newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
91.228.154.4200 OK 12 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1054)
Hash 512defccb804cfadb42e039e949eb11f
0d34fa700295ee74fac4600d5cbaeae16b63b6f2
c8356b999a13a14511937f6e9cf59fefd77db25730eda3c3ebbbb81f7c3dd655
Analyzer Verdict Alert fortinet Malware
GET /cardiol-zolotye-pravila-v2-ro/ HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.27
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8344
Expires: Mon, 05 Sep 2022 18:21:11 GMT
Date: Mon, 05 Sep 2022 16:02:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 15:44:48 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GUUFC-3WMtYzpZ8aOC2Fp2sqGUMpEaiZy9yJXx5v1EYxR0wb-QNgnQ==
Age: 1039
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IWvInFsE0dXwqde52w-_R519I1NQ0exjuXdtvCxEGUzE59bBP87lTQ==
age: 53211
X-Firefox-Spdy: h2
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/index.css
91.228.154.4200 OK 2.6 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/index.css
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type Unicode text, UTF-8 text, with very long lines (316)
Hash 9ca55dffc88290fa81f9c22da34f17dc
80bb2ad193a299c064f37e5a1227789beecdee6b
562c597615cae5f75c7fb3de4c1acc5e27350eec1bb80e4810aa3e60fa9ed668
GET /cardiol-zolotye-pravila-v2-ro/files/css/index.css HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: text/css
Last-Modified: Mon, 29 Aug 2022 07:53:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"630c7069-337a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
142.250.74.42200 OK 30 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 142.250.74.42:0
File type ASCII text, with very long lines (32180)
Hash f16500423cc2867eff8b773df637c48f
1cd32d75b59a89c3a70274e383151a61ce0594f4
6ca5dc8ad67639c69117ace46c93703cf5fff82824cfc0bada0cf0fb3b2d41d7
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 29707
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 05 Sep 2022 10:55:44 GMT
Expires: Tue, 05 Sep 2023 10:55:44 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 18384
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 16:02:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
newsworld.cloud/js/binom.js
91.228.154.4200 OK 1.1 kB URL HTTP/1.1 newsworld.cloud/js/binom.js
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a5d669defe90e5c3446ef6157702edbf
bd88188d4916e5b611c5269f403513d4f16fdcae
c4d3ff5f6c7f28c8685618eaef697e75609eec3808a5df9596e37e3c3446a8dd
Analyzer Verdict Alert fortinet Malware
GET /js/binom.js HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: application/javascript
Last-Modified: Sat, 30 Apr 2022 09:18:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"626cfecd-e8e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/orderForm.css
91.228.154.4200 OK 3.0 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/orderForm.css
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators
Hash bc5da374783e5426f36bf5273c7cdb8a
ab9e3aec9a41e775e7f027249c32c0601b26a203
4de8918c8788bc5775bdffeb08761778610ad65875c5439691d2f6bac35b713e
GET /cardiol-zolotye-pravila-v2-ro/files/css/orderForm.css HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: text/css
Last-Modified: Mon, 29 Aug 2022 07:53:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"630c7069-3b5c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
newsworld.cloud/js/back.js
91.228.154.4200 OK 2.1 kB URL HTTP/1.1 newsworld.cloud/js/back.js
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
Hash 0c388d69a61a00b419e49f6ea765e15f
7973f1916a4f512e7b1371791c8cea552751cb28
e8476be6c7b680e547c10a9aa13d9dd7089f294022297214e5e86fe0b4e9d251
Analyzer Verdict Alert fortinet Malware
GET /js/back.js HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 26 Apr 2022 16:16:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"62681ade-1a7a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/js/modal.js
91.228.154.4200 OK 3.6 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/js/modal.js
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e0a4686876424f15362ed11edb16b8c5
57196569f04fc96edfc5b5316f56d328e197fc44
8b9443d93357820692a8d61ee19edfb9060dc73b49ab546fd9da0dd4d71f8dee
Analyzer Verdict Alert fortinet Malware
GET /cardiol-zolotye-pravila-v2-ro/files/js/modal.js HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: application/javascript
Last-Modified: Mon, 29 Aug 2022 07:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"630c7072-2c45"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
newsworld.cloud/js/form_validate.js
91.228.154.4200 OK 1.4 kB URL HTTP/1.1 newsworld.cloud/js/form_validate.js
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 0686d63b1eeea23eb7f05c33bf06f417
