Overview

URL dl1a.gamedl.ru/download/b8m26hdwtklvk3xyafr57p03p3lmv1rn/H1/cb076c23c3b4f29439d60689861dac26371ec17b2a793770ed033a8fb0340456/1180514/europe.zip
IP212.42.38.245
ASNTeslatel LLC
Location Russia
Report completed2022-10-03 09:35:12 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-03 2 dl1a.gamedl.ru/download/b8m26hdwtklvk3xyafr57p03p3lmv1rn/H1/cb076c23c3b4f29 (...) Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-03 2 hybrid.ai Sinkholed


Files

URL logs.viadata.store/req/site?sid=104751&uid=47c887fd-8ac5-45bb-88be-bf6f43df (...)
IP  23.111.115.244
Magic gzip compressed data, max compression\012- data
Size 910
MD5 cece89a8262657f5ff6c809d3882e49f
SHA1 b44aeedafc1393c5b22b38bfa97e21e99ebafcb0
SHA256 2d59ff3842f7b9e224584fdee524b0fc85b584e0ce37677d3532b8ed8b48e7b3
Analyzer Analysed Verdict Comment
VirusTotal 0/0


Passive DNS (111)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS cm.g.doubleclick.net (1) 202 2013-05-30 23:19:45 UTC 2022-10-03 09:35:06 UTC 142.250.74.66
mnemonic passive DNS cs.agency2.ru (1) 0 2022-04-29 14:24:02 UTC 2022-10-03 07:19:42 UTC 23.111.107.44 Unknown ranking
mnemonic passive DNS bidder.criteo.com (2) 750 2017-01-30 05:01:16 UTC 2022-10-03 06:59:40 UTC 178.250.2.131
mnemonic passive DNS status.thawte.com (1) 5123 2017-11-27 12:33:51 UTC 2022-10-03 05:06:05 UTC 93.184.220.29
mnemonic passive DNS ad.adriver.ru (3) 19548 2012-08-31 17:10:27 UTC 2022-10-03 02:27:43 UTC 195.209.108.49
mnemonic passive DNS ia-dmp.com (1) 975065 2020-10-20 14:56:34 UTC 2022-10-03 09:35:07 UTC 185.26.97.53
mnemonic passive DNS ssp.bidvol.com (1) 31817 2020-02-22 12:37:29 UTC 2022-10-03 09:35:06 UTC 65.109.65.187
mnemonic passive DNS ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2022-10-03 07:10:33 UTC 172.64.155.188
mnemonic passive DNS tpc.googlesyndication.com (1) 126 2020-01-16 08:35:32 UTC 2022-10-03 09:10:57 UTC 142.250.74.33
mnemonic passive DNS e7.skwstat.ru (1) 120128 2020-04-17 17:07:55 UTC 2022-10-03 09:35:07 UTC 45.84.227.130
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-03 08:58:12 UTC 143.204.55.36
mnemonic passive DNS tag.digitaltarget.ru (1) 98193 2015-07-21 14:24:58 UTC 2022-10-03 09:35:06 UTC 185.15.175.148
mnemonic passive DNS catsnetwork.ru (1) 390747 2020-03-11 05:53:05 UTC 2022-09-29 19:48:45 UTC 139.45.228.111
mnemonic passive DNS s.uuidksinc.net (1) 3423 2015-07-20 12:00:35 UTC 2022-10-03 07:34:03 UTC 31.220.27.155
mnemonic passive DNS sync.upravel.com (1) 28097 2017-05-29 09:13:46 UTC 2022-10-03 07:34:03 UTC 136.243.48.22
mnemonic passive DNS ads.adlook.me (1) 43352 2018-11-28 12:50:19 UTC 2022-10-03 02:27:44 UTC 5.200.43.243
mnemonic passive DNS sync.adkernel.com (1) 4993 2017-04-19 09:25:22 UTC 2022-10-03 09:35:06 UTC 77.245.57.72
mnemonic passive DNS pb.adriver.ru (1) 34781 2017-03-27 14:09:34 UTC 2022-10-03 07:19:40 UTC 195.209.111.15
mnemonic passive DNS ads.adfox.ru (4) 9460 2012-05-30 14:15:22 UTC 2022-10-03 07:03:07 UTC 77.88.21.179
mnemonic passive DNS moevideo.biz (2) 44567 2017-12-13 11:52:01 UTC 2022-10-03 09:35:07 UTC 92.38.138.102
mnemonic passive DNS adlmerge.com (1) 146521 2017-04-06 07:10:27 UTC 2022-10-03 09:35:06 UTC 95.211.66.35
mnemonic passive DNS www.youtube.com (1) 90 2013-05-30 23:21:49 UTC 2022-10-03 07:12:14 UTC 142.250.74.142
mnemonic passive DNS adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-10-03 09:26:04 UTC 216.58.207.226
mnemonic passive DNS logs.viadata.store (2) 70310 2019-11-27 11:26:45 UTC 2022-09-30 15:59:55 UTC 23.111.115.244
mnemonic passive DNS adx.com.ru (2) 43296 2017-06-05 14:30:42 UTC 2022-10-02 18:24:42 UTC 188.34.131.130
mnemonic passive DNS tech.rtb.mts.ru (2) 27360 2017-04-17 12:41:30 UTC 2022-10-03 09:35:07 UTC 213.87.44.187
mnemonic passive DNS top-fwz1.mail.ru (2) 8936 No data No data 95.163.52.67
mnemonic passive DNS stackpath.bootstrapcdn.com (1) 2467 2018-04-05 04:41:29 UTC 2022-10-03 08:20:27 UTC 104.18.11.207
mnemonic passive DNS dl1a.gamedl.ru (1) 0 2018-07-07 17:40:20 UTC 2022-10-03 09:03:59 UTC 212.42.38.245 Unknown ranking
mnemonic passive DNS pagead2.googlesyndication.com (1) 101 2021-02-20 15:52:05 UTC 2022-10-03 09:10:55 UTC 216.58.207.226
mnemonic passive DNS px.adhigh.net (4) 10272 2013-01-03 21:02:08 UTC 2022-10-03 06:49:02 UTC 193.232.148.144
mnemonic passive DNS static.criteo.net (3) 652 2015-06-24 06:04:54 UTC 2022-10-03 06:20:21 UTC 178.250.0.130
mnemonic passive DNS dm-eu.hybrid.ai (1) 28847 2021-01-25 11:48:59 UTC 2022-10-03 06:19:39 UTC 37.18.103.21
mnemonic passive DNS stat.adlabs.ru (1) 200922 2012-07-23 15:58:30 UTC 2022-10-03 02:27:43 UTC 109.248.237.37
mnemonic passive DNS ocsp.godaddy.com (2) 698 2012-05-20 19:28:57 UTC 2022-10-03 06:33:58 UTC 192.124.249.24
mnemonic passive DNS www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-10-03 09:17:06 UTC 142.250.74.174
mnemonic passive DNS vtg1.rktch.com (1) 194923 2019-02-26 09:50:41 UTC 2022-09-29 19:47:56 UTC 176.99.6.56
mnemonic passive DNS s.relap.io (1) 50281 2021-01-20 19:05:42 UTC 2022-10-03 09:35:07 UTC 95.163.37.253
mnemonic passive DNS dmg.digitaltarget.ru (4) 21471 2015-04-23 14:50:51 UTC 2022-10-03 09:35:08 UTC 185.15.175.159
mnemonic passive DNS rux.viadata.store (1) 0 2022-06-10 18:40:34 UTC 2022-10-03 09:35:05 UTC 23.111.119.12 Domain (viadata.store) ranked at: 47936
mnemonic passive DNS yandex.ru (22) 671 2012-05-21 21:15:36 UTC 2022-10-03 07:25:43 UTC 77.88.55.66
mnemonic passive DNS relap.io (30) 21950 2020-09-08 12:39:52 UTC 2022-10-03 07:21:49 UTC 95.163.37.253
mnemonic passive DNS rucdn.viadata.store (3) 0 2022-06-10 18:40:34 UTC 2022-09-29 19:47:55 UTC 23.111.115.172 Domain (viadata.store) ranked at: 47936
mnemonic passive DNS www.acint.net (15) 29072 2014-02-14 21:23:16 UTC 2022-10-03 07:19:42 UTC 185.12.125.26
mnemonic passive DNS acint.net (2) 22962 2014-02-14 21:23:16 UTC 2022-10-03 07:34:03 UTC 185.12.125.26
mnemonic passive DNS an.yandex.ru (3) 2577 No data No data 93.158.134.90
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-03 04:56:22 UTC 34.117.237.239
mnemonic passive DNS fonts.gstatic.com (6) 0 2014-08-29 13:43:22 UTC 2022-10-03 07:23:24 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-03 09:25:26 UTC 142.250.74.168
mnemonic passive DNS matchid.adfox.yandex.ru (2) 26266 2015-02-24 08:38:47 UTC 2022-10-03 09:14:28 UTC 93.158.134.118
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-10-03 06:02:10 UTC 142.250.74.3
mnemonic passive DNS cdn.punchmedia.ru (2) 585950 2021-10-13 12:02:35 UTC 2022-10-03 07:23:38 UTC 185.40.155.13
mnemonic passive DNS sync.republer.com (1) 45392 2015-04-29 11:49:27 UTC 2022-10-03 02:27:44 UTC 23.88.82.46
mnemonic passive DNS redirect.frontend.weborama.fr (1) 8348 2017-05-04 15:00:27 UTC 2022-10-03 09:35:06 UTC 35.190.24.218
mnemonic passive DNS ajax.googleapis.com (1) 12905 2013-06-10 06:53:41 UTC 2022-10-03 09:23:29 UTC 216.58.207.202
mnemonic passive DNS sync.bumlam.com (2) 3243 2015-08-10 21:04:25 UTC 2022-10-03 04:56:36 UTC 31.172.81.160
mnemonic passive DNS log.strm.yandex.ru (3) 17573 2018-03-28 21:12:20 UTC 2022-10-03 09:35:06 UTC 87.250.251.15
mnemonic passive DNS www.tns-counter.ru (3) 9129 2013-04-11 10:27:46 UTC 2022-10-03 06:49:04 UTC 194.226.130.229
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-03 08:31:09 UTC 142.250.74.10
mnemonic passive DNS mc.yandex.ru (18) 2672 2017-01-29 05:34:36 UTC 2022-10-03 08:50:22 UTC 93.158.134.119
mnemonic passive DNS pub-eu.p.otm-r.com (1) 53405 2019-08-16 08:41:00 UTC 2022-10-01 12:27:31 UTC 178.63.43.235
mnemonic passive DNS r3.o.lencr.org (23) 344 2020-12-02 08:52:13 UTC 2022-10-03 07:33:36 UTC 23.36.76.226
mnemonic passive DNS ad.qvol.ru (1) 0 2022-06-09 11:29:41 UTC 2022-09-30 15:59:55 UTC 5.188.150.102 Unknown ranking
mnemonic passive DNS x01.aidata.io (2) 12188 2016-03-31 15:36:46 UTC 2022-10-03 09:35:06 UTC 89.108.120.68
mnemonic passive DNS static.skwstat.ru (1) 91014 2021-01-08 17:30:15 UTC 2022-10-03 09:35:08 UTC 185.40.155.13
mnemonic passive DNS ru.viadata.store (2) 201540 2021-04-27 12:05:38 UTC 2022-09-30 15:59:59 UTC 23.111.211.20
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-03 09:19:21 UTC 142.250.74.164
mnemonic passive DNS dsp-eu.surfy.dev (4) 103553 2022-01-16 14:52:11 UTC 2022-08-13 05:48:07 UTC 195.201.83.102
mnemonic passive DNS thesame.tv (1) 73693 2016-01-24 02:56:53 UTC 2022-10-03 09:35:08 UTC 5.188.150.42
mnemonic passive DNS ocsp.globalsign.com (15) 2075 2012-05-25 06:20:55 UTC 2022-10-03 04:58:17 UTC 104.18.20.226
mnemonic passive DNS imasdk.googleapis.com (1) 11661 2014-10-30 17:42:18 UTC 2022-10-03 09:22:30 UTC 142.250.74.138
mnemonic passive DNS ocsp2.globalsign.com (6) 1544 2012-05-21 07:12:19 UTC 2022-10-03 09:25:21 UTC 104.18.20.226
mnemonic passive DNS cdn.relap.io (2) 66191 2017-01-30 06:02:34 UTC 2022-10-03 09:35:08 UTC 95.163.37.254
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-03 08:07:24 UTC 143.204.55.49
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-03 07:41:14 UTC 34.120.237.76
mnemonic passive DNS inplayer.ru (1) 150669 2017-08-10 15:57:11 UTC 2022-09-29 19:48:45 UTC 139.45.228.111
mnemonic passive DNS rurtb.viadata.store (1) 0 2022-06-10 18:40:36 UTC 2022-09-30 15:59:55 UTC 23.111.115.236 Domain (viadata.store) ranked at: 47936
mnemonic passive DNS s0.2mdn.net (1) 263 2013-05-06 20:18:49 UTC 2022-10-03 06:07:02 UTC 142.250.74.70
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-10-03 07:33:02 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-03 05:10:27 UTC 34.208.31.97
mnemonic passive DNS i.playground.ru (6) 525809 2017-01-30 11:38:20 UTC 2022-10-02 18:07:28 UTC 212.42.38.199
mnemonic passive DNS mediatoday.ru (1) 136083 2013-05-20 20:53:32 UTC 2022-10-03 07:19:41 UTC 139.45.228.100
mnemonic passive DNS sm.rtb.mts.ru (3) 27154 2019-03-26 14:10:01 UTC 2022-10-03 09:35:06 UTC 217.66.147.33
mnemonic passive DNS www.playground.ru (27) 403868 2012-08-10 11:54:38 UTC 2022-10-02 18:07:26 UTC 212.42.38.200
mnemonic passive DNS bd.skwstat.ru (1) 0 2021-07-05 10:22:58 UTC 2022-10-03 07:23:38 UTC 45.147.178.116 Domain (skwstat.ru) ranked at: 70878
mnemonic passive DNS playreplay.me (4) 60979 2015-10-26 03:49:07 UTC 2022-10-03 09:35:08 UTC 92.223.103.107
mnemonic passive DNS ad.mail.ru (11) 7643 2012-06-22 19:38:09 UTC 2022-10-03 06:54:58 UTC 95.163.41.56
mnemonic passive DNS yastatic.net (8) 72282 2014-03-11 07:15:28 UTC 2022-10-03 07:02:47 UTC 178.154.131.215
mnemonic passive DNS www.googletagservices.com (1) 169 2021-02-14 03:54:38 UTC 2022-10-03 09:15:21 UTC 142.250.74.130
mnemonic passive DNS avatars.mds.yandex.net (2) 6545 2014-12-15 11:43:59 UTC 2022-10-03 06:51:44 UTC 87.250.247.183
mnemonic passive DNS code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2022-10-03 04:56:55 UTC 69.16.175.10
mnemonic passive DNS sape-sync.rutarget.ru (1) 173587 2018-08-07 14:11:47 UTC 2022-10-03 09:35:06 UTC 87.242.93.112
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-03 04:57:28 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS ut.rktch.com (1) 41215 2018-06-04 10:29:18 UTC 2022-10-03 02:27:44 UTC 89.108.97.2
mnemonic passive DNS ocsp.pki.goog (17) 175 2017-06-14 07:23:31 UTC 2022-10-03 07:14:52 UTC 142.250.74.3
mnemonic passive DNS kraken.rambler.ru (7) 22756 2016-07-11 17:32:30 UTC 2022-10-03 07:03:08 UTC 81.19.89.17
mnemonic passive DNS status.geotrust.com (1) 3662 2017-12-01 08:55:31 UTC 2022-10-03 05:05:31 UTC 93.184.220.29
mnemonic passive DNS adservice.google.no (1) 96969 2017-09-26 14:23:08 UTC 2022-10-03 06:02:11 UTC 142.250.74.162
mnemonic passive DNS instreamvideo.ru (6) 70941 2014-10-12 15:22:42 UTC 2022-09-30 15:59:46 UTC 139.45.228.102
mnemonic passive DNS fcgi4.gnezdo.ru (3) 69027 2020-06-11 12:55:54 UTC 2022-10-03 09:35:06 UTC 93.95.102.105
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-10-03 08:03:33 UTC 104.18.32.68
mnemonic passive DNS cm.p.altergeo.ru (1) 44603 2015-12-17 02:12:41 UTC 2022-10-03 09:35:07 UTC 138.201.139.144
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-03 06:02:10 UTC 74.125.131.157
mnemonic passive DNS cdn-rtb.sape.ru (2) 53547 2014-10-06 19:55:24 UTC 2022-10-03 02:27:42 UTC 95.181.171.231
mnemonic passive DNS nr.bidderstack.com (1) 352019 2019-02-11 14:43:50 UTC 2022-10-03 08:23:37 UTC 46.4.70.80
mnemonic passive DNS counter.yadro.ru (2) 7275 2014-09-09 18:41:17 UTC 2022-10-03 07:03:08 UTC 88.212.201.204
mnemonic passive DNS ssp-rtb.sape.ru (3) 31166 2016-02-02 17:01:03 UTC 2022-10-03 07:34:04 UTC 193.3.184.200
mnemonic passive DNS adfox-hb-bidder.rutarget.ru (1) 89604 2020-10-08 14:24:25 UTC 2022-10-02 18:07:29 UTC 45.9.27.120
mnemonic passive DNS sp.ohmy.bid (1) 0 2022-07-26 15:24:33 UTC 2022-09-30 15:59:55 UTC 167.235.10.120 Unknown ranking
mnemonic passive DNS ads.betweendigital.com (4) 1571 2012-10-30 05:08:04 UTC 2022-10-03 09:35:04 UTC 188.42.191.196
mnemonic passive DNS st.top100.ru (2) 27374 2014-03-27 16:20:51 UTC 2022-10-03 07:33:45 UTC 81.19.89.17


