e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 35b8790c0b8b7170404128ed59545962
88ce89899081c069f3e7322c2a6ed2dc4466d8a3
b2077bf9df9d22a05803a8c40841254602e749b7f6337e52d01cfee717f16e74
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B2077BF9DF9D22A05803A8C40841254602E749B7F6337E52D01CFEE717F16E74"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12566
Expires: Fri, 09 Dec 2022 08:56:35 GMT
Date: Fri, 09 Dec 2022 05:27:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21478
Expires: Fri, 09 Dec 2022 11:25:07 GMT
Date: Fri, 09 Dec 2022 05:27:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5004
Expires: Fri, 09 Dec 2022 06:50:33 GMT
Date: Fri, 09 Dec 2022 05:27:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 05:08:17 GMT
content-type: application/json
age: 1132
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18755
Expires: Fri, 09 Dec 2022 10:39:44 GMT
Date: Fri, 09 Dec 2022 05:27:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1yeTI4B23XO7/gUYLUrI4kLAPTRAPdYs3ur6NqgjETgj6931lxR5nCW0acB9+AS1uXUDe8GwyYw=
x-amz-request-id: KVQ6JBYDBX434WN4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 04:50:07 GMT
age: 2222
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:09 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 35b8790c0b8b7170404128ed59545962
88ce89899081c069f3e7322c2a6ed2dc4466d8a3
b2077bf9df9d22a05803a8c40841254602e749b7f6337e52d01cfee717f16e74
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B2077BF9DF9D22A05803A8C40841254602E749B7F6337E52D01CFEE717F16E74"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12566
Expires: Fri, 09 Dec 2022 08:56:35 GMT
Date: Fri, 09 Dec 2022 05:27:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 05:07:59 GMT
age: 1150
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:55 GMT
expires: Tue, 05 Dec 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 297254
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 434213aeaf057d923d2daea09e111002
1446b4a5ff57afb18fcff8eadba49078d51902cd
74bdd737122d0f70ec4d25bdd355b850fd087558aa1816eca922a0c52f7abc2f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5314
Cache-Control: max-age=112441
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Etag: "6391c6a4-1d7"
Expires: Sat, 10 Dec 2022 12:41:10 GMT
Last-Modified: Thu, 08 Dec 2022 11:12:36 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goo.su
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 121995
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4358137683029217
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4358137683029217
IP
File type ASCII text, with very long lines (4885)
Hash 98e9c9e89177e68ff6536f2d29717364
e110c741aae7b45d3d886c73b32a6a6c354437ca
a51668cd875b43a997e1eeb17d4bbb02ab9c6c34e6a882b058fb884d56750de8
GET /pagead/js/adsbygoogle.js?client=ca-pub-4358137683029217 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 09 Dec 2022 05:27:10 GMT
expires: Fri, 09 Dec 2022 05:27:10 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 13222442409377524018
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49446
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 138d9e200d0c3cc1f6a4a1f02f79221c
01182b0abbba3e030e1694ae6e531a0d98002500
a32fbac106b8a376e26070a87c23e88787e20221c30229e849d8ab05de85960c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:45:37 GMT
ETag: "01182b0abbba3e030e1694ae6e531a0d98002500"
Last-Modified: Fri, 09 Dec 2022 04:45:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2492
X-Served-By: cache-qpg1232-QPG, cache-bma1625-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 54
X-Timer: S1670563630.083331,VS0,VE0
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2687
Cache-Control: max-age=102269
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:51:39 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 3768ad34096739c147ceaf85b4683d5f
2923a0e9170e1ee125b71cb27bb32bbfda43c71b
5a445765af5c15bd2b10d3cd5b34963d1418d442d128c9ad9646d581db6e651f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 03:49:15 GMT
ETag: "2923a0e9170e1ee125b71cb27bb32bbfda43c71b"
Last-Modified: Fri, 09 Dec 2022 03:49:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2273
X-Served-By: cache-qpg1269-QPG, cache-bma1670-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 20
X-Timer: S1670563630.095853,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 138d9e200d0c3cc1f6a4a1f02f79221c
01182b0abbba3e030e1694ae6e531a0d98002500
a32fbac106b8a376e26070a87c23e88787e20221c30229e849d8ab05de85960c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:45:37 GMT
ETag: "01182b0abbba3e030e1694ae6e531a0d98002500"
Last-Modified: Fri, 09 Dec 2022 04:45:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2492
X-Served-By: cache-qpg1232-QPG, cache-bma1625-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 55
X-Timer: S1670563630.098294,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 138d9e200d0c3cc1f6a4a1f02f79221c
01182b0abbba3e030e1694ae6e531a0d98002500
a32fbac106b8a376e26070a87c23e88787e20221c30229e849d8ab05de85960c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:45:37 GMT
ETag: "01182b0abbba3e030e1694ae6e531a0d98002500"
Last-Modified: Fri, 09 Dec 2022 04:45:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2492
X-Served-By: cache-qpg1232-QPG, cache-bma1631-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 51
X-Timer: S1670563630.102743,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0254486c1ea5b7474fe894d9325bdc93
9326cc395f4a4306ee5c0686b772328bb0c33fb6
839e0dbe2481166f45654e6913a4a11e98b042ee8795428dd6c67be3f45c5b3c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:37:35 GMT
ETag: "9326cc395f4a4306ee5c0686b772328bb0c33fb6"
Last-Modified: Fri, 09 Dec 2022 04:37:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2974
X-Served-By: cache-qpg1272-QPG, cache-bma1625-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 78
X-Timer: S1670563630.138628,VS0,VE0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 01e439522f945c2509b1f2e0214c3b15
0096323f00211caba71a47a9b50110fd9090605f
583ab648f97191c02fc5b615eb737f3d857b84320cbbe0c10dbc733beb11dadf
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1414
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:39:09 GMT
ETag: "0096323f00211caba71a47a9b50110fd9090605f"
Last-Modified: Fri, 09 Dec 2022 04:39:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 2879
X-Served-By: cache-qpg1260-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 4, 5
X-Timer: S1670563630.138710,VS0,VE0
counter.yadro.ru/hit?t44.11;r;s1280*1024*24;uhttps%3A//goo.su/Bk9pXdy;hRedirecting...;0.38896730745490093
200 OK 132 B URL HTTP/1.1 counter.yadro.ru/hit?t44.11;r;s1280*1024*24;uhttps%3A//goo.su/Bk9pXdy;hRedirecting...;0.38896730745490093
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 31 x 31\012- data
Hash 099e70b2712eaea2a982b474b20a0a80
e3ce99d03d1ae5dc89050a8287f7c390374dd2cb
e10cd8d343f9c37e3500c69d92f7ac7e78b6c7df29a2ace8cffe71bfa494e8c9
GET /hit?t44.11;r;s1280*1024*24;uhttps%3A//goo.su/Bk9pXdy;hRedirecting...;0.38896730745490093 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 09 Dec 2022 05:27:10 GMT