45310925bedf79ad41557326b7d5a76503ddd963
faaf962e49f82a1745753a5b42ed9066afc0a98ea76b25c73daf00856a667d1a
Analyzer Verdict Alert fortinet Malware
GET /js/form_validate.js HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 30 Nov 2021 09:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"61a5f430-db1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
142.250.74.10200 OK 766 B URL HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800
IP 142.250.74.10:0
Hash d71ac876718b3fde556fc24de7f2eb10
018c76462bcae6729b565a9574eef581eda66e2c
a7f9e7d976c649dc7d1131408a0c672cf342113cbab5d826e1d607f7ca6bd169
GET /css?family=Open+Sans:300,400,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 05 Sep 2022 16:02:08 GMT
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
polyfill.io/v3/polyfill.min.js
151.101.65.26200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js
IP 151.101.65.26:0
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newsworld.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 08:20:12 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/96.0.0
date: Mon, 05 Sep 2022 16:02:08 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1668, PASS, fastly;desc="Edge time";dur=12
content-length: 94
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/11.jpg
91.228.154.4200 OK 3.3 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/11.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 3c039c4036adbea76b884343fc560ab0
e56ba4e56f4bb59a56b304fee3f8e81fa5bb11ba
bd7fba06ccf88881aff67b1c93e7037a816cc5d1ff54b82d1c4ed2bcf40186e2
GET /cardiol-zolotye-pravila-v2-ro/files/images/11.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3336
Last-Modified: Mon, 29 Aug 2022 07:53:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706b-d08"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/14.jpg
91.228.154.4200 OK 5.3 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/14.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash c0a931823eab126a0816217c0ae7c963
98e54fc2e02846058d47f71eb2547525f13601b4
71b17801c2eaec99034bcc38bfb1b727b56e779cf944d036806b1a1542c566fd
GET /cardiol-zolotye-pravila-v2-ro/files/images/14.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 5267
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-1493"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-3.jpg
91.228.154.4200 OK 24 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-3.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 444x240, components 3\012- data
Hash 091a1d07ad2780bf0254f9d0dfa18958
3726451b34e01f8860ff06fc952b2e65400ad152
7f9940ac17c6ffb99b051a738518f2bf985b19e6637081efb13b213b4532272b
GET /cardiol-zolotye-pravila-v2-ro/files/images/content-3.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 23712
Last-Modified: Mon, 29 Aug 2022 07:53:19 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706f-5ca0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/otek-main.jpg
91.228.154.4200 OK 27 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/otek-main.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1128x504, components 3\012- data
Hash 87fc8eecdd798f55d6f60b49ea4636fa
2e3b1dd5223655d034a49bc31192cd8691b02a92
c72f42da6c6c84974d081fcad75cc9e75545741c020554783b4145e650f99585
GET /cardiol-zolotye-pravila-v2-ro/files/images/otek-main.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 27294
Last-Modified: Mon, 29 Aug 2022 07:53:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7070-6a9e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-1.jpg
91.228.154.4200 OK 24 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-1.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 545x447, components 3\012- data
Hash fc5e5459e45410663dedd7dfca9e2993
6d8ba116d4e18b10c99ef4fb8a0d4846e72844c9
9ac62ce1c990248d83009bfe531faa10f7c5884f4724b50890163d78230dde7d
GET /cardiol-zolotye-pravila-v2-ro/files/images/content-1.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 24273
Last-Modified: Mon, 29 Aug 2022 07:53:18 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706e-5ed1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/jornal.jpg
91.228.154.4200 OK 11 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/jornal.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 141x200, components 3\012- data
Hash 254e579981e484e8a2da3eeb7071a7fa
ddee1a0370af44d0bf4c054790cea1f493b50323
66d93ff20cb0b0dbb886067d47a15ff1239752b77ab2238959b581f814836404
GET /cardiol-zolotye-pravila-v2-ro/files/images/jornal.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/index.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 10954