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 212.42.38.245

Date UQ / IDS / BL URL IP
2022-11-26 08:10:09 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/69x0h36zmiywolttmzebl (...) 212.42.38.245
2022-11-26 08:06:11 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/b07q27rnllzt3j4e4o7r7 (...) 212.42.38.245
2022-11-26 07:59:20 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/izn6iyay5bsjkq1kcoibg (...) 212.42.38.245
2022-11-26 02:36:51 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/2zejwbfi02bt4306cy114 (...) 212.42.38.245
2022-11-25 20:15:50 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/fncsarkgt83ciy91gx2dq (...) 212.42.38.245

Last 5 reports on ASN: Teslatel LLC

Date UQ / IDS / BL URL IP
2022-11-26 08:10:09 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/69x0h36zmiywolttmzebl (...) 212.42.38.245
2022-11-26 08:06:11 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/b07q27rnllzt3j4e4o7r7 (...) 212.42.38.245
2022-11-26 07:59:20 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/izn6iyay5bsjkq1kcoibg (...) 212.42.38.245
2022-11-26 02:36:51 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/2zejwbfi02bt4306cy114 (...) 212.42.38.245
2022-11-25 20:15:50 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/fncsarkgt83ciy91gx2dq (...) 212.42.38.245

Last 5 reports on domain: gamedl.ru

Date UQ / IDS / BL URL IP
2022-11-26 08:10:09 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/69x0h36zmiywolttmzebl (...) 212.42.38.245
2022-11-26 08:06:11 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/b07q27rnllzt3j4e4o7r7 (...) 212.42.38.245
2022-11-26 07:59:20 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/izn6iyay5bsjkq1kcoibg (...) 212.42.38.245
2022-11-26 02:36:51 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/2zejwbfi02bt4306cy114 (...) 212.42.38.245
2022-11-25 20:15:50 +0000
0 - 0 - 1 dl1a.gamedl.ru/download/fncsarkgt83ciy91gx2dq (...) 212.42.38.245

No other reports with similar screenshot



JavaScript

Executed Scripts (122)


Executed Evals (1)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 6e4c074bba968f3a2899edcbccf9e893ebdad7a5a533463e4d9630f28f3baed1

                                        (a = 0) => {
    let b;
    const c = class {};
}
                                    

Executed Writes (5)

#1 JavaScript::Write (size: 178, repeated: 1) - SHA256: e11c02a698dc95aef89b90141135f738d213e55aa26490b596e6944f75b1b972

                                        < body > < script onload = "window.onVPAIDLoad();"
src = "
https: //cdn-rtb.sape.ru/js/vast/vpaid-ssp.min.js
    "></script></body>
                                    

#2 JavaScript::Write (size: 167, repeated: 1) - SHA256: 48b4257e3f0abb44785bad562d609671b2dd06c3c025aa22e455367a75ce8cf6

                                        < body > < script onload = "window.onVPAIDLoad();"
src = "
https: //cdn.punchmedia.ru/v20/vpaid.js?v=66 
    "></script></body>
                                    

#3 JavaScript::Write (size: 192, repeated: 1) - SHA256: 95dad15a6e436bfbfe76631811f6ea6f8d90bc5c883911df4f78f29d0f45f083

                                        < body > < script onload = "window.onVPAIDLoad();"
src = "
https: //instreamvideo.ru/storage/linear/test/_vpaid_0923_01.js
    "></script></body>
                                    

#4 JavaScript::Write (size: 112, repeated: 1) - SHA256: f7886e916f5c96b89426c2fb02be3ebcd8aeb352e520fe4687cf3f143cbf2465

                                        < body > < script onload = "window.onVPAIDLoad();"
src = "https://dsp-eu.surfy.dev/static/vpaid_1.0.js" > < /script></body >
                                    

#5 JavaScript::Write (size: 437, repeated: 1) - SHA256: 638a96efa77a245aeaf9b1ec2fc4b9bc5312f77155f8ac3bef269d0f153d4b14

                                        < script src = https: //pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js></script>
    < script >
    window.addEventListener('message', function(e) {
        if (e.data.type === 'innerBridgeIframeLoaded') {
            window.frameElement.parentElement
                .querySelector('#goog_2144970398').contentWindow
                .postMessage({
                    type: 'omidIframeLoaded'
                }, '*');
        }
    }); < /script>
                                    


HTTP Transactions (378)


Request Response
                                        
                                            GET /download/b8m26hdwtklvk3xyafr57p03p3lmv1rn/H1/cb076c23c3b4f29439d60689861dac26371ec17b2a793770ed033a8fb0340456/1180514/europe.zip HTTP/1.1 
Host: dl1a.gamedl.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         212.42.38.245
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: sfhttpd/2.0
Date: Mon, 03 Oct 2022 09:35:01 GMT
Connection: keep-alive
Content-Length: 146
Location: https://www.playground.ru/redirect/post/1180514


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size:   146
Md5:    51fbe7595e0737078e15fcbce7d608b8
Sha1:   93c962b3283275b2b7a1b7fd79120631912fb50e
Sha256: 9d6ebf2628ced64a8737bda681f308eaddf0f32e1698eff17b54d3c45343cd5b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5824
Expires: Mon, 03 Oct 2022 11:12:05 GMT
Date: Mon, 03 Oct 2022 09:35:01 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 08:59:51 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nh3qvHHDWCLJDY0u4mbS0-LscPnizbZUf57Pt3v7uYDYln6Fu7DX5w==
Age: 2110


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 03 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 78HM4tr9G34UCwE77DhaPbT0jIcQgAgcR4j9uGCvn3DDUPEqN_lOHw==
age: 14794
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:01 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "97A3D657984D5F81A624FDCAAE5292C19E1F1A7C3327065E4A47705C00521BB7"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2192
Expires: Mon, 03 Oct 2022 10:11:33 GMT
Date: Mon, 03 Oct 2022 09:35:01 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 03 Oct 2022 09:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 03 Oct 2022 09:57:26 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9AqZg-zl9Xs6Hw_oVDWHSF6aIL-qCfRArvAPCfQm9EKb4O1BezxJYg==
Age: 328


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6223
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 09:35:02 GMT
Last-Modified: Mon, 03 Oct 2022 07:51:19 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /jquery-migrate-3.3.2.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 03 Oct 2022 09:35:02 GMT
content-encoding: gzip
content-length: 4165
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-2bd8"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664789702.dop216.sk1.t,1664789702.cds238.sk1.hn,1664789702.cds260.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4165
Md5:    2fe098cbdfcb2c171cd6e4fc7eb595c5
Sha1:   8e1bf93a92cd550526d91c1321711700f0978078
Sha256: 7d6f6e40a91e440cf57e67f4e03a6a5d5ba4549e35117d31f0497eeadfce9d5c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/api.js?6853 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: application/x-javascript
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 549
last-modified: Wed, 16 Feb 2022 16:23:42 GMT
etag: "620d250e-225"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   549
Md5:    c685ae2c9855adf657ba27742742e3e9
Sha1:   2284e144ca58ac26f842623e1d8027693e799e82
Sha256: 28e8d0c9daed30967f828118e7238284da69ab39f1bc490bc61a02db5031e09d
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Content-Length: 938
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:28:44 GMT
ETag: "f46f6ccc413a8efe8e16ed5b8eb41d751ab315cc"
Last-Modified: Mon, 03 Oct 2022 07:28:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af77ffecb50f-OSL

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.202
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 10:39:21 GMT
expires: Fri, 29 Sep 2023 10:39:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 341741
last-modified: Fri, 08 May 2020 07:05:03 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            GET /img/ui/playground-logo-3d.png HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 3478
last-modified: Fri, 13 Nov 2020 13:16:13 GMT
etag: "5fae871d-d96"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 69, 8-bit colormap, non-interlaced\012- data
Size:   3478
Md5:    81cd05ad0550e6c375f317ca9ba2921a
Sha1:   72c77a5237809e1bef59dfa271651db9218242ad
Sha256: f0e5cbbcf10a8f0ec89aa0ead8e3e95c5b95886e921a350e8573ecce376e277a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/logo-mobile.svg HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 10271
last-modified: Thu, 04 Aug 2022 13:08:11 GMT
etag: "62ebc4bb-281f"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (443)
Size:   10271
Md5:    73ac8ee32f5cbcd45d9f89f1c1e52ff0
Sha1:   481b1e6bd70cd0fd6e22bd04fc259521d2461f1d
Sha256: f4cf899262d1ea4a337429212b1b2c7e69cc1df07d8a3768d8c2a33edb59853e
                                        
                                            GET /img/avatar-blank.jpg HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 554
last-modified: Mon, 24 Aug 2020 12:09:40 GMT
etag: "5f43ae04-22a"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 50x50, components 3\012- data
Size:   554
Md5:    c76330068951aba07f0a9e918da053e3
Sha1:   0991e7bffaf27a4915d89b1157677b75f75a3d89
Sha256: 83089a5335c4c13dab471b9836eb64741ac5416773961d3401979f3c8211044c
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p1QKzLe0JmL9R1A4PGQoIA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.208.31.97
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /uJF4hkzjhUkYdzbr42j+lCF0dY=

                                        
                                            GET /css2?family=Roboto+Condensed:wght@400;700&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 03 Oct 2022 09:35:02 GMT
date: Mon, 03 Oct 2022 09:35:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1104
Md5:    69c1bdf056eac114ec25ab4d60ba15c7
Sha1:   cc19c4b76751c6318f1b75fe461847ce575028e9
Sha256: 53ab2cb83ee0ed43564b54f4d7fb065666c9fba4a41723b11861c70695b4b6b1
                                        
                                            GET /e/8NE__GOh9SdL6ryLK4GVbA.jpeg?120x166 HTTP/1.1 
Host: i.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         212.42.38.199
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 10945
last-modified: Mon, 05 Sep 2022 13:51:26 GMT
accept-ranges: bytes
expires: Wed, 02 Nov 2022 09:35:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 120x166, components 3\012- data
Size:   10945
Md5:    ae4a7f14bfeb5ff5eab3477b59f68b40
Sha1:   b98d1e509df6c331c5a261028dad4a0eb87f4695
Sha256: 470871bd5335486bda17ce0bcdba6029edecc4d7572ee8ef6b3784283b877dba
                                        
                                            GET /gtm.js?id=GTM-NGFSGD9 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 03 Oct 2022 09:35:02 GMT
expires: Mon, 03 Oct 2022 09:35:02 GMT
cache-control: private, max-age=900
last-modified: Mon, 03 Oct 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50572
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (10264)
Size:   50572
Md5:    0840ac61ed03c7a6ad37e3950aa4e0d9
Sha1:   46d9c3fbe26d315674df132adead3122864dc701
Sha256: f2fb40380e044d7e4525662f30a4c8d3866a3a5bf4d7029c79d43f820ac83048
                                        
                                            GET /a/dIUWyo3r5FNQMPPiOi1NSQ.jpeg?26x26 HTTP/1.1 
Host: i.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         212.42.38.199
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 1150
last-modified: Thu, 25 Aug 2022 01:40:21 GMT
accept-ranges: bytes
expires: Wed, 02 Nov 2022 09:35:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 26x26, components 3\012- data
Size:   1150
Md5:    be895117ceddd28571f2b6d1523ace01
Sha1:   beccc727c8e53b90d0e8d7d83cc10a26e6f3e19b
Sha256: 9775d883d3ffa4973f41d64e2690426ab649fe856977d9716f48f6707b2d66f3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/vendor/bootstrap/3.3.4/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.playground.ru/css/vendor/bootstrap/3.3.4/css/bootstrap.min.css
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: application/octet-stream
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 18028
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: "5e209521-466c"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Size:   18028
Md5:    448c34a56d699c29117adc64c43affeb
Sha1:   ca35b697d99cae4d1b60f2d60fcd37771987eb07
Sha256: fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
                                        
                                            GET /share2/share.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:02 GMT
access-control-allow-origin: *
cache-control: public, max-age=216009
content-encoding: br
etag: W/"d62795f125042b279514d9fb23f826fc"
expires: Wed, 05 Oct 2022 21:30:09 GMT
last-modified: Tue, 21 Jun 2022 14:09:09 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-content-type-options: nosniff
x-robots-tag: noindex, noarchive, nofollow
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64803), with no line terminators
Size:   38878
Md5:    cdf5816415542af2de72bf72eb1ad5f4
Sha1:   3fa32df9e13d278b43bb287e35db5fe5f1096da2
Sha256: 173b60f9227dbc3ba4f8d28c4b8d5320a594c6bd6715f925c4e83ec236d77449
                                        
