| |  45.130.41.96 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2IP45.130.41.96:443
CertificateIssuerLet's Encrypt Subjectkurl.ru FingerprintD0:8D:26:3E:B8:EA:32:E3:7B:4E:53:FA:BD:0A:C4:57:40:88:E5:D3 ValidityTue, 10 Oct 2023 08:33:23 GMT - Mon, 08 Jan 2024 08:33:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /HVMVk HTTP/1.1
Host: kurl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx-reuseport/1.21.1
date: Sat, 02 Dec 2023 22:12:30 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=c23dfaf50bbe5026f8815bd695ac01ea; path=/
short_258481=1; expires=Sat, 02-Dec-2023 22:27:30 GMT; Max-Age=900; path=/; HttpOnly
location: https://goo.su/o9CDejf
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:400&display=swap |  142.250.74.106 | 200 OK | 19 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400&display=swap IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typegzip compressed data, max compression\012- data Hash9dc716177b034b628abcde28d18dc2dd 1d165d5388f6a4306f152382469cd235357a43a2 b90cbcaab277c0533a2171de299146b98afca9a28945fe62e4646fde8e3cf63e
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 02 Dec 2023 22:12:31 GMT
date: Sat, 02 Dec 2023 22:12:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 234897
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| enduresopens.com/ttkXIvunodY/69489 |  172.255.6.166 | 200 OK | 25 B |
URL GET HTTP/1.1enduresopens.com/ttkXIvunodY/69489 IP172.255.6.166:443
CertificateIssuerLet's Encrypt Subjectenduresopens.com FingerprintB6:C5:5B:70:B5:C3:9D:34:75:17:50:9E:4E:CE:9A:FB:8A:87:E2:E4 ValidityWed, 08 Nov 2023 23:08:29 GMT - Tue, 06 Feb 2024 23:08:28 GMT
File typeASCII text, with no line terminators Hashf7a2939527fd9e68723da600e96d76bd a9e717b6364d2895ee0a716050db32ca0ef1bb42 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
GET /ttkXIvunodY/69489 HTTP/1.1
Host: enduresopens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 22:12:31 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://goo.su
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sun, 03-Dec-2023 22:12:31 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 03-Dec-2023 22:12:31 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| rtb.pushdom.co/pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st | 109.200.209.144 | 200 OK | 0 B |
URL GET HTTP/2rtb.pushdom.co/pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st IP109.200.209.144:443
CertificateIssuerLet's Encrypt Subjectrtb.pushdom.co Fingerprint24:5E:C5:CD:AF:AA:7D:3F:BA:DD:C0:63:32:DB:F1:38:20:5F:70:88 ValidityWed, 04 Oct 2023 13:08:31 GMT - Tue, 02 Jan 2024 13:08:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pb/st?sctp=content-locker&m=ht&pid=883146&sid=330256&dm=goo.su&c1=https&c2=1&c3=https://rtb.pushdom.co/pb/st HTTP/1.1
Host: rtb.pushdom.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: text/html;charset=UTF-8
content-length: 0
X-Firefox-Spdy: h2
|
|
| goo.su/cdn-cgi/challenge-platform/h/b/jsd/r/82f6e96aadd70b06 | 172.67.139.105 | 200 OK | 11 kB |
URL POST HTTP/3goo.su/cdn-cgi/challenge-platform/h/b/jsd/r/82f6e96aadd70b06 IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
Hash6dafffaa426a13dcb031c4134816a801 a98e52ba8407074583b5fa74f04cb35d5b6b6168 273b35c4706b713f303b9ed42eb667b6800e715e245d34b865176107705dc766
POST /cdn-cgi/challenge-platform/h/b/jsd/r/82f6e96aadd70b06 HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12166
Origin: https://goo.su
DNT: 1
Connection: keep-alive
Referer: https://goo.su/o9CDejf
