62c8de63da95cb4
080599f31b77ac816c43f96dd35ee72478816765
beffd4a46f603a4fc799af83943aedc58ee37a57c1e07bbd9683d20ec867f802
GET /wp-content/uploads/2019/01/792795763-polotentse-vafelnoe-otbelennoe-45-80-pvo-0003-magnateks-600x429-150x150.jpg HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/jpeg
Content-Length: 15741
Connection: keep-alive
Last-Modified: Thu, 24 Jan 2019 09:25:19 GMT
ETag: "5c49847f-3d7d"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mtds30VwLYCFNsKy3XJT8W9sctXm4p8YdNg89Q2ZbwX7OVbBxYQ28YxQwHD%2FNePhhl0rPI%2BsIsWuT7j6MGsAVHU2K4bIWuHRbpXPgJjz3lLJjJjnyhyzuYvWoDqx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f7ce5eb4ee-OSL
alt-svc: h2=":443"; ma=60
nizhtex.ru/fav/handshake-152-196466.png
172.67.156.216404 Not Found 694 B URL HTTP/1.1 nizhtex.ru/fav/handshake-152-196466.png
IP 172.67.156.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 45f56936d4d844cf5ec09a3cff7c3da0
4135f6d24ab85d61b02dd51db07a8dd5f54d2c83
c172a8acf99bb2eaa9bcd2424f2891c90ebc58de8db8166e2cf0739a8189f64c
GET /fav/handshake-152-196466.png HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 404 Not Found
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I6upEI9ryR9UikHs7RQWFPr1je0w9pQmXDiiZvyUWPgkz1I33RgvJPWaGdn4ofg%2BwK0C%2BhBz%2BhmYqmehXP2yzzr9fyZm4FCL8GJvFdSOJcAluiH1WL9Tl2QJ8P17"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f92afa0b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
216.58.207.194200 OK 58 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 216.58.207.194:0
File type ASCII text, with very long lines (2910)
Hash 9622e7da42234ee42b64db9623bfc5b5
9fa5ec44675620c227423248f0e4fbfbed4ed995
28f0501640228d2c421bb92e1ba058d0295ea7234493ecd212b4ca14bb2f0c87
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nizhtex.ru/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Date: Thu, 06 Oct 2022 21:01:22 GMT
Expires: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 7673363512993921639
Vary: Accept-Encoding, Origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 57858
X-XSS-Protection: 0
counter.yadro.ru/hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714
88.212.201.198302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nizhtex.ru/
HTTP/1.1 302 Moved Temporarily
Date: Thu, 06 Oct 2022 21:01:22 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714
Content-Length: 32
Expires: Wed, 06 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
mc.yandex.ru/metrika/watch.js
87.250.251.119302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nizhtex.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
nizhtex.ru/favicon.ico
172.67.156.216200 OK 4.2 kB IP 172.67.156.216:0
File type MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel\012- data
Hash bfd00b06d069cb1dcbb638c2c9882c05
0f48375dfafc74c0520a4aa46275261c77e09c5c
63dbe287f2c3a64645b64be6211d2d1bad7fb0911e96076ff59d9be563f8a275
GET /favicon.ico HTTP/1.1
Host: nizhtex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nizhtex.ru/
Connection: keep-alive
Cookie: shield-notbot-nonce=e5c670affb; PHPSESSID=7ncgk4s07b17iv25rdik1d2coo
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 Jul 2014 09:47:52 GMT
ETag: W/"53c255c8-7d26"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline'
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUW3xBYVVLP5aPWRmrit9499Ohk%2BD%2B%2ByDp6hBLvGtX7YqZ5KSdRVujAq73EeqqSiX2%2FGis6ZsbhI9U0Y9ECvUZcrXlaieOih6mI9geR%2F5HQoUg7uJp681DjA%2BD7V"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f92bd7b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 66396a30442089e51398f949b3e7963b
cf9a68c0dc14f5c4de4e618a33a197cc02460517
8c170ca36c62de8d31d7873cdec02782af6cb2e98dc783c74178b178a4c4f2f5
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Mon, 10 Oct 2022 19:31:35 GMT
ETag: "cf9a68c0dc14f5c4de4e618a33a197cc02460517"
Last-Modified: Thu, 06 Oct 2022 19:31:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 147
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 756154f9c8ceb4ee-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714