                                            GET /css/vendor/fancybox/jquery.fancybox.min.css?6853 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
last-modified: Thu, 28 Apr 2022 08:40:46 GMT
etag: W/"626a530e-31fb"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3967
Md5:    71ff66bb7a63374309ce70ca77263191
Sha1:   6beada5352ec89cbde241ff0a5ff642f4fb73478
Sha256: 74a8fd2fc6ddd5142819c52a558f431f23445375474e05ce2bbc9722e4e7bdca
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 16:04:44 GMT
expires: Sat, 30 Sep 2023 16:04:44 GMT
cache-control: public, max-age=31536000
age: 235818
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Size:   15700
Md5:    3d7f7413fca69bff4d231ebdc50aaab0
Sha1:   cb18e7943b6a8a0e3672d7242197c19a226b92e8
Sha256: 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
                                        
                                            GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 23:14:15 GMT
expires: Wed, 27 Sep 2023 23:14:15 GMT
cache-control: public, max-age=31536000
age: 469247
last-modified: Tue, 19 Apr 2022 18:44:23 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Size:   9692
Md5:    d572b531f0823555818998b466028e08
Sha1:   788073fb7656c7b44a3d67468fc355ceb618290e
Sha256: bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
                                        
                                            GET /css/main.css?6853 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
last-modified: Fri, 30 Sep 2022 13:18:54 GMT
etag: W/"6336ecbe-1d684"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   36419
Md5:    cd79664d93e546106192405818e7ff2a
Sha1:   fae2f8bc40e2e66af77237009544e9f5b2a1ce37
Sha256: f8236cb272d50fc2fd1a37fdb2eecabdb8b1a7ee99120bfa885f94f24780e613
                                        
                                            GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 22:17:40 GMT
expires: Wed, 27 Sep 2023 22:17:40 GMT
cache-control: public, max-age=31536000
age: 472642
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Size:   15660
Md5:    d7b0b953a50fddaa88089b5b787cf719
Sha1:   2f85bc568b27659a3d6452f58f9fd7678450326d
Sha256: e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
                                        
                                            GET /css/plugins-styles.css?6853 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
last-modified: Thu, 16 Jan 2020 16:53:53 GMT
etag: W/"5e209521-ed5c"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7504
Md5:    20e67b69aeb9e467972be26a5f15a50e
Sha1:   4ceb3b2eeebbb09d62300a9325724ebabbee8590
Sha256: e9358bfdaa3338025c6368bc5f5d4a6c96620e76ca44ed8a6eb2f7bfdeb6c7f5
                                        
                                            GET /e/DufzRVVe3mJ-7tb0pLh7Nw.jpeg.webp?250x140 HTTP/1.1 
Host: i.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         212.42.38.199
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 5840
last-modified: Mon, 05 Sep 2022 13:51:26 GMT
accept-ranges: bytes
expires: Wed, 02 Nov 2022 09:35:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 250x140, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   5840
Md5:    bbca568de4d3ce8ad442086bf2c1b4d7
Sha1:   759ac8fea1b48d1bf3c239bbb885e73b28c15515
Sha256: 6947dc6ca36cb42f8fd02fe647a70350f8522d78f2e7ce8c1a83b15fd46674f8
                                        
                                            GET /css/font-icons.css?6853 HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
last-modified: Mon, 02 Nov 2020 15:47:03 GMT
etag: W/"5fa029f7-1b67"
expires: Mon, 10 Oct 2022 09:35:02 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2388
Md5:    50a57e4173c4087db20f7d9d0a3fb7c2
Sha1:   45323f18f4a5c6a8dda4766096f7fab4994e371c
Sha256: fad276201d680bd2e2d16756f20baddd1f5bb7e45bb89b2102da21a251599d2b
                                        
                                            GET /e/9lWnoIkrLh81N8mjBQHtiw.jpeg.webp?250x140 HTTP/1.1 
Host: i.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         212.42.38.199
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 12838
last-modified: Mon, 05 Sep 2022 13:51:26 GMT
accept-ranges: bytes
expires: Wed, 02 Nov 2022 09:35:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 250x140, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   12838
Md5:    d1f29c46ba218c7ea52c8b2888814c2a
Sha1:   49f2c84c2a3df185407f17c5a3e400e44f250c02
Sha256: 722574291b659e663a3ed13fa649faa3aff1eaa5de58407d3920e1128c938e0a
                                        
                                            GET /p/5vPfDweYrpUtgE3_MPkZpQ.jpeg?800-auto HTTP/1.1 
Host: i.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         212.42.38.199
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:02 GMT
content-length: 57260
last-modified: Thu, 25 Aug 2022 21:35:19 GMT
accept-ranges: bytes
expires: Wed, 02 Nov 2022 09:35:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 800x450, components 3\012- data
Size:   57260
Md5:    773641e19f51411e2ef316cc69181d17
Sha1:   3be1253dc9f97340cac09e5ac0961eb56d3dcfe7
Sha256: 9450aadc0ade4850f942fbe4631fb42054f581387b0366891fe5723ee297739c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5892
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 09:35:03 GMT
Last-Modified: Mon, 03 Oct 2022 07:56:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 07 Oct 2022 05:32:03 GMT
ETag: "5fee443dbcc9628a5c035796526ba92b671ac620"
Last-Modified: Mon, 03 Oct 2022 05:32:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2456
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af7d596db50f-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    15bf995c3c422aed94133d52c73790a9
Sha1:   5fee443dbcc9628a5c035796526ba92b671ac620
Sha256: 9fad4072e4d6cb88b1db9a8d1f143f37c96819c896cfcc14ca65e094db185828
                                        
                                            GET /top100/top100.js HTTP/1.1 
Host: st.top100.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         81.19.89.17
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.19.4
date: Mon, 03 Oct 2022 09:35:03 GMT
vary: Accept-Encoding
last-modified: Wed, 14 Sep 2022 11:17:00 GMT
x-rgw-object-type: Normal
etag: W/"a8cc5f62f254bff5f2c1919a453a47b9"
x-amz-request-id: tx00000000000024a049e93-00633aaaf9-f87fab-default
expires: Mon, 03 Oct 2022 10:35:03 GMT
cache-control: max-age=3600
set-cookie: proto_uid=1CIAAMesOmNBC20aAc80+wB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   31585
Md5:    51ed3fc0f55c7930c77abb6e29bbfd63
Sha1:   8d277e10be25dfa18d62a0e7ad14e97e1a847b54
Sha256: 4059acf2a8ee92cf0083ccbfcef49042e306f8e1c5cdb9581bd8327287d3e9aa
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 03 Oct 2022 08:41:09 GMT
expires: Mon, 03 Oct 2022 10:41:09 GMT
cache-control: public, max-age=7200
age: 3234
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/icons/icon-192x192.png HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c; adtech_uid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb%3Aplayground.ru; top100_id=t1.539979.1824652450.1664789703157; t3_sid_539979=s1.1345214393.1664789703160.1664789703312.1.2.2.1; last_visit=1664789703161%3A%3A1664789703161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 19912
last-modified: Thu, 29 Jul 2021 13:51:49 GMT
etag: "6102b275-4dc8"
expires: Mon, 10 Oct 2022 09:35:03 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   19912
Md5:    41665a82a620f3d2739fa8a9a363201d
Sha1:   cf25645919a8d72020fdb396db2af337b5a7ccfa
Sha256: 23f62fcd57e69f4284ba9ea76c979965dcbb91e7f6e0fd281b9ff598ec872e1a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.playground.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514
Cookie: pg_device=Tu3-ikNyYJ7v5VJS88oFeTS4fdhRLZ2pcdgBZCtPmQ8; pg_session=ctbppt84mmhsd6idloqpnbfthe1ep54c; adtech_uid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb%3Aplayground.ru; top100_id=t1.539979.1824652450.1664789703157; t3_sid_539979=s1.1345214393.1664789703160.1664789703312.1.2.2.1; last_visit=1664789703161%3A%3A1664789703161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         212.42.38.200
HTTP/2 200 OK
content-type: image/x-icon
                                        
server: nginx/1.16.1
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 1150
last-modified: Fri, 28 Feb 2020 15:19:19 GMT
etag: "5e592f77-47e"
expires: Mon, 10 Oct 2022 09:35:03 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    3e116815ee2bb83ab98b90b51e334e01
Sha1:   1b2a84b67230331aac911a3d10aa84ef2ed76c0e
Sha256: 7adf84b0a8c865608e4e9979c9bdce1702a1f7d085b2be4c33bd15cc4f8d817e
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 939
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:21:02 GMT
ETag: "d4269e211dce6596097d25d12c9bce1328928dfc"
Last-Modified: Mon, 03 Oct 2022 07:21:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3588
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af7f1cc5b50f-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 939
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:21:02 GMT
ETag: "d4269e211dce6596097d25d12c9bce1328928dfc"
Last-Modified: Mon, 03 Oct 2022 07:21:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3588
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af7f2feab506-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 939
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:05:33 GMT
ETag: "636560b86192e2873486c0076fe36c373cf5780d"
Last-Modified: Mon, 03 Oct 2022 07:05:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2620
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af7f28ed1bfa-OSL

                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.226
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Mon, 03 Oct 2022 09:35:03 GMT
expires: Mon, 03 Oct 2022 09:35:03 GMT
cache-control: private, max-age=3600
etag: 4330102722691689125
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 54433
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2910)
Size:   54433
Md5:    9b9162971faade5b3c4f1c9be48202f8
Sha1:   b589d06392ab5396d9a78df0281007571a512b4c
Sha256: ab395045c5d5d4e8648f1bafc6304f11ae58b065209181fe32e3d8b8e660b62a
                                        
                                            POST /j/collect?v=1&_v=j97&a=1526605482&t=pageview&_s=1&dl=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&ul=en-us&de=UTF-8&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=1003609430&gjid=970250931&cid=332363450.1664789704&tid=UA-1566012-1&_gid=1213792233.1664789704&_r=1&gtm=2wg9s0NGFSGD9&cd1=DanyaKrest2010&cd2=copy&cd3=%D0%9F%D0%BE%D0%BB%D1%8C%D0%B7%D0%BE%D0%B2%D0%B0%D1%82%D0%B5%D0%BB%D1%8C%D1%81%D0%BA%D0%B8%D0%B9%20%D0%BF%D0%BE%D1%81%D1%82&cd5=NOTauthorized&cd7=file&cd9=WorldBox%20-%20God%20Simulator&cd10=20220218&cm2=20220218&z=596720163 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.playground.ru
date: Mon, 03 Oct 2022 09:35:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 938
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:41:23 GMT
ETag: "18c1cef153c36c4d81950e494f3364130275390a"
Last-Modified: Mon, 03 Oct 2022 07:41:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 614
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af7f2e1ab50c-OSL

                                        
                                            GET /logo?14.1 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         88.212.201.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.17.9
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 276
Connection: keep-alive
Expires: Sat, 02 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31\012- data
Size:   276
Md5:    13caf4141289b633ae1ab40937ebaebf
Sha1:   4cf77b8ad2c8466138d7fbf4d5391f4b24a3f387
Sha256: 4659c6963227afeda7ef42b8c8982944834032c78ac6f578b9c9c90085ee9aaa
                                        
                                            GET /hit;PlayGround?r;s1280*1024*24;uhttps%3A//www.playground.ru/worldbox_god_simulator/file/worldbox_god_simulator_evropa-1180514;h%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20WorldBox%20-%20God%20Simulator%20%22%u0415%u0432%u0440%u043E%u043F%u0430%22%20-%20%u041A%u0430%u0440%u0442%u044B;0.979518936870204 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         88.212.201.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.17.9
Date: Mon, 03 Oct 2022 09:35:03 GMT
Content-Length: 43
Connection: keep-alive
Expires: Sat, 02 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /cnt/?et=pv&v=3.10.9&pid=539979&tid=t1.539979.1824652450.1664789703157&rid=1664789703.157-1110253304&fid=pA8AAENKs1er0heJAXvnWwA%3D&fip=pA8AAENKs1dky%2B7aATvR3QA%3D&aduid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb&aduidsc=playground.ru&stid=1345214393_1664789703160&sn=1&sen=1&en=1&ce=1&bs=1268x939&rf&pt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&ct=web&url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&lv&exp=%5B%5B%22exp_bot%22%2C%22split_a%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&eid=371597033111688&meta=%7B%22is_first%22%3A1%7D&rn=497439244 HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         81.19.89.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.19.4
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 1kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAMesOmNhCs+VAZqvGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ proto_uid=1CIAAMesOmNhCs+VAZqvGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /iframe_api HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.142
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-content-type-options: nosniff
expires: Mon, 03 Oct 2022 09:35:03 GMT
date: Mon, 03 Oct 2022 09:35:03 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=uVQrtN_bpBU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none VISITOR_INFO1_LIVE=AKvO0-IuFFE; Domain=.youtube.com; Expires=Sat, 01-Apr-2023 09:35:03 GMT; Path=/; Secure; HttpOnly; SameSite=none CONSENT=PENDING+605; expires=Wed, 02-Oct-2024 09:35:03 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (509)
Size:   959
Md5:    ce8e3ef270cad40bda296b775d7b5369
Sha1:   6cfe5ea8671ceef846cb96d152184b1829be4a6c
Sha256: 4033ec16c332e03b7fc7945b9d985bbbd9e5bbcb47f43244ce0d472f3413acff
                                        
                                            GET /V13a***R%3E*playground_ru/ru/UTF-8/tmsec=playground_total/545241422 HTTP/1.1 
Host: www.tns-counter.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         194.226.130.229
HTTP/2 302 Found
content-type: image/gif
                                        
server: ms-counter-3.3.5/1.20.2
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 0
location: https://www.tns-counter.ru/V13b***R%3E*playground_ru/ru/UTF-8/tmsec=playground_total/545241422
set-cookie: guid=4945043D633AACC7X1664789703; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
strict-transport-security: max-age=2678400
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 72341
date: Mon, 03 Oct 2022 09:35:03 GMT
access-control-allow-origin: *
etag: "633583ac-11a95"
expires: Mon, 03 Oct 2022 10:35:03 GMT
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Size:   72341
Md5:    7a68c8644032413981e4ba5bc0d66c4a
Sha1:   2d46ca8055e8577ae7138140e34a6e633434973c
Sha256: e0573e9a9cbfc3f00a921fa64c50270f5941a1ebb253ab70af2cc0dac45cb0d5
                                        
                                            GET /ads/system/header-bidding.js HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         77.88.55.66
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=Yi86Rp5fnxL5Hyfj23tfS3rhBQ6mdFo2x9ZFcW+rADNBNhHZnJpziBGnLlw3uAWNhNyNczJ0lkWrNldB8QHGHkKGep8=; Path=/; Domain=.yandex.ru; Expires=Wed, 02-Oct-2024 09:35:03 GMT; SameSite=None; Secure; HttpOnly
expires: Mon, 03 Oct 2022 10:35:03 GMT
x-yandex-req-id: 1664789703592918-7171902593384590566-sas3-0712-43f-sas-l7-balancer-8080-BAL-6611
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   32549
Md5:    bed4fb730fd5bedeab93c78684170e91
Sha1:   8a6ce5c4e4fccaf348ec0af287946b7587ad9fe3
Sha256: 92bfa322075a669167a5fcf9cc0bd5614a98621f3aa6660b939151ec07d0a04b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3188
Expires: Mon, 03 Oct 2022 10:28:11 GMT
Date: Mon, 03 Oct 2022 09:35:03 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf3117fe-8653-4f81-81ca-39c33b5cbd05.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6460
x-amzn-requestid: 23655e0f-f899-4f3d-bac1-070fed558fc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXQ4EnmIAMFjAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a059f-1e08b5111f56ec1163e4eb71;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xlSSCE_5COODqespy_6BaVeb5tbGJYUHSz0AD70TSC2K-87bOH7enA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 22:17:07 GMT
age: 40676
etag: "0e9bfd1a3a8f1643aa0b664706e0e45552dbbfc7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6460
Md5:    87d9e7d5b408493b820d35eff2318657
Sha1:   0e9bfd1a3a8f1643aa0b664706e0e45552dbbfc7
Sha256: 6c1d246a7f024b836b4504d2acfaafe8617cc4384ef9c4ba5095ddd6107ad7cb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3188
Expires: Mon, 03 Oct 2022 10:28:11 GMT
Date: Mon, 03 Oct 2022 09:35:03 GMT
Connection: keep-alive

