www.lovedorm.ru.com/ylkakhwblr/hqke875653ubpjqelrx/0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
200 OK 524 B URL HTTP/1.1 www.lovedorm.ru.com/ylkakhwblr/hqke875653ubpjqelrx/0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a70b79132b4748e61d848561b7223b2e
41f53bbc039d3d802b7c971ade663fe134570bbe
c890c71f18c3f522094b77a06ebdbdf00b196423df5583a276e6fc5df6cb42a4
Analyzer Verdict Alert fortinet Malware
GET /ylkakhwblr/hqke875653ubpjqelrx/0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VF55DBj0UEZh%2Bxo5lSPlril3VdOCXwD%2BbjAJpdGcAYapv7Cs6ZYGGUl554nd1c9DSppeZAIfcVi5Uf6%2BHEaXL16xgyUV%2FSxRXlCB2flDEVT6I4ybDhaWZEXLDLqx3CL7pTpfTmUM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0a59a1b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 17:53:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KyVODVcRaIJHKvVMIlfxzfryvloqyy3-YZ-qVBFk3yHUj1xWP1RUew==
Age: 2445
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash adb43321efa5cd1662993b701ff25fa4
1299dcea7e9c59d9f22f39d69025484fe71098c1
2c25a6717245be3746f1412af9dd1c351e12dbb93e8e08c3ddcdacf35e419514
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C25A6717245BE3746F1412AF9DD1C351E12DBB93E8E08C3DDCDACF35E419514"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6048
Expires: Sun, 18 Sep 2022 20:14:36 GMT
Date: Sun, 18 Sep 2022 18:33:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JdVHBzCNwWDRN3PG6CxUysCRVBi3MVB6SgcGw3UkDTyEMhsBIetZkA==
age: 50315
X-Firefox-Spdy: h2
www.lovedorm.ru.com/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 www.lovedorm.ru.com/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/ylkakhwblr/hqke875653ubpjqelrx/0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 13
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gQGgvYquqvOgPGBFhOnAp8p%2FK9Scb7u%2FOPnyshNrudXOe7VV70n9ZnauYqi9p8KWggd5p2J7%2F0ipZr2X4uWNp5%2BG54y1OShqJFum9Fle%2FAbJlyDM%2BYczwLUPaOEIiVW%2BMgdv5XJX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c0c2cc5b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 18:33:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.lovedorm.ru.com/offer.php?id=213&sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
200 OK 331 B URL HTTP/1.1 www.lovedorm.ru.com/offer.php?id=213&sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (319)
Hash 04f46503ae0e841beb71e7791053deef
84336172784e8836c3b676673987b403a1f4ab09
a66455a60ea16b75ac482d35c2745529715016cb0210a4c21f77a8c699a6d73f
GET /offer.php?id=213&sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/ylkakhwblr/hqke875653ubpjqelrx/0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FcOeSbBDyIny%2Ft7NNfOo2bLUy2zKWyh6OU3opkdkqPLC9v2PR9Jj7TmV7%2BRp2b7X7rYbxBBPpzuxhiOj%2FD4SMw73DBrAJbTPvZvqGdwHaha0X4hgDsEoht%2BnqYG%2FBqNXloBTZo%2BS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0cad65b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
200 OK 11 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
IP
File type ASCII text, with very long lines (62929), with CRLF, LF line terminators
Hash b8bc5aa36f686ee04208c9686195edab
e020d345db7efa2dfe4ebf4b888ccdb560372b8f
0b1aa036cd4b64c7b1462f92833e4f54cb98850db23bfbf42d35b3b2ff192f4e
GET /clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: W/"62e823e4-11e86"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fVyf5Kc1ad3jO%2FHrbC%2FHLSr9Xz15OXGPG%2FwijfJd6NTv9%2F6tha1IwysWn3Dxkm1PNOxReQDFuQQmk7pNxK%2BUwwcWhKuMUMC6KkQWABPvSaPSuRvh%2FxubAu3r0KMERQtyaJH4%2Fxqu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c0e6d590b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
200 OK 115 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
IP
File type ASCII text, with very long lines (60347)
Size 115 kB (114854 bytes)
Hash bf79ae58d383b0bfd5aa04fa527ae59d
76141d2acb1acbfd7c2fc2a050dde381e4b0b25d
e7966e88811b0480c1f74fb9c2453deb97ad7a1d2c3a70e75cc69c9ca6a65e2d
GET /clicks/chapter2/GX-watch_files/semantic.min.css HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: W/"62e823e4-c055e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sUx0wMvBDMlQ3cv7pd5cuH%2BnlZlrRe1DimHrbaT3cBei3jUcLP4MGctSw9snYNabVLWhlXQXjqwjadEwjaAJy1mYQDWD61ysMTnNmfZGPjp%2FA1hl7pxiMc%2FtWi7hD6ZIm6W4PT0c"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c0e6d4b0b55-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