Content-Type: image/gif
Content-Length: 132
Connection: keep-alive
Expires: Wed, 08 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kraken.rambler.ru/userip
200 OK 12 B IP
ASN #24638 Rambler Internet Holding LLC
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /userip HTTP/1.1
Host: kraken.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.4
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: application/octet-stream
content-length: 12
access-control-allow-origin: https://goo.su
x-srv: 2kraken-prod0003.ad.rambler.tech
set-cookie: ruid=1CIAAC7HkmOzQaCsAZJisQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAC7HkmOzQaCsAZJisQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 09 Dec 2022 05:27:10 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637
set-cookie: FTID=1RMYgQ0tkIIE:1670563630:3128781:::; path=/; expires=Sun, 10-Dec-23 05:27:10 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Sr/NzE2mG2elLFpGX+Ljag==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VHHqn1qkLx0HUNwH5KPgX8/iQ7Q=
kraken.rambler.ru/cnt/v2/?event_type=base&event_name=page_view&project_id=6673155&session_id=763295447_1670563629162&session_number=1&session_event_number=1&version=3.13.0&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.6673155.25440659.1670563629160&adtech_uid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&adtech_uid_scope=goo.su&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&fingerprint_ip=pA8AAENKs1cnnUv2AauVQAA%3D&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&request_id=1670563629.16-1873832963&event_id=509136294599047&meta=%7B%22title%22%3A%22Redirecting...%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=310710191
200 OK 595 B URL HTTP/2 kraken.rambler.ru/cnt/v2/?event_type=base&event_name=page_view&project_id=6673155&session_id=763295447_1670563629162&session_number=1&session_event_number=1&version=3.13.0&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.6673155.25440659.1670563629160&adtech_uid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&adtech_uid_scope=goo.su&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&fingerprint_ip=pA8AAENKs1cnnUv2AauVQAA%3D&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&request_id=1670563629.16-1873832963&event_id=509136294599047&meta=%7B%22title%22%3A%22Redirecting...%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=310710191
IP
ASN #24638 Rambler Internet Holding LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash b566a466c8d8c0361839677785e69240
c6e6a583e76e699806f806dbd63cebd9037f551e
86d9d7d32ba3d9eb9fbea6508c725c17c44f80d6a7d16ca1fa79a85c4b632e91
GET /cnt/v2/?event_type=base&event_name=page_view&project_id=6673155&session_id=763295447_1670563629162&session_number=1&session_event_number=1&version=3.13.0&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.6673155.25440659.1670563629160&adtech_uid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&adtech_uid_scope=goo.su&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&fingerprint_ip=pA8AAENKs1cnnUv2AauVQAA%3D&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&request_id=1670563629.16-1873832963&event_id=509136294599047&meta=%7B%22title%22%3A%22Redirecting...%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=310710191 HTTP/1.1
Host: kraken.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.4
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: image/gif
content-length: 595
last-modified: Tue, 12 Nov 2019 12:50:59 GMT
etag: "5dcaaab3-253"
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 2kraken-prod0003.ad.rambler.tech
set-cookie: ruid=1CIAAC7HkmO0QaysAdm8sAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAC7HkmO0QaysAdm8sAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ddb0be9fb2595e1bc70da08d54cbda68
ad5f70fa8ecfa7842155303de0dfdbb5c67831f9
ea12958f8e4e308a361cacbe89ed15786b98a76124ddccb8405ccd195ab3281f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:38:18 GMT
ETag: "ad5f70fa8ecfa7842155303de0dfdbb5c67831f9"
Last-Modified: Fri, 09 Dec 2022 04:38:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 1685
X-Served-By: cache-qpg1273-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 117
X-Timer: S1670563630.445472,VS0,VE0
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ddb0be9fb2595e1bc70da08d54cbda68
ad5f70fa8ecfa7842155303de0dfdbb5c67831f9
ea12958f8e4e308a361cacbe89ed15786b98a76124ddccb8405ccd195ab3281f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:38:18 GMT
ETag: "ad5f70fa8ecfa7842155303de0dfdbb5c67831f9"
Last-Modified: Fri, 09 Dec 2022 04:38:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 1685
X-Served-By: cache-qpg1273-QPG, cache-bma1625-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 125
X-Timer: S1670563630.446635,VS0,VE0
kraken.rambler.ru/cnt/?et=pv&v=3.13.0&pid=6673155&tid=t1.6673155.25440659.1670563629160&rid=1670563629.16-1873832963&fid=pA8AAENKs1e4GYz8AQlryQA%3D&fip=pA8AAENKs1cnnUv2AauVQAA%3D&eid=550736294581052&aduid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&aduidsc=goo.su&stid=763295447_1670563629162&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=Redirecting...&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=2&ct=web&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=2142023545
200 OK 595 B URL HTTP/2 kraken.rambler.ru/cnt/?et=pv&v=3.13.0&pid=6673155&tid=t1.6673155.25440659.1670563629160&rid=1670563629.16-1873832963&fid=pA8AAENKs1e4GYz8AQlryQA%3D&fip=pA8AAENKs1cnnUv2AauVQAA%3D&eid=550736294581052&aduid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&aduidsc=goo.su&stid=763295447_1670563629162&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=Redirecting...&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=2&ct=web&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=2142023545
IP
ASN #24638 Rambler Internet Holding LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash b566a466c8d8c0361839677785e69240
c6e6a583e76e699806f806dbd63cebd9037f551e
86d9d7d32ba3d9eb9fbea6508c725c17c44f80d6a7d16ca1fa79a85c4b632e91
GET /cnt/?et=pv&v=3.13.0&pid=6673155&tid=t1.6673155.25440659.1670563629160&rid=1670563629.16-1873832963&fid=pA8AAENKs1e4GYz8AQlryQA%3D&fip=pA8AAENKs1cnnUv2AauVQAA%3D&eid=550736294581052&aduid=d36082f5-7b41-4c3c-a5c9-0e510077b7ac&aduidsc=goo.su&stid=763295447_1670563629162&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=Redirecting...&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=2&ct=web&url=https%3A%2F%2Fgoo.su%2FBk9pXdy&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=2142023545 HTTP/1.1
Host: kraken.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.4
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: image/gif
content-length: 595
last-modified: Tue, 12 Nov 2019 12:50:59 GMT
etag: "5dcaaab3-253"
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 2kraken-prod0003.ad.rambler.tech
set-cookie: ruid=1CIAAC7HkmO0QaysAdq8sAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAC7HkmO0QaysAdq8sAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ddb0be9fb2595e1bc70da08d54cbda68
ad5f70fa8ecfa7842155303de0dfdbb5c67831f9