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=Ai0KBXvALKpEcyIKnNpdbHvY2hQAi6GrjPXWikcfG5s-1701555151-0-1-730ca2d2.73a07051.5b213570-0.2.1701555151; path=/; expires=Sun, 01-Dec-24 22:12:31 GMT; domain=.goo.su; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bKOeGsoZm3Z%2FvOIbvCdBk7Z4kBykj8UmV2UosHG8ki9ylU7XC0bCwh2xBU82OgIJPF4W3vSzAZsPX7GY5GehU0WgoR%2B8pLJyFk1YXLUGbQlp89H%2B0LvVYS4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6e9720eb50afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.su/img/favicons/favicon-16x16.png | 172.67.139.105 | 200 OK | 1.6 kB |
URL GET HTTP/3goo.su/img/favicons/favicon-16x16.png IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hash2b201347b6d90e0ad2bbad3be209db73 ae5de3e7f779cf33aefd5dc738f2126633bb7824 df0a5932ec719656fd8f147bcc0c14312e53e52c2df13f5f815d72833de9c852
GET /img/favicons/favicon-16x16.png HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/o9CDejf
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D; cf_clearance=Ai0KBXvALKpEcyIKnNpdbHvY2hQAi6GrjPXWikcfG5s-1701555151-0-1-730ca2d2.73a07051.5b213570-0.2.1701555151; adtech_uid=c5ba3021-0cca-4c01-8a33-1385072522d3%3Agoo.su; top100_id=t1.6673155.1654267306.1701555156912; t3_sid_6673155=s1.1928373602.1701555156914.1701555156914.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: image/png
content-length: 1567
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: "6209452f-61f"
expires: Tue, 05 Dec 2023 08:21:25 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 395466
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIbLb4M7M3RKNjDWmXpba0HVI3rYpeM3Afr6RDsIwTSN5wiWtx6s94tYbJR7QOV96kJFt96RfhqH9L53hncPeBNYkdM9EYaVfDHltmqptkq8fXeMLI5ReUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6e973af980afe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data Hash8d1c44b2bf75a4e6f1bd141f9a965f4f 1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434 441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709
GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18664
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:21:50 GMT
expires: Fri, 29 Nov 2024 23:21:50 GMT
cache-control: public, max-age=31536000
age: 168641
last-modified: Thu, 14 Sep 2023 01:36:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| st.top100.ru/top100/top100.js | 81.19.89.16 | 200 OK | 114 kB |
URL GET HTTP/2st.top100.ru/top100/top100.js IP81.19.89.16:443 ASN#24638 Rambler Internet Holding LLC
CertificateIssuerGlobalSign nv-sa Subject*.top100.ru Fingerprint69:AD:E6:85:0B:3A:87:2C:3B:C1:7E:CB:EF:53:D7:2E:12:F3:76:6B ValidityWed, 08 Feb 2023 07:55:45 GMT - Mon, 11 Mar 2024 07:55:44 GMT
Size114 kB (114426 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /top100/top100.js HTTP/1.1
Host: st.top100.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 23 Nov 2023 11:30:43 GMT
x-rgw-object-type: Normal
etag: W/"41c3677568a4c937e2c12b14c97d5403"
x-amz-request-id: tx00000000000000357428d-00656ba9ca-f7b1f19-default
expires: Sat, 02 Dec 2023 23:12:31 GMT
cache-control: max-age=3600
set-cookie: proto_uid=1CIAAM+ra2XBc0qzAY1yewB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| goo.su/frontend/js/redirect.js?id=0206716eb65eec68ba60 | 172.67.139.105 | 200 OK | 91 kB |
URL GET HTTP/3goo.su/frontend/js/redirect.js?id=0206716eb65eec68ba60 IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /frontend/js/redirect.js?id=0206716eb65eec68ba60 HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/o9CDejf
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: application/javascript
cache-control: max-age=604800
cf-bgj: minify
cf-polished: origSize=90593
etag: W/"620befd7-161e1"
expires: Sat, 09 Dec 2023 05:00:37 GMT
last-modified: Tue, 15 Feb 2022 18:24:23 GMT