88.212.201.198200 OK 133 B URL HTTP/1.1 counter.yadro.ru/hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 31 x 31\012- data
Hash 9b5a215a9badab9087810f386fe368a7
dbd5d749ba79ce49334657de579b10582e6660dc
85f2f9268707586e0b9fcd1212157603de031cca53e1be63bfa2f62a8010ff1e
GET /hit?t40.6;r;s1280*1024*24;uhttp%3A//nizhtex.ru/;0.7793998065808714 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nizhtex.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 06 Oct 2022 21:01:22 GMT
Content-Type: image/gif
Content-Length: 133
Connection: keep-alive
Expires: Wed, 06 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
googleads.g.doubleclick.net/pagead/html/r20221003/r20190131/zrt_lookup.html
142.250.74.2200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221003/r20190131/zrt_lookup.html
IP 142.250.74.2:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20221003/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:23:52 GMT
expires: Thu, 20 Oct 2022 05:23:52 GMT
cache-control: public, max-age=1209600
age: 56250
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
87.250.251.119200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (570)
Hash 44366cc385a5c0f49df4f22b71434b42
3f56349f8a3fff52e28a3300052bdc2bde97371c
485ba52769d75db2ed79f65318d37070d09ce3441680aa22caa10ae3cdcb45cd
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57285
date: Thu, 06 Oct 2022 21:01:22 GMT
access-control-allow-origin: *
etag: "633be002-dfc5"
expires: Thu, 06 Oct 2022 22:01:22 GMT
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209290101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5917164382229775&plah=nizhtex.ru
216.58.207.194200 OK 117 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209290101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5917164382229775&plah=nizhtex.ru
IP 216.58.207.194:0
File type ASCII text, with very long lines (6002)
Size 117 kB (117214 bytes)
Hash 47b44da749569e1e8da76a7f60fcf142
476285800b975ef18ddae9da8943f34fe0dc69c8
5fae23cb1bba0f64f9cc30c1485c7ae6f56b474aa1ca44b82011babe0eba36c9
GET /pagead/managed/js/adsense/m202209290101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5917164382229775&plah=nizhtex.ru HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 06 Oct 2022 21:01:23 GMT
expires: Thu, 06 Oct 2022 21:01:23 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 2786242716309453290
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 117214
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/34302425/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
87.250.251.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/34302425/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash a704e4d6a9952329ebc6bb89accf72a7
29263c4c8ea4bad95e4a164510474f8c905cbc27
108acf2f5958ff642f291a7168aa3f1d86969c236bf196530f2dbb0b3f1da555
GET /watch/34302425/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nizhtex.ru
Referer: http://nizhtex.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Thu, 06 Oct 2022 21:01:23 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://nizhtex.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:23 GMT
last-modified: Thu, 06-Oct-2022 21:01:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/34302425?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/34302425?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/34302425?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nizhtex.ru
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/34302425/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1269837369755%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A196559915%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 06 Oct 2022 21:01:23 GMT
access-control-allow-origin: http://nizhtex.ru
set-cookie: yandexuid=3796308771665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3796308771665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1942501701665090083; Path=/; SameSite=None; Secure