Last-Modified: Mon, 29 Aug 2022 07:53:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7070-2aca"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-2.jpg
91.228.154.4200 OK 19 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-2.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 533x435, components 3\012- data
Hash afc68eb08bf01cbe3d6f25aa8f704f03
0b84ee16a1b86a336dd5dc10f5858ad26328b8ed
8f6f517b39016337852c96a9cec15e376d43aa431fc0b88e0ec5fd1448945075
GET /cardiol-zolotye-pravila-v2-ro/files/images/content-2.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 19126
Last-Modified: Mon, 29 Aug 2022 07:53:18 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706e-4ab6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/logo_med.jpg
91.228.154.4200 OK 7.8 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/logo_med.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 464x101, components 3\012- data
Hash 7d95ed727ce5f6bfb3f66ae832bea2e8
8d9feafd4673c4157249a4a4ef9b0e905c2f23e0
b6a24d544c00c4b39a213ec81f8c077dc313b1937d8bb23bc455efd789ec4040
GET /cardiol-zolotye-pravila-v2-ro/files/images/logo_med.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 7822
Last-Modified: Mon, 29 Aug 2022 07:53:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7070-1e8e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-4.jpg
91.228.154.4200 OK 17 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/content-4.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 394x451, components 3\012- data
Hash fdf1a36a43736bfd2610d31912be2e08
a4f1a871dc42c4d5fe407d985ad7553a363ba41c
da7686f20b58106a0db7293b62a0812595f4394422ce4967b56fcf90e950a1a2
GET /cardiol-zolotye-pravila-v2-ro/files/images/content-4.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 16883
Last-Modified: Mon, 29 Aug 2022 07:53:19 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706f-41f3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/prizewheel.png
91.228.154.4200 OK 20 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/prizewheel.png
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data
Hash db06a1341344c32acc9980ae5fe83091
c57df0088378258dbce2ab5c4dbe605cfe2bffba
55dc64fb1df3136b7c8f1b28b3b8ced5043dd6be07a59e88e64310a9af1a6594
GET /cardiol-zolotye-pravila-v2-ro/files/images/prizewheel.png HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/png
Content-Length: 19662
Last-Modified: Mon, 29 Aug 2022 07:53:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7070-4cce"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/wheel-cursor.png
91.228.154.4200 OK 2.5 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/wheel-cursor.png
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type PNG image data, 158 x 158, 8-bit colormap, non-interlaced\012- data
Hash 619d2440c3deaa1a0259497fcf031230
ef05e68d91e9680ee356c94d53b33a3595ee220a
39a06b6a561b9c1e915b5563b991eb40fe0f592b2a637c0d73e864cda93b71cc
GET /cardiol-zolotye-pravila-v2-ro/files/images/wheel-cursor.png HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/png
Content-Length: 2531
Last-Modified: Mon, 29 Aug 2022 07:53:21 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7071-9e3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/1.jpg
91.228.154.4200 OK 3.1 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/1.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 58317f1516c36db1c8a6cbecf1b31223
040198846210fcf2127a4caa88ebddc99393c199
2013ab42aecdbea5f2f35b7483a8c914cfc1f70d3ffd90b9e1706734e7a7d875
GET /cardiol-zolotye-pravila-v2-ro/files/images/1.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3050
Last-Modified: Mon, 29 Aug 2022 07:53:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706b-bea"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/4.jpg
91.228.154.4200 OK 3.2 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/4.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash d61896fdd70860b8453eb366e896fe80
3efe949f6630d97b7d7f3615ef0aa8f5c668ddde
f39a9d20ba70b6b00e762c7a8d3dd3c4164f630bd5dcd06d7e8893e13696928d
GET /cardiol-zolotye-pravila-v2-ro/files/images/4.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3221
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-c95"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/7.jpg
91.228.154.4200 OK 3.2 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/7.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash e6f670edf3dc1d8b8c3678f0a751063a
fd572e0847148aba2dd340c823acebf93acc299a
2093bd7bca4726055f38a60c8fe2c3b9072df2198f566507a78a3acb223fab10
GET /cardiol-zolotye-pravila-v2-ro/files/images/7.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3163
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-c5b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/8.jpg