200 OK 13 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42825)
Hash 482e71d3049d1912f14ed2728d48be9c
924d2fe0e6af34a55339c6bff22f52ca0400f85c
f9154e4846025133c36fe1d8ddb07870e803e7ee93db897ced9e93db36dae9c9
GET /clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gC57B9wfS6f9gsoZSGo9k8k8HucPbUaX4CxeGnOhDGt8OO7cdPgAEDIFHI%2F%2FCoWRJAZ9Ouj3tysCWsJdU39tKS3cO2dLdUUMp%2FuuowJ1g9eCBhloxanS5N3BgZmJBktyuegvHE4Q"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0dcef5b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtm.js?id=GTM-K7KV9MG
200 OK 48 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K7KV9MG
IP
File type ASCII text, with very long lines (21647)
Hash d84cf13195a782b0fcf27802814cf2e1
0169ecdb0cfbdec858c5b55281b26facea4b2e50
1a5a3d8f7a113ea72bf6e837a6b6b315cda7fbc4bcec8ae19823a5253866e202
GET /gtm.js?id=GTM-K7KV9MG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 18:33:48 GMT
expires: Sun, 18 Sep 2022 18:33:48 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47803
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1720)
Hash d1f8ef51844301ffa3b399b18d42d1ff
576c992f62050bac7ae8553a824e5fd0ba6eb728
db2641de90315efce06bf6ceb20165e0a0da89330c6476465de21befd1c7c103
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 18:33:48 GMT
expires: Sun, 18 Sep 2022 18:33:48 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42378
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b417168037cd02cb414797a2fe8a898f
504f56151849a7bfcd36d7e72b39ead79a69bfe8
39238b70192886874fc0362dbf5e2b017f71760665c5d1025d75e4a304ded1f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/obtp.js.download
200 OK 6.2 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/obtp.js.download
IP
File type ASCII text, with very long lines (6169), with no line terminators
Hash 522e4451790939ca385c10f4b474de63
23027181eea39e5fc338694c98602baaae0944a4
8bd397636ecd49c36d687ad591807ea5ee621b1e11888657827902a5003fc4bb
GET /clicks/chapter2/GX-watch_files/obtp.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 6169
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1819"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uwopzo5TlN3UqBXHpRYS6SPd5XsqZ4R%2Fc8sQiSGzvVdbDld0%2FxYYfYnxnebDeXUlFaynbFU7FJqYGHEATncf1d35KsrFi25ykBbN3mpTeAk8LRx1vpglRh6jq%2F9nMSgQ5eQJrbq0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0e68c2b51e-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 18 Sep 2022 18:03:22 GMT
Cache-Control: max-age=3600
Expires: Sun, 18 Sep 2022 18:45:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Q0bkUkzE669-945rD_VUjVFbjVB6bOmAUSiPj0sGTnedRjIdyyxMDA==
Age: 1826
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
200 OK 699 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
IP
File type ASCII text, with very long lines (699), with no line terminators
Hash 0997f48838ce432db6b37f72c8fdf1f2
c9b2dc8a68ab46b5b36c96d52ef6c6de1084c6e6
646f01731972adb62a05fbadddee4f1760499bd01e6c2162d889ba47d160b6c5
GET /clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 699
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-2bb"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5fVSt2cVeJsTyZ4p8ktpk27IsaGl7kNwgtmRm%2Bwkwwrn2m%2B%2BaWMaocPKEf9UEjw2zGkhCk8RuwH2JqYsp9wRuXCIfLPPqdEAPOOKczSA%2Bzbv292MmjpNbJX50UvSk544HHPysKC3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0eadaa0b55-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
200 OK 2.3 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
IP
File type ASCII text, with very long lines (2339), with no line terminators
Hash a5fd49d9f6995d297d975ff767b07693
6e62ba7c1e1b5683480f0359c5daa96f7f602ef4
74feece712f2d426ea2f9f682eec3d74f4474a31222a62de4778f2670cd2c2c7
GET /clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 2339
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-923"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AmP7oiIo2dHcAdoH6FCB8ndUFGkQ9IkSh6lBXzU9AbqCcz9Pi91QfXqJAM%2BtbGo2yn95ihF1OyfmQZddEkbI4WD8aE4ILZI6rdgj%2BLpijDGyaplxv7Y3dtOkGntukIDCX8T5h0Ss"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0ed8a3b512-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/gtm.js.download