i=svPo4fjW3PpYMryQUCyjqdPTDy3O84jXToh61Y2pvVqRbbGfcb0h1GK1yZN/QBX2uAMrKATEzcCerC+smhXDEz4gWFY=; Expires=Sun, 03-Oct-2032 21:01:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696626083.yrts.1665090083#1696626083.yrtsi.1665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:23 GMT
last-modified: Thu, 06-Oct-2022 21:01:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 472 B URL HTTP/2 mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
Hash 68cae76ca08d4e9629466fe6e31c4401
174a7298fb239a33068a15a2e900956dee1f5c2c
e0a2fb0dd6b622408d720f55ba8a8e21edd3d6ab6072aaa716e13ae6af3f6381
GET /watch/23414332?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nizhtex.ru
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 06 Oct 2022 21:01:23 GMT
access-control-allow-origin: http://nizhtex.ru
set-cookie: yandexuid=2045981711665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2045981711665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2386310511665090083; Path=/; SameSite=None; Secure
i=Z2opFZ+dbpfCX+ErMyKb6SN4M19+6AeIgdsgwd08YP0UeugVTuatheTNX3d0n2Pr9SeH/X4fdMgsFXJ/lu8PnaOJXm8=; Expires=Sun, 03-Oct-2032 21:01:22 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696626083.yrts.1665090083#1696626083.yrtsi.1665090083; Expires=Fri, 06-Oct-2023 21:01:23 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:23 GMT
last-modified: Thu, 06-Oct-2022 21:01:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=nizhtex.ru
142.250.74.66200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=nizhtex.ru
IP 142.250.74.66:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=nizhtex.ru HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 21:01:23 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=nizhtex.ru&callback=_gfp_s_&client=ca-pub-5917164382229775
172.217.21.162200 OK 201 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=nizhtex.ru&callback=_gfp_s_&client=ca-pub-5917164382229775
IP 172.217.21.162:0
File type ASCII text, with no line terminators
Hash 3f05329e3065061d121bad480c1fa43f
cc7872b8afc67bbc2437a6cf17e6dd0ef9be1a34
46bd2eabc588a6c4b3a149b8f5999e2c767e27563dc7434bc28126bdd15ee295
GET /gampad/cookie.js?domain=nizhtex.ru&callback=_gfp_s_&client=ca-pub-5917164382229775 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 21:01:23 GMT
server: cafe
cache-control: private
content-length: 201
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=nizhtex.ru
142.250.74.34200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=nizhtex.ru
IP 142.250.74.34:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=nizhtex.ru HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 21:01:23 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
87.250.251.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash e7d48a12dedb3e042599445a01ce40ac
95a63fd61f02e0cc29b5466caf450996ab33440c
be5b8a5385af705d47a9d4abd25541e54d69620208b6554428a16cb4f847722a
GET /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fnizhtex.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1228%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1452040065189%3Ahid%3A638685580%3Az%3A0%3Ai%3A20221006210123%3Aet%3A1665090083%3Ac%3A1%3Arn%3A923961513%3Arqn%3A1%3Au%3A16650900834795090%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C651%2C0%2C-9%2C0%2C%2C478%2C38%2C%2C%2C%2C1284%3Ans%3A1665090081070%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665090083%3At%3A%D0%9F%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B4%D0%B5%D0%BA%D0%BE%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%D1%8B%D1%85%20%D1%82%D0%BA%D0%B0%D0%BD%D0%B5%D0%B9&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nizhtex.ru
Referer: http://nizhtex.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Thu, 06 Oct 2022 21:01:23 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://nizhtex.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:23 GMT
last-modified: Thu, 06-Oct-2022 21:01:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 68cae76ca08d4e9629466fe6e31c4401
174a7298fb239a33068a15a2e900956dee1f5c2c
e0a2fb0dd6b622408d720f55ba8a8e21edd3d6ab6072aaa716e13ae6af3f6381
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16708