91.228.154.4200 OK 3.6 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/8.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash b261b552e7db2a0cd7cece2df4c04161
0e9e579e6fe1db6d3025dc1c78593c3c4aad7831
525a19eeda96d1681db1b5330cf7b18463249610e49137247556a983a7a5c720
GET /cardiol-zolotye-pravila-v2-ro/files/images/8.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3583
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-dff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/9.jpg
91.228.154.4200 OK 2.7 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/9.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash e0f6f8036539e593e82d1b0df40e53c8
edcd54536e668e66729cc91d4084c716b2047407
ec77e29241d2e3fc7a4f7ffa4aef0f3ff51d52601b25ea831fdeb2b6d5fdfc1b
GET /cardiol-zolotye-pravila-v2-ro/files/images/9.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 2736
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-ab0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/10.jpg
91.228.154.4200 OK 2.1 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/10.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 547159ce4f9de01b4440df150a3bfbb2
bc6fddd329ea2d470c406e870b15623753f027ab
bf81007b76f9142ad833939c0d88dfa07159861fb505579e510570978d2db580
GET /cardiol-zolotye-pravila-v2-ro/files/images/10.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 2133
Last-Modified: Mon, 29 Aug 2022 07:53:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706b-855"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/12.jpg
91.228.154.4200 OK 3.4 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/12.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9272dd824aa82d379650bfab3de8f5f9
6197298f3091d0109873b81942c758345b278b03
fec5e38f820fbce9393b93ac63f746c38c455dd61956cbf926b6eaf8cd1b450d
GET /cardiol-zolotye-pravila-v2-ro/files/images/12.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3387
Last-Modified: Mon, 29 Aug 2022 07:53:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706b-d3b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/13.jpg
91.228.154.4200 OK 2.7 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/13.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash e7d0db634934539651fd82e51120cbc2
9697d3e7ac218820415ea9ec14e8a005317f17d0
2d65e7d7355f86fe515c7ac22d8fa7f2664d47abbf6a42ccb3191e3ac1390562
GET /cardiol-zolotye-pravila-v2-ro/files/images/13.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 2716
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-a9c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/15.jpg
91.228.154.4200 OK 5.9 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/15.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x180, components 3\012- data
Hash e50362e74dfa04afaf1cb30a3c8d055c
c12e79afca134ad9cf474d1871d2c926199f6735
cc2ad145fcaf9740eed4a6adde85a100a1c171bb30ca9c1bc153dc6332d72dad
GET /cardiol-zolotye-pravila-v2-ro/files/images/15.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 5914
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-171a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/16.jpg
91.228.154.4200 OK 6.6 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/16.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Hash 22939ea8e2bce5e90c4e1581bc44fc48
b72d3f1a7abb6955515726befbb8e9f0fdcc912f
aa3cf89ba2b0881de62ffca3c451604e948fb85cad8dababc8743493aa070987
GET /cardiol-zolotye-pravila-v2-ro/files/images/16.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 6646
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-19f6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/17.jpg
91.228.154.4200 OK 4.0 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/17.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash deee8955c870c2c56cecef8a69021a25
0529eca389ea55deb6f9703d18fdd6fa8beb0420
26cf2e8498fe58cd647356f4d5668ea950e84c70c56b9d006367eb616851c13f
GET /cardiol-zolotye-pravila-v2-ro/files/images/17.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 4031
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-fbf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/comentsm.jpg
91.228.154.4200 OK 837 B URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/comentsm.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 34x34, components 3\012- data
Hash 50e7b5d0d1543ce2fcde58916b3ad5a3
f2c7d330c8978dbcf898633a3029a78db38f9a71
083bbbd660a0924cca7b13eb5c872b86a8fcc311610afe9b59dc6d7f8f64237e
GET /cardiol-zolotye-pravila-v2-ro/files/images/comentsm.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/css/index.css
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 837