                                        
                                            GET /ads/system/context.js HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         77.88.55.66
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=HBYsOrJ31lCsMiu+rjJJqhUPNP6HsAFy92hfixaxDOU/jeYgdVNV6ggSbokmQtumEOaUOk3iHRDWtq/pwP/xAgw+zeE=; Path=/; Domain=.yandex.ru; Expires=Wed, 02-Oct-2024 09:35:03 GMT; SameSite=None; Secure; HttpOnly
expires: Mon, 03 Oct 2022 10:35:03 GMT
x-yandex-req-id: 1664789703590728-1212867863061010469-sas3-0712-43f-sas-l7-balancer-8080-BAL-932
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   101686
Md5:    5a16a8ebf720c9912e6015b390294204
Sha1:   25bf05eb2a3e37c9c4a72a3f61bcdeccb6b19255
Sha256: e5e14eccc5abdf88db7755e40d6bec419f3b3c947a6faeea3f6b696beb86151e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4522
x-amzn-requestid: cc836204-3c4f-48d0-9569-b1622e6d2178
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMVoRH9toAMFwig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334cfce-096ff90412945ca06335e987;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 22:50:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BzgI7sWS7fsSOANaDI0S4qrT_2iIkp2TOt3bPfm56T0m9jmxRFfSIA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 17:50:25 GMT
age: 56678
etag: "58f10485c5273cbed8159c98b9065b192ba3d00b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4522
Md5:    34ba42086104460665f7f4f579235592
Sha1:   58f10485c5273cbed8159c98b9065b192ba3d00b
Sha256: 79f1febc020ab611c5d9a8bc1af237a63420f8215963fd97f6c4b9bccfa17d24
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 04:42:51 GMT
age: 17532
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9083
x-amzn-requestid: fda71fd3-ef25-4a63-94ae-1bfc8aef8d14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXD2H0DIAMFjrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-198915fc17ce3dab571b7575;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BobS2JU-TqDuL8q31SVlerM15cRoMhL1oM5MkL7MVhY9RZG_Ukp5yA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:46:36 GMT
age: 42507
etag: "8118ee462077c291b9d6f1402b85b55a9ceba8c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9083
Md5:    523edd86af4757d0bc5fa5b3b8a3596a
Sha1:   8118ee462077c291b9d6f1402b85b55a9ceba8c2
Sha256: c27de9970317636df8c4a517a9ed38e573235b351bf92c9b8bb1f964cd100031
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F780fc623-fddc-49c7-99c9-1dd66ce64db7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8279
x-amzn-requestid: fed6efac-3419-4ecc-89f8-d4c3e0c22915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWbsHpBIAMFT1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a044a-5fc3bf5b7126d4a835d93e3d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7g6tucmoqeX5RFtet3L9XllP1G6fx4RWt5XqTsVvhtxZnPxV0EVpqA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 22:19:52 GMT
age: 40511
etag: "ced4806b7cc4d08e2c3f1c5e591184f462e86ec2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8279
Md5:    bfb6fbd0b91416a5a7cc7f7d0fcbf27c
Sha1:   ced4806b7cc4d08e2c3f1c5e591184f462e86ec2
Sha256: 9a217da43a32c70ebd39b3076b3c14b16d8931ccebfe5d41139fa706b3b3e149
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5f7661f-9945-4971-aac6-d15570c4d954.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8277
x-amzn-requestid: a7d76241-7da1-4c84-9c73-2e3a71b81b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZTMfEGHiIAMFpmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63378df9-3727a65235e4dbc60cc11cf0;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 00:46:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8n1l3bN8ykztmC-wGNH_w7xASHFplZa2LvHs8psQ146XILdvEHLWgw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 16:41:13 GMT
age: 60830
etag: "43a66cd291d1413d7147a29b2a7b27277a443f0b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8277
Md5:    6a90e53b55500427aed06efa3a9baa8c
Sha1:   43a66cd291d1413d7147a29b2a7b27277a443f0b
Sha256: 2cf5790e81140bc56b46163787f84c54a07f58e90001837624f426aafa8031c5
                                        
                                            GET /partner-code-bundles/659462/7a3e713affeb8e63107b.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 10993
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "e93438a1ba5e64a25634009692dcaa06"
expires: Wed, 02 Oct 2052 16:07:04 GMT
last-modified: Thu, 29 Sep 2022 17:35:57 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (40826)
Size:   10993
Md5:    e93438a1ba5e64a25634009692dcaa06
Sha1:   0e191b0a95124fe2c23e9e6b9f6d453cda877f44
Sha256: 2a452bb0370c0b41714a8ea51d580b0f51bd69f4952ffea1e0aafba004d22624
                                        
                                            GET /V13b***R%3E*playground_ru/ru/UTF-8/tmsec=playground_total/545241422 HTTP/1.1 
Host: www.tns-counter.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.playground.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         194.226.130.229
HTTP/2 200 OK
content-type: image/gif
                                        
server: ms-counter-3.3.5/1.20.2
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /cnt/v2/?event_name=page_view&event_type=base&project_id=539979&request_id=1664789703.157-1110253304&event_id=371597033111688&meta=%7B%22browser_size%22%3A%221268x939%22%2C%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%5C%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%5C%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B%22%2C%22screen_size%22%3A%7B%22cr%22%3A1280%2C%22hr%22%3A1024%7D%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A0%2C%22referer%22%3A%22%22%2C%22is_first%22%3A1%7D&url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&session_id=1345214393_1664789703160&session_number=1&session_event_number=1&tid=t1.539979.1824652450.1664789703157&adtech_uid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb&adtech_uid_scope=playground.ru&fingerprint=pA8AAENKs1er0heJAXvnWwA%3D&fingerprint_ip=pA8AAENKs1dky%2B7aATvR3QA%3D&version=3.10.9&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_a%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=1015336781 HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         81.19.89.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.19.4
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 1kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAMesOmNhCs+VAdSvGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ proto_uid=1CIAAMesOmNhCs+VAdSvGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /partner-code-bundles/659462/b75858ec99fadc4b14bf.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 4463
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "65131f32734a2948df2a8a534b05bac6"
expires: Wed, 02 Oct 2052 16:10:37 GMT
last-modified: Thu, 29 Sep 2022 17:35:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13535)
Size:   4463
Md5:    65131f32734a2948df2a8a534b05bac6
Sha1:   110b57bc4162f07c2b0e80f163cf11e9a6b79743
Sha256: d93632df5d38aa5a99f22698ade01bdab843dcc27b01db958b46480d8f60f89d
                                        
                                            GET /partner-code-bundles/659462/182109b17d885ab3048d.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 18575
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "30aa9f22ec2b7a78d28e9519b59b24cf"
expires: Wed, 02 Oct 2052 16:09:08 GMT
last-modified: Thu, 29 Sep 2022 17:35:57 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65494)
Size:   18575
Md5:    30aa9f22ec2b7a78d28e9519b59b24cf
Sha1:   5083f2953d08a1e5ef948dc124af150198a347d6
Sha256: e8ca4b9e1ff1341b07fdeac70adc570529feb747ffa71660b844ece3caea25cc
                                        
                                            GET /safeframe-bundles/0.83/host.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:03 GMT
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Wed, 02 Oct 2052 16:09:01 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33703), with no line terminators
Size:   8878
Md5:    f80882bf67cf261aa08d636da095149a
Sha1:   3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
Sha256: 4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-1566012-1&cid=332363450.1664789704&jid=1003609430&gjid=970250931&_gid=1213792233.1664789704&_u=YEBAAEAAAAAAAC~&z=822771687 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         74.125.131.157
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.playground.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 03 Oct 2022 09:35:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1A465FAE2C933DB26B9D57986A36B2AEE88A5AC5E9BEB48A3F4675981F429555"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4933
Expires: Mon, 03 Oct 2022 10:57:17 GMT
Date: Mon, 03 Oct 2022 09:35:04 GMT
Connection: keep-alive

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 07 Oct 2022 08:07:08 GMT
ETag: "9256e208c3d9037900c187f589d4d292b6f55fc1"
Last-Modified: Mon, 03 Oct 2022 08:07:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3089
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af826b6cb50f-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    30d81f7814da31d8b2e9e0fcc25c961a
Sha1:   9256e208c3d9037900c187f589d4d292b6f55fc1
Sha256: 1bdf79c105075ed56a70448c30d5bc0fd7fcde68fd0daa1bb792bda022d8cb8c
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 07 Oct 2022 08:07:08 GMT
ETag: "9256e208c3d9037900c187f589d4d292b6f55fc1"
Last-Modified: Mon, 03 Oct 2022 08:07:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3089
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af826d17b506-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    30d81f7814da31d8b2e9e0fcc25c961a
Sha1:   9256e208c3d9037900c187f589d4d292b6f55fc1
Sha256: 1bdf79c105075ed56a70448c30d5bc0fd7fcde68fd0daa1bb792bda022d8cb8c
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 07 Oct 2022 08:07:43 GMT
ETag: "cfc918c1550d254422c52a56bf8eb1e09fecb1cf"
Last-Modified: Mon, 03 Oct 2022 08:07:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 670
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af828b9db50f-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    237ad0ac48793242de89ccd1b01c4679
Sha1:   cfc918c1550d254422c52a56bf8eb1e09fecb1cf
Sha256: f64ef61a9fe9d2b674a8d2903b5330464743b47055353f1d5ea11939c6178462
                                        
                                            GET /partner-code-bundles/659462/04ce7d20e1e265b7689e.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:04 GMT
content-length: 94264
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "d786474a716bc780cf9933753a4aa6ef"
expires: Wed, 02 Oct 2052 16:09:09 GMT
last-modified: Thu, 29 Sep 2022 17:35:57 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   94264
Md5:    d786474a716bc780cf9933753a4aa6ef
Sha1:   aa28576ae50b50f59085afe8acacd480e19c58d8
Sha256: b585b5c0f017c3502dbf4d3c89b64dec1aea9f6026da696912bf6a7aea60c78b
                                        
                                            OPTIONS /getcookie HTTP/1.1 
Host: matchid.adfox.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.playground.ru/
Origin: https://www.playground.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.118
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-headers: accept, accept-encoding, accept-language, cache-control, content-type, dnt, origin, x-requested-with
access-control-allow-credentials: true
date: Mon, 03 Oct 2022 09:35:04 GMT
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://www.playground.ru
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /adfoxhb HTTP/1.1 
Host: ssp-rtb.sape.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 433
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         193.3.184.200
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: openresty
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 11
Connection: keep-alive
Access-Control-Allow-Origin: https://www.playground.ru
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Set-Cookie: sspuid=wQO4xGM6rMgGwAB0KA5qAkrRVLz8nkExQoWWvrO8EoZ+6/26; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   11
Md5:    9cc989d2e211083e0a170316914f1d06
Sha1:   392cd18d051f72b887529ac2998da54749f1338f
Sha256: 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 04:18:19 GMT
Expires: Mon, 10 Oct 2022 04:18:18 GMT
Etag: "64371dce45dc5640a50e0fe5ad8ab51f53e4a288"
Cache-Control: max-age=603090,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 409
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af82ee180b59-OSL

                                        
                                            POST /getcookie HTTP/1.1 
Host: matchid.adfox.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 90
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.118
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 68
access-control-allow-credentials: true
date: Mon, 03 Oct 2022 09:35:04 GMT
timing-allow-origin: *
access-control-allow-origin: https://www.playground.ru
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   68
Md5:    88420e9ae553f9d0714f6e39ae9819b8
Sha1:   ad190607440acc2e645756b4131f21cf16e729f0
Sha256: dcc6ad64155f63a925962d32333776b8428a5891ecedcc37d9b1ae2b33fa439c
                                        
                                            POST /cgi-bin/bid.cgi HTTP/1.1 
Host: pb.adriver.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 504
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         195.209.111.15
HTTP/1.1 204 No Content
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Access-Control-Allow-Origin: https://www.playground.ru
Access-Control-Allow-Credentials: true

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 07 Oct 2022 08:24:48 GMT
ETag: "121e0f608d5fc130b09f3fa84cf8d1872ed47e4b"
Last-Modified: Mon, 03 Oct 2022 08:24:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 458
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af833e3db506-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    fcad79a568e28434d699f057a94f2c15
Sha1:   121e0f608d5fc130b09f3fa84cf8d1872ed47e4b
Sha256: aef0deb1b2b6b2f9e5f95730707e1f5e41f371c1252bf364f6754dc87f8084ed
                                        
                                            POST /bid HTTP/1.1 
Host: adfox-hb-bidder.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 157
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         45.9.27.120
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 11
Connection: keep-alive
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=f4N9ZbIm29i1; Path=/; Domain=.rutarget.ru; Expires=Sat, 01 Apr 2023 09:35:04 GMT; SameSite=None; Secure
Rutarget-SameSite-Cookie: true
Access-Control-Allow-Origin: https://www.playground.ru
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Ssp-Name,Authorization