ea12958f8e4e308a361cacbe89ed15786b98a76124ddccb8405ccd195ab3281f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:38:18 GMT
ETag: "ad5f70fa8ecfa7842155303de0dfdbb5c67831f9"
Last-Modified: Fri, 09 Dec 2022 04:38:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:10 GMT
Age: 1685
X-Served-By: cache-qpg1273-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 118
X-Timer: S1670563630.454957,VS0,VE0
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 8.9 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
File type ASCII text, with very long lines (33703), with no line terminators
Hash f80882bf67cf261aa08d636da095149a
3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Sun, 08 Dec 2052 12:02:02 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
200 OK 26 kB URL HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Hash 7f0cdaf91230f9789ca4162aedff612e
965de571aa794dab64076c3cc64dc8894b843f23
033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Sat, 09 Dec 2023 11:11:54 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: 39b04659eb269de0
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/691890/1c0942547d39e10f5f56.js
200 OK 4.8 kB URL HTTP/2 yastatic.net/partner-code-bundles/691890/1c0942547d39e10f5f56.js
IP
File type ASCII text, with very long lines (14344)
Hash aad2db2a5552a39da99178edd3ee95fd
a1530ac5a7ad5fe98c0e9a1aadeb94e264c092a0
9da10c678f4880b57a5d3fb846a06f0e579d875bd8bc5d00f27dbd1e3ab4796e
GET /partner-code-bundles/691890/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "aad2db2a5552a39da99178edd3ee95fd"
expires: Sun, 08 Dec 2052 12:02:23 GMT
last-modified: Wed, 07 Dec 2022 16:35:54 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/691890/76b379e0d5ce671b0583.js
200 OK 24 kB URL HTTP/2 yastatic.net/partner-code-bundles/691890/76b379e0d5ce671b0583.js
IP
File type ASCII text, with very long lines (65494)
Hash 67ffea72f1a37dc0898f8e9695a9ce10
1e123ee55dee67eeb890bcb88ed088162ffcd7db
de0ed24da61505d8d50a17896f0ebd9e13dd20b24e9c39756b769f8128796574
GET /partner-code-bundles/691890/76b379e0d5ce671b0583.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: text/javascript; charset=utf-8
content-length: 23515
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "67ffea72f1a37dc0898f8e9695a9ce10"
expires: Sun, 08 Dec 2052 12:02:23 GMT
last-modified: Wed, 07 Dec 2022 16:35:54 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/691890/08b9386ee5db14f46236.js
200 OK 100 kB URL HTTP/2 yastatic.net/partner-code-bundles/691890/08b9386ee5db14f46236.js
IP
File type ASCII text, with very long lines (65497)
Size 100 kB (100144 bytes)
Hash a1c6afaa436be5f8c02daaab8c7883f6
0fa412523bbdd6d5f3f385ed00b9a263c8d05793
2613a77c6e59ce1ecb6158f9ae5385bb23902d0c3c12fa4186bb7268dd1f1324
GET /partner-code-bundles/691890/08b9386ee5db14f46236.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: text/javascript; charset=utf-8
content-length: 100144
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "a1c6afaa436be5f8c02daaab8c7883f6"
expires: Sun, 08 Dec 2052 12:02:19 GMT
last-modified: Wed, 07 Dec 2022 16:35:54 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
an.yandex.ru/system/context.js
200 OK 121 kB URL HTTP/2 an.yandex.ru/system/context.js
IP
File type ASCII text, with very long lines (65492)
Size 121 kB (120956 bytes)
Hash d0fd76203e80fa7ae9a6e31b36497f0f
7bb9724b35967447a47a26efc21a0114e44c1e04
39d4b5e9ac0977b0de93e99cd153f8b3386757d82a848a156c22d8574f015b64
GET /system/context.js HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
access-control-allow-origin: *
expires: Fri, 09 Dec 2022 06:27:10 GMT
x-yandex-req-id: 1670563630138393-777102036134470099100097-production-app-host-vla-pcode-366
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=goo.su
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=goo.su
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=goo.su HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 09 Dec 2022 05:27:10 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter2?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670563629485%3A1670563629505%3A1%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.20327428818778637 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://goo.su/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670563630:3128781:::; path=/; expires=Sun, 10-Dec-23 05:27:10 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cbe432d06442a6cb4f20be34e4d58026
4bcfa4ef74b42eb562cd75321f8de6bd5b54d960
09fc64ce93c2b166e64ceb5f99bc9e20785097140581f9cb363577f68e3653be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=goo.su&callback=_gfp_s_&client=ca-pub-4358137683029217&gpid_exp=1
200 OK 248 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=goo.su&callback=_gfp_s_&client=ca-pub-4358137683029217&gpid_exp=1
IP
File type ASCII text, with very long lines (379), with no line terminators
Hash 3a2133084fdf120cdf354ad66d345e2c
353efd59fc056c5127874db635c761ea2e64f797
93fa82c00d97770819f4c74fcbdfa9ef1da62178ee79b335047f40f7e982e84d
GET /gampad/cookie.js?domain=goo.su&callback=_gfp_s_&client=ca-pub-4358137683029217&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 09 Dec 2022 05:27:10 GMT
server: cafe
cache-control: private
content-length: 248
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cbe432d06442a6cb4f20be34e4d58026
4bcfa4ef74b42eb562cd75321f8de6bd5b54d960
09fc64ce93c2b166e64ceb5f99bc9e20785097140581f9cb363577f68e3653be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221206&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221206&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14858), with no line terminators
Hash 723a8f983f23c4a7b2bb056d1625d35c
f31d79d54194d52ce7a8a04aa1c5f8e0a9b34728
324ce8c7b7838d158c8a5e24684e3cf9c3dc77014c4c247ba8c58277a5279aef
GET /getconfig/sodar?sv=200&tid=gda&tv=r20221206&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Fri, 09 Dec 2022 05:27:10 GMT
server: cafe
content-length: 11215
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670563627991/////-5/88/91/91/387/96/387/661/662/694/907/932/935/1849/1849/;ni=;lvid=1670563629485%3A1670563629843%3A2%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.9083866596504936;e=RT/load;et=1670563629841
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670563627991/////-5/88/91/91/387/96/387/661/662/694/907/932/935/1849/1849/;ni=;lvid=1670563629485%3A1670563629843%3A2%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.9083866596504936;e=RT/load;et=1670563629841
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670563627991/////-5/88/91/91/387/96/387/661/662/694/907/932/935/1849/1849/;ni=;lvid=1670563629485%3A1670563629843%3A2%3A80a78c89f3045e3759b9c02d872a28b0;visible=true;_=0.9083866596504936;e=RT/load;et=1670563629841 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670563630:3128781:::; path=/; expires=Sun, 10-Dec-23 05:27:10 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd459fc7e8633ad842eace59db652f5a
a2723a4cae2f7910e832490e588db1af285c8bd7
380d84de92bfa406214d8aa5d146fe7b944e99c913e0d8c9dd03283a07992a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 09 Dec 2022 05:27:10 GMT