Last-Modified: Mon, 29 Aug 2022 07:53:18 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706e-345"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/2.jpg
91.228.154.4200 OK 4.2 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/2.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash f8eaf619f87f806bc5ce4d2f9be01d34
b41e8a81ec845289ecf66ead2f45e5f0cece4441
7e8ebed76d4fda930914a8943c65c897c1b6048836fad82b97bad22037c4ae2b
GET /cardiol-zolotye-pravila-v2-ro/files/images/2.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 4171
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-104b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/3.jpg
91.228.154.4200 OK 3.1 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/3.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash e2cf705f482a14f020103bb4870f4605
9a7e04b1d76ff25aed326bc4a7b430ab3e8f89b7
90dab89e16a84851bea7fe83cb676fddc52a700185f897475153244005ebdbc5
GET /cardiol-zolotye-pravila-v2-ro/files/images/3.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3108
Last-Modified: Mon, 29 Aug 2022 07:53:16 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706c-c24"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/5.jpg
91.228.154.4200 OK 2.8 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/5.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 84b7b234d1243ea068336a09738ab6e0
288368ebd533fbbcb9ebab7e11334acb88f78455
5c5db2c9df96f750e5a17946b0fca185b483a7b4f0974763ff0d584046fd95e5
GET /cardiol-zolotye-pravila-v2-ro/files/images/5.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 2767
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-acf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/6.jpg
91.228.154.4200 OK 3.5 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/6.jpg
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 0eb5c2a944ce15d846202e6959bd79b3
ce12dcc9cccfef99349c80c609521ac1c58284b3
25095288876b3769fc01f4cc531724d19197c7fd58abb192addfd3befeddf759
GET /cardiol-zolotye-pravila-v2-ro/files/images/6.jpg HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/jpeg
Content-Length: 3546
Last-Modified: Mon, 29 Aug 2022 07:53:17 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c706d-dda"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/tov.png
91.228.154.4200 OK 98 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/tov.png
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type PNG image data, 279 x 323, 8-bit/color RGBA, non-interlaced\012- data
Hash a5693d380dcff5ca43230df4598f4129
9e1389202ff1a087b2a13fec2f5560f6dd8b1c04
13db54044b0d8145583ed817a35a6b055b94178834cb61533d141b0ff8860106
GET /cardiol-zolotye-pravila-v2-ro/files/images/tov.png HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/png
Content-Length: 98474
Last-Modified: Mon, 29 Aug 2022 07:53:33 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c707d-180aa"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI9sdO_q.woff2
142.250.74.163200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI9sdO_q.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15240, version 1.0\012- data
Hash 78d68afb94effd0f2a3564ea74ec1fe2
df53c125216271c6e38d4c329f3bbe45f7b574ba
913825e18cda6e4ae81abcdb92d7647dd0bec857c575e22495bd7b94bd41f5d1
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI9sdO_q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 20:32:06 GMT
expires: Wed, 30 Aug 2023 20:32:06 GMT
cache-control: public, max-age=31536000
age: 502202
last-modified: Tue, 26 Apr 2022 16:56:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-ciZMZ-Y.woff2
142.250.74.163200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-ciZMZ-Y.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 18836, version 1.0\012- data
Hash 73d7be7e72e71728515248dda266c095
45959ce8a2e8f88b621c1d3586564e37ed3c8f8c
9e26ab5064dab4ccd659362ecb893cd010d78264a4ae5b540766820d1026815d
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-ciZMZ-Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 18:02:40 GMT
expires: Wed, 30 Aug 2023 18:02:40 GMT
cache-control: public, max-age=31536000
age: 511168
last-modified: Tue, 26 Apr 2022 15:44:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
142.250.74.163200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 20028, version 1.0\012- data
Hash 2bfde17b9a1384ce64af78db1b87a82f
8effd23e482511e249c3f8e91cdc503729b93598
5c2d662e92bcbf1a5970b97040f901031295e79a96314db8302f549003022087
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:16:50 GMT
expires: Wed, 30 Aug 2023 17:16:50 GMT
cache-control: public, max-age=31536000
age: 513918
last-modified: Tue, 26 Apr 2022 16:41:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI5sdO_q.woff2