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   11
Md5:    9cc989d2e211083e0a170316914f1d06
Sha1:   392cd18d051f72b887529ac2998da54749f1338f
Sha256: 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 07 Oct 2022 05:24:09 GMT
ETag: "c4573318a865c85f0674ea6c083c6feb8caf208c"
Last-Modified: Mon, 03 Oct 2022 05:24:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3116
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af837d2bb50f-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    100afc21351b3747e1ea1ee393bd8624
Sha1:   c4573318a865c85f0674ea6c083c6feb8caf208c
Sha256: 5e2bb4b5199e7981e2e745c95c030527bf31185f9d8b0ccd86e4654ad0a5466a
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4200
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 09:35:04 GMT
Last-Modified: Mon, 03 Oct 2022 08:25:04 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /adsid/integrator.js?domain=www.playground.ru HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.226
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 03 Oct 2022 09:35:04 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsid/integrator.js?domain=www.playground.ru HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.162
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 03 Oct 2022 09:35:04 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            POST /rtb/yandex_hb HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 752
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         193.232.148.144
HTTP/2 307 Temporary Redirect
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:04 GMT
content-length: 0
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
x-backend-id: f5-ru
set-cookie: gi_u=s5cIwHA59T2.AikABlGDnTLuiQ;Path=/;Domain=.adhigh.net;Expires=Tue, 03-Oct-2023 09:35:04 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/yandex_hb?bounced=1
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cnt/v2/?event_name=page_view&event_type=media&project_id=539979&request_id=1664789703.157-1110253304&event_id=302097033124823&meta=%7B%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%5C%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%5C%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B%22%2C%22url%22%3A%22https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514%22%7D&url=undefined&session_id=1345214393_1664789703160&session_number=1&session_event_number=2&tid=t1.539979.1824652450.1664789703157&adtech_uid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb&adtech_uid_scope=playground.ru&fingerprint=pA8AAENKs1er0heJAXvnWwA%3D&fingerprint_ip=pA8AAENKs1dky%2B7aATvR3QA%3D&version=3.10.9&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_a%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=1161223257 HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         81.19.89.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.19.4
date: Mon, 03 Oct 2022 09:35:04 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 1kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAMisOmNhCs+VAQ6wGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ proto_uid=1CIAAMisOmNhCs+VAQ6wGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Mon, 03 Oct 2022 09:35:04 GMT
access-control-allow-origin: *
etag: "633583ac-2b"
expires: Mon, 03 Oct 2022 10:35:04 GMT
accept-ranges: bytes
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/26812653/1?wmode=7&page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&site-info=%7B%22shareVersion%22%3A2%2C%22strategy%22%3A%22d%2Fn%2Fq%2Fr%2Fs%2Ft%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1798%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A633911691076%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093503%3Aet%3A1664789704%3Ac%3A1%3Arn%3A800926358%3Arqn%3A1%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C353%2C0%2C850%2C0%2C%2C634%2C33%2C%2C%2C%2C1855%3Ans%3A1664789700869%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664789704%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Referer: https://www.playground.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 407
date: Mon, 03 Oct 2022 09:35:04 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:04 GMT
last-modified: Mon, 03-Oct-2022 09:35:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Size:   407
Md5:    1680293eb032ce5f4014f64626e37f3c
Sha1:   239afd293ecbdfe7db25b846a3f1905fd2936a58
Sha256: bf90605a069f6231cc2322410dea396597b3d90a4af77de2355b46495141f891
                                        
                                            GET /watch/12889672/1?wmode=7&page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1798%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A192444638822%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093503%3Aet%3A1664789704%3Ac%3A1%3Arn%3A979165916%3Arqn%3A1%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C353%2C0%2C850%2C0%2C%2C634%2C33%2C%2C%2C%2C1855%3Ans%3A1664789700869%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664789704%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Referer: https://www.playground.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 452
date: Mon, 03 Oct 2022 09:35:04 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:04 GMT
last-modified: Mon, 03-Oct-2022 09:35:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (452), with no line terminators
Size:   452
Md5:    fad68e54d8848504b7a5409bd35f5c18
Sha1:   c0f74a4a1d563de3d0a205eb3473c756a498a71b
Sha256: 73ca0621bd8a60ab0933baf7cc5e63a5b7cf977b811a50c838e73151301d339b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1566012-1&cid=332363450.1664789704&jid=1003609430&_u=YEBAAEAAAAAAAC~&z=1648905484 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 03 Oct 2022 09:35:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /rtb/yandex_hb?bounced=1 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 752
Origin: https://www.playground.ru
Referer: https://www.playground.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         193.232.148.144
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:04 GMT
content-length: 11
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
x-backend-id: f5-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   11
Md5:    9cc989d2e211083e0a170316914f1d06
Sha1:   392cd18d051f72b887529ac2998da54749f1338f
Sha256: 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
                                        
                                            POST /hbid_yandex/ HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 511
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         95.163.41.56
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:04 GMT
cache-control: private, no-cache, no-store
timing-allow-origin: *
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   214
Md5:    44af3f370f91c5a4d5ace2584f334761
Sha1:   379982b9035a82733ba8a70103bbc28505ad2212
Sha256: 3b7799046b70df97925732510770f2000a600ce860b36cf4936419c85ede8875
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1566012-1&cid=332363450.1664789704&jid=1003609430&_u=YEBAAEAAAAAAAC~&z=1648905484 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 03 Oct 2022 09:35:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/adfox/326836/getBulk/v2?dl=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&date=2022-10-03T09%3A35%3A03.965%2B00%3A00&pd=3&pdh=1024&pdw=1280&pr1=1143887217&pr=373074224&prr=&pv=9&pw=1&extid_loader=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&extid_tag_loader=www.playground.ru&ylv=0.659462&ybv=0.659462&ytt=3300145627141&is-turbo=0&skip-token=&ad-session-id=9733941664789703968&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A49%2C%22top%22%3A601%2C%22fontFamily%22%3A%22ys%22%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=659462&available-width=300&yaru=true&pp=g&ps=fqvu&p2=hiut&slotNumber=3&bids=W10%3D&utf8=%E2%9C%93&duid=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&pcode-test-ids=657518%2C0%2C48%3B651043%2C0%2C43%3B659464%2C0%2C9%3B658042%2C0%2C21%3B659768%2C0%2C37%3B658375%2C0%2C9%3B652508%2C0%2C60%3B659881%2C0%2C97&pcode-flags-map=eJytWMtu3DYU%2FZVi1lnoRT2yoyRqhhhJVEnK40lREGnrroyiaJyiQJB%2F76FelWYcjp0a8CI2dM89vM9z82XH962QzDRcKVaakmpqOippo0wlpLnjJROGt6YQTS5273%2F6svv74%2BPnh9373cM%2Ff%2B7e7Z4ePj3x3%2FArybyIkN3Xn9%2Ft7qgykv3YM6XNXUM7U0nRGFqqjb2WPVsDxH4SpN4CUHJF85qBATvRnNdcnw1twfDE6tpoSYsjb%2FemESXbwCqGj0Rbn03f8h8vXISZ52WLi14xI%2Fn%2BAJZc8cmHqoW2D6Zd4aYbRaHvD1gnXu6ZNqWkJ1NxiVdXCCAzvKF75opZTEISRAMGa6fXruONf1S85ZohJcVRHcDsxPVB9NpQpEsrNziJ0%2FDV4G%2BBTJGhToqyL7S6dvM6aAbIV5biCsSmmZamkIxqfsdMyTQrNBetmeuelZwiazW7UZ0kiWJ%2FwWT3nWnZySgUoUE%2BlIYH8OT3t3FIMpZgI0AI5GqaM1S0MBOw%2B2mL%2BVzBCw38OGLkIGKRlB4TyaRCdDaWMUn9MNzaZrE%2FBhhNVgtaMjnkiDYb9k9%2FfX5YmUVBigYczUBcKTk0WuN88coIsVKMId65YhJMt2Z%2FfPzl8WFjGcZBlgyWyAsmXGsObGj3VrtdRiTMxlwXom%2B1zc39QTpN0iSdOvmMKcXujexNKRrKW%2BfQ9JIgjBeKuRRHvA%2F0zF7y0mnpJySNn3VoR6eWPHeaB74Xj3w%2FsDYwVY%2BWxRxD%2F9%2BcWiTyo2lQD7bzpM6FtHUgacl79cMLEc7U8h4JY26c6Nk5ekgUJlNqyqrDllGdaFFLmjcMbbgxDTzP29pGXji%2BuSuwNtAkMG2d84hEBDBT9VUCUWa23Gd%2Ft9oVLpMkuDbnlW38k%2B07FPT3IMwE7mjdb7IVes9b14zKFusSM%2B%2BOSk4v3h1snBKsyTHK0ALKTknIgiXYTEr0ei32awSysU%2B9aIxaJ7mQdq%2Fm52GVd0K6Ax4n8dTu9nPTCs0Lhi3S7J1mSQC7wUypzhS0ODDL0HRMFhc59r1NiBLiZ2NVYIIVk9VFC1wMMpKmARnDOhd%2FySUWiymUc0yQzE%2FSVdtxBaqIJvZ5YWkql9MsJJPgmG2HVlWLJuhoWUITuUEiMmVmGG3oV33umAndrDHeyKoGG1msJJPbXZbE37SETjNFzYvjDe8zRtPXmue0bUEbi6fiUKzcPqKihXtkZWmQJCseE8i4LzHe0VFdTc85JIodC1qKur5cMBeb2AuicKyBvaR54P4Wfej9961R%2FMOGL%2FEDz%2FX9M%2BPNJ9%2BwmIvjwIa1LFnJFMSOk59Pgni0tmpCsgq9frCdwAu3XRpOWwRBg%2FRtbJtLKPBJD3SS5e49FmMRBf6mlaANJOoaexdNjHzY3aSg4LAZ0dtuPpkfRdPw2ChSqzem%2FTQcI5C4%2BrJVrtDCIPTHsh9VogUZN8crzb9NZlyW38VJ78WbMipZRdFfM7PxCHwhnK0atHSdCyrd6bY2Y6Wt0kq7zhbbHg9wpzfwM7KplQPXQ6GtwFDuRy3cdRImQbC5MoqumU6B5VRQ7lGOWzKcNMyCUfxvjIu8zDl53Q0VES8eB2ZrZR3i01A9TjnaWV5e5KfuK8MPJjU7B1o1VGqDe7pnlt6tRiRxHJNF6efHq4l3HQqSht6ihK00w8VSaOQ2v%2BEqI9P%2Bni8inO7PXIzTE14wDYnvRa7z9rrYbiTo16fHC8pR7Dr7MTYb3jdvjLqirUVfHN4YXvW4yc5vDHqmy1%2FeEhY78rsRbZXx1ipEHM3QLuf5ANoOPnsZbAAgiWcdr8rj5fkKB0mcXri0f7nSLJNvtPMtxXL1hjTcyLgt4BSp%2Bb8TXog0z4dBhqG6XsAiIN74rJp%2BOJvhmhl22Nrq94%2BPnx62wUhTKxO%2B%2FguyXQtx&use-server-side-rendering=1&pcode-icookie=bxbiYs4Tj%2BPeVpjX6uvfD7jWbM8WUoyuUNObIv%2Bt9Kfx0brcUue%2Bqv1pxB6Z57zUT7cMcVFBQu9i%2FwJnlt%2F69Ad3aaI%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2916&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4N30KKqW0kOS47UEYqMuHNjrz7JgM_76MXmqTOrZz91luGyUrSzd-GD5ieOshk9Zx4jd2HDLZRI_hodL9E5boc9Ol3HZrAT0P4BKoKszr4Ly6drl5g-86FlERUVVWBRUu8x1Sh8AR8xEckIIPr4MdhWkO6AjMrut0Ud6VWeKlzY_CrndAdEj4iB08B9cR68_iwD5txKdLBjXkWKIKtVrmJ6lKLastV6n9zE-ryvj51dpCqjqpfutxSypqfV4DmjCT-lkU6ztNFPs19lHrLcqOuDvEDj4fbj-ReHxEDr4jOr_gYITdIXFE30XkuI7bDw7z8GTM5tRrOTFCUiWUUZgH3HjturZ0o4hySemghp0mbUGAWi9t8qqzeeNGpWgWQF1eqZuX-nqVOs-orA2bsdA_a2NnV4Qtzs-hbSr1eS0mP5LqlhSaKE2bNKgW5hbMqXuptZO0LNZ9P5O3rd8uWQsLijoLA1-XVqqanmaaWTTzMJLmEWWsk0VU75naS1MdZZb7Mq7JeLt-JJentedZ0BRp_TRWVWYK7nZ41JMae3pWVt0w2iWZUnyEGuqoUy_LOTZkUZgFu59ydpRm79iLA1_ywXtQT3jO3eFnUHVahj6DahfG4lQC1pQPUhY-sBTPY3DjypxZCRYLu5Iy82lkLBwOyM-rp5cj4CPgkz_exabL53iofs2UCaCP3c0Hksc8XHMG0kN2IZ98A_xRjcdHbLr8OES8wXSCYTquGcEAcgj48Hcsbkatl2KxCv37Pq8ADlAfx3VgvFnCE-Y6on4cRMNHZGczNyaPIfG7J_vmm4Lx3Zf9G8PLtvOnJjsB29gQtlsEfNA3ArDf2h9_eeE5RAdAYpd9S0XI3pP2-ceZetIwSiK_5lYycYV45tfkMNKMxvfC36WWBzKQtpgXM_uIehWDRFFDqRcj6WiggBhitXa3SxwATgJpHxQ1xATByLM8zuQyvzOknkLTwYuCzhjLa1oDTBBC_yPsKIL039jRYIJElO2XH0g6-Fksz6Mk0HTww6qoaRQbX_m7-lTTIaxpGpwEjjKVVOcEK5lp6GcBO5l2J_k8c9HdW6kVKgeQj6sHnELF8uEAmaAj3GgdB8SyDsuBbc4FsLsO4v8covlXk58F5sEjmAJvPAmYr4Jgx8vjw5wJ9g_-hN--79v7YvojxzcbC_YxFXx1n8jtmD54NkbdplvHPtP8MIrl7HnGUaQbxP0WqGjKCW97Jth__Ewwt8PfIR_h4ddr71e9iu58HN7rvLUj7Mho6U7zt_SsJFhouramI-zfcYdcYaereRRnbZb3mjbR1j4lLDgOruuw_xkLtu9E8VnddZ2P5GmdPegMrjpIU3fhO7zfXhe9tt9rvcZhRN3BvjXr4E7ertvEn5rCtfvfii5N3VLr69VK4wgWVF9yt2TC5elDBm5JtJO5tOjDJr-NyiivGNUe0MdHMCYKWZ_kIxr3uGl35ymaiQ_B-KCg3R4HGlDY-U9YmtimbvZ3BnpaZNyklwZIeCvjbcRfgj9QYuJ0_U-xS1h9Kga2A_CPjrA4myfeAgCFD9oYxTMYjhVczLHNk_exRrpgB-njNYSTIwPBwOCDemaKeX23o0rz0Es0Hdl_EmmW1z5Qa-s1unrJc_JXSYCjmmfgKvfXGeNfVJZz9IARbh-4UZTnGqE9x7-nQrTpaXZTwJTH5rQlzbz6_ufYkc8P18xUEZRY34DfKzZ5jg-GW0xD9P8cHAPfUhC9O9FnICh6FBFOLGo6qvzmtxcfCgYYFYNwHo0T9fvPP8RH8n9j60WHlLFD0ouVUT56fXoJ64EjseJtzOjldjl8huMCBvq-2rpanm4unKukKHY3Wu53K_p50fvJx6Nu_iLapxv-deZ9ctFd3bZk57V5wToruyeM6pd0b9b-mB2s25Yw3iqIUHLH6L9xR_iQwoWIpAcoGrm2qMxTHg3ORPhPTNMd4EcPFA30JVuJM-k8MwxriXQyDXeqKsbaHWLxMAG4Gbx1bIa82mu_5j8-OhO-Y92eEY9lhjtJRmFmBxEPxDUR9FtGL8s9WuuAKMJMkrEsR5A5aQM5RGaie2wPCbi5GxG7vcMbe8x2MFhvB2P0FWQ1uL845ENFlaWGa2gc5EFmvHZRI-mziTZtEnkYeXGOCdIMEd0jb-FTCaqgK6VvItQhb8YrLUhlde3QB4uSJoyur3RINV2JRBJmCXRTVfYcijgGGnz40VTXwYJuZrZayp6AmUJC-ohBWL4Ze1UGwFte3bgHYk6SoU2ZJ70ku8MCbwWnxgdnlCQrTmWIYkB5T0TINNfiP1DmJaudGS_oVPo1TduT2Pj4kXSllySfjKEZL_Kjzx7DEfQSgoI0noMYWgssIPE9sGx9eK1LCrOwAv4xuGiVTDTegj6KN-YWDLNl0lXbF1vmmMMZk4iYOaOoCMbHBnMxp9MC0ZSkq3Egy-KOIpE2Gh8dujjGIDhcFt_BMYS15poOTktl7UFkuEme9xFwHHRNBhHMcNsZO8EJ4PMYNQz_qc3gq--yLL9pqktyC2SQWCDBDLB25kCPLUO-qLszMU6wsH35jooef_xHflXkZsaVNC7UV5uJW_xSFDCWZQhbmFO2sLJSglVkPuMGhCvoNMN-7QWgbOWN6fAjzrilYJeFbf3OsyWsNOHMLEU8OSIf6HvbKFGgZOxo0JkxAYEX-HcxXlCNjI9OV9tNlCjN8jVS1h6hlbXYj5JO-5zBBNbMLQi03ZdVoyxKjmqz_nXJZOxe2kaFYfrkNlDUsbl3O40EI0IlM48ocUGBvmdysYpmU-ihPHYyHSew2rlIAvaU4OOgtg7QprmCmRdTYgfmIklvtLEyrdyOcDyIYJHRsYIuMsARBsA%3D&tga-with-creatives=1 HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         77.88.55.66
HTTP/2 200 OK
content-type: application/json
                                        
