schoolz.myjino.ru/hbb
200 OK 1.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (823), with no line terminators
Hash 284e1a55efe78211a06485040ab3e204
b5d41ecc28e849eb4855973c15ef174c22f59c70
2c0f9d11bf0cd8ee5c92846cb20a784fe9645b82ab295f023062e1391aa094f4
Analyzer Verdict Alert fortinet Malware
GET /hbb HTTP/1.1
Host: schoolz.myjino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 02:51:08 GMT
Content-Type: text/html
Content-Length: 1088
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 02:06:11 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yXsytNVO1_7fCVscJdks8yG_pD8nMsrC2awv6bWU8Pa1y9C3lZYAvw==
Age: 2697
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Sat, 10 Sep 2022 03:39:22 GMT
Date: Sat, 10 Sep 2022 02:51:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wx6XaDt-9CzjPjxSgdjC50rk5tMhN8ooG1radyweMNnxSlpJkNfajA==
age: 83075
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 02:51:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
parking-static.jino.ru/static/main.js?1.25.2
200 OK 38 kB URL HTTP/1.1 parking-static.jino.ru/static/main.js?1.25.2
IP
File type Unicode text, UTF-8 text, with very long lines (53499)
Hash 99c0daaba6d8f59d1c5efe8395d9fd1c
6394af2c138858c61f106ddade577d8db6a881a4
b8bd3ba8bcb2a190dfbfa854ec3aff35fc0de0ddafd8bcbf111837a2b81bb1c0
GET /static/main.js?1.25.2 HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/javascript
Last-Modified: Sat, 26 Oct 1985 08:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"1dc09d84-1b823"
Content-Encoding: gzip
parking-static.jino.ru/static/components/page/logo.svg
200 OK 1.2 kB URL HTTP/1.1 parking-static.jino.ru/static/components/page/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2507)
Hash 6bc4c474e37a3265224af683a8ff6924
b47e6af3421707f3ba2f57edd6d6b62f41c51f37
ab28becd588b95987e612d86522226cbbfb8dd18b98fb76043a9d41457e67e87
GET /static/components/page/logo.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: image/svg+xml
Last-Modified: Sat, 26 Oct 1985 08:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"1dc09d84-a26"
Content-Encoding: gzip
parking-static.jino.ru/static/components/page/icons/page_error.svg
200 OK 724 B URL HTTP/1.1 parking-static.jino.ru/static/components/page/icons/page_error.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (724), with no line terminators
Hash aeda2ffdebc3c56fa1ea13485304df56
6e114e18eb059d9bbce0bc5614aafeacca872d94
415ca0c5c9edef0fdecb9e5d039a69942dfaa3b741ce409b7204f3d38584d4b1
GET /static/components/page/icons/page_error.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: image/svg+xml
Content-Length: 724
Last-Modified: Sat, 26 Oct 1985 08:15:00 GMT
Connection: keep-alive
ETag: "1dc09d84-2d4"
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 10 Sep 2022 01:56:08 GMT
Cache-Control: max-age=3600
Expires: Sat, 10 Sep 2022 02:55:21 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FsEZFTugZjhzEcmX__0Ucme_oyw3B-l-VXdFBEcYgllANWs3OxJCog==
Age: 3302
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash c9667d8cc0eb04f3b44693269f578f44
3e0b80ab95a3d26cb0cbedacb2e1f9a5d43af66e
5637f977f5f3e73fb493ddcc2647e57b9ebe3087bde263708313af0785908f5f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 13 Sep 2022 23:01:00 GMT
ETag: "3e0b80ab95a3d26cb0cbedacb2e1f9a5d43af66e"
Last-Modified: Fri, 09 Sep 2022 23:01:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7484dc38cb62b4fd-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash c9667d8cc0eb04f3b44693269f578f44
3e0b80ab95a3d26cb0cbedacb2e1f9a5d43af66e
5637f977f5f3e73fb493ddcc2647e57b9ebe3087bde263708313af0785908f5f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 13 Sep 2022 23:01:00 GMT
ETag: "3e0b80ab95a3d26cb0cbedacb2e1f9a5d43af66e"
Last-Modified: Fri, 09 Sep 2022 23:01:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7484dc38c85bfac4-OSL
schoolz.myjino.ru/favicon.ico
403 Forbidden 601 B URL HTTP/1.1 schoolz.myjino.ru/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (511), with no line terminators
Hash 75cdbe4fca6284cb0594686b77df290f
89d1040474c933de70b75c44326f3e388987e65a
8fe09e2643eca67f25a431ccd015b8e7e5575e186c870967cee08ba07ee32541
GET /favicon.ico HTTP/1.1
Host: schoolz.myjino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/hbb
HTTP/1.1 403 Forbidden
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: text/html