142.250.74.163200 OK 5.9 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI5sdO_q.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 5896, version 1.0\012- data
Hash f91b9d6f4fc4eb590852e6aee364f224
023e468c2a64d3e83d2c02b9e05e3f32a6581f84
138bc1b3bb807265efe77d3156e95fe933b6c83785cc1f7332ad30e699f7b1b9
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AI5sdO_q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5896
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 06:03:30 GMT
expires: Thu, 31 Aug 2023 06:03:30 GMT
cache-control: public, max-age=31536000
age: 467918
last-modified: Tue, 26 Apr 2022 15:49:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cyZMZ-Y.woff2
142.250.74.163200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cyZMZ-Y.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 7820, version 1.0\012- data
Hash cfb6e6b712e09f3ac2829d9126f6f1e7
17bdded26f52da3154206f9599d7cba20150f187
880fc37f5a324b19d0624937dd1235625399588bebfe5c703930d6f3e1409285
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-cyZMZ-Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 20:27:31 GMT
expires: Wed, 30 Aug 2023 20:27:31 GMT
cache-control: public, max-age=31536000
age: 502477
last-modified: Tue, 26 Apr 2022 15:44:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2
142.250.74.163200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 19124, version 1.0\012- data
Hash c1b5d14d0136309bd96218e6847b3918
6d73e6d49b1e6313768d3a34b00d643ab0ac34b4
bf4eae9216be01f9a411ac93c5008eb38a3abdbb12fdb50ef974a4599e90220a
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AIFsdA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:25:27 GMT
expires: Wed, 30 Aug 2023 17:25:27 GMT
cache-control: public, max-age=31536000
age: 513401
last-modified: Tue, 26 Apr 2022 15:47:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI9sdO_q.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI9sdO_q.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15596, version 1.0\012- data
Hash 539978bbb69b21053be3d46e4596ae4d
9f3a8f7eaae80306c17ffa5e3ec4c5a6bff01166
38b0dd9e02db282e40d52fcfb9f89ef08bb9fb1ff0255f6f96d511b35713bc2e
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjQ76AI9sdO_q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:30:53 GMT
expires: Wed, 30 Aug 2023 17:30:53 GMT
cache-control: public, max-age=31536000
age: 513075
last-modified: Tue, 26 Apr 2022 15:47:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIFsdA.woff2
142.250.74.163200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIFsdA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 18860, version 1.0\012- data
Hash c91aac6ef66a18aed734e40c1b7ef33c
8e7075376823d45b4367b876d9ca7e24b22e07af
49791a696302b5112cec6f474d4d188ec3da019fab43b744b558c8b5e6644785
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjSL9AIFsdA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:49:25 GMT
expires: Fri, 01 Sep 2023 16:49:25 GMT
cache-control: public, max-age=31536000
age: 342763
last-modified: Tue, 26 Apr 2022 15:50:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2
142.250.74.163200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 19740, version 1.0\012- data
Hash 101cf2a65d64322878605fa8472bb025
6dffc15e38c321e4bb567b4bd8107a2e8d97c61d
273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:14:55 GMT
expires: Wed, 30 Aug 2023 17:14:55 GMT
cache-control: public, max-age=31536000
age: 514033
last-modified: Tue, 26 Apr 2022 15:48:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2
142.250.74.163200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 19816, version 1.0\012- data
Hash 290160ea1f23d0178902ab8a62635b0a
5614266d1f6bf5f0d7601fff4a2bc0924830d983
f6b9eebb05461840790fc804b4590323ef12a57fe5af7fcdeed2d798e572844b
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52_wFZWMf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:22:48 GMT
expires: Wed, 30 Aug 2023 17:22:48 GMT
cache-control: public, max-age=31536000
age: 513560
last-modified: Tue, 26 Apr 2022 16:08:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVsf6lvg.woff2
142.250.74.163200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVsf6lvg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 18416, version 1.0\012- data
Hash d4575cc3aad8b688499a078ec3114ef9
24e195f6b32d88a217dc1b5050b2d6fbfad7e80f
c885b71cffb1153ba213e090165c17fdda244b4807b622c1cee91025b536dd53
GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZVsf6lvg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18416
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:38:08 GMT
expires: Wed, 30 Aug 2023 17:38:08 GMT
cache-control: public, max-age=31536000
age: 512640