200 OK 84 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/gtm.js.download
IP
File type ASCII text, with very long lines (1721)
Hash 7eb0a1bda269d3087b8bc748e696f147
3ba33c1c1c3374837f373637041bdb33e7b41d3e
f28faa623ecd340179ec27e8a8288a7f75be69f9335c15e0d28055e372009bba
GET /clicks/chapter2/GX-watch_files/gtm.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 84387
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-149a3"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sl7gLhsq%2B2geoSdhWvCnlY5xmuEkgq21amsRcbkBzLCVp%2Foonep20oWrbjURMfhxPwNvSobFJ%2FiSgC86UFvwSWmf%2F5pVP5pEznHaZxqVWxYKqAWJfZsm4WRVmlG2yNoqHTH44eRQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0e6d580b06-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b417168037cd02cb414797a2fe8a898f
504f56151849a7bfcd36d7e72b39ead79a69bfe8
39238b70192886874fc0362dbf5e2b017f71760665c5d1025d75e4a304ded1f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/fbevents.js.download
200 OK 129 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/fbevents.js.download
IP
File type ASCII text, with very long lines (33256)
Size 129 kB (128769 bytes)
Hash 9d939cad64375505e4dce7469a82e4ee
c0d0919210cb8dc763acb3de97a6218020caaa8d
5a91c6d3e635c0bd1551a53cf0769328132151a7732039170280d500dbcb4685
GET /clicks/chapter2/GX-watch_files/fbevents.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 128769
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1f701"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lOyPkU6qGj%2FyCjfNdsSIGZBmH2GNhdqnNGSSldr6c2IOjGpZMxyeLHkajkdM9bECUk21YfkdouQLlf%2FDe52CI0MXxdmEg4I9bXPMoPJmaY8VxGZKn7ykdWEKWZKn6pJdh2m29oxT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0e58beb51e-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
200 OK 593 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 593 kB (593023 bytes)
Hash 67ced67786c2faf02230249ebfca68b1
43248fe8f624ea47d7ee8bd71d47691bd3b836d1
fcde07bab3999ff73a36dfc92c42ee7d1966cebe0246e6601923410ad0ae3cbf
GET /clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 593023
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-90c7f"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TDX9Kmd1dX5yFc6v8z6xkvMNH7tAeaRXmZoRQzC%2BU8MNLb4EdGWnAr3llwOV6yK8M6wFEFjuMozKn%2BNvj%2F96wPjxlzCBwVYXAP3XAslK3zy1DDkMorWIZj6K%2BLvaek%2FZL8hbb%2Fn2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0e7d700b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
200 OK 50 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash fca31471671ea05f0f7162fa96bcad2a
451be53621ba63467a0203c532010653c6cc0618
a50afa03f5efe4300e805950def99f32a26b5c01f81ba6fbe552718a21bb1ecd
GET /clicks/chapter2/GX-watch_files/1586101192223_laser.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 49717
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-c235"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 11
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=87CNdzvMhfqH6w2ETbzvfWxr7PKfzsILS%2B73QU%2FPYWSvN6Z2XxvOwSXGsWHqE7WcyIOUA7%2BKKqXS%2Bcg4%2BlzfE9ETMUnJpnTf%2FntlGNGAs73qsnsDwFzARPH9YSieDgZ5WOF5rPpk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c10d813b4fa-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
200 OK 25 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x270, components 3\012- data
Hash 5ac031f2695f2f0c0223d7e7e245f3eb
fcf0766c41f347ecac0e74310b70d78b20044dfe
f5091a260a7a625a373fda20c1dac57b734a346dcb0656a0be836f61a09b0276
GET /clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 24980
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-6194"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 11
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kqIeKpHIUiCwVyfrPk7DjtYpinI6UC8QhWrqa1bKKUFXtJb5CbiX%2FjN7UAqv%2FFyoun06KHFk5PgiUeIGqpuxfHBruzxuokl1VSA5P8cbaj4ZoKaQKZUYJ9QgDHDgEiISMKMDlG%2B6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c10dfe2b4ff-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
200 OK 103 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 103 kB (103271 bytes)