Content-Length: 601
Connection: keep-alive
cache.betweendigital.com/sections/2/266562.js
200 OK 2.7 kB URL HTTP/1.1 cache.betweendigital.com/sections/2/266562.js
IP
ASN #204720 CDNetworks LLC
File type Unicode text, UTF-8 text, with CR, LF line terminators
Hash 3843abe47b9d959c99493f6f4e2f1e75
e69beb3d6e5203926fcd16ea06da9c7a6bfb91e1
bdf20e2cde8c471e38c9c232e5a39def2409d775074b5990c52faa9796ccb4db
GET /sections/2/266562.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Oct 2019 08:41:04 GMT
ETag: W/"5d9705a0-2176"
Content-Encoding: gzip
X-CDN-Edge-Cache: HIT
X-CDN-Edge-Id: 119
X-CDN-Request-Id: dc9202830ce533f257e0c631c7b53abf
jino.ru/static/lib/fonts/ptsans-sub/ptsans-bold.woff2
200 OK 65 kB URL HTTP/2 jino.ru/static/lib/fonts/ptsans-sub/ptsans-bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 64688, version 2.328\012- data
Hash d9c1b50aaa270ee8db756550b1db087a
b6e9f4bdadf34d026adc9e347aea5e3a517a56e6
5417217722baa6f09ac21cc56eda3521dd08cc00b3fcecbb80ca764748f63578
GET /static/lib/fonts/ptsans-sub/ptsans-bold.woff2 HTTP/1.1
Host: jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://schoolz.myjino.ru
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: application/octet-stream
date: Sat, 10 Sep 2022 02:51:09 GMT
etag: "6319f61e-fcb0"
expires: Sun, 10 Sep 2023 02:51:09 GMT
last-modified: Thu, 08 Sep 2022 14:03:10 GMT
server: nginx/1.10.3
content-length: 64688
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d0c56e0b2955a5dd7f37ba4bbf5727b4
f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b
99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5819
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 02:51:09 GMT
Last-Modified: Sat, 10 Sep 2022 01:14:10 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
200 OK 62 kB URL HTTP/2 jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61600, version 2.328\012- data
Hash 5d12c58fffdb5ac7fd41f05ee0180a8e
b147b184608a46e13bd50c9f7b2e9bede4eba085
84baa1b0c5914a65ef3b6049d5d06cd64c44eb35151e6558940d505b9c5ad8af
GET /static/lib/fonts/ptsans-sub/ptsans-regular.woff2 HTTP/1.1
Host: jino.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://schoolz.myjino.ru
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: application/octet-stream
date: Sat, 10 Sep 2022 02:51:09 GMT
etag: "6319f61e-f0a0"
expires: Sun, 10 Sep 2023 02:51:09 GMT
last-modified: Thu, 08 Sep 2022 14:03:10 GMT
server: nginx/1.10.3
content-length: 61600
X-Firefox-Spdy: h2
cache.betweendigital.com/code/1x1.gif
200 OK 43 B URL HTTP/1.1 cache.betweendigital.com/code/1x1.gif
IP
ASN #204720 CDNetworks LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /code/1x1.gif HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 15:27:01 GMT
ETag: "5d9caac5-2b"
X-CDN-Edge-Cache: HIT
X-CDN-Edge-Id: 119
X-CDN-Request-Id: f52333339d64310273644559e4a47b21
Accept-Ranges: bytes
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
cache.betweendigital.com/code/async_rtb.js
200 OK 131 kB URL HTTP/1.1 cache.betweendigital.com/code/async_rtb.js
IP
ASN #204720 CDNetworks LLC
File type Unicode text, UTF-8 text, with very long lines (65405), with no line terminators
Size 131 kB (131052 bytes)
Hash d250bea8885cab24c2cdbca7c88e38fa
da12a3525db226e3821bfe2e15d580c9f0138640
ddf4b44bbe7621bc11b4756ef07d5e41e48a674f4b7ece46c6d87cbb2346fd8d
GET /code/async_rtb.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 15:36:39 GMT
ETag: W/"6310d187-739e7"
Cache-Control: public, max-age=900, immutable
Content-Encoding: gzip
X-CDN-Edge-Cache: HIT
X-CDN-Edge-Id: 119
X-CDN-Request-Id: 22a10ee0e728bf3136c0c98ec83fb861
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash a66b0703ff4efe09169dbdc66812f71d
3ca5075a4ef72beb146eb53be38e023b5fd22f6e
3a2dd230de427512dc7657bad03f99b4dca6bb0fc52835fb80c33a5ac872309d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:09 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 14 Sep 2022 00:12:04 GMT
ETag: "3ca5075a4ef72beb146eb53be38e023b5fd22f6e"
Last-Modified: Sat, 10 Sep 2022 00:12:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3006
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7484dc3b6e96b500-OSL
pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=http://schoolz.myjino.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