timing-allow-origin: *
date: Mon, 03 Oct 2022 09:35:04 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
set-cookie: yandexuid=7304706191664789704; Path=/; Domain=.yandex.ru; Expires=Thu, 30-Sep-2032 09:35:04 GMT; SameSite=None; Secure i=HWYf4ZJo79KmuTa6JVTi1vpkg4nSHI9wlngukXgBbJau7zxOhvQwv3VYBwte4Na6TM0MIoAgnd7l63WA3ozMTf3bgvw=; Path=/; Domain=.yandex.ru; Expires=Wed, 02-Oct-2024 09:35:04 GMT; SameSite=None; Secure; HttpOnly
pragma: no-cache
expires: Mon, 03 Oct 2022 09:35:04 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1664789704468029-8420878067526460098-sas3-0712-43f-sas-l7-balancer-8080-BAL-3838
last-modified: Mon, 03 Oct 2022 09:35:04 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1598
Md5:    80e5d77a14abddbdad8c64b11d24f29d
Sha1:   e45d737cf6229ec39b3cd7c4cbf1cad26b72acf9
Sha256: 200d9378122286a0722effc963c109e90657adf15ee7812a702422292f67c0b9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cnt/?et=pvm&v=3.10.9&pid=539979&tid=t1.539979.1824652450.1664789703157&rid=1664789703.157-1110253304&fid=pA8AAENKs1er0heJAXvnWwA%3D&fip=pA8AAENKs1dky%2B7aATvR3QA%3D&aduid=32e5a0f3-1bf3-437c-aa93-c96aec8c68bb&aduidsc=playground.ru&stid=1345214393_1664789703160&sn=1&sen=2&en=2&rf&mp=%7B%22sch%22%3A%22ld%22%2C%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%5C%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%5C%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B%22%2C%22url%22%3A%22https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514%22%2C%22thm%22%3A%22%22%2C%22arth%22%3A6401%2C%22artst%22%3A0%2C%22arts%22%3A8622%2C%22artw%22%3A1199%2C%22img%22%3A90%7D&ct=web&exp=%5B%5B%22exp_bot%22%2C%22split_a%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&eid=302097033124823&rn=1634303737 HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         81.19.89.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.19.4
date: Mon, 03 Oct 2022 09:35:04 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 1kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAMisOmNhCs+VASawGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ proto_uid=1CIAAMisOmNhCs+VASawGwB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3069
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 09:35:04 GMT
Last-Modified: Mon, 03 Oct 2022 08:43:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 312

                                        
                                            POST /watch/26812653/1?page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&hittoken=1664789704_a90c18701659f598644d2d5a4cc1f5178ec38677a39f918252c192721f95b54e&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A633911691076%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093504%3Aet%3A1664789705%3Ac%3A1%3Arn%3A65584085%3Arqn%3A3%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664789700869%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664789705&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)rqnt(3)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 59
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Mon, 03 Oct 2022 09:35:04 GMT
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:04 GMT
last-modified: Mon, 03-Oct-2022 09:35:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /watch/26812653/1?page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&hittoken=1664789704_a90c18701659f598644d2d5a4cc1f5178ec38677a39f918252c192721f95b54e&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A633911691076%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093504%3Aet%3A1664789705%3Ac%3A1%3Arn%3A562389224%3Arqn%3A2%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664789700869%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664789705&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)rqnt(2)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Mon, 03 Oct 2022 09:35:04 GMT
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:04 GMT
last-modified: Mon, 03-Oct-2022 09:35:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /watch/12889672/1?page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&hittoken=1664789704_a683d5e2950826101a6fea50b4e60bb13664335fe74a993e4996c451a2c802d0&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A192444638822%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093504%3Aet%3A1664789705%3Ac%3A1%3Arn%3A854170163%3Arqn%3A2%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1664789700869%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664789705&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)rqnt(2)ecs(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Mon, 03 Oct 2022 09:35:04 GMT
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:04 GMT
last-modified: Mon, 03-Oct-2022 09:35:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /hb/adfox/bid HTTP/1.1 
Host: relap.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 472
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         95.163.37.253
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
                                        
server: nginx
access-control-max-age: 1728000
set-cookie: unique=fVwsFZTa; expires=Thu, 30 Sep 2032 09:35:04 GMT; domain=.relap.io; path=/; secure; HttpOnly; SameSite=None fsts=1664789704; expires=Thu, 30 Sep 2032 09:35:04 GMT; domain=.relap.io; path=/; secure; HttpOnly; SameSite=None lsts=1664789704; expires=Thu, 30 Sep 2032 09:35:04 GMT; domain=.relap.io; path=/; secure; HttpOnly; SameSite=None suid=395a2eb5b61713d85810c6dbd397c82283314e82--3b62a222b71959a3fbb36af67b31ccdc8e1e4ea9536f5467d1037d3b15daab85; domain=.relap.io; path=/; secure; HttpOnly; SameSite=None
x-xss-protection: 1; mode=block; report=https://cspreport.mail.ru/xxssprotection
access-control-allow-origin: https://www.playground.ru
x-content-type-options: nosniff
x-server: back05
access-control-allow-headers: Authorization,Content-Type,Origin,User-Agent,DNT,Cache-Control,Range,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since,Cookie,X-Csrf-Token,X-Relap-Unique,X-Relap-Cookie,X-Relap-UUID
vary: Origin
access-control-allow-credentials: true
date: Mon, 03 Oct 2022 09:35:04 GMT
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, PATCH
strict-transport-security: max-age=5184000; includeSubdomains;
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (33563), with no line terminators
Size:   5911
Md5:    024fbf0ce79322ecdd39fe5576bd6dc4
Sha1:   6c6c6adddb10568ad3a1ed2042550b658192a7be
Sha256: c540483f535a82e3b7d34e1cfde82367d2f223be12ebf216d73b35811bdc03f3
                                        
                                            GET /js/ld/publishertag.js HTTP/1.1 
Host: static.criteo.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         178.250.0.130
HTTP/2 200 OK
content-type: text/javascript
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:04 GMT
last-modified: Sat, 17 Sep 2022 19:59:55 GMT
etag: W/"6326273b-1e2be"
expires: Tue, 04 Oct 2022 09:35:04 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   40272
Md5:    4f0b3a11f1736970d982caa0baf3a76a
Sha1:   0e714009d36304853e904bedde9cba7645331aa4
Sha256: 313edce8725cc07bd454672c08472f9a8e3d1ccd169f1f546b71f72ae81b931a
                                        
                                            GET /ads/adfox/326836/getBulk/v2?dl=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&date=2022-10-03T09%3A35%3A04.041%2B00%3A00&pd=3&pdh=1024&pdw=1280&pr1=1196614251&pr=373074224&prr=&pv=9&pw=1&extid_loader=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&extid_tag_loader=www.playground.ru&ylv=0.659462&ybv=0.659462&ytt=3300145627141&is-turbo=0&skip-token=&ad-session-id=9733941664789703968&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1268%2C%22h%22%3A0%2C%22width%22%3A1268%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A6511%2C%22fontFamily%22%3A%22ys%22%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=659462&available-width=1268&yaru=true&pp=g&ps=fqvu&p2=hiuq&slotNumber=10&bids=W10%3D&utf8=%E2%9C%93&duid=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&pcode-test-ids=657518%2C0%2C48%3B651043%2C0%2C43%3B659464%2C0%2C9%3B658042%2C0%2C21%3B659768%2C0%2C37%3B658375%2C0%2C9%3B652508%2C0%2C60%3B659881%2C0%2C97&pcode-flags-map=eJytWMtu3DYU%2FZVi1lnoRT2yoyRqhhhJVEnK40lREGnrroyiaJyiQJB%2F76FelWYcjp0a8CI2dM89vM9z82XH962QzDRcKVaakmpqOippo0wlpLnjJROGt6YQTS5273%2F6svv74%2BPnh9373cM%2Ff%2B7e7Z4ePj3x3%2FArybyIkN3Xn9%2Ft7qgykv3YM6XNXUM7U0nRGFqqjb2WPVsDxH4SpN4CUHJF85qBATvRnNdcnw1twfDE6tpoSYsjb%2FemESXbwCqGj0Rbn03f8h8vXISZ52WLi14xI%2Fn%2BAJZc8cmHqoW2D6Zd4aYbRaHvD1gnXu6ZNqWkJ1NxiVdXCCAzvKF75opZTEISRAMGa6fXruONf1S85ZohJcVRHcDsxPVB9NpQpEsrNziJ0%2FDV4G%2BBTJGhToqyL7S6dvM6aAbIV5biCsSmmZamkIxqfsdMyTQrNBetmeuelZwiazW7UZ0kiWJ%2FwWT3nWnZySgUoUE%2BlIYH8OT3t3FIMpZgI0AI5GqaM1S0MBOw%2B2mL%2BVzBCw38OGLkIGKRlB4TyaRCdDaWMUn9MNzaZrE%2FBhhNVgtaMjnkiDYb9k9%2FfX5YmUVBigYczUBcKTk0WuN88coIsVKMId65YhJMt2Z%2FfPzl8WFjGcZBlgyWyAsmXGsObGj3VrtdRiTMxlwXom%2B1zc39QTpN0iSdOvmMKcXujexNKRrKW%2BfQ9JIgjBeKuRRHvA%2F0zF7y0mnpJySNn3VoR6eWPHeaB74Xj3w%2FsDYwVY%2BWxRxD%2F9%2BcWiTyo2lQD7bzpM6FtHUgacl79cMLEc7U8h4JY26c6Nk5ekgUJlNqyqrDllGdaFFLmjcMbbgxDTzP29pGXji%2BuSuwNtAkMG2d84hEBDBT9VUCUWa23Gd%2Ft9oVLpMkuDbnlW38k%2B07FPT3IMwE7mjdb7IVes9b14zKFusSM%2B%2BOSk4v3h1snBKsyTHK0ALKTknIgiXYTEr0ei32awSysU%2B9aIxaJ7mQdq%2Fm52GVd0K6Ax4n8dTu9nPTCs0Lhi3S7J1mSQC7wUypzhS0ODDL0HRMFhc59r1NiBLiZ2NVYIIVk9VFC1wMMpKmARnDOhd%2FySUWiymUc0yQzE%2FSVdtxBaqIJvZ5YWkql9MsJJPgmG2HVlWLJuhoWUITuUEiMmVmGG3oV33umAndrDHeyKoGG1msJJPbXZbE37SETjNFzYvjDe8zRtPXmue0bUEbi6fiUKzcPqKihXtkZWmQJCseE8i4LzHe0VFdTc85JIodC1qKur5cMBeb2AuicKyBvaR54P4Wfej9961R%2FMOGL%2FEDz%2FX9M%2BPNJ9%2BwmIvjwIa1LFnJFMSOk59Pgni0tmpCsgq9frCdwAu3XRpOWwRBg%2FRtbJtLKPBJD3SS5e49FmMRBf6mlaANJOoaexdNjHzY3aSg4LAZ0dtuPpkfRdPw2ChSqzem%2FTQcI5C4%2BrJVrtDCIPTHsh9VogUZN8crzb9NZlyW38VJ78WbMipZRdFfM7PxCHwhnK0atHSdCyrd6bY2Y6Wt0kq7zhbbHg9wpzfwM7KplQPXQ6GtwFDuRy3cdRImQbC5MoqumU6B5VRQ7lGOWzKcNMyCUfxvjIu8zDl53Q0VES8eB2ZrZR3i01A9TjnaWV5e5KfuK8MPJjU7B1o1VGqDe7pnlt6tRiRxHJNF6efHq4l3HQqSht6ihK00w8VSaOQ2v%2BEqI9P%2Bni8inO7PXIzTE14wDYnvRa7z9rrYbiTo16fHC8pR7Dr7MTYb3jdvjLqirUVfHN4YXvW4yc5vDHqmy1%2FeEhY78rsRbZXx1ipEHM3QLuf5ANoOPnsZbAAgiWcdr8rj5fkKB0mcXri0f7nSLJNvtPMtxXL1hjTcyLgt4BSp%2Bb8TXog0z4dBhqG6XsAiIN74rJp%2BOJvhmhl22Nrq94%2BPnx62wUhTKxO%2B%2FguyXQtx&use-server-side-rendering=1&pcode-icookie=bxbiYs4Tj%2BPeVpjX6uvfD7jWbM8WUoyuUNObIv%2Bt9Kfx0brcUue%2Bqv1pxB6Z57zUT7cMcVFBQu9i%2FwJnlt%2F69Ad3aaI%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2916&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4N30KKqW0kOS47UEYqMuHNjrz7JgM_76MXmqTOrZz91luGyUrSzd-GD5ieOshk9Zx4jd2HDLZRI_hodL9E5boc9Ol3HZrAT0P4BKoKszr4Ly6drl5g-86FlERUVVWBRUu8x1Sh8AR8xEckIIPr4MdhWkO6AjMrut0Ud6VWeKlzY_CrndAdEj4iB08B9cR68_iwD5txKdLBjXkWKIKtVrmJ6lKLastV6n9zE-ryvj51dpCqjqpfutxSypqfV4DmjCT-lkU6ztNFPs19lHrLcqOuDvEDj4fbj-ReHxEDr4jOr_gYITdIXFE30XkuI7bDw7z8GTM5tRrOTFCUiWUUZgH3HjturZ0o4hySemghp0mbUGAWi9t8qqzeeNGpWgWQF1eqZuX-nqVOs-orA2bsdA_a2NnV4Qtzs-hbSr1eS0mP5LqlhSaKE2bNKgW5hbMqXuptZO0LNZ9P5O3rd8uWQsLijoLA1-XVqqanmaaWTTzMJLmEWWsk0VU75naS1MdZZb7Mq7JeLt-JJentedZ0BRp_TRWVWYK7nZ41JMae3pWVt0w2iWZUnyEGuqoUy_LOTZkUZgFu59ydpRm79iLA1_ywXtQT3jO3eFnUHVahj6DahfG4lQC1pQPUhY-sBTPY3DjypxZCRYLu5Iy82lkLBwOyM-rp5cj4CPgkz_exabL53iofs2UCaCP3c0Hksc8XHMG0kN2IZ98A_xRjcdHbLr8OES8wXSCYTquGcEAcgj48Hcsbkatl2KxCv37Pq8ADlAfx3VgvFnCE-Y6on4cRMNHZGczNyaPIfG7J_vmm4Lx3Zf9G8PLtvOnJjsB29gQtlsEfNA3ArDf2h9_eeE5RAdAYpd9S0XI3pP2-ceZetIwSiK_5lYycYV45tfkMNKMxvfC36WWBzKQtpgXM_uIehWDRFFDqRcj6WiggBhitXa3SxwATgJpHxQ1xATByLM8zuQyvzOknkLTwYuCzhjLa1oDTBBC_yPsKIL039jRYIJElO2XH0g6-Fksz6Mk0HTww6qoaRQbX_m7-lTTIaxpGpwEjjKVVOcEK5lp6GcBO5l2J_k8c9HdW6kVKgeQj6sHnELF8uEAmaAj3GgdB8SyDsuBbc4FsLsO4v8covlXk58F5sEjmAJvPAmYr4Jgx8vjw5wJ9g_-hN--79v7YvojxzcbC_YxFXx1n8jtmD54NkbdplvHPtP8MIrl7HnGUaQbxP0WqGjKCW97Jth__Ewwt8PfIR_h4ddr71e9iu58HN7rvLUj7Mho6U7zt_SsJFhouramI-zfcYdcYaereRRnbZb3mjbR1j4lLDgOruuw_xkLtu9E8VnddZ2P5GmdPegMrjpIU3fhO7zfXhe9tt9rvcZhRN3BvjXr4E7ertvEn5rCtfvfii5N3VLr69VK4wgWVF9yt2TC5elDBm5JtJO5tOjDJr-NyiivGNUe0MdHMCYKWZ_kIxr3uGl35ymaiQ_B-KCg3R4HGlDY-U9YmtimbvZ3BnpaZNyklwZIeCvjbcRfgj9QYuJ0_U-xS1h9Kga2A_CPjrA4myfeAgCFD9oYxTMYjhVczLHNk_exRrpgB-njNYSTIwPBwOCDemaKeX23o0rz0Es0Hdl_EmmW1z5Qa-s1unrJc_JXSYCjmmfgKvfXGeNfVJZz9IARbh-4UZTnGqE9x7-nQrTpaXZTwJTH5rQlzbz6_ufYkc8P18xUEZRY34DfKzZ5jg-GW0xD9P8cHAPfUhC9O9FnICh6FBFOLGo6qvzmtxcfCgYYFYNwHo0T9fvPP8RH8n9j60WHlLFD0ouVUT56fXoJ64EjseJtzOjldjl8huMCBvq-2rpanm4unKukKHY3Wu53K_p50fvJx6Nu_iLapxv-deZ9ctFd3bZk57V5wToruyeM6pd0b9b-mB2s25Yw3iqIUHLH6L9xR_iQwoWIpAcoGrm2qMxTHg3ORPhPTNMd4EcPFA30JVuJM-k8MwxriXQyDXeqKsbaHWLxMAG4Gbx1bIa82mu_5j8-OhO-Y92eEY9lhjtJRmFmBxEPxDUR9FtGL8s9WuuAKMJMkrEsR5A5aQM5RGaie2wPCbi5GxG7vcMbe8x2MFhvB2P0FWQ1uL845ENFlaWGa2gc5EFmvHZRI-mziTZtEnkYeXGOCdIMEd0jb-FTCaqgK6VvItQhb8YrLUhlde3QB4uSJoyur3RINV2JRBJmCXRTVfYcijgGGnz40VTXwYJuZrZayp6AmUJC-ohBWL4Ze1UGwFte3bgHYk6SoU2ZJ70ku8MCbwWnxgdnlCQrTmWIYkB5T0TINNfiP1DmJaudGS_oVPo1TduT2Pj4kXSllySfjKEZL_Kjzx7DEfQSgoI0noMYWgssIPE9sGx9eK1LCrOwAv4xuGiVTDTegj6KN-YWDLNl0lXbF1vmmMMZk4iYOaOoCMbHBnMxp9MC0ZSkq3Egy-KOIpE2Gh8dujjGIDhcFt_BMYS15poOTktl7UFkuEme9xFwHHRNBhHMcNsZO8EJ4PMYNQz_qc3gq--yLL9pqktyC2SQWCDBDLB25kCPLUO-qLszMU6wsH35jooef_xHflXkZsaVNC7UV5uJW_xSFDCWZQhbmFO2sLJSglVkPuMGhCvoNMN-7QWgbOWN6fAjzrilYJeFbf3OsyWsNOHMLEU8OSIf6HvbKFGgZOxo0JkxAYEX-HcxXlCNjI9OV9tNlCjN8jVS1h6hlbXYj5JO-5zBBNbMLQi03ZdVoyxKjmqz_nXJZOxe2kaFYfrkNlDUsbl3O40EI0IlM48ocUGBvmdysYpmU-ihPHYyHSew2rlIAvaU4OOgtg7QprmCmRdTYgfmIklvtLEyrdyOcDyIYJHRsYIuMsARBsA%3D&tga-with-creatives=1 HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         77.88.55.66
HTTP/2 200 OK
content-type: application/json
                                        