Hash 0309841be9f6c93b5163a6ab2cb19f2a
3abb34179b969dbabdb120d51ba02ac5151b1de7
bebc224b22cec1d226915bd2118a0fc9a53d50a9f369920b30ac0eb6495a0538
GET /clicks/chapter2/GX-watch_files/1586102542256_features__.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 103271
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-19367"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3zh6qTBqr2ETartzwtmEKlSm3u7Akz%2BflKj9ikC6ePArs2z8jiUnDokk76m8%2B%2BC2WBRjE2VNrdQPYvbBjJ6DJ7gAV8q8TuKcVMlN%2FUXB8XdVbyGfWhWLnSrFmno32W5ZrjV%2Bob4s"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c10f81b0b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg
200 OK 80 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash 8c1c17dff8ed4ca1df320a8005f4860d
9cb0249e0b76ab6c6d81e53ccaf8b6a2f5687a0f
1df377f3d31d6b23fb51eb01bd038e8ad071e10e4f2a585246d1a2b0b794e4a3
GET /clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 79716
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-13764"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FX%2B0iRKuqBVvFAN9M97OkgT606idEHnUuKVNiOoq77OFXhFVVP1mBEVAGBl9pN0V3fTei9%2BH3Jww%2BY2gVelFP0lVNdVDfyTxg20sxkov2eLlf6Za45G7TELMkafhG7Pdy1SA1wAo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c110d72b51e-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
200 OK 82 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash 277d28a5ee15b503ba507791bc9d0e60
a7279b9889c6e1f13c2aaecd03bc6960ec54a1bb
712eebff95f07402bc0884e094e06bbcd538881832ef6936cf566a86942e5dad
GET /clicks/chapter2/GX-watch_files/1586103483138_review__.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 82345
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-141a9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJgg5z5znuUsesA%2B6P0nCA3ZTUizR5BFtaLSkGAZbHHyQHSTRvUeSijjpA%2Bbwje%2B6GM%2FhUzNJLLcbPb4Bpjz2Ps2qPiOkx5IOGxHqjeTL9ltv%2B0znCu%2BprNM1gpgZgdmpMZLrjLF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c1118340b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
200 OK 130 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 130 kB (130041 bytes)
Hash 376d40a13fb314f6348c39ac3b14ed6f
83fe6feebe524666e39a8f201ba10a3f4ce5f78b
458b44113e09b0eb516e6b13fd90d138b1ec195cee7cf02f7c415e2a4df37f24
GET /clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 130041
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1fbf9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 11
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hoRWobcRcZDwKrqxnufSpYdqEhzOARC6LuBv%2F%2FvhEzllqeCyqJf%2BDAXf4GDxqadwf06rjx8I%2Bl4J1jPA%2FMRe7tzKBINlpkCUkbTjSt0SyFyekglVbM70kHuxbJ41S9UIo5m%2FWn%2BU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c11081eb4ff-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
200 OK 111 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 111 kB (111187 bytes)
Hash b559717db701371ec085ad351c4c5baf
de55a086bc86879864832d6038034aa9c131ffce
dc06f10b5152b28f2f8a1638e67b18025f22091259673cde91ce4921bd6b3bb3
GET /clicks/chapter2/GX-watch_files/1586102937853_review__.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 111187
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1b253"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l6ZdbnmAn02LTbPjIIFnhIpvxEyFv2euB%2F91%2FZbU07%2BZu0pwGriPKI7IA%2F2XAFnVrcTAfbA%2FoI2YaCExoBlHIcpNr8R3phrPAl3UP%2FzxWjSy8SzDlOCqZbaCJw2zXIhC5Hks1Bhi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c11086db4fa-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
200 OK 58 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash a5724ec80fd0ba3912854045e0a5dca6
1f1bdb6a41f67feb941c5d2824ea354c5685011d
d476034f617682becd5ab468c20d5f713578c0b70ee30ece4e5b4978c8e2e541
GET /clicks/chapter2/GX-watch_files/1586103152860_review__.jpg HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: image/jpeg
Content-Length: 58359
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-e3f7"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8Ci0C3bZAw565zb1hdN7KbT7QwnrFSD5e8vF8eQ2z2DEp0fm2wHF8KUOW10f8X5nP%2F2ehhSR4mvM8QQTe7CjtBArkyMlNSjf7Ad0wv%2FEGlRAERAEmfEP1Pejy4B4IjbWrFfKVGB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c111d89b51e-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 5fd1174f35b25298fc44a6de1af3f3d6