301 Moved Permanently 1.6 kB URL HTTP/2 pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=http://schoolz.myjino.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP
File type gzip compressed data, from Unix\012- data
Hash 2cf0e76f8c42b71535783c61d51156df
94ce2042927b2aa2f472672adadc7e5ffab3e78e
da941f235eeb36d3165129dfc2a25271aca37f763ebc568cb9586cf2704f1689
GET /fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=http://schoolz.myjino.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 10 Sep 2022 02:51:09 GMT
location: https://pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=http://schoolz.myjino.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
cache-control: max-age=3600
expires: Sat, 10 Sep 2022 03:51:09 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7484dc3b59620afa-OSL
X-Firefox-Spdy: h2
pre.glotgrx.com/impimg.gif?cb=1662778260668&qid=53532313f523632313f5436393&cid=964&s=http://schoolz.myjino.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1
200 OK 26 B URL HTTP/1.1 pre.glotgrx.com/impimg.gif?cb=1662778260668&qid=53532313f523632313f5436393&cid=964&s=http://schoolz.myjino.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /impimg.gif?cb=1662778260668&qid=53532313f523632313f5436393&cid=964&s=http://schoolz.myjino.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&ai=&flsrc=1 HTTP/1.1
Host: pre.glotgrx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:10 GMT
Content-Type: image/gif
Content-Length: 26
Connection: keep-alive
Last-Modified: Fri, 26 Aug 2022 17:37:39 GMT
CF-Cache-Status: HIT
Age: 6788
Expires: Sat, 10 Sep 2022 04:51:10 GMT
Cache-Control: public, max-age=7200
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7484dc3b8b830b55-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DiSVLZPt1tOWihQ8oa2VMQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tg8eTCpMALYnKpfQMCtHHbWW9jM=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 9e590928a553eff33914f18f2406efa1
2b14e5cb4572f322147050ed40f7573deddefa72
0c41809b35a1cccdd57658032ed3989c9e1b0aa5035d4f9f25a5ce30706785a7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:09:19 GMT
Expires: Fri, 16 Sep 2022 16:09:18 GMT
Etag: "2b14e5cb4572f322147050ed40f7573deddefa72"
Cache-Control: max-age=565687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7484dc3becb1b4fd-OSL
www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
302 Moved Temporarily 0 B URL HTTP/1.1 www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
HTTP/1.1 302 Moved Temporarily
Server: ms-counter-3.3.5/1.20.2
Date: Sat, 10 Sep 2022 02:51:10 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Location: https://www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
Timing-Allow-Origin: *
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
302 Found 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
tuuid=06c2e2c3-4fd4-52fd-a9d4-e987cacf1219; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
ut=Yxv7ngACC3DHXkM5YeEpsDQXxsHquyqpJJfP1g==; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (557)
Hash 1d55754e516a64479901a61dc8a0d136
7c47529b53f613bb2ffac7a32530e8fd594c194b
b4e7cd831347d3faeebe62c6e8595fc01804895f0bb5e30a5ceae7b400318649
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://schoolz.myjino.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57251
date: Sat, 10 Sep 2022 02:51:10 GMT
access-control-allow-origin: *
etag: "63186565-dfa3"
expires: Sat, 10 Sep 2022 03:51:10 GMT
last-modified: Wed, 07 Sep 2022 12:33:25 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&tld=c2Nob29sei5teWppbm8ucnU=
200 OK 68 B URL HTTP/2 ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&tld=c2Nob29sei5teWppbm8ucnU=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /js?en=anNfcnVu&context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&tld=c2Nob29sei5teWppbm8ucnU= HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
tuuid=581ba5bc-20f3-52fd-8db7-e74aeeac1cd4; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
ut=Yxv7ngADmeA2uspuARL2IbQKAam_REQDSkyJUw==; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 8ca4b091590808cc3a26647c27f4cb2d
df2b5f332ee1e1189e88ca17d58479529cd79efe
699bc6b401d3e28cc66903420a497e24e4e4c835a95514f9fd50a4b3b5e88576
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:10 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Wed, 14 Sep 2022 00:19:12 GMT