last-modified: Tue, 26 Apr 2022 15:45:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIFsdA.woff2
142.250.74.163200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIFsdA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 18232, version 1.0\012- data
Hash 68f022f10e4e3d97c91facdea94febf6
f8c531fb9efe8e003e11ae43337a4fbab54adc4f
ea18ca3fe3ae4d94d21bb36a2912258193fb4f257be81be3dabe0e3809a312e5
GET /s/ibmplexsans/v14/zYX9KVElMYYaJe8bpLHnCwDKjWr7AIFsdA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://newsworld.cloud
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18232
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 17:25:13 GMT
expires: Wed, 30 Aug 2023 17:25:13 GMT
cache-control: public, max-age=31536000
age: 513415
last-modified: Tue, 26 Apr 2022 16:45:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/med.png
91.228.154.4200 OK 15 kB URL HTTP/1.1 newsworld.cloud/cardiol-zolotye-pravila-v2-ro/files/images/med.png
IP 91.228.154.4:0
ASN #44066 diva-e Datacenters GmbH
File type PNG image data, 315 x 286, 8-bit colormap, non-interlaced\012- data
Hash dbcde6c3873597f24185f529d645c857
9af6babb25ed93a9131b56cca4a1f7d9f257ebae
4c0807d73ab0489df4c0e49ade1e26a6a1c1ff280779c8aa2f2903797abf60dd
GET /cardiol-zolotye-pravila-v2-ro/files/images/med.png HTTP/1.1
Host: newsworld.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://newsworld.cloud/cardiol-zolotye-pravila-v2-ro/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: image/png
Content-Length: 14702
Last-Modified: Mon, 29 Aug 2022 07:53:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "630c7070-396e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
medical-room.site/click.php?clickid=undefined&event8=1
46.101.136.93200 OK 20 B URL HTTP/1.1 medical-room.site/click.php?clickid=undefined&event8=1
IP 46.101.136.93:0
ASN #14061 DIGITALOCEAN-ASN
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?clickid=undefined&event8=1 HTTP/1.1
Host: medical-room.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newsworld.cloud/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 05 Sep 2022 16:02:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 05 Sep 2022 15:38:16 GMT
Expires: Mon, 05 Sep 2022 16:26:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HIPO9w70VJdr3R4GxHgW9mVERwSMDwC7PfgcvjhrMX_2BqViClg5Qg==
Age: 1432
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b57a9dd04797bf34612c80361f1dffb3
56573166d8b9cd9b8dae19fd905e4f3293af306b
b03552109f1e7d1e482aa14614ffb1e38fb53ae4951152aab307b927674dad98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 406
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 16:02:09 GMT
Last-Modified: Mon, 05 Sep 2022 15:55:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.39.175.179101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.175.179:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gnDBwHExwrm8wn4yUP7OhQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Pv0GWSJA8Mi6ngS9JApCiU1DMOo=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7890
Expires: Mon, 05 Sep 2022 18:13:40 GMT
Date: Mon, 05 Sep 2022 16:02:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7890
Expires: Mon, 05 Sep 2022 18:13:40 GMT
Date: Mon, 05 Sep 2022 16:02:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7890
Expires: Mon, 05 Sep 2022 18:13:40 GMT
Date: Mon, 05 Sep 2022 16:02:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7877df05329f39350f4907a067f5840e
21f33eca6863c382c216c16799d1bea83e40fbd9
94b943383bbd05d11ac0f9c3672e315c9cfaa5cb2299c3779195f08491969fa8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4260
x-amzn-requestid: 024510ab-0cb7-421e-805b-fa54501d1e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpjFQGPVIAMFytQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d4bbb-4492cd20474c37337f8a5521;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 23:28:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Wk8myA4exuK32he7TlFoJtvtqHb0WcDhvSuo6-aN0dMcxIr7cDkU5Q==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:48:24 GMT
age: 65626
etag: "21f33eca6863c382c216c16799d1bea83e40fbd9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nJTKTh88iyFXAiPJ-tCCEbqBo3A1cuTj2gCbfHkaVZ1WcgMOTyFfVg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 23:06:26 GMT
age: 60944
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eb6cd09-3bf5-48ad-bcab-4b0b05db8dcf.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eb6cd09-3bf5-48ad-bcab-4b0b05db8dcf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5231760bb81282416f2bd27a4261099e
e3e743b349fd5cb399d4cef4a0877dcc8e2f44f9
e0762821086503aef75013b60a4e340d6fbf9b1006fc7f8b4e079440afce8c67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eb6cd09-3bf5-48ad-bcab-4b0b05db8dcf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10770