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Thu, 06 Oct 2022 21:01:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16708
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Thu, 06 Oct 2022 21:01:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16708
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Thu, 06 Oct 2022 21:01:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16708
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Thu, 06 Oct 2022 21:01:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 488ec5b4267ccb1cdc4e6e08556f7f3b
42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88
d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3430
x-amzn-requestid: 9b3b52d6-08b4-4893-962b-3dfe67e2f11d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjTijF0vIAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dffa9-0a128734418b6c4d6375e2ac;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:05:29 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: G0mKHnEonkmY4EDpNGAbg_DF37oxElJt58Lv6IJ4ro-hiG61wEAqVQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 09:57:45 GMT
age: 39818
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5958f828ccc16a41b22d9ae812bccfc
f350f295dd70152712162d4be5b3b5f0d12cde57
230d7d8e570e433d18ec53b6ca114e2a206e8c265c0c66d73388c49db5c91c64
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9338
x-amzn-requestid: 4ca2eb3c-eba4-43a4-b79a-89546da3d660
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQBfG7soAMF9cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa09-1b5bd53052718f620b920a00;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6pHftE0vUMqrH2NR_7DzrWlnD0yal7BkAfee7UeVG7DKZNEAYRa9HQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:03:23 GMT
age: 82680
etag: "f350f295dd70152712162d4be5b3b5f0d12cde57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e238ccaa3b9fa88476a8514855e8232f
447cbf348ef10d0136a1811e843c46937defbba1
43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: e5d0bb7a-b9d5-49b1-b51c-8db019da641f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQOGEQloAMFjgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa5a-519d91fb0b83920960da479d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: l1HGT5ycH36vVojsOPFptRSU1YJFvLbBsgiWJqzRlRIGgm2o5vf6jg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:58:56 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 82947
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e520f87cae411cfc2ed1c8a14184385
69ad212cb7ae309d4f02019552887135bfae67da
723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: BddSUzh-PKiFmfw2p9gPW-B0qtrXWxCXfee29Pk-wLqN7RO21Yic6g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
age: 84257
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6476b35e-8b14-44b0-a85a-4793280f25c1.jpeg
34.120.237.76200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6476b35e-8b14-44b0-a85a-4793280f25c1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a1a279f8386262762dcf70621e06ed5
0e1d6cefe5ffe1994f26322962df8b0a13743339
a4146e8a0561009b63c55d0c13673958546b96f684a9c5a43a1f3200782798e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6476b35e-8b14-44b0-a85a-4793280f25c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3777
x-amzn-requestid: 093c576f-e1f7-4d45-9f8c-7ca3e7539313
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPtDEpSIAMF_Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df986-3cbcc83c1db24bbf193c3047;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: GXneoYCI_hqJxLyI-RAxkJJf08pBsc6usoQlztb3HHPQSd1PDh7kgQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:52:47 GMT
age: 83316
etag: "0e1d6cefe5ffe1994f26322962df8b0a13743339"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a508ac9cd743bec987b2a24454418265
8c7ecefe6908387e2128dc849a6ba857991ba0ab
afb2c2b51f2ce445ada599068901551beee594b15c152ed7551ab7a8835dde6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10809