timing-allow-origin: *
date: Mon, 03 Oct 2022 09:35:04 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
set-cookie: yandexuid=1204663701664789704; Path=/; Domain=.yandex.ru; Expires=Thu, 30-Sep-2032 09:35:04 GMT; SameSite=None; Secure i=1xoELeKjNO5MvY1nEFfC4+hzRpJRvQm0vx25MfmttfpKMocB1zDGlIGEEuM1L4rwAYxL/pwmrsl6GgBHTc40Z/VwH8w=; Path=/; Domain=.yandex.ru; Expires=Wed, 02-Oct-2024 09:35:04 GMT; SameSite=None; Secure; HttpOnly
pragma: no-cache
expires: Mon, 03 Oct 2022 09:35:04 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1664789704502521-18237875548079991570-sas3-0712-43f-sas-l7-balancer-8080-BAL-7243
last-modified: Mon, 03 Oct 2022 09:35:04 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /tag/load.js?sid=104751 HTTP/1.1 
Host: ru.viadata.store
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.111.211.20
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx/1.19.5
date: Mon, 03 Oct 2022 09:35:04 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: viads_uid=47c887fd-8ac5-45bb-88be-bf6f43df1419; expires=Wed, 02-Nov-2022 09:35:04 GMT; Max-Age=2592000; path=/; domain=.viadata.store; secure; HttpOnly; SameSite=None
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5753), with CRLF line terminators
Size:   12908
Md5:    612e5219faf50a01b9ff823148ad85c9
Sha1:   5c8310ad43e1af5c49c9d70dd9ad122b3b96cc35
Sha256: cb44f8cfead9296f1cb0d18a40b7501a258a77d68acef012f859cd918717bb0b
                                        
                                            GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44530
date: Mon, 03 Oct 2022 09:35:05 GMT
expires: Mon, 03 Oct 2022 09:35:05 GMT
cache-control: private, max-age=3000
etag: "1664365478704152"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3498)
Size:   44530
Md5:    edcdf3320c234b0155d06ea7eb3f5356
Sha1:   59ac0953e852dfcb01ae8477b7e56ae1668db2f9
Sha256: 4e5b88ef6f251dbd13697bb6284ec35b1a2ecfbe28d49a78b3cf8633bc277765
                                        
                                            GET /pagead/js/r20220928/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.33
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7559
x-xss-protection: 0
date: Mon, 03 Oct 2022 09:27:09 GMT
expires: Mon, 17 Oct 2022 09:27:09 GMT
cache-control: public, max-age=1209600
etag: 15289875785628835784
age: 476
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1494)
Size:   7559
Md5:    126f036451fe7f2fc91dd1114d8daef7
Sha1:   9510b9439d0169421dd29b6493bd15fd21816c5e
Sha256: 76548fed45d196bae3076488e40b3fa7347a25f7d076922ba4d53db5263ce9b2
                                        
                                            GET /req/site?sid=104751&uid=47c887fd-8ac5-45bb-88be-bf6f43df1419&event=playerLoaded&v=209281&cb=1664789705008 HTTP/1.1 
Host: logs.viadata.store
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: viads_uid=47c887fd-8ac5-45bb-88be-bf6f43df1419
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.111.115.244
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:05 GMT
content-length: 43
last-modified: Mon, 03 Oct 2022 09:35:05 GMT
expires: Wed, 11 Nov 1998 11:11:11 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   910
Md5:    cece89a8262657f5ff6c809d3882e49f
Sha1:   b44aeedafc1393c5b22b38bfa97e21e99ebafcb0
Sha256: 2d59ff3842f7b9e224584fdee524b0fc85b584e0ce37677d3532b8ed8b48e7b3

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            GET /mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 09:05:39 GMT
expires: Fri, 30 Dec 2022 09:05:39 GMT
cache-control: public, max-age=7776000
last-modified: Tue, 27 Sep 2022 00:52:44 GMT
age: 174566
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C++ source, ASCII text, with very long lines (1792)
Size:   13677
Md5:    10e6f3bdb6fae70ad38bdf5dbf63ec92
Sha1:   9bc2aed43500f7a96923397c67624983f7593c77
Sha256: 07cfe15791ca91426412f72bbd4300bb7b19b5fd976285a9071861dc3c90e779
                                        
                                            GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 07:37:25 GMT
expires: Sun, 01 Oct 2023 07:37:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
age: 179860
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data
Size:   28288
Md5:    53b5e785dfdca21fa7adf7119fa1f8cc
Sha1:   a3a86dfd216ad29183ba5493ae39d45b62f9d8b8
Sha256: 4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
                                        
                                            GET /js/player/hls2.js HTTP/1.1 
Host: rucdn.viadata.store
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: viads_uid=47c887fd-8ac5-45bb-88be-bf6f43df1419
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.111.115.172
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:05 GMT
last-modified: Tue, 22 Feb 2022 11:56:44 GMT
vary: Accept-Encoding
etag: W/"6214cf7c-4ea62"
x-robots-tag: noindex, nofollow
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   119901
Md5:    c2382fab036dc035659a188780c1d103
Sha1:   8db9b15ae2ad31ebea9296e8b8be6d92b0bc643b
Sha256: 27a2b8d84c7097fbff44c2b8f9fb0c5d367249da2b9c638df1a4d1d181805533
                                        
                                            GET /partner-code-bundles/659462/7813b50d65126b757f58.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:05 GMT
content-length: 50223
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "846d38bf3c64141b0ed5ba7bcc3cce66"
expires: Wed, 02 Oct 2052 16:07:45 GMT
last-modified: Thu, 29 Sep 2022 17:35:57 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65494)
Size:   50223
Md5:    846d38bf3c64141b0ed5ba7bcc3cce66
Sha1:   dfbeff99c1e2c6904c41791f02cbf53155fb9b3e
Sha256: 519fdf445f7d3796dab83c0c515b5517e669212bb2421f562105de9b2d23e8a7
                                        
                                            GET /s3/games-static/favicons/icon-192.png HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.154.131.215
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx/1.17.9
date: Mon, 03 Oct 2022 09:35:05 GMT
content-length: 24134
access-control-allow-origin: *
cache-control: public, max-age=216013
etag: "7819c957eaa80af5bf14f760d49b64a7"
expires: Wed, 05 Oct 2022 21:30:18 GMT
last-modified: Thu, 14 Apr 2022 12:22:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: 53875acf0228a71c
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   24134
Md5:    7819c957eaa80af5bf14f760d49b64a7
Sha1:   93b670523acd14f884c3a538d59d408da0888a6c
Sha256: ca78c114bba40b141a59c55a9d3fb6db7672bc3effd4337f2b1ce512b4d06c9e
                                        