expires: Fri, 09 Dec 2022 05:27:10 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:29:01 GMT
expires: Wed, 06 Dec 2023 14:29:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 226689
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e3b657ebd655fbfa5f10c01c775f2aa0
2478fd171e6791a10d83b2bad9de0165d268db7e
2d91737e61e5338bc24c7df4aa36b1c20d9f79fe8ea4bb4914fd2c15e99a7ee3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5cba4e1962a1fe17c9021f3e418975a
01293d7e4084011451f7d17936ab2427504cdb1a
ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 515 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 630349bfe9a8709e1e1ae476599adc82
fa1406fe701f1a7166687d6cb68e3fbf23336582
4a305e355a5db8d339c12adc05251d9bf4a10aab347ccc338ae62e438ae1f58f
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 09 Dec 2022 05:27:10 GMT
date: Fri, 09 Dec 2022 05:27:10 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-29xIzhAUSYDj7Z_I8H104g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 515
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
st.top100.ru/top100/3.13.0/usability.js
200 OK 61 kB URL HTTP/2 st.top100.ru/top100/3.13.0/usability.js
IP
ASN #24638 Rambler Internet Holding LLC
Hash f037780b93bdeb5323438f7dd41d967f
134ad886cfe3cf04f5f724fa02adb495b3c0209b
96685c1c579e48df3c7929a762290974d61228e936fe61b24de16038e0f1056b
GET /top100/3.13.0/usability.js HTTP/1.1
Host: st.top100.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.4
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 08 Dec 2022 11:49:33 GMT
x-rgw-object-type: Normal
etag: W/"37967acc051e290340296b8ed721a1ae"
x-amz-request-id: tx0000000000001ff6e0b87-006392c5e4-f85be6-default
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
set-cookie: proto_uid=1CIAAC7HkmODsUjDAYVC1gB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 6cf07b86530388bc1b1ed40a977646ce
ada776a9cc716db3366e890c03f247ed2126a98d
eb704c79fca0cb8a826412b3359ad453b611de0d3ddfeea3182baeb7f060c298
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 937
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 03:05:15 GMT
ETag: "ada776a9cc716db3366e890c03f247ed2126a98d"
Last-Modified: Fri, 09 Dec 2022 03:05:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 1315
X-Served-By: cache-qpg1244-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 54
X-Timer: S1670563631.058896,VS0,VE0
yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
200 OK 6.3 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Hash eb77de48712912aadc9aa8171ac75ede
f375e4ed6b585c4e30b2d56f4f41c3beed909349
437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:11 GMT
content-type: text/html
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Sun, 08 Dec 2052 11:58:41 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2970af868e54ac00fb14deac78b98a59
37dc9e1a675a7f987bcdbdc1d802ab670e274afb
271a3409910714da21b41f13ee90846b64758bddb784418e8a296daec66b833c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 937
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 02:46:38 GMT
ETag: "37dc9e1a675a7f987bcdbdc1d802ab670e274afb"
Last-Modified: Fri, 09 Dec 2022 02:46:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 2423
X-Served-By: cache-qpg1241-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 50
X-Timer: S1670563631.117359,VS0,VE0
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 750d49e55435f6c3616197cbf6c8b939
3e98967a92f5538dfffa0887289a4df6eae4fbe6
949ff8b58bb5273b34a3a7b99974b973065e42659726f6e215bf2a3ab4a35884
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:27:10 GMT
ETag: "3e98967a92f5538dfffa0887289a4df6eae4fbe6"
Last-Modified: Fri, 09 Dec 2022 04:27:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 3600
X-Served-By: cache-qpg1236-QPG, cache-bma1683-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 82
X-Timer: S1670563631.120595,VS0,VE0
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 750d49e55435f6c3616197cbf6c8b939
3e98967a92f5538dfffa0887289a4df6eae4fbe6
949ff8b58bb5273b34a3a7b99974b973065e42659726f6e215bf2a3ab4a35884
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:27:10 GMT
ETag: "3e98967a92f5538dfffa0887289a4df6eae4fbe6"
Last-Modified: Fri, 09 Dec 2022 04:27:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 3600
X-Served-By: cache-qpg1236-QPG, cache-bma1625-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1670563631.120412,VS0,VE8
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 750d49e55435f6c3616197cbf6c8b939
3e98967a92f5538dfffa0887289a4df6eae4fbe6
949ff8b58bb5273b34a3a7b99974b973065e42659726f6e215bf2a3ab4a35884
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 04:27:10 GMT
ETag: "3e98967a92f5538dfffa0887289a4df6eae4fbe6"
Last-Modified: Fri, 09 Dec 2022 04:27:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 3600
X-Served-By: cache-qpg1236-QPG, cache-bma1631-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1670563631.126500,VS0,VE1
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2970af868e54ac00fb14deac78b98a59
37dc9e1a675a7f987bcdbdc1d802ab670e274afb
271a3409910714da21b41f13ee90846b64758bddb784418e8a296daec66b833c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 937
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 02:46:38 GMT
ETag: "37dc9e1a675a7f987bcdbdc1d802ab670e274afb"
Last-Modified: Fri, 09 Dec 2022 02:46:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 2424
X-Served-By: cache-qpg1241-QPG, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 41
X-Timer: S1670563631.135613,VS0,VE0
favicon.yandex.net/favicon/octobrowser.net?size=32&stub=2
200 Ok 2.6 kB URL HTTP/1.1 favicon.yandex.net/favicon/octobrowser.net?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fe4410ec5f0116b5242c7ef07237405e
f9f7977bf238e658994b585372f0ba065c4f475d
e440e5b3c59bc9a01b748f14dbe46dc5721b95a0e0bfc2673e511eec15c2615e
GET /favicon/octobrowser.net?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (888)
Hash ac2c89d2054deb1648f44256e4aef02b
7912cea274eece05bcc8a256676e0ffb67f9fc08
0f271b94972705b66868824983ff26377c5a64d4457342ebb49794b804fd651c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58118
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: *
etag: "6391b12a-e306"
expires: Fri, 09 Dec 2022 06:27:11 GMT
last-modified: Thu, 08 Dec 2022 12:40:58 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y150
200 OK 6.3 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y150
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d059f086bc3199ffe9afef6b22b62ea3
dbf8cc4fe77554fc9bf7ecc781a9649194a65658
ba97c8aba0483f89533100e4bce55ff24515db61d8c6f355fb2f579be172c876
GET /get-direct/5277984/ZRXc9r9ISXso7B-6aWQt4Q/y150 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:11 GMT
content-type: image/webp
content-length: 6282
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Thu, 24 Nov 2022 12:55:26 GMT
cache-control: max-age=31536000,immutable
x-request-id: dc00f249426e86de
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5205338/ZkiuAz61L0ZWOqvQkLJNhg/y150
200 OK 5.9 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5205338/ZkiuAz61L0ZWOqvQkLJNhg/y150
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dcab4c1bac0dd718497c3e7372b704fb