x-amzn-requestid: db4d1d2a-05b8-403e-a7ca-8b8a6a0a4087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQb-HrTIAMFtNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfab2-74f184406a48e42c0ecc4ec9;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: tv80OXQUu13gDuuFESnEnXMuFdNBmGc1y592euL7QnfZW5PwJym9-g==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:53:39 GMT
etag: "8c7ecefe6908387e2128dc849a6ba857991ba0ab"
content-type: image/jpeg
age: 83264
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 36b2ebb263a694be6b81a02818e3d9e4
b73b329f15a2fc2ab0d6ea468695b3f79c27be94
e76b12ed5b195fddd74ac3f63fd2f985e22fea47c025eec8b0260b5560f9c515
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 36b2ebb263a694be6b81a02818e3d9e4
b73b329f15a2fc2ab0d6ea468695b3f79c27be94
e76b12ed5b195fddd74ac3f63fd2f985e22fea47c025eec8b0260b5560f9c515
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221003/r20110914/client/qs_click_protection_fy2021.js
142.250.74.33200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221003/r20110914/client/qs_click_protection_fy2021.js
IP 142.250.74.33:0
File type ASCII text, with very long lines (1494)
Hash 3304a6f98a75044bb4421199c7dc75e9
abd6494aeb49a2bacc3754c8d92cc10b855a63b7
4328f9f5f12fc419ce804827b962689ea88b31cfe4db01cf301cbc57aef3ba09
GET /pagead/js/r20221003/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7528
x-xss-protection: 0
date: Thu, 06 Oct 2022 20:48:10 GMT
expires: Thu, 20 Oct 2022 20:48:10 GMT
cache-control: public, max-age=1209600
etag: 13775775994264215463
content-type: text/javascript; charset=UTF-8
age: 794
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20221003/r20110914/abg_lite_fy2021.js
142.250.74.33200 OK 9.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221003/r20110914/abg_lite_fy2021.js
IP 142.250.74.33:0
File type ASCII text, with very long lines (1624)
Hash 34ab0675c75e45ff3a7d26deeba3b7b5
107ab2ee1dcf23544643915b7deeac3f4810f623
8b64de46f29644054e532eb882d60485c1019d0219d729c35fbe8a586133a48c
GET /pagead/js/r20221003/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9540
x-xss-protection: 0
date: Thu, 06 Oct 2022 19:15:40 GMT
expires: Thu, 20 Oct 2022 19:15:40 GMT
cache-control: public, max-age=1209600
etag: 6580860447119072478
content-type: text/javascript; charset=UTF-8
age: 6344
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38c8ed81c69d2af0003394c9fb9274c5
a71c6fb6d685275f8a8c7d9d87860df08a450038
fdff30d374603ecd62c6d244a1175731787725dba48777122802055969be28f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
142.250.74.163200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
IP 142.250.74.163:0
File type C++ source, ASCII text, with very long lines (1792)
Hash 10e6f3bdb6fae70ad38bdf5dbf63ec92
9bc2aed43500f7a96923397c67624983f7593c77
07cfe15791ca91426412f72bbd4300bb7b19b5fd976285a9071861dc3c90e779
GET /mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 06:39:23 GMT
expires: Tue, 03 Jan 2023 06:39:23 GMT
cache-control: public, max-age=7776000
last-modified: Tue, 27 Sep 2022 00:52:44 GMT
content-type: text/javascript
age: 138121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaQIRjG1ZjP_WDVN48p5yKkyFRIQioqzwM7E6ULGhXWr1iBKUv1xVxXqMtybC1pNl5fGTSiN
142.250.74.164204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaQIRjG1ZjP_WDVN48p5yKkyFRIQioqzwM7E6ULGhXWr1iBKUv1xVxXqMtybC1pNl5fGTSiN
IP 142.250.74.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaQIRjG1ZjP_WDVN48p5yKkyFRIQioqzwM7E6ULGhXWr1iBKUv1xVxXqMtybC1pNl5fGTSiN HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 21:01:24 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 21:01:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/measurement/l?ebcid=ALh7CaTYFpPpHEa61NgiQviyDftUYVTr7gpTQ1v8u_f_BZ1QxfO8TuS-Uzeq6qvt33Id0gezOtfF
142.250.74.164204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaTYFpPpHEa61NgiQviyDftUYVTr7gpTQ1v8u_f_BZ1QxfO8TuS-Uzeq6qvt33Id0gezOtfF
IP 142.250.74.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaTYFpPpHEa61NgiQviyDftUYVTr7gpTQ1v8u_f_BZ1QxfO8TuS-Uzeq6qvt33Id0gezOtfF HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 21:01:24 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:08 GMT
expires: Thu, 05 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 91636