ETag: "df2b5f332ee1e1189e88ca17d58479529cd79efe"
Last-Modified: Sat, 10 Sep 2022 00:19:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2161
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7484dc3d6f7fb500-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1250af4e2a095b41a4907009afc8b179
3784e34e6cd3f519dc76ea865d5c3d26bbfaa252
ce522114af8aa944fbe700e11bc65147ab3ae0ec85e6209f3186d0480550801e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE522114AF8AA944FBE700E11BC65147AB3AE0EC85E6209F3186D0480550801E"
Last-Modified: Fri, 09 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15944
Expires: Sat, 10 Sep 2022 07:16:54 GMT
Date: Sat, 10 Sep 2022 02:51:10 GMT
Connection: keep-alive
www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
302 Found 0 B URL HTTP/2 www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://schoolz.myjino.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: ms-counter-3.3.5/1.20.2
date: Sat, 10 Sep 2022 02:51:10 GMT
content-type: image/gif
content-length: 0
location: https://www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
set-cookie: guid=F2DD0F37631BFB9EX1662778270; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
strict-transport-security: max-age=2678400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 10 Sep 2022 02:51:10 GMT
access-control-allow-origin: *
etag: "63186565-2b"
expires: Sat, 10 Sep 2022 03:51:10 GMT
accept-ranges: bytes
last-modified: Wed, 07 Sep 2022 12:33:25 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 96a78925109b96bb57abcdb528fab96d
c435842c27b1b4d507b47899691e690d6ebd0815
51fb5dca9ce059554986dae0adaaf3ee4eb41d3b7d39c64d6925639d5d239a27
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 02:51:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 21:40:44 GMT
Expires: Wed, 14 Sep 2022 21:40:43 GMT
Etag: "c435842c27b1b4d507b47899691e690d6ebd0815"
Cache-Control: max-age=412772,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7484dc3d2d60b4fd-OSL
www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
200 OK 43 B URL HTTP/2 www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/37274602 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://schoolz.myjino.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ms-counter-3.3.5/1.20.2
date: Sat, 10 Sep 2022 02:51:10 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195?wmode=7&page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&site-info=%7B%22page%22%3A%22techdomain%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3A%221.25.2%22%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afp%3A704%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A354331389%3Arqn%3A1%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662778259314%3Aco%3A0%3Ads%3A2%2C46%2C47%2C0%2C-9%2C0%2C%2C602%2C3%2C%2C%2C%2C745%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261%3At%3ACaution&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/25328195?wmode=7&page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&site-info=%7B%22page%22%3A%22techdomain%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3A%221.25.2%22%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afp%3A704%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A354331389%3Arqn%3A1%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662778259314%3Aco%3A0%3Ads%3A2%2C46%2C47%2C0%2C-9%2C0%2C%2C602%2C3%2C%2C%2C%2C745%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261%3At%3ACaution&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 9f651f97ef993e358e04598c9b30b944
6f710c837809f1dbf07e906ab83e52ff01927af3
1e8d667dcecbad23823f37014c1b4e864aa70a1162db6fabee0f2ef4b90f7844
GET /watch/25328195?wmode=7&page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&site-info=%7B%22page%22%3A%22techdomain%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3A%221.25.2%22%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afp%3A704%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A354331389%3Arqn%3A1%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662778259314%3Aco%3A0%3Ads%3A2%2C46%2C47%2C0%2C-9%2C0%2C%2C602%2C3%2C%2C%2C%2C745%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261%3At%3ACaution&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://schoolz.myjino.ru