d45a47995ec34c7df480b3efafb13f55d9df7eb8
f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3988
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:48 GMT
Last-Modified: Sun, 18 Sep 2022 17:27:20 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
200 OK 13 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
IP
Hash a129855a3870c7b627663505a84e746b
bd7e27e56e66e352b28c2341976fbb88c0ca1149
8fab7293b7d0321b4249e385a943eb81488ad61dba0c55ab3851a3958e09d95c
GET /clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 36500
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-8e94"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5L37kjGQriuATXaNpZt3KZAhsBXGhMv3mqZnj6q5YRQeGp2raqmQJQhgfGavatHIv18nKxaziGMOanwzadth8GKwNo%2FoQeWEFcFlPE6CUh0mFCoHmTXQyLuZv9r4%2FwNjBwOHHcac"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0f4a1ab51e-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
404 Not Found 116 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 13
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sjESedLX0STmu7motAftOWoiuEaNrgYvM4Yw4STG60R0w5EMKZkfr3H%2F8858cUFbYoCzuahkplaL829ULgz9U6dGKuJ%2FDVw5As1hYO8TvxwYkiWCuf1V4thv6vka%2BArKlpn9HeL0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c11ae5cb51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.js.download
200 OK 346 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.js.download
IP
File type ASCII text, with very long lines (65324)
Size 346 kB (346199 bytes)
Hash 132bab8897a9ced6fba8df024ff44c61
5389aebace491d696e63b2747da38441e992de44
ddb165eba6b445a6c460fc57ea5f15de11383b6b75bf9259eb35ad34d442b124
GET /clicks/chapter2/GX-watch_files/semantic.min.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 346199
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-54857"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2FeD55DzhYYcC3TSth95MHxbZcpm4w5KI7MAtuLIeRwAt%2Bx1EsI3XHKLOxjWrWbu8VsWYbpeh5KXuokPLQRaWK61kEIXtaF82ftSGHXidnKfGDlzRUGcfRFWBDCayJlbb6gRXv9J"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0faebf0b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
200 OK 50 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
IP
Hash b3e55a458835db3123312297aa5d9dae
642998afecae0d85375993323fb29d54ff0b7f0c
d117a3688dc97852b650fbbc0bd3139df858abc805c54597ba281554922342e2
GET /clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 720806
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-affa6"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ESUfoApFNe1AD8BSBajvC1G93X%2BXThljE4OVydCb7VGfvNKtDsbtEEcWFdb2%2FGUnC2hIIYDZeERihM3L1jEQy5e7jYC3SVihue2%2FLsGuAtz5DbXrO8NITepJsPvfwDchevpP6AH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0f8993b512-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
404 Not Found 153 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2 HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 13
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CokCDAuqMllfNMINTzJbrBjFZvw5%2BjwNqU7Cc%2BN7nLeiheTC7kHUeVi1GOYoXyCFnEQjYzjt8GeUAe0r5gmugjpkC5o27%2BeYRfmKE7s5Qr7QqUfX7B73Vqxl48D83qkgaSsSsAQv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c11f90e0b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
404 Not Found 153 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2 HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 13
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uJZanLy02bXXKdfDByD1vIG0grsUJoqx3jU4PV%2BUNU2hIkfq2xq90VEtDLWQWRHxBLULNFGXNHRhfi%2BLU9ZQOhR0pkgdI3F508LcTH9PJhx8T9%2FsYskbzT%2F7ryoxMWcAUKSs2ko"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c11e8fc0b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
200 OK 741 kB URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 741 kB (740762 bytes)
Hash f161116229f6f63b22161c5ec9a1a8fc
ce6e944ba1abcdd06a017378e2193250650b808e
1021043813945667ae55767c0a2e6a1857ec66cc7673ab97c660086474c1b79d
GET /clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch.php?sid=994208&h=0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo/jrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:48 GMT