cf-cache-status: HIT
age: 61914
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OgGNtCddoU3rPOm94Xyt7cdGZBTiuR7LOzq3HZmmQHH88D6oDgtb%2B2kwoC7PIfuTLXfEz%2BY3KzcfwPAVNj84CSoipo3Gg3aldArSsxh54%2F8Yij7ufFSix5A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6e96ecc6c0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| goo.su/img/favicons/apple-touch-icon.png | 172.67.139.105 | 200 OK | 11 kB |
URL GET HTTP/3goo.su/img/favicons/apple-touch-icon.png IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data Hashdc1648f034a8879145ce2db071bdc305 28dfdc4f3f97f00e54528685427a83974cb04a81 7c51dc3139a5a8a07e00884f6558ed62511359803bcb4123668b8e0ccab896c7
GET /img/favicons/apple-touch-icon.png HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/o9CDejf
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D; cf_clearance=Ai0KBXvALKpEcyIKnNpdbHvY2hQAi6GrjPXWikcfG5s-1701555151-0-1-730ca2d2.73a07051.5b213570-0.2.1701555151; adtech_uid=c5ba3021-0cca-4c01-8a33-1385072522d3%3Agoo.su; top100_id=t1.6673155.1654267306.1701555156912; t3_sid_6673155=s1.1928373602.1701555156914.1701555156914.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: image/png
content-length: 10926
last-modified: Sun, 13 Feb 2022 17:51:43 GMT
etag: "6209452f-2aae"
expires: Fri, 08 Dec 2023 07:34:06 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 139105
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SqRRITzoyveHkaybWmq%2BQdC5lbQzVggVXTYdDPO2oYNmVn9RByICcoBfjEoYbYcI0K6N3D%2FSLNA660ZqU0EFfKfvH6gxZ3Bhjga1lO4ih7xzvCuEz%2F0NalI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6e973af970afe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| goo.su/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js | 172.67.139.105 | 200 OK | 7.4 kB |
URL GET HTTP/3goo.su/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
File typeASCII text, with very long lines (7382), with no line terminators Hash618aa7eb2c1029b30c0d1284007f0284 f11b64bb59d91e25845a4660b728bf3cccc4b654 6b539c5844794b1e4af3929b8e8642293ee0b2519e114915eff46ddacc79df82
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=outOrRfRxWJmt8PCqu2ayR%2FaY0H%2FcXSSMdMUPaMTUFNj0LaFlX%2FOX4JKFSmyahancnsQwQzqQZs29W86xvpOP6PI%2FDh3d5rV2O7a%2BHAjfFt2w6GvJ2TQp7I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6e970edf80afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| st.top100.ru/top100/3.13.44/usability.js | 81.19.89.16 | 200 OK | 15 kB |
URL GET HTTP/2st.top100.ru/top100/3.13.44/usability.js IP81.19.89.16:443 ASN#24638 Rambler Internet Holding LLC
CertificateIssuerGlobalSign nv-sa Subject*.top100.ru Fingerprint69:AD:E6:85:0B:3A:87:2C:3B:C1:7E:CB:EF:53:D7:2E:12:F3:76:6B ValidityWed, 08 Feb 2023 07:55:45 GMT - Mon, 11 Mar 2024 07:55:44 GMT
File typeASCII text, with very long lines (14628), with no line terminators Hash5631c815de35a6f6b448b0abbb1dd60c 9f35207e42f536afca4fe47eb4833ad3d4d370a8 022038891c775d0e6639f4cafd1607c96ec9fb39eccfd0b8d7d411af03767a33
GET /top100/3.13.44/usability.js HTTP/1.1
Host: st.top100.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 23 Nov 2023 11:30:43 GMT
x-rgw-object-type: Normal
etag: W/"5631c815de35a6f6b448b0abbb1dd60c"
x-amz-request-id: tx000000000000003574282-00656ba9ca-f7b1f19-default
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
set-cookie: proto_uid=1CIAAM+ra2XBc0qzAZxyewB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| richinfo.co/richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33 | 5.200.15.239 | 200 OK | 71 kB |
URL GET HTTP/2richinfo.co/richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33 IP5.200.15.239:443