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/25328195/1?wmode=7&page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&site-info=%7B%22page%22%3A%22techdomain%22%2C%22jsVersion%22%3A%221.41.3%22%2C%22htmlVersion%22%3A%221.25.2%22%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afp%3A704%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A354331389%3Arqn%3A1%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662778259314%3Aco%3A0%3Ads%3A2%2C46%2C47%2C0%2C-9%2C0%2C%2C602%2C3%2C%2C%2C%2C745%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261%3At%3ACaution&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 10 Sep 2022 02:51:10 GMT
access-control-allow-origin: http://schoolz.myjino.ru
set-cookie: yandexuid=6621280891662778270; Expires=Sun, 10-Sep-2023 02:51:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6621280891662778270; Expires=Sun, 10-Sep-2023 02:51:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2656310611662778270; Path=/; SameSite=None; Secure
i=71BRuDIfVNKfcVmUKXE2D24ZRMLSBaIrrQT/0jcdIUz7FjEI0ebQyVtGr9EN7Sca4OmQezkFnU+N8uB4i5dAiRaihmg=; Expires=Tue, 07-Sep-2032 02:51:07 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694314270.yrts.1662778270#1694314270.yrtsi.1662778270; Expires=Sun, 10-Sep-2023 02:51:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 10-Sep-2022 02:51:10 GMT
last-modified: Sat, 10-Sep-2022 02:51:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
200 OK 21 kB URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
IP
Hash 4e7d5904ed5c58423ec38e2a939fb042
38e0b9c8f7d98104ac14dad946eec87c2c313ce7
6f8f987d3175d253e693e83120fa442c7baf0e6177ed30526b36de28b5f107f5
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=859576187688824.1&rr=direct&foc=1&r_seq=0&tld=c2Nob29sei5teWppbm8ucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://schoolz.myjino.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
tuuid=95f1a681-32a4-52fd-a3c9-4148c0d2bad6; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
ut=Yxv7ngACkEDM6010ECj-ZvQcNXRuFVHgrQrgmw==; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&event=omo
200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&event=omo
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&event=omo HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
tuuid=d1e0038c-efd2-52fd-bd9c-de87de872519; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
ut=Yxv7ngAJlSDMkB-chPesYdz_6wKoHWl1nvYR1w==; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:10 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
cache.betweendigital.com/pmListener.js
200 OK 1.3 kB URL HTTP/2 cache.betweendigital.com/pmListener.js
IP
ASN #204720 CDNetworks LLC
Hash e6454fe3869936c6817951460a232569
4905365303ed04195df28c4a1a0245c01e5e3a8c
7830cbbb13db74ba20f4486a23b730de49ea00c0e6147c687c4ca6ce6c6f8cda
GET /pmListener.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 02:51:10 GMT
content-type: application/javascript
last-modified: Wed, 03 Feb 2021 14:20:14 GMT
etag: W/"601ab11e-caf"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 119
x-cdn-request-id: bde07d4f2c6c26550a0dc096eefce041
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195/1?page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&ut=noindex&hittoken=1662778270_d89c8d21049682f6a7861f2019338cb92df3a52ef8aa23edb645b1dae4b47de7&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A41503254%3Arqn%3A2%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662778259314%3Aco%3A0%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1942%2C1942%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261&t=gdpr(14)mc(p-2)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/25328195/1?page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&ut=noindex&hittoken=1662778270_d89c8d21049682f6a7861f2019338cb92df3a52ef8aa23edb645b1dae4b47de7&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A41503254%3Arqn%3A2%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662778259314%3Aco%3A0%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1942%2C1942%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261&t=gdpr(14)mc(p-2)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/25328195/1?page-url=http%3A%2F%2Fschoolz.myjino.ru%2Fhbb&charset=utf-8&ut=noindex&hittoken=1662778270_d89c8d21049682f6a7861f2019338cb92df3a52ef8aa23edb645b1dae4b47de7&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3A62hj1rf2ym17zxi6fwm9k%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A1080492360248%3Ahid%3A577412009%3Az%3A0%3Ai%3A20220910025101%3Aet%3A1662778261%3Ac%3A1%3Arn%3A41503254%3Arqn%3A2%3Au%3A1662778261474100547%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662778259314%3Aco%3A0%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1942%2C1942%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662778261&t=gdpr(14)mc(p-2)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://schoolz.myjino.ru