                                            GET /ads/adfox/326836/getBulk/v2?dl=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&date=2022-10-03T09%3A35%3A04.035%2B00%3A00&pd=3&pdh=1024&pdw=1280&pr1=23818847&pr=373074224&prr=&pv=9&pw=1&extid_loader=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&extid_tag_loader=www.playground.ru&ylv=0.659462&ybv=0.659462&ytt=3300145627141&is-turbo=0&skip-token=&ad-session-id=9733941664789703968&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1268%2C%22h%22%3A0%2C%22width%22%3A1268%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A6511%2C%22fontFamily%22%3A%22ys%22%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=659462&available-width=1268&yaru=true&pp=g&ps=fqvu&p2=hpxm&slotNumber=9&bids=W10%3D&utf8=%E2%9C%93&duid=MTY2NDc4OTcwNDk5Njc4NjMyMQ%3D%3D&pcode-test-ids=657518%2C0%2C48%3B651043%2C0%2C43%3B659464%2C0%2C9%3B658042%2C0%2C21%3B659768%2C0%2C37%3B658375%2C0%2C9%3B652508%2C0%2C60%3B659881%2C0%2C97&pcode-flags-map=eJytWMtu3DYU%2FZVi1lnoRT2yoyRqhhhJVEnK40lREGnrroyiaJyiQJB%2F76FelWYcjp0a8CI2dM89vM9z82XH962QzDRcKVaakmpqOippo0wlpLnjJROGt6YQTS5273%2F6svv74%2BPnh9373cM%2Ff%2B7e7Z4ePj3x3%2FArybyIkN3Xn9%2Ft7qgykv3YM6XNXUM7U0nRGFqqjb2WPVsDxH4SpN4CUHJF85qBATvRnNdcnw1twfDE6tpoSYsjb%2FemESXbwCqGj0Rbn03f8h8vXISZ52WLi14xI%2Fn%2BAJZc8cmHqoW2D6Zd4aYbRaHvD1gnXu6ZNqWkJ1NxiVdXCCAzvKF75opZTEISRAMGa6fXruONf1S85ZohJcVRHcDsxPVB9NpQpEsrNziJ0%2FDV4G%2BBTJGhToqyL7S6dvM6aAbIV5biCsSmmZamkIxqfsdMyTQrNBetmeuelZwiazW7UZ0kiWJ%2FwWT3nWnZySgUoUE%2BlIYH8OT3t3FIMpZgI0AI5GqaM1S0MBOw%2B2mL%2BVzBCw38OGLkIGKRlB4TyaRCdDaWMUn9MNzaZrE%2FBhhNVgtaMjnkiDYb9k9%2FfX5YmUVBigYczUBcKTk0WuN88coIsVKMId65YhJMt2Z%2FfPzl8WFjGcZBlgyWyAsmXGsObGj3VrtdRiTMxlwXom%2B1zc39QTpN0iSdOvmMKcXujexNKRrKW%2BfQ9JIgjBeKuRRHvA%2F0zF7y0mnpJySNn3VoR6eWPHeaB74Xj3w%2FsDYwVY%2BWxRxD%2F9%2BcWiTyo2lQD7bzpM6FtHUgacl79cMLEc7U8h4JY26c6Nk5ekgUJlNqyqrDllGdaFFLmjcMbbgxDTzP29pGXji%2BuSuwNtAkMG2d84hEBDBT9VUCUWa23Gd%2Ft9oVLpMkuDbnlW38k%2B07FPT3IMwE7mjdb7IVes9b14zKFusSM%2B%2BOSk4v3h1snBKsyTHK0ALKTknIgiXYTEr0ei32awSysU%2B9aIxaJ7mQdq%2Fm52GVd0K6Ax4n8dTu9nPTCs0Lhi3S7J1mSQC7wUypzhS0ODDL0HRMFhc59r1NiBLiZ2NVYIIVk9VFC1wMMpKmARnDOhd%2FySUWiymUc0yQzE%2FSVdtxBaqIJvZ5YWkql9MsJJPgmG2HVlWLJuhoWUITuUEiMmVmGG3oV33umAndrDHeyKoGG1msJJPbXZbE37SETjNFzYvjDe8zRtPXmue0bUEbi6fiUKzcPqKihXtkZWmQJCseE8i4LzHe0VFdTc85JIodC1qKur5cMBeb2AuicKyBvaR54P4Wfej9961R%2FMOGL%2FEDz%2FX9M%2BPNJ9%2BwmIvjwIa1LFnJFMSOk59Pgni0tmpCsgq9frCdwAu3XRpOWwRBg%2FRtbJtLKPBJD3SS5e49FmMRBf6mlaANJOoaexdNjHzY3aSg4LAZ0dtuPpkfRdPw2ChSqzem%2FTQcI5C4%2BrJVrtDCIPTHsh9VogUZN8crzb9NZlyW38VJ78WbMipZRdFfM7PxCHwhnK0atHSdCyrd6bY2Y6Wt0kq7zhbbHg9wpzfwM7KplQPXQ6GtwFDuRy3cdRImQbC5MoqumU6B5VRQ7lGOWzKcNMyCUfxvjIu8zDl53Q0VES8eB2ZrZR3i01A9TjnaWV5e5KfuK8MPJjU7B1o1VGqDe7pnlt6tRiRxHJNF6efHq4l3HQqSht6ihK00w8VSaOQ2v%2BEqI9P%2Bni8inO7PXIzTE14wDYnvRa7z9rrYbiTo16fHC8pR7Dr7MTYb3jdvjLqirUVfHN4YXvW4yc5vDHqmy1%2FeEhY78rsRbZXx1ipEHM3QLuf5ANoOPnsZbAAgiWcdr8rj5fkKB0mcXri0f7nSLJNvtPMtxXL1hjTcyLgt4BSp%2Bb8TXog0z4dBhqG6XsAiIN74rJp%2BOJvhmhl22Nrq94%2BPnx62wUhTKxO%2B%2FguyXQtx&use-server-side-rendering=1&pcode-icookie=bxbiYs4Tj%2BPeVpjX6uvfD7jWbM8WUoyuUNObIv%2Bt9Kfx0brcUue%2Bqv1pxB6Z57zUT7cMcVFBQu9i%2FwJnlt%2F69Ad3aaI%3D&top-ancestor=https%3A%2F%2Fwww.playground.ru&top-ancestor-undetermined=0&grab-orig-len=2916&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4N30KKqW0kOS47UEYqMuHNjrz7JgM_76MXmqTOrZz91luGyUrSzd-GD5ieOshk9Zx4jd2HDLZRI_hodL9E5boc9Ol3HZrAT0P4BKoKszr4Ly6drl5g-86FlERUVVWBRUu8x1Sh8AR8xEckIIPr4MdhWkO6AjMrut0Ud6VWeKlzY_CrndAdEj4iB08B9cR68_iwD5txKdLBjXkWKIKtVrmJ6lKLastV6n9zE-ryvj51dpCqjqpfutxSypqfV4DmjCT-lkU6ztNFPs19lHrLcqOuDvEDj4fbj-ReHxEDr4jOr_gYITdIXFE30XkuI7bDw7z8GTM5tRrOTFCUiWUUZgH3HjturZ0o4hySemghp0mbUGAWi9t8qqzeeNGpWgWQF1eqZuX-nqVOs-orA2bsdA_a2NnV4Qtzs-hbSr1eS0mP5LqlhSaKE2bNKgW5hbMqXuptZO0LNZ9P5O3rd8uWQsLijoLA1-XVqqanmaaWTTzMJLmEWWsk0VU75naS1MdZZb7Mq7JeLt-JJentedZ0BRp_TRWVWYK7nZ41JMae3pWVt0w2iWZUnyEGuqoUy_LOTZkUZgFu59ydpRm79iLA1_ywXtQT3jO3eFnUHVahj6DahfG4lQC1pQPUhY-sBTPY3DjypxZCRYLu5Iy82lkLBwOyM-rp5cj4CPgkz_exabL53iofs2UCaCP3c0Hksc8XHMG0kN2IZ98A_xRjcdHbLr8OES8wXSCYTquGcEAcgj48Hcsbkatl2KxCv37Pq8ADlAfx3VgvFnCE-Y6on4cRMNHZGczNyaPIfG7J_vmm4Lx3Zf9G8PLtvOnJjsB29gQtlsEfNA3ArDf2h9_eeE5RAdAYpd9S0XI3pP2-ceZetIwSiK_5lYycYV45tfkMNKMxvfC36WWBzKQtpgXM_uIehWDRFFDqRcj6WiggBhitXa3SxwATgJpHxQ1xATByLM8zuQyvzOknkLTwYuCzhjLa1oDTBBC_yPsKIL039jRYIJElO2XH0g6-Fksz6Mk0HTww6qoaRQbX_m7-lTTIaxpGpwEjjKVVOcEK5lp6GcBO5l2J_k8c9HdW6kVKgeQj6sHnELF8uEAmaAj3GgdB8SyDsuBbc4FsLsO4v8covlXk58F5sEjmAJvPAmYr4Jgx8vjw5wJ9g_-hN--79v7YvojxzcbC_YxFXx1n8jtmD54NkbdplvHPtP8MIrl7HnGUaQbxP0WqGjKCW97Jth__Ewwt8PfIR_h4ddr71e9iu58HN7rvLUj7Mho6U7zt_SsJFhouramI-zfcYdcYaereRRnbZb3mjbR1j4lLDgOruuw_xkLtu9E8VnddZ2P5GmdPegMrjpIU3fhO7zfXhe9tt9rvcZhRN3BvjXr4E7ertvEn5rCtfvfii5N3VLr69VK4wgWVF9yt2TC5elDBm5JtJO5tOjDJr-NyiivGNUe0MdHMCYKWZ_kIxr3uGl35ymaiQ_B-KCg3R4HGlDY-U9YmtimbvZ3BnpaZNyklwZIeCvjbcRfgj9QYuJ0_U-xS1h9Kga2A_CPjrA4myfeAgCFD9oYxTMYjhVczLHNk_exRrpgB-njNYSTIwPBwOCDemaKeX23o0rz0Es0Hdl_EmmW1z5Qa-s1unrJc_JXSYCjmmfgKvfXGeNfVJZz9IARbh-4UZTnGqE9x7-nQrTpaXZTwJTH5rQlzbz6_ufYkc8P18xUEZRY34DfKzZ5jg-GW0xD9P8cHAPfUhC9O9FnICh6FBFOLGo6qvzmtxcfCgYYFYNwHo0T9fvPP8RH8n9j60WHlLFD0ouVUT56fXoJ64EjseJtzOjldjl8huMCBvq-2rpanm4unKukKHY3Wu53K_p50fvJx6Nu_iLapxv-deZ9ctFd3bZk57V5wToruyeM6pd0b9b-mB2s25Yw3iqIUHLH6L9xR_iQwoWIpAcoGrm2qMxTHg3ORPhPTNMd4EcPFA30JVuJM-k8MwxriXQyDXeqKsbaHWLxMAG4Gbx1bIa82mu_5j8-OhO-Y92eEY9lhjtJRmFmBxEPxDUR9FtGL8s9WuuAKMJMkrEsR5A5aQM5RGaie2wPCbi5GxG7vcMbe8x2MFhvB2P0FWQ1uL845ENFlaWGa2gc5EFmvHZRI-mziTZtEnkYeXGOCdIMEd0jb-FTCaqgK6VvItQhb8YrLUhlde3QB4uSJoyur3RINV2JRBJmCXRTVfYcijgGGnz40VTXwYJuZrZayp6AmUJC-ohBWL4Ze1UGwFte3bgHYk6SoU2ZJ70ku8MCbwWnxgdnlCQrTmWIYkB5T0TINNfiP1DmJaudGS_oVPo1TduT2Pj4kXSllySfjKEZL_Kjzx7DEfQSgoI0noMYWgssIPE9sGx9eK1LCrOwAv4xuGiVTDTegj6KN-YWDLNl0lXbF1vmmMMZk4iYOaOoCMbHBnMxp9MC0ZSkq3Egy-KOIpE2Gh8dujjGIDhcFt_BMYS15poOTktl7UFkuEme9xFwHHRNBhHMcNsZO8EJ4PMYNQz_qc3gq--yLL9pqktyC2SQWCDBDLB25kCPLUO-qLszMU6wsH35jooef_xHflXkZsaVNC7UV5uJW_xSFDCWZQhbmFO2sLJSglVkPuMGhCvoNMN-7QWgbOWN6fAjzrilYJeFbf3OsyWsNOHMLEU8OSIf6HvbKFGgZOxo0JkxAYEX-HcxXlCNjI9OV9tNlCjN8jVS1h6hlbXYj5JO-5zBBNbMLQi03ZdVoyxKjmqz_nXJZOxe2kaFYfrkNlDUsbl3O40EI0IlM48ocUGBvmdysYpmU-ihPHYyHSew2rlIAvaU4OOgtg7QprmCmRdTYgfmIklvtLEyrdyOcDyIYJHRsYIuMsARBsA%3D&tga-with-creatives=1 HTTP/1.1 
Host: yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         77.88.55.66
HTTP/2 200 OK
content-type: application/json
                                        
timing-allow-origin: *
date: Mon, 03 Oct 2022 09:35:04 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://www.playground.ru
access-control-allow-credentials: true
set-cookie: yandexuid=5611559821664789704; Path=/; Domain=.yandex.ru; Expires=Thu, 30-Sep-2032 09:35:04 GMT; SameSite=None; Secure i=iIfD9K11kNtdy4LOuvSPIjEpQbDisHieq47nSQoZTghUhPjsj6QKVeoFbCgGOaoeGbxK7gvPj55QfTEUmVfGdY36c5U=; Path=/; Domain=.yandex.ru; Expires=Wed, 02-Oct-2024 09:35:04 GMT; SameSite=None; Secure; HttpOnly
pragma: no-cache
expires: Mon, 03 Oct 2022 09:35:04 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
x-xss-protection: 1; mode=block
x-yandex-req-id: 1664789704502188-11846473452783980379-sas3-0712-43f-sas-l7-balancer-8080-BAL-644
last-modified: Mon, 03 Oct 2022 09:35:04 GMT
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3190
Md5:    171d0e39d8ebca53e3cb509a374509f3
Sha1:   8ee47e25bce6f47cf0c5fcbc72aac2550037a9c6
Sha256: c1d8371a98bd4b91b3cb4fca9a5afafd1610a0b91642ef672e41b4c6cb5de7e9
                                        
                                            GET /static/viads-player-logo-50.png HTTP/1.1 
Host: rucdn.viadata.store
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.playground.ru/
Cookie: viads_uid=47c887fd-8ac5-45bb-88be-bf6f43df1419
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.111.115.172
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 03 Oct 2022 09:35:05 GMT
content-length: 9930
last-modified: Fri, 23 Sep 2022 15:06:06 GMT
etag: "632dcb5e-26ca"
x-robots-tag: noindex, nofollow
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 184 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   9930
Md5:    62d3d693ee8133d8542327d947c83bc3
Sha1:   ef4c518a842a81609dd514bb3772784fb7884cb4
Sha256: 1f91e6a36850a13fbdb936b66de714eed21c929646fcb1398aa8ab377ca5310f
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:05 GMT
Content-Length: 940
Connection: keep-alive
Expires: Fri, 07 Oct 2022 06:33:52 GMT
ETag: "1b58608098069446ddff2d4fd31da9c46611de36"
Last-Modified: Mon, 03 Oct 2022 06:33:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2503
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af8c0a98b50f-OSL

                                        
                                            GET /watch/26812653?wmode=7&page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&site-info=%7B%22shareVersion%22%3A2%2C%22strategy%22%3A%22d%2Fn%2Fq%2Fr%2Fs%2Ft%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1798%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A633911691076%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093503%3Aet%3A1664789704%3Ac%3A1%3Arn%3A800926358%3Arqn%3A1%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C353%2C0%2C850%2C0%2C%2C634%2C33%2C%2C%2C%2C1855%3Ans%3A1664789700869%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664789704%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.playground.ru
Connection: keep-alive
Referer: https://www.playground.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/26812653/1?wmode=7&page-url=https%3A%2F%2Fwww.playground.ru%2Fworldbox_god_simulator%2Ffile%2Fworldbox_god_simulator_evropa-1180514&charset=utf-8&site-info=%7B%22shareVersion%22%3A2%2C%22strategy%22%3A%22d%2Fn%2Fq%2Fr%2Fs%2Ft%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1798%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A633911691076%3Ahid%3A703651866%3Az%3A0%3Ai%3A20221003093503%3Aet%3A1664789704%3Ac%3A1%3Arn%3A800926358%3Arqn%3A1%3Au%3A1664789704996786321%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C353%2C0%2C850%2C0%2C%2C634%2C33%2C%2C%2C%2C1855%3Ans%3A1664789700869%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664789704%3At%3A%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20WorldBox%20-%20God%20Simulator%20%22%D0%95%D0%B2%D1%80%D0%BE%D0%BF%D0%B0%22%20-%20%D0%9A%D0%B0%D1%80%D1%82%D1%8B&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 03 Oct 2022 09:35:03 GMT
access-control-allow-origin: https://www.playground.ru
set-cookie: yandexuid=4758554151664789703; Expires=Tue, 03-Oct-2023 09:35:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=4758554151664789703; Expires=Tue, 03-Oct-2023 09:35:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=595997271664789703; Path=/; SameSite=None; Secure i=pI9X0wHTgjh3GNTaVkERmUYpKgjEtq3ls3Bq7herMrs73ZWVOhO05qHWElIljaOrOBKirSsVLKEBCFX1cJSvUTlPfP0=; Expires=Thu, 30-Sep-2032 09:35:00 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1696325703.yrts.1664789703#1696325703.yrtsi.1664789703; Expires=Tue, 03-Oct-2023 09:35:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 09:35:03 GMT
last-modified: Mon, 03-Oct-2022 09:35:03 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   66334
Md5:    da67e31c261c61ddd0e746a5f893f1c6
Sha1:   9a701fd858d345b57ba7144ec4d640d7c017dc60
Sha256: e6e913b0860aa0153f7017472c964aaa851632f24879fe839ed17ec5d2eda911
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 09:35:05 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 07 Oct 2022 07:24:44 GMT
ETag: "9db037c677dcb309e33603f1a7848fb41c65a813"
Last-Modified: Mon, 03 Oct 2022 07:24:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2136
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7544af8c9b4eb50f-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    cf7f58a03d888c80ce011ce52ddba838
Sha1:   9db037c677dcb309e33603f1a7848fb41c65a813
Sha256: 0b90c2b360bacc91752cd6212f005e0d17b163ace15476cca6a9e2149cec747c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6196
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 09:35:05 GMT
Last-Modified: Mon, 03 Oct 2022 07:51:49 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /get-direct/5281446/kzSKMvzZCkXAcP7GVrgYSg/x180 HTTP/1.1 
Host: avatars.mds.yandex.net