x-amzn-requestid: c6d80cff-8d44-4589-bcf1-1f5a0ab199b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3GH4IAMF6KQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-2628cc83263aeeb14ce444ef;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eEuQFQAkBAHlIYBRrvaJ1qjT09ezTNaL67wa77h1wS8fHc5oWi91aQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:45:28 GMT
age: 65802
etag: "e3e743b349fd5cb399d4cef4a0877dcc8e2f44f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c81f3df885bdee8cac46ea9495e6b63b
fc766bca874a352a4acb569577d4cf6527f4f074
e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GSRJIWisH465dPqbKyPj1iZk1jAu3RGrgwj1CX3X8A397zv9Nt0cHA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:47:54 GMT
age: 65656
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30bf854fd3e27e2313a3d26fc43b9990
032acf1bfb0c8e2cbce8f2ff4d2964424b044951
7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nqxzicnkQPrjStpPaMIZAukyjtUBQaXfuxWzIs77YGDyJmnirlMsxw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:54:51 GMT
age: 65239
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 290f6551c5ac539ea60810b135750f17
3633391a8dd87ef10fcb0d04d7b309738affc4a7
d94d133faaf232cf15b5c3f38f5b45d87d70bce0668d607b5c66a8d3f836540f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7830
x-amzn-requestid: c56af3b5-2c48-4243-b220-d56a9be47990
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3H4JoAMFiMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-23ec24d867e3e5906fffa1a6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fpKQlxOtyRwaZk2FUf11J62jlqcAvXgOQT-ipFQm6qW-dMHyXaEnNg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:49:31 GMT
age: 65559
etag: "3633391a8dd87ef10fcb0d04d7b309738affc4a7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=IBM+Plex+Sans:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=IBM+Plex+Sans:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700&display=swap
IP 142.250.74.10:0
GET /css2?family=IBM+Plex+Sans:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newsworld.cloud/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 16:02:08 GMT
date: Mon, 05 Sep 2022 16:02:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.binomstat.info/rediska.php?clickid=undefined&time_spent=1
172.67.171.190200 OK 0 B URL HTTP/2 www.binomstat.info/rediska.php?clickid=undefined&time_spent=1
IP 172.67.171.190:0
GET /rediska.php?clickid=undefined&time_spent=1 HTTP/1.1
Host: www.binomstat.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newsworld.cloud/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 16:02:09 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g2wRvcFRXeRz4%2BlvsjPkUPSo44XQ6twc0IVj4h%2B%2F%2BHbCmjNo0D2iTRoSkD3TTWpV%2BK3O47t6f2EteoAx%2FRMQAdOn6uT5%2FtlGVgGYvUbcG%2BF%2FEXRpeEqA6ERlt7927wrxIW9D%2FnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746030088af30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.binomstat.info/rediska.php?clickid=undefined&time_spent=2
172.67.171.190200 OK 0 B URL HTTP/2 www.binomstat.info/rediska.php?clickid=undefined&time_spent=2
IP 172.67.171.190:0
GET /rediska.php?clickid=undefined&time_spent=2 HTTP/1.1
Host: www.binomstat.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newsworld.cloud/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 16:02:10 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w6itxT3chN5%2F96O2pX746OZz9lsbsbF9Olyx94%2B6der8kRlCzunEFlvcvfNeKGL%2Ff52UFtpr2Qda4e62489FTNHeXnSpebgEXMXzbNqjxbXuKZdqLAuAkZcWRBt%2FNW98ZSkKlH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7460300e6a660b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.binomstat.info/rediska.php?clickid=undefined&time_spent=3
172.67.171.190200 OK 0 B URL HTTP/2 www.binomstat.info/rediska.php?clickid=undefined&time_spent=3
IP 172.67.171.190:0
GET /rediska.php?clickid=undefined&time_spent=3 HTTP/1.1
Host: www.binomstat.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newsworld.cloud/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 16:02:11 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lGZbj7UnlrD%2BVPIR9qsbw68l8v30WMg2q%2Fj1movtPDYVsi3%2BB%2FU7uVQ1OryJLv0aNhFxnJLs5sdiu%2FChI7PYEhbyTge%2Ffb4tDdi6LFGHmr9T2b1%2BsAK%2Fm2%2FIzuJ7Kr9ohf373f8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74603014ba780b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900&display=swap
IP 142.250.74.10:0
GET /css2?family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newsworld.cloud/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 16:02:08 GMT
date: Mon, 05 Sep 2022 16:02:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2