Content-Type: application/octet-stream
Content-Length: 740762
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-b4d9a"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2BxpNS1CmTS9ItZBB73wYhgpTl9IyKmEl7D0PZceWFlayn7XwKKD6PWyt5UuySDq52vRTAywnLeGxfTLwp%2BsTUrmc8E%2FT31IiiLLCyeJ%2F27ldjbEtQblfVfbYROnwEVwxjcaUJJr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2c0f8e760b55-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
404 Not Found 153 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cRggX7C27Q3Y9mQQUJ1BPMWEv%2BJ4pxq4YpCojtWj%2BHoRW8866KyWyU125F7fE9JyV%2B6Y1fHODShbvKLxhqjezfXhrw%2FGU6FAkWpX0SVbkShaNY3yerXbJNAKCajg91XFM1LxOZaK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c1259c30b06-OSL
alt-svc: h2=":443"; ma=60
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
404 Not Found 153 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QcvQxn2wDFH%2F8WisWTsA13ShvxE%2F1%2FkRjv5rOd9Z1glikLzhkYpBZUG%2F1gBMtpnvbbnCAWFKAX3QK1uUa%2BbC%2FZAUP4LzPovWGy9Ih0h5e3KfRkvLyYPNNynEHlRaz75e27eRIgI5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c1259c20b06-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
404 Not Found 116 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TnAd%2F%2BxYwmWFL2zDw2RKTPQ35ybUvnmziY57tGq0m3E1g6qg51h8%2Fsbsn6iapduukdKQU1513%2FnlobpJn2ZdKBk3nPot1NnvoM9E06aXnskGoB3ue8zIfgpF1PO2KE0twqgpMETW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c12d9fb0b55-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: paB1S/N+PcSogw3oGWtKrA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: POnbc+vI9c+dfK3+gKkSgFs6iUM=
www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
404 Not Found 116 B URL HTTP/1.1 www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf HTTP/1.1
Host: www.lovedorm.ru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/clicks/chapter2/GX-watch_files/semantic.min.css
Cookie: _ga=GA1.3.1203203244.1663525999; _gid=GA1.3.1672769092.1663525999; _gat_gtag_UA_22484186_3=1; _gat_UA-126905093-1=1; _fbp=fb.2.1663525998999.986874342; outbrain_cid_fetch=true
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 12
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pHwoR3NT4KsNxGZeIVx9nwWSHOlHIURJrVpb%2Bf%2FoYJhwzFFqJiTGgxA%2Bn2BKuLwXKJ90v8%2BkqQLG77a5ZupbwAfWP6hdz9mhHgjzcpqZ3vKRhRVq8RacLLKBBajYGpVjYYYxU71M"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2c12ea680b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 18 Sep 2022 18:53:49 GMT
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Length: 3249
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 38e7657af6b426db96e62cd44eeac911
b4d04a3abfd994a7eec215cbf57a08f060cea29d
24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:49 GMT
Last-Modified: Sun, 18 Sep 2022 16:44:20 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 18 Sep 2022 16:41:12 GMT
expires: Sun, 18 Sep 2022 18:41:12 GMT
cache-control: public, max-age=7200
age: 6757
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: qVk9hdR7YfZmLmJd7k0Y2BSY2+k71xYgFH38ILt5TRz8Se0EP/Vo2q9vuJWqIjcMds4vqs3oitPu72HyPlfwhQ==
priority: u=3,i
content-length: 26839
x-fb-trip-id: 1679558926
date: Sun, 18 Sep 2022 18:33:49 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 38e7657af6b426db96e62cd44eeac911
b4d04a3abfd994a7eec215cbf57a08f060cea29d
24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:49 GMT
Last-Modified: Sun, 18 Sep 2022 16:44:20 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.lovedorm.ru.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D994208%26h%3D0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo%2Fjrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg&optOut=false&bust=05342627035749397&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.lovedorm.ru.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D994208%26h%3D0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo%2Fjrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg&optOut=false&bust=05342627035749397&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.lovedorm.ru.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D994208%26h%3D0bhe3ncqznmu_fzpbxxifuzqt7k6a5wzdwjnnzmpbfo%2Fjrmnkq2wzpl-t0zwhqzrjuz6sdvjijvg2gdwlukfilitgtyuftftkibrbahrlxgqa9nrkvwjgjaazd9fnhu91or7mk3mvmao0ptk7nioendbfldtliz81q--ym9mrc0rizhu0soep6f0nftrrgqbyg&optOut=false&bust=05342627035749397&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:49 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: e620f8560c887a2f44c83ab4f4052527