8134c993c46e7da4fb3cc0959b0c22b07b3e866d
d6cdfbc0bc9b0cc0a22befb40cf1652f5a0cd34267c989fa0ac91dd4d541335a
GET /get-direct/5205338/ZkiuAz61L0ZWOqvQkLJNhg/y150 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:11 GMT
content-type: image/webp
content-length: 5934
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Tue, 29 Nov 2022 21:57:29 GMT
cache-control: max-age=31536000,immutable
x-request-id: 1f51803f4fe36e49
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-direct/5296029/i5fdI4atm8y2q7LFZus2HQ/y150
200 OK 3.3 kB URL HTTP/2 avatars.mds.yandex.net/get-direct/5296029/i5fdI4atm8y2q7LFZus2HQ/y150
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8d2482d119fbe358d95e53409e68bacc
489009480de5e9eb5708259e7a7022cf5c2f73bc
264355f4e38bcf202e08bdd98c624bcfb75711ecab0c80e53f085d3c48c14b6c
GET /get-direct/5296029/i5fdI4atm8y2q7LFZus2HQ/y150 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:11 GMT
content-type: image/webp
content-length: 3282
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Wed, 11 Aug 2021 14:23:05 GMT
cache-control: max-age=31536000,immutable
x-request-id: 363d40194f6c0a45
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
favicon.yandex.net/favicon/gameart.owl-studio.net?size=32&stub=2
200 Ok 88 B URL HTTP/1.1 favicon.yandex.net/favicon/gameart.owl-studio.net?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 466c8f7df9a1f19efe6cc646f3ea3685
c7981c42f4c6dd05e16b89d6f3260f7d34eb01e7
ca0955720d936d58d38d10ce4ea213f497c51a802a61b5efdaf28fd4a9a0dfdb
GET /favicon/gameart.owl-studio.net?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
favicon.yandex.net/favicon/rpgamesrn.netlify.app?size=32&stub=2
200 Ok 338 B URL HTTP/1.1 favicon.yandex.net/favicon/rpgamesrn.netlify.app?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 6994280240d3ed3f196a38ec65e605ea
a00ba99a89026caf27c272771ea1c6b486d86220
c74de818af9bb2c6e9c9c2549dcf6efc34c735eef8c8ca92533b9eca2edca790
GET /favicon/rpgamesrn.netlify.app?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash d7318cdc307ff3297c65bd69211ae481
3c3248e19926bfd69ad0aaa2c8f668442823bee2
cbe01c1047328fa5a4f62608cee913552286ed079f3ce1c1387d49bb2ad45101
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 13 Dec 2022 02:27:31 GMT
ETag: "3c3248e19926bfd69ad0aaa2c8f668442823bee2"
Last-Modified: Fri, 09 Dec 2022 02:27:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 09 Dec 2022 05:27:11 GMT
Age: 3575
X-Served-By: cache-qpg1280-QPG, cache-bma1625-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 25
X-Timer: S1670563631.266601,VS0,VE0
ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
200 Ok 95 B URL HTTP/1.1 ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 60cf42b4d05caf10cf8bb15c0817a7b4
bd269860bb508aebcb6f08fe7289d5f117830383
18c327afa903633f86c3efcf12b77f098077eacaa8be101bb007846fd74f8b93
GET /static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes HTTP/1.1
Host: ysa-static.passport.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Server: nginx/1.14.2
Date: Fri, 09 Dec 2022 05:27:11 GMT
Content-Type: image/png
Content-Length: 95
Connection: close
Cache-Control: private
Expires: Sat, 10 Dec 2022 05:27:11 GMT
X-RT-IQ: 0.0001
X-RT-IH: 0.0001
Strict-Transport-Security: max-age=315360000; includeSubDomains
mc.yandex.ru/watch/1677322?wmode=7&page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563630%3Ac%3A1%3Arn%3A322059434%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2)
302 Found 236 B URL HTTP/2 mc.yandex.ru/watch/1677322?wmode=7&page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563630%3Ac%3A1%3Arn%3A322059434%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec4ecd509a0af9b0779ba51b440a9777
4968851ac304423f81e80303715c4916819bd583
d50ccc9ebf6b575b1efe74e9655e767c2f1976113750ea1b39cf8f14be21b7f8
GET /watch/1677322?wmode=7&page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563630%3Ac%3A1%3Arn%3A322059434%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/1677322/1?wmode=7&page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563630%3Ac%3A1%3Arn%3A322059434%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr%2814%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
set-cookie: yabs-sid=793781781670563631; Path=/; SameSite=None; Secure
i=Ft8oDih+5FyGVn9SkIdNDaaM2HPkU87BW0n6UU8L8cZyeBRAjP7Zrwg9EYpod6RtDD8VBnxtEc3jDMdd+byCNc8IjIY=; Expires=Mon, 06-Dec-2032 05:27:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8126658301670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8126658301670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702099631.yc.1670563631#1702099631.yrts.1670563631#1702099631.yrtsi.1670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:11 GMT
last-modified: Fri, 09-Dec-2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/rtbcount/1VRRlRYL0TK100000000U9nJr4zsddlrMeQS8SVdEQ9nZsUaMkeVdvJC00IUC97GwGBxScAvPaWof382nJCvFgUmWCHBcO6ysd8WqSe88Zj1ia30n32JyG8dXBsGaOKDmbh9QCS4OUrbh5dEpN0Kp3_B23BaAYD8wrr61Xa6Xh-Ciu3YSvb08ckPee3aMQR_GF2AIU1Omhm4ZiyW8ywcnxrdPVZBn0Aod9aLIFOoAmB9gSmWRNEPGNQkP6PYK00fPjd8_FEaKl_2TqTvJpBh_pTap-EvbtiLhF8kcFp9xE343t4kowbNPy2i5ImNX3UmCEvWOJt0mdYJ1UBo3_OFMRP_U6KLUVUw_LiMaFiNiFAUPDt3nGMMli3QqD30SfDLRxNuijq7V0k_ie8Sti7Mm3A3xShXu0LitNisRsZzUsP_sKesc347s3nEi34_OkFrJ7AsoabE2grozairVya6i_0dd3MH_ScQfPthhxordyNEPcPfQ65fi86TQGSxpmbsyGVixRUQTaxwj64nzmzs7W3wKuqX
200 OK 1.2 kB URL HTTP/2 an.yandex.ru/rtbcount/1VRRlRYL0TK100000000U9nJr4zsddlrMeQS8SVdEQ9nZsUaMkeVdvJC00IUC97GwGBxScAvPaWof382nJCvFgUmWCHBcO6ysd8WqSe88Zj1ia30n32JyG8dXBsGaOKDmbh9QCS4OUrbh5dEpN0Kp3_B23BaAYD8wrr61Xa6Xh-Ciu3YSvb08ckPee3aMQR_GF2AIU1Omhm4ZiyW8ywcnxrdPVZBn0Aod9aLIFOoAmB9gSmWRNEPGNQkP6PYK00fPjd8_FEaKl_2TqTvJpBh_pTap-EvbtiLhF8kcFp9xE343t4kowbNPy2i5ImNX3UmCEvWOJt0mdYJ1UBo3_OFMRP_U6KLUVUw_LiMaFiNiFAUPDt3nGMMli3QqD30SfDLRxNuijq7V0k_ie8Sti7Mm3A3xShXu0LitNisRsZzUsP_sKesc347s3nEi34_OkFrJ7AsoabE2grozairVya6i_0dd3MH_ScQfPthhxordyNEPcPfQ65fi86TQGSxpmbsyGVixRUQTaxwj64nzmzs7W3wKuqX
IP
Hash 4b7daa47e557bac4f421d4f249484468
2808bab8b490da804be35c5e92dd0a1190715ef3
5467d38b716d09fe103f46682cfae548c6e5b2d6ed69bb119564dbc826ee30e5
GET /rtbcount/1VRRlRYL0TK100000000U9nJr4zsddlrMeQS8SVdEQ9nZsUaMkeVdvJC00IUC97GwGBxScAvPaWof382nJCvFgUmWCHBcO6ysd8WqSe88Zj1ia30n32JyG8dXBsGaOKDmbh9QCS4OUrbh5dEpN0Kp3_B23BaAYD8wrr61Xa6Xh-Ciu3YSvb08ckPee3aMQR_GF2AIU1Omhm4ZiyW8ywcnxrdPVZBn0Aod9aLIFOoAmB9gSmWRNEPGNQkP6PYK00fPjd8_FEaKl_2TqTvJpBh_pTap-EvbtiLhF8kcFp9xE343t4kowbNPy2i5ImNX3UmCEvWOJt0mdYJ1UBo3_OFMRP_U6KLUVUw_LiMaFiNiFAUPDt3nGMMli3QqD30SfDLRxNuijq7V0k_ie8Sti7Mm3A3xShXu0LitNisRsZzUsP_sKesc347s3nEi34_OkFrJ7AsoabE2grozairVya6i_0dd3MH_ScQfPthhxordyNEPcPfQ65fi86TQGSxpmbsyGVixRUQTaxwj64nzmzs7W3wKuqX HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 29 kB URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash cb01b13ad2a87323812265b0c6e2c0a2
48464fb2f39a49e6095f04e1c761a9bc8010754e
c9acf496e90610f67ba1f9f58a122fca946c7838ab9e95afdaa3954f3e77c440
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 323
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
avatars.mds.yandex.net/get-yabs_performance/7377503/2a00000183fc4b777d4fea9017c59164b18b/big