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 10 Sep 2022 02:51:10 GMT
access-control-allow-origin: http://schoolz.myjino.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 10-Sep-2022 02:51:10 GMT
last-modified: Sat, 10-Sep-2022 02:51:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17015
Expires: Sat, 10 Sep 2022 07:34:46 GMT
Date: Sat, 10 Sep 2022 02:51:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17015
Expires: Sat, 10 Sep 2022 07:34:46 GMT
Date: Sat, 10 Sep 2022 02:51:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17015
Expires: Sat, 10 Sep 2022 07:34:46 GMT
Date: Sat, 10 Sep 2022 02:51:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17015
Expires: Sat, 10 Sep 2022 07:34:46 GMT
Date: Sat, 10 Sep 2022 02:51:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17015
Expires: Sat, 10 Sep 2022 07:34:46 GMT
Date: Sat, 10 Sep 2022 02:51:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d21a3e07583d9fad4104b6457f7915e7
fdc9453562f993e2545ca99731a7741e748b6082
8ea38264c82c6b544447079cc92eae70d0968a070ba39022af0e18c498916338
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8266
x-amzn-requestid: 3411ec4b-ac18-4b4e-8876-c99b94d3a4a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNitWEjhIAMFWpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb188-4d9e496e7ff141b46748d850;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: vyV1_onImxuLNGp4UI1W5grcuVW3LHJFJjvmO0VXU-OYorF6RVcoDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:11 GMT
age: 18060
etag: "fdc9453562f993e2545ca99731a7741e748b6082"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36959cfa-cb15-4529-b6bc-286a72766d06.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36959cfa-cb15-4529-b6bc-286a72766d06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7781b358945b9d3c27eb2fb4bb828ae6
88ce2a7b680aa35b5192e9d6b87f21e532576ad8
928826d3926f1e8b8283ca4b4c6efa82ce893d1feda9a2fcc33e35ab1f6dc817
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36959cfa-cb15-4529-b6bc-286a72766d06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6806
x-amzn-requestid: bd1f299c-2a92-4637-9a5a-95fe969ec3e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuuHD0oAMFUWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb191-3dc0545917116f6d3fab4157;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: XkEftKRNEQPh-TWCtZEmLPyQj_oRS8vKX_XeBVrmOVqAZpl6UAIGvg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:10:54 GMT
age: 16817
etag: "88ce2a7b680aa35b5192e9d6b87f21e532576ad8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 412441a2a064555c5d7f1400c2741360
7532d9543b93248891324e07e8edff10a36d174d
421b3e9db572f1077abd4ef2748696b38a4117e33db6ae0b5fa46841afa2693f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14312
x-amzn-requestid: 4d301754-9ed3-401f-9ad5-1862533d7559
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj5wGowIAMF4WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb371-7729383d0bc0f729231ad5b8;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:43:13 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: QWNGLaXe2lZ7niw6TU6KUOuMnWi-Ml3hkw6WLB8vD_jWsg5YMuFWbw==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:54:57 GMT
age: 17774
etag: "7532d9543b93248891324e07e8edff10a36d174d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60fa03262bb3728f24a4c7a8177ec788
09dcbdc6043f01dd56920cca3ce3920d0d07b795
e7448f186933f9848f1d55f0e8dba593918846d02fb9cc3a7cd86d69b96a7fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7515
x-amzn-requestid: bb6a7928-9bdc-44e7-8478-b415bc504343