CertificateIssuerLet's Encrypt Subjectrichinfo.co FingerprintDC:D3:66:CE:54:D0:16:6E:8F:14:83:03:42:F9:BA:DB:D3:17:99:55 ValiditySat, 25 Nov 2023 15:24:58 GMT - Fri, 23 Feb 2024 15:24:57 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash482657d8dc8d45dca5dbd78e2e988097 4d2eae324d0dd95de1c8d7a2c2d5a0f9d46eabf6 95bfb0165ee20b9404f599edcb7f7fee4bfedc1df340dfdce225ad35f3506ff7
GET /richpartners/push/js/rp-cl-ob.js?pubid=883146&siteid=330256&niche=33 HTTP/1.1
Host: richinfo.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Sat, 02 Dec 2023 22:12:31 GMT
content-type: application/x-javascript
x-amz-id-2: gSK/NrSqUfiH0IDn9yKjIzqq7NctJm8mccpEdWmg0cWJBImLnouMcX/1O0dMT8/lAvNfeyYGHDA=
x-amz-request-id: 7WHFX3GE16VF6H3T
last-modified: Mon, 27 Nov 2023 12:20:56 GMT
etag: W/"482657d8dc8d45dca5dbd78e2e988097"
x-amz-server-side-encryption: AES256
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| goo.su/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.139.105 | 302 Found | 7.4 kB |
URL GET HTTP/3goo.su/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 02 Dec 2023 22:12:31 GMT
cache-control: max-age=300, public
vary: accept-encoding
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BPHWgTq0EMNfoCfKDsnIEid1DFLCaiQkIqeG3NGh6gZ58wi%2BWAqKh9pO1h1Vk%2Bf6qTG5vZVSsvMymofzG79lsgwTTUusNfSa0mjdON8VVRfYqgKtEghTJt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6e970cddf0afe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.139.105 | 200 OK | 21 kB |
URL User Request GET HTTP/2IP172.67.139.105:443
CertificateIssuerGoogle Trust Services LLC Subjectgoo.su FingerprintC7:43:5F:AB:2E:5B:9D:DF:91:5A:64:48:54:CA:F4:CD:DF:39:92:A6 ValidityFri, 06 Oct 2023 22:31:19 GMT - Thu, 04 Jan 2024 22:31:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /o9CDejf HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:12:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.0.15
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IjJJYXIzZXlVNWR0alZhNCsyNmtQcGc9PSIsInZhbHVlIjoiQ3hPRkxGOUxGbVdudU5RbG9kU1NJanN0OERHV0VGZmJhQU5nM0JPNUd1YThJWFdIbFlBbnloMTdtSGRrTTIzQitPT3hMZ29YL1E4TWMrOGRtQWgrczBKZU1IbkFrOXNXTW9na01YK0diSFNiS28wUHE4NHd2NzdEV3RsdVNjQXUiLCJtYWMiOiJiYWUyOTM0ZDQxMzkwYzljYjc4ZWVmNzNjYTcwM2ZmMGYzODIyNzk3ZTNlM2Q1ZWJmZTQyMDcwMjI4Y2YyODQxIiwidGFnIjoiIn0%3D; expires=Sun, 03-Dec-2023 16:52:30 GMT; Max-Age=67200; path=/; samesite=lax
goosu_session=eyJpdiI6InNhbktCQ3Qxa2ZpYUltMFFHSTY3ZGc9PSIsInZhbHVlIjoiZnlxakx4MitjeWp6Y2ZlbE0zREI5ZERTVkd4UEMyM0Vad0JtTnI2N1ByTkxXMjBocExsU0Z4R21SVWM3dWphaWRXUnNad0tSYUpydmY0TEYvQ1BzRlhqczEvSkJVeENoYUg0ZUQyaStkK0xpT0xJa0VQZk16N3JvVmcyV0tHdnkiLCJtYWMiOiI2MzhlODZhMjk3ZGNkNGY5NmEwZWQ1ZjQ4NTg2MjM5NDUwYzg1Y2Q3OWU4YjQxMjY3MTc2ZTVhMDBlZjA0ZDQzIiwidGFnIjoiIn0%3D; expires=Sun, 03-Dec-2023 16:52:30 GMT; Max-Age=67200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xYv%2B6T9OhZ4ci16i6pNGIlxAVHRyC1TgPXFEueQbnanfdlwI9ydY1vbfFNNGDBR2GCXLMtlcHLZ1Y6ypX9iT66XNeV9d%2Bm3WS8AWXv1Kx2CR7Q3mrGFO2Do%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6e96aadd70b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open%20Sans:400&display=swap | 142.250.74.106 | 200 OK | 3.1 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open%20Sans:400&display=swap IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeASCII text, with very long lines (3151), with no line terminators Hash4fc21aadfc58ee9c99b3b02d3eba6a4b e1c98a88dd2b002efa414c06be2e3e7942e9c657 5db8d90fdd4593270cb2cc883cc26cf362fbc86ebab6b8382c0794b0335e9ec3
GET /css?family=Open%20Sans:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 02 Dec 2023 22:12:31 GMT
date: Sat, 02 Dec 2023 22:12:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|