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:08 GMT
expires: Thu, 05 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 91636
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:21 GMT
expires: Thu, 05 Oct 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 91623
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.203200 OK 624 B URL HTTP/1.1 w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (511)
Hash db0f291b1ee364d9de4ad30906fac72a
46ae53e00d5964e1fbd0d75c0483f4718db48e8e
9b2a1dadf125f7367489db7e4bd8c22b34ec3126220422467b0de51f0274f64d
GET /widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Cookie: utl_id2=29087017891; utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:24 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Thu, 06 Oct 2022 21:31:24 GMT
Content-Encoding: gzip
w.uptolike.com/widgets/v1/extra.js?rnd=0.5958439432353196
95.163.114.203200 OK 1.9 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/extra.js?rnd=0.5958439432353196
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (696)
Hash c436a56a934593ee5ed0408cf13d5754
499684a7353ab01082df377f3b54013fd65fe0fc
b672052df970eebccca8377549e845c2de51c57a4abfe0aab2bda48b2ada1dc0
GET /widgets/v1/extra.js?rnd=0.5958439432353196 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Cookie: utl_id2=29087017891; utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:24 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 06 Oct 2022 16:40:49 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29087017891; Expires=Sat, 05 Oct 2024 21:01:24 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="; Expires=Sat, 05 Oct 2024 21:01:24 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
w.uptolike.com/widgets/v1/zp/imp?pid=1473452&fl=false&sw=1280&sh=1024&vw=1280&vh=939&vp=416487b0-a3df-4a08-9985-976e6decc297&ttl=JUQwJTlGJUQxJTgwJUQwJUJFJUQwJUI4JUQwJUI3JUQwJUIyJUQwJUJFJUQwJUI0JUQxJTgxJUQxJTgyJUQwJUIyJUQwJUJFJTIwJUQwJUI0JUQwJUI1JUQwJUJBJUQwJUJFJUQxJTgwJUQwJUIwJUQxJTgyJUQwJUI4JUQwJUIyJUQwJUJEJUQxJThCJUQxJTg1JTIwJUQxJTgyJUQwJUJBJUQwJUIwJUQwJUJEJUQwJUI1JUQwJUI5&url=http%3A%2F%2Fnizhtex.ru%2F&rnd=0.3618345257669461
95.163.114.203204 No Content 0 B URL HTTP/1.1 w.uptolike.com/widgets/v1/zp/imp?pid=1473452&fl=false&sw=1280&sh=1024&vw=1280&vh=939&vp=416487b0-a3df-4a08-9985-976e6decc297&ttl=JUQwJTlGJUQxJTgwJUQwJUJFJUQwJUI4JUQwJUI3JUQwJUIyJUQwJUJFJUQwJUI0JUQxJTgxJUQxJTgyJUQwJUIyJUQwJUJFJTIwJUQwJUI0JUQwJUI1JUQwJUJBJUQwJUJFJUQxJTgwJUQwJUIwJUQxJTgyJUQwJUI4JUQwJUIyJUQwJUJEJUQxJThCJUQxJTg1JTIwJUQxJTgyJUQwJUJBJUQwJUIwJUQwJUJEJUQwJUI1JUQwJUI5&url=http%3A%2F%2Fnizhtex.ru%2F&rnd=0.3618345257669461
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v1/zp/imp?pid=1473452&fl=false&sw=1280&sh=1024&vw=1280&vh=939&vp=416487b0-a3df-4a08-9985-976e6decc297&ttl=JUQwJTlGJUQxJTgwJUQwJUJFJUQwJUI4JUQwJUI3JUQwJUIyJUQwJUJFJUQwJUI0JUQxJTgxJUQxJTgyJUQwJUIyJUQwJUJFJTIwJUQwJUI0JUQwJUI1JUQwJUJBJUQwJUJFJUQxJTgwJUQwJUIwJUQxJTgyJUQwJUI4JUQwJUIyJUQwJUJEJUQxJThCJUQxJTg1JTIwJUQxJTgyJUQwJUJBJUQwJUIwJUQwJUJEJUQwJUI1JUQwJUI5&url=http%3A%2F%2Fnizhtex.ru%2F&rnd=0.3618345257669461 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=29087017891; utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 06 Oct 2022 21:01:24 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 38273627814c99e2c301b0724693216f
38b4273ce840e2114d449d7a14a1a8482764c3de
f89636628999e7b98a8b125e83b64cbc430210908ae4b5910a13e9aec740c913
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F89636628999E7B98A8B125E83B64CBC430210908AE4B5910A13E9AEC740C913"
Last-Modified: Tue, 04 Oct 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5853
Expires: Thu, 06 Oct 2022 22:38:58 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bf9e35253552eff2d24eb1ab1ef2beb6
3fb2df1924a233d6189f631bb7b22983cfba25cc
c210abc93d80c20b0e187d0b2ca7281c5865168be071fa155f3c7b4b68643104
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C210ABC93D80C20B0E187D0B2CA7281C5865168BE071FA155F3C7B4B68643104"
Last-Modified: Tue, 04 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6145