200 OK 2.7 kB URL HTTP/2 avatars.mds.yandex.net/get-yabs_performance/7377503/2a00000183fc4b777d4fea9017c59164b18b/big
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x179, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ef1f6b1cb7458d5d94da4d3a8ae1b48d
febaed6ca5959fdb428a4cfc9facca5420b06095
3baaa0bf8dc5b68ba0bfa0bc186904e28377f9ff247b5c7c70141b604dac571a
GET /get-yabs_performance/7377503/2a00000183fc4b777d4fea9017c59164b18b/big HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:11 GMT
content-type: image/webp
content-length: 2664
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Fri, 21 Oct 2022 20:45:48 GMT
cache-control: max-age=31536000,immutable
x-request-id: db3b34257ea8ac91
nel: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
timing-allow-origin: *
X-Firefox-Spdy: h2
favicon.yandex.net/favicon/www.vipkeys.net?size=32&stub=2
200 Ok 1.8 kB URL HTTP/1.1 favicon.yandex.net/favicon/www.vipkeys.net?size=32&stub=2
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 1ae60809cc894f03d5e5dd4d87715a72
a1e9cb2204f2c864040956ec02be831fd05c75bf
dcdc4dc784b86d6498e65f437938164fe523a83f55ae9480eecf1da7f729166b
GET /favicon/www.vipkeys.net?size=32&stub=2 HTTP/1.1
Host: favicon.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Cache-Control: max-age=691200
Content-Type: image/png
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
access-control-allow-origin: *
an.yandex.ru/event_confirmation
200 OK 35 kB URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash 8a209f4148b547f45db2865d01effe80
10c8d283c53ad19c80b7fcb989a06b2ed8ce8b85
096ca8efb6d62cb353efc3c6c47ee375028533fe90ce75bd01b39b808ac0dd23
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 323
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A941%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A714113399%3Arqn%3A1%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C296%2C274%2C1%2C-5%2C0%2C%2C246%2C3%2C1849%2C1849%2C3%2C932%3Aco%3A0%3Ans%3A1670563627991%3Arqnl%3A1%3Ast%3A1670563631&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(1)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A941%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A714113399%3Arqn%3A1%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C296%2C274%2C1%2C-5%2C0%2C%2C246%2C3%2C1849%2C1849%2C3%2C932%3Aco%3A0%3Ans%3A1670563627991%3Arqnl%3A1%3Ast%3A1670563631&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pa%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afp%3A941%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A714113399%3Arqn%3A1%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C296%2C274%2C1%2C-5%2C0%2C%2C246%2C3%2C1849%2C1849%2C3%2C932%3Aco%3A0%3Ans%3A1670563627991%3Arqnl%3A1%3Ast%3A1670563631&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 79
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:11 GMT
last-modified: Fri, 09-Dec-2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Fri, 09 Dec 2022 06:22:17 GMT
Date: Fri, 09 Dec 2022 05:27:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Fri, 09 Dec 2022 06:22:17 GMT
Date: Fri, 09 Dec 2022 05:27:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Fri, 09 Dec 2022 06:22:17 GMT
Date: Fri, 09 Dec 2022 05:27:11 GMT
Connection: keep-alive
mc.yandex.ru/watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr%2814%29mc%28p-1-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr%2814%29mc%28p-1-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr%2814%29mc%28p-1-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Referer: https://goo.su/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:11 GMT
last-modified: Fri, 09-Dec-2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:51:24 GMT
age: 27347
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 44ed82780732ed682ee46b2df52b3ca2
0b3fe77e142178561b28c93b94b1aea2e1c395a5
383da5ca2927044c69ff1d10b630fe3439ca48f1845031ef1b6607fcd054c54b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4049
x-amzn-requestid: dbde9a26-7609-43b7-a9a5-6e4d2f559989
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwRFHIooAMFVmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-5f5131b8315a458d18cdc70f;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0hIxbSpQqCv6Ud-7HmBaRxkFrdLYrV-Lr2u3nIzd8jPXpQ8E7ahp1g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 11:18:08 GMT
age: 65343
etag: "0b3fe77e142178561b28c93b94b1aea2e1c395a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8546542f00ea29ef4df6ab8d3c7c2164
5c8ffe91490006a9890188b53f875568c2b6bd8f
7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7DwFYUoAI9x-ruRySpsSAXQZnxrXxUACrXp568TGZ2JSppZ1UC0uWg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 07:09:44 GMT
age: 80247
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18fc6c7c-4552-4358-9e4d-cdf93bc52b43.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18fc6c7c-4552-4358-9e4d-cdf93bc52b43.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06799a30d9977b0845f525ae82355d23
6ae9a3c17dcbac5912a46ca0c99977ca3adad4ea
d7a7eeb42d36167243b3dea7147a61119cbb5d1dcc2e2304c6ddd4a62e41efd3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18fc6c7c-4552-4358-9e4d-cdf93bc52b43.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4914
x-amzn-requestid: b709d5ff-617b-480b-8fc3-b1408ee358b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsoEkSIAMF0ZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7ea-4150ac397b97d1217cece045;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8DqbjuQMX0JOMpduQ1-wy_B1a957NXgsAHrZc1OwUzsmqJRKfkEpoA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:49:06 GMT
age: 27485
etag: "6ae9a3c17dcbac5912a46ca0c99977ca3adad4ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1a13d12c326848d5b7adeb2562a35a5
d795c519ea637a213aab1d80daaf44ce5ad19069
f7b99c93b99268e1b2fa438d493cf23cd75a98833710ddd22b5278a76e9f019a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7919
x-amzn-requestid: 05f49b7c-7c76-4df4-8258-c270078d8fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctl_TH-KoAMFkWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9fb-1971e1e0359763a96b4d320b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:06:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BEsmH1BkWu_c_-qHStWD1CT1Lx1AZVcw9tnLcoGZCmnjwFWdtB7BRA==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:39:43 GMT
age: 67648
etag: "d795c519ea637a213aab1d80daaf44ce5ad19069"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/1677322?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 6.6 kB URL HTTP/2 mc.yandex.ru/watch/1677322?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cb7655c8fe89a83f0096c51684aa21c
4946fcab2a99d926c45abaecf8f97b6214dee0cd
60a3066f2dcc2f696413ecec56ef1d0c1a9392f6845fac5c4319b8b9e02074fd
GET /watch/1677322?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr(14)mc(p-1-h-1)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/1677322/1?page-url=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&cnt-class=1&hittoken=1670563631_bc66ef49165fa14e83b702f8be90b527cac74552a3cd252d9cf3b5236a05f2f3&browser-info=pv%3A1%3Aar%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A256465901668%3Ahid%3A332260702%3Az%3A0%3Ai%3A20221209052710%3Aet%3A1670563631%3Ac%3A1%3Arn%3A368126749%3Arqn%3A2%3Au%3A1670563630972974290%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1670563627991%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670563631%3At%3ARedirecting...&t=gdpr%2814%29mc%28p-1-h-1%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