content-encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8690
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8690
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8690
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8690
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51d067e534c477ce996b3e806f6a132e
451c1f67948e45909e636828e3d2a3099de922f0
e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6869
x-amzn-requestid: 8d5cf972-bd9a-42b8-ba33-5dd05191e9f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6u1GspIAMF9vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263e5e-12430c8c7122a3594aba8949;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: leqr7rYJyeBFlYuFM2D-wGJfb7_w-5HbW2Y1aHwjTzZ9_4MTFybNaA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:08:03 GMT
age: 73547
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 591051a00cb3f972934af2f5f945b9c3
4ae396f23a386b68ea35e348da9fdaabf973e978
ad4dbe49c25ca214af9c54466551826325e4b2d6db9346e812572be81f7e8133
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13098
x-amzn-requestid: 4aeb2f6b-f54b-46c8-b711-7a64344e011d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yb-K4HLbIAMF2kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217712-26ef04b36e8ebbed537f4f77;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 06:39:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lx4A6ney0Xsq5JHmRpI4paNI5Gijj9KCUaUJ4-fS1r3VqeZMmVdNCQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:45:03 GMT
age: 74927
etag: "4ae396f23a386b68ea35e348da9fdaabf973e978"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56ade9172e883c777dd974ca879bceba
b2aaf019e083443a6404c262206ee2e981d3165c
c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3tByM8rVW_WxdiBUCfXzxZWjMvH2PB2VQ290D-DLITqly6QQQKBNSw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:13:29 GMT
age: 40821
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 317bec00e52d8d6e4262f1012671398d
faff41cb28c468d04dd70fe08345eb592e761682
752624baf3cb635f20b641b2cc7e2e7a51314b1f78ffa9967e0670cb85ff7d45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6790
x-amzn-requestid: 1071b2d1-fee2-440a-9bcb-4554aec54979
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7gxGLroAMFnaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632572d1-3a9e245c559ca7d42c51d5bf;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9uRRFnN4xldQYbXHKMLV6WIv_nOp_jQjZ2rtq7ReYTl99mC2ouuXiA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:14:37 GMT
age: 40753
etag: "faff41cb28c468d04dd70fe08345eb592e761682"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 29f4a52fb629dce4ef8038d4df7ea58a
4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0
32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: 9f179e66-3c6f-4e53-94f2-989bf32a6b90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7gyHvboAMFSzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632572d1-799e74a63288269b79170d58;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9firpBGLDHkjq_CJX01tbyPPS9OXPsTfzC0dLioWt1Axg7Vw5LQ0xg==
via: 1.1 497370ec058751eb0d9251f66d50af5e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:15:02 GMT
age: 40728
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f003d8b6e12692fb16dddd6827deead8
786c333cf08456aea446a55c547520572e1c2df9
d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q6pjncaouCXUu0Pz7v6xF_8ClxxVypUSeggW23Z-UTsPamKCTgwjmA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:00:17 GMT
age: 74013
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
IP
GET /css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lovedorm.ru.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Sep 2022 18:33:48 GMT
date: Sun, 18 Sep 2022 18:33:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
104.21.65.93
142.250.74.174
93.184.220.29
23.38.201.81
157.240.200.14
0.0.0.0