Expires: Thu, 06 Oct 2022 22:43:50 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash eb2d62c69abc308a6db10ad2ce8bc487
3553ed8b70305e277c35caae208059cc7bf52f72
da882f7e0c5a8fa1fdfdaf4e8b9995a01553566532f28b06e9530cb7371bf201
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA882F7E0C5A8FA1FDFDAF4E8B9995A01553566532F28B06E9530CB7371BF201"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5380
Expires: Thu, 06 Oct 2022 22:31:05 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b54337306766fa37247fe61ec122940
d490bb299380dd285a4eb8667f5199022044b95c
1e21407c19e6771679bd21aee67dcabd787c12665a6c7e9779db8e598d93eaff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1E21407C19E6771679BD21AEE67DCABD787C12665A6C7E9779DB8E598D93EAFF"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14265
Expires: Fri, 07 Oct 2022 00:59:10 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
optimads.ru/porp.js
92.63.192.10200 OK 0 B IP 92.63.192.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /porp.js HTTP/1.1
Host: optimads.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.13.12
Date: Thu, 06 Oct 2022 21:01:25 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Thursday, 06-Oct-2022 21:01:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
af.click.ru/collect_stat.js
217.197.112.80200 OK 913 B URL HTTP/1.1 af.click.ru/collect_stat.js
IP 217.197.112.80:0
ASN #20655 e-Style ISP LLC
Hash 9531806d16d72f9659eaab01bd09689b
7640f092c2b928c614bb46251477a3c80b3e820b
a01ed62761c70d35a7f2dd5f497451e70b85e85bb8f1774cee68d53554e6ecaa
GET /collect_stat.js HTTP/1.1
Host: af.click.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:25 GMT
Content-Type: application/javascript
Content-Length: 913
Last-Modified: Fri, 22 Jul 2022 11:33:41 GMT
Connection: keep-alive
ETag: "62da8b15-391"
Accept-Ranges: bytes
supraneet.ru/minus/
62.109.6.15200 OK 0 B IP 62.109.6.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /minus/ HTTP/1.1
Host: supraneet.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.13.12
Date: Thu, 06 Oct 2022 21:01:25 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Thursday, 06-Oct-2022 21:01:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2631a00630a2bd0e78268777aa0c0164
1da166ae23914420be091b8d2129aa12c21ddc63
878414094230e568f7359f5f95be7155d19532ebed9138a9a25a1d2b1d198547
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "878414094230E568F7359F5F95BE7155D19532EBED9138A9A25A1D2B1D198547"
Last-Modified: Thu, 06 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11948
Expires: Fri, 07 Oct 2022 00:20:33 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f3445f20d334c034dee423dccf2f494f
35fb0cacebfdf3f0384a69538e0894d654a5bd83
54f363dd543367235f957ca5a6b1942f3dddd65ddef1f5fd9458544c224337fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54F363DD543367235F957CA5A6B1942F3DDDD65DDEF1F5FD9458544C224337FC"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9252
Expires: Thu, 06 Oct 2022 23:35:37 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9c4bfaf2585869e2b4073e42e1bfd46
7ce74257fab2fff3f2a4fca96258e7d9be3368a4
867711e0b79fe1c62fa27f04af0b178f1cf20865b04542f8759b4a6d32e63b4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "867711E0B79FE1C62FA27F04AF0B178F1CF20865B04542F8759B4A6D32E63B4F"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Thu, 06 Oct 2022 22:11:59 GMT
Date: Thu, 06 Oct 2022 21:01:25 GMT
Connection: keep-alive
w.uptolike.com/widgets/v1/zp/support.html
95.163.114.203200 OK 3.8 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/zp/support.html
IP 95.163.114.203:0
ASN #12695 LLC Digital Network
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a4af8c67ad0a2a6f681a742faca4463e
50794dee2e25cb8ec2187256750e00dc3231faa7
10ace92ddcb397879ff3569155caf7c3e28c3b4ee8c35eaddb48af927520ecf5
GET /widgets/v1/zp/support.html HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Cookie: utl_id2=29087017891; utl_dat="COSr6fi6MBAAIOT8s4G7MCjk/LOBuzAwAEV9lKZGQZFJPhcwdXqYaVA="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 21:01:25 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Thu, 06 Oct 2022 21:31:25 GMT