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YJu0bGYdoAMF5jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a2b4f-208339fd72e62dff4a2ba339;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 17:50:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: UaU9GK4lcCuAN2WghBDa7f-21dRTA4Fh1tlAmGFMKh4wQOGZlKdmOw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 13:14:31 GMT
age: 49000
etag: "09dcbdc6043f01dd56920cca3ce3920d0d07b795"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084d9cc4-53b3-451a-b338-2150cda2f06c.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084d9cc4-53b3-451a-b338-2150cda2f06c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfadcca0fbc9780f8975c53481914c0d
bb613c04bdeab6ea13249d1cd48bb3268a830018
72f1c42b60eb8fa3893db6c226fe5a2dff41b45d8786d5c8095bdf31abff35ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084d9cc4-53b3-451a-b338-2150cda2f06c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9633
x-amzn-requestid: 85fa9747-6edf-45ae-b15e-85482c1dbf6c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkC-GrIoAMFueg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb3ac-7ea5f2ef3d9478e530f0f888;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:44:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ZF2SCGjcry_Jfob-sVB_n4JRLo3ghex0M-pzkVLZnE7WNLyiWTV84g==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:14:02 GMT
age: 16629
etag: "bb613c04bdeab6ea13249d1cd48bb3268a830018"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250c93aa-253b-4354-9955-25ab2a663bc0.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250c93aa-253b-4354-9955-25ab2a663bc0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e23b206e95320e5f944478f1c873d4c
d2bde7891908b44713e8ac81d39d2bfa27abf108
fa1fdad0bc869977cccef69be469e4c6e7ad018c5424480d9ec3f2bd2a7c22fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250c93aa-253b-4354-9955-25ab2a663bc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8220
x-amzn-requestid: 163470c8-ddaf-447c-994d-36d058fc5d82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkDJFMSIAMF1XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb3ad-157b820053ff36286de2b6a2;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:44:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _6Njy49_HmnGfo_gczCXLsMseZKkCwRgIN2iOBO6dx6SXUvxsAn5oA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:01:26 GMT
etag: "d2bde7891908b44713e8ac81d39d2bfa27abf108"
content-type: image/jpeg
age: 17385
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&jsp=rsize%3D728x90%26tld%3Dc2Nob29sei5teWppbm8ucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D87defe11d039761d722a64294ff4028df241b667
200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&jsp=rsize%3D728x90%26tld%3Dc2Nob29sei5teWppbm8ucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D87defe11d039761d722a64294ff4028df241b667
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAHBey7RhdgACdwAzAtWTP2_TQBTA7VerqkoEqGJATFEEFgxx7vzfrayiUgEDbRGigi04zrm51vEZ-9qmmSoWYOMDMPQjFImR8hUIEgMbCwMTYkBi5RwnbVQQG0Ofz2e_P3f33u_u4K5HItPENq4HpofrphG16gFxvLoThqgd6C3DchDgd9-_vKkcPv_16euTmR1KdiUJ9A7naT7faORhh7G4r3X3NmnCtGy7dP3N04DLHtY8pJm6hi0TXsgrrE_jOGhYGqpef4zxQvUeTbZ71Z5rN21zoZrtzHu2hm5U75BwizV0hJFouHqbZiRivUbhhFnDRKZz_LEc17Chotu2ZetweA7eyiCBAiB6CWp_5ivBXEZ2mnknyAgAKgMLKXqYXeMdksEMwhiBsroGM2t5zEBBRhGrkARmhzkDYLhSZr9M8i3O0vHQ4VSXBq8GRx-fDd4PjsZTSzB96_4KDBX4BmOgQTvXWoTvEpK06QblQayFrCvMdDHKYh-pKcv9gEcq7wslKiwsa_uu5VmOjV3Hdl1XNzWsZpnfFpxCrkYs9IXezMlTEc3jth_qq6ylezmhFieP0rTVdbfDZP2asazyYOPhXkp8saC66zu6q3Z8D6m5XxJVN3PuB1QNs8jHgtTFKIjjVhBuCcQF4ArWbdc2pCHG4TsqVhpVen60eaB49tBRwh4xP0vyY3FSO52_0PcXx2Z5VCdcfS3dFD_mkrDBxBi5iPgf1-NgSjo9c7HewdT0g_Wl0xVBjSUxTUiTps0OyzlNNkCCf2yN_HNqzEKuiLPS89B0Td5_2R-N-nChaKXMTYCCz0p5KmRxRuQTx8nFO05JEY8sTYpywv83&jsp=rsize%3D728x90%26tld%3Dc2Nob29sei5teWppbm8ucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1%26fp%3D87defe11d039761d722a64294ff4028df241b667 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://schoolz.myjino.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:11 GMT; Path=/; Domain=.betweendigital.com
tuuid=8afec591-43cf-52fd-84a9-798ee7b28211; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:11 GMT; Path=/; Domain=.betweendigital.com
ut=Yxv7nwAI9Pj6V76-1aYTlQ4j7_0u3E2WhxK0Wg==; Max-Age=31536000; Expires=Sun, 10 Sep 2023 02:51:11 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
217.107.34.191
104.18.21.226
93.184.220.29
34.217.237.91
188.42.191.196
23.36.76.226