Content-Encoding: gzip
edn.whilen.ru/sta453b3qh45lr/1.4.5.js
92.223.97.97200 OK 9.1 kB URL HTTP/2 edn.whilen.ru/sta453b3qh45lr/1.4.5.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (23093), with no line terminators
Hash 2175bd1693743032491c1e386e080e6a
543040ea79f720acb7de88defea7863278c14330
ce2cb2a06d3a9ed5adb39fc1f7301f100be5e98b07a77cf414b59141fb0f8412
Analyzer Verdict Alert fortinet Malware
GET /sta453b3qh45lr/1.4.5.js HTTP/1.1
Host: edn.whilen.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 21:01:25 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges
etag: W/"e22b559d6fc3241ea271ecf13869d8fc"
last-modified: Fri, 26 Nov 2021 15:33:27 GMT
x-timestamp: 1637940806.16302
x-trans-id: 16bb227c2a251146
age: 0
cache: HIT
x-cached-since: 2022-10-06T20:58:45+00:00
x-id: sto5-up-gc10
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/34302425?wv-check=51014&wv-type=0&wmode=0&wv-part=1&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=933118963&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/34302425?wv-check=51014&wv-type=0&wmode=0&wv-part=1&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=933118963&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/34302425?wv-check=51014&wv-type=0&wmode=0&wv-part=1&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=933118963&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: http://nizhtex.ru
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 21:01:30 GMT
access-control-allow-origin: http://nizhtex.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:30 GMT
last-modified: Thu, 06-Oct-2022 21:01:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/34302425?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=456544825&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/34302425?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=456544825&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/34302425?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=638685580&page-url=http%3A%2F%2Fnizhtex.ru%2F&rn=456544825&browser-info=gdpr%3A14%3Aet%3A1665090090%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221006210130%3Au%3A16650900834795090%3Avf%3Aasbylctlprmpze3hff9a0%3Ast%3A1665090090&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: http://nizhtex.ru
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 21:01:30 GMT
access-control-allow-origin: http://nizhtex.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 21:01:30 GMT
last-modified: Thu, 06-Oct-2022 21:01:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
nordw.ingeitn.ru/i/k.js
92.223.97.97200 OK 0 B IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
GET /i/k.js HTTP/1.1
Host: nordw.ingeitn.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 21:01:25 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges
etag: W/"d0226560a2d22923fc0b287025fd9906"
last-modified: Fri, 26 Nov 2021 15:34:02 GMT
x-timestamp: 1637940841.37913
x-trans-id: 16bb22845d641b0a
age: 28974
expires: Sat, 08 Oct 2022 09:01:25 GMT
cache-control: max-age=129600
cache: HIT
x-cached-since: 2022-10-06T20:48:09+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.retget.ru/pwk/mc.php
95.217.109.66200 OK 0 B IP 95.217.109.66:0
ASN #24940 Hetzner Online GmbH
GET /pwk/mc.php HTTP/1.1
Host: cdn.retget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 06 Oct 2022 21:01:28 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
mode: no-cors
access-control-allow-origin: *
cache-control: no-cache
X-Firefox-Spdy: h2
cdn.smntq.com/c83ul/smart.js
95.217.109.66200 OK 0 B URL HTTP/2 cdn.smntq.com/c83ul/smart.js
IP 95.217.109.66:0
ASN #24940 Hetzner Online GmbH
GET /c83ul/smart.js HTTP/1.1
Host: cdn.smntq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nizhtex.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 06 Oct 2022 21:01:25 GMT
content-type: text/javascript;charset=UTF-8
mode: no-cors
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, x-compress, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2