set-cookie: yabs-sid=2146226021670563631; Path=/; SameSite=None; Secure
i=eJGgNMdAqYQX/hXS//smC2cthpS9EA1JoezwdzuDY1sOvU9bgi9LrRXBiTos0k9KAyShpapMXdZIRBirLyrDssg5zak=; Expires=Mon, 06-Dec-2032 05:27:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2056428331670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2056428331670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702099631.yc.1670563631#1702099631.yrts.1670563631#1702099631.yrtsi.1670563631; Expires=Sat, 09-Dec-2023 05:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:11 GMT
last-modified: Fri, 09-Dec-2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (888)
Hash ac2c89d2054deb1648f44256e4aef02b
7912cea274eece05bcc8a256676e0ffb67f9fc08
0f271b94972705b66868824983ff26377c5a64d4457342ebb49794b804fd651c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58118
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: *
etag: "6391b12a-e306"
expires: Fri, 09 Dec 2022 06:27:13 GMT
last-modified: Thu, 08 Dec 2022 12:40:58 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 958 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
Hash 85c7d6d9acd0d3fc87d164fd12900c1f
e0ae36e9cf8b802f589803ab9e9a31e5e3504798
cb29db58fbd2b06db177b4e7b874c39385d7bb2a80bc703da4e0048b0e25f96c
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 323
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3be35726414aac63c051fd5a2d925383
d5daf9a9117c9aa8876e286709a1eee2ee496587
43bd1570d523285cf0ee25d18a4bb16b0b5695c70022d655762f815f47c5cf76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3be35726414aac63c051fd5a2d925383
d5daf9a9117c9aa8876e286709a1eee2ee496587
43bd1570d523285cf0ee25d18a4bb16b0b5695c70022d655762f815f47c5cf76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3be35726414aac63c051fd5a2d925383
d5daf9a9117c9aa8876e286709a1eee2ee496587
43bd1570d523285cf0ee25d18a4bb16b0b5695c70022d655762f815f47c5cf76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3be35726414aac63c051fd5a2d925383
d5daf9a9117c9aa8876e286709a1eee2ee496587
43bd1570d523285cf0ee25d18a4bb16b0b5695c70022d655762f815f47c5cf76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: *
etag: "6391b12a-2b"
expires: Fri, 09 Dec 2022 06:27:13 GMT
accept-ranges: bytes
last-modified: Thu, 08 Dec 2022 12:40:58 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
302 Found 42 B URL HTTP/2 www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 05:27:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=MceSY_KvEI6N78EPxIGwQA&random=971371406&sscte=1&crd=
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.googleadservices.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 20a52ec84a838219318b99c98f035c92
5edcf9ff4df00e52a1cbcebd9086239b2eb1df2b
4e042ba7a9b2f009ceb0ad6317cdcb33e5ca4e37b53cfd456076f74c15a89dbb
GET /pagead/conversion_async.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 09 Dec 2022 05:27:13 GMT
expires: Fri, 09 Dec 2022 05:27:13 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17024150440181632750
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yastatic.net/q/set/s/rsya-tag-users/bundle.js
200 OK 37 kB URL HTTP/2 yastatic.net/q/set/s/rsya-tag-users/bundle.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0b4b0834c1fa6be5c7949e526364f87a
1fb2ecb6c3e70bbf3dc2dfe95f240dfaa2b28b35
01e04afd31645cd28117b1bffad411d530e2b10e8e6e16b1d4b1e3d64d34b82e
GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Fri, 09 Dec 2022 05:27:12 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31556952
content-encoding: br
etag: W/"82bdc8db563d3e71c35534315f8a9fd5"
expires: Sun, 11 Dec 2022 17:26:06 GMT
last-modified: Fri, 29 Oct 2021 11:19:01 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: 19bdc63568f1c59e
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
200 OK 236 B URL HTTP/2 mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ceb90db868fdfd1a43bca178aac491ae
09e100946da4eecc305e56afea6713c5f455b74a
dcf4186d596dfffd8b91e1e3b5bb0242daf1655a0ac393996d1c19f24699fd31
GET /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 236
date: Fri, 09 Dec 2022 05:27:13 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:13 GMT
last-modified: Fri, 09-Dec-2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 05:27:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1007563373&crd=&is_vtc=1&random=2449637937&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1007563373&crd=&is_vtc=1&random=2449637937&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1007563373&crd=&is_vtc=1&random=2449637937&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 05:27:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
302 Found 42 B URL HTTP/2 mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Fgoo.su%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A75h6wcsjl31tvi5xjf8ir%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A273911860816%3Ahid%3A356093977%3Az%3A0%3Ai%3A20221209052712%3Aet%3A1670563632%3Arn%3A602855561%3Arqn%3A1%3Au%3A1670563632628016759%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C15%2C0%2C%2C0%2C%2C69%2C1%2C334%2C334%2C0%2C94%3Aco%3A0%3Ans%3A1670563630206%3Ast%3A1670563632&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yabs-sid=1799594081670563633; Path=/; SameSite=None; Secure
i=FzhMhEM8iaD+AwOLOZ69sE7bOGPu0R6NeAj/HDCBMFleErtmZfpf3X/PyyR3NYhd3C1vzc7wRsfwdKo80qPaEj7cUdw=; Expires=Mon, 06-Dec-2032 05:27:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2139873721670563633; Expires=Sat, 09-Dec-2023 05:27:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2139873721670563633; Expires=Sat, 09-Dec-2023 05:27:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702099633.yc.1670563633#1702099633.yrts.1670563633#1702099633.yrtsi.1670563633; Expires=Sat, 09-Dec-2023 05:27:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 05:27:13 GMT
last-modified: Fri, 09-Dec-2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1670563632470&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=328703975&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1670563632470&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=328703975&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1670563632470&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=328703975&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 05:27:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yandex.ru/set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fgoo.su%2F
200 OK 304 B URL HTTP/2 yandex.ru/set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fgoo.su%2F
IP
Hash 929d3e45085596b7a3a9ecd8359b8db5
08f6d9692109a2158706c329ad35accc7e547c54
93a18016f907bf0c45ea07c1cf2e422e4d586bb46d21cb801579f99c4960e97c
GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Fgoo.su%2F HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Origin: https://yastatic.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 05:27:13 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
set-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sun, 08 Dec 2024 05:27:13 GMT; SameSite=None; Secure
is_gdpr_b=COafRBCAmgEYAQ==; Path=/; Domain=.yandex.ru; Expires=Sun, 08 Dec 2024 05:27:13 GMT; SameSite=None; Secure
_yasc=XHZS3NV/dypO45R6GjRObrhW4KRxLYdzjykW8sBO7bBJhg7MW9TXE3dfYL2rnQ==; domain=.yandex.ru; path=/; expires=Mon, 06-Dec-2032 05:27:13 GMT; secure
i=9wXiuwTymACF94TLaTdKobwecCSxC9u/5WU5Opr4LTazWRGu+4SUWPYrvYao8YjdMocrimy4ZIsHByoNEfSKhGuJ+aU=; Expires=Sun, 08-Dec-2024 05:27:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: public,max-age=300
content-encoding: gzip
content-type: application/json; charset=utf-8
X-Firefox-Spdy: h2
an.yandex.ru/rtbcount/1KiaJnIJ0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCe84huB9kumCCWmCVnbdCJ4mp6K2YQnbYWAIPvd-0y4h9e7v0fykStncO2YMFPuUzvwLuIyJoEnMPbOWsSki22IdCeEqpMLc0rd8pCIW0BAFPIFppvDA_GlV7UKzoQodNB2o_5nxsLMmohjWyYUpWnC_nBaiSr-T0RDMiCoJsi32k8E5zG0Buqse7pxOFsJP_k6LLUJTw_PlMK3kNy3AUv8rLv8JB7s1jQ6XWUKcgzvgyMMx3_WMVcK5ERo3hO5b1jkLmy4BsBhtRDxG-lVC_hALR31Z3h1vd61ZViJ6wvdaR9NbKHLSvUoNQlwI3MRXJpXh8lkJDKixrrzvQp-BdStCqj32qc03EzCETfuJxE8FsDjlDUsSz6d3OkuVx3m0NNsDoW00?confirmTime=2111000&confirmRatio=1000000&test-tag=379331511582722&format-type=118&actual-format=10&rnd=9826359778947&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&width=1268&height=100
200 OK 92 B URL HTTP/2 an.yandex.ru/rtbcount/1KiaJnIJ0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCe84huB9kumCCWmCVnbdCJ4mp6K2YQnbYWAIPvd-0y4h9e7v0fykStncO2YMFPuUzvwLuIyJoEnMPbOWsSki22IdCeEqpMLc0rd8pCIW0BAFPIFppvDA_GlV7UKzoQodNB2o_5nxsLMmohjWyYUpWnC_nBaiSr-T0RDMiCoJsi32k8E5zG0Buqse7pxOFsJP_k6LLUJTw_PlMK3kNy3AUv8rLv8JB7s1jQ6XWUKcgzvgyMMx3_WMVcK5ERo3hO5b1jkLmy4BsBhtRDxG-lVC_hALR31Z3h1vd61ZViJ6wvdaR9NbKHLSvUoNQlwI3MRXJpXh8lkJDKixrrzvQp-BdStCqj32qc03EzCETfuJxE8FsDjlDUsSz6d3OkuVx3m0NNsDoW00?confirmTime=2111000&confirmRatio=1000000&test-tag=379331511582722&format-type=118&actual-format=10&rnd=9826359778947&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&width=1268&height=100
IP
Hash 32dc91aa5e5be7a85228811d496edc1d
1b2558db24575ae602cc57f361118b1172b74fe9
32c4b4fd4cd3b0db30793f29472d2c0b804cfe89fb13f299261b322ae4a78052
GET /rtbcount/1KiaJnIJ0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCe84huB9kumCCWmCVnbdCJ4mp6K2YQnbYWAIPvd-0y4h9e7v0fykStncO2YMFPuUzvwLuIyJoEnMPbOWsSki22IdCeEqpMLc0rd8pCIW0BAFPIFppvDA_GlV7UKzoQodNB2o_5nxsLMmohjWyYUpWnC_nBaiSr-T0RDMiCoJsi32k8E5zG0Buqse7pxOFsJP_k6LLUJTw_PlMK3kNy3AUv8rLv8JB7s1jQ6XWUKcgzvgyMMx3_WMVcK5ERo3hO5b1jkLmy4BsBhtRDxG-lVC_hALR31Z3h1vd61ZViJ6wvdaR9NbKHLSvUoNQlwI3MRXJpXh8lkJDKixrrzvQp-BdStCqj32qc03EzCETfuJxE8FsDjlDUsSz6d3OkuVx3m0NNsDoW00?confirmTime=2111000&confirmRatio=1000000&test-tag=379331511582722&format-type=118&actual-format=10&rnd=9826359778947&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&width=1268&height=100 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:13 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1670563632481&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=1939978543&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1670563632481&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=1939978543&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1670563632481&cv=9&fst=1670562000000&num=1&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=https%3A%2F%2Fgoo.su%2F&async=1&fmt=3&is_vtc=1&random=1939978543&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 05:27:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
an.yandex.ru/count/WMiejI_zOEG03Gi0P19f7R8KEf_o10K0v04GmO200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WOeejI_zO9u01Gm011PHZv0BdW4GW8200OIw_gBgX-2DcG600VMObQRxkOpusm680SUenCU50P01wh3IkDQ0W802c06YhDAuLhW1b97ss2FO0OgZeA81u06MbQ-P0VoOthu1e0AE-eK1i0E21OW5dRy8a0NQYXwm1V_I1xW5_z87m0NobSe1o0MGipFG1So70wW6xW6f1mZpm7b6uvXbk0U01U07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0K_yI1KEWKZ0AW5f3oovm6oHO0y3_G5iwVthu1c1UNjRGik1S1m1UrrW6W6Uu1k1d_0O4Q__-VjnVwFhwW6kZwijpSzAw_PQWU0R0V0SWVnP6GKQaWS4SdbIuXkJ-u8EUJA90YcOWga2ARY2hL8l__V_-18m3mFuaZcfdPFv0Zmxw6XURDxEN70PWZd-_4pfJufiiN2G0WYW3NYACCkDIoY8cYUSe9AwNp5w7eCOwnJSm1~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0
200 OK 519 B URL HTTP/2 an.yandex.ru/count/WMiejI_zOEG03Gi0P19f7R8KEf_o10K0v04GmO200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WOeejI_zO9u01Gm011PHZv0BdW4GW8200OIw_gBgX-2DcG600VMObQRxkOpusm680SUenCU50P01wh3IkDQ0W802c06YhDAuLhW1b97ss2FO0OgZeA81u06MbQ-P0VoOthu1e0AE-eK1i0E21OW5dRy8a0NQYXwm1V_I1xW5_z87m0NobSe1o0MGipFG1So70wW6xW6f1mZpm7b6uvXbk0U01U07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0K_yI1KEWKZ0AW5f3oovm6oHO0y3_G5iwVthu1c1UNjRGik1S1m1UrrW6W6Uu1k1d_0O4Q__-VjnVwFhwW6kZwijpSzAw_PQWU0R0V0SWVnP6GKQaWS4SdbIuXkJ-u8EUJA90YcOWga2ARY2hL8l__V_-18m3mFuaZcfdPFv0Zmxw6XURDxEN70PWZd-_4pfJufiiN2G0WYW3NYACCkDIoY8cYUSe9AwNp5w7eCOwnJSm1~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0
IP
Hash e3025731aca721d6e540129600e29249
cf0d2621a8dbd3ceef2b431d85baeca4413db353
5f91c8b960ad25ac644a916862d8bbf02a1eebee64ddeede4e6b8a834d1cb28f
GET /count/WMiejI_zOEG03Gi0P19f7R8KEf_o10K0v04GmO200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WOeejI_zO9u01Gm011PHZv0BdW4GW8200OIw_gBgX-2DcG600VMObQRxkOpusm680SUenCU50P01wh3IkDQ0W802c06YhDAuLhW1b97ss2FO0OgZeA81u06MbQ-P0VoOthu1e0AE-eK1i0E21OW5dRy8a0NQYXwm1V_I1xW5_z87m0NobSe1o0MGipFG1So70wW6xW6f1mZpm7b6uvXbk0U01U07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0K_yI1KEWKZ0AW5f3oovm6oHO0y3_G5iwVthu1c1UNjRGik1S1m1UrrW6W6Uu1k1d_0O4Q__-VjnVwFhwW6kZwijpSzAw_PQWU0R0V0SWVnP6GKQaWS4SdbIuXkJ-u8EUJA90YcOWga2ARY2hL8l__V_-18m3mFuaZcfdPFv0Zmxw6XURDxEN70PWZd-_4pfJufiiN2G0WYW3NYACCkDIoY8cYUSe9AwNp5w7eCOwnJSm1~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Content-Type: application/x-www-form-urlencoded
Referer: https://goo.su/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:13 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670563629485%3A1670563636948%3A3%3A80a78c89f3045e3759b9c02d872a28b0;opts=jst-ym;visible=true;_=0.7012110320939515;e=RT/unload;et=1670563636945;pvt=8047;vtauto=7471
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670563629485%3A1670563636948%3A3%3A80a78c89f3045e3759b9c02d872a28b0;opts=jst-ym;visible=true;_=0.7012110320939515;e=RT/unload;et=1670563636945;pvt=8047;vtauto=7471
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3128781;u=https%3A//goo.su/Bk9pXdy;st=1670563628898;title=Redirecting...;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=65ca3e691d1f11a8;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670563629485%3A1670563636948%3A3%3A80a78c89f3045e3759b9c02d872a28b0;opts=jst-ym;visible=true;_=0.7012110320939515;e=RT/unload;et=1670563636945;pvt=8047;vtauto=7471 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:17 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670563637:3128781:::; path=/; expires=Sun, 10-Dec-23 05:27:17 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open%20Sans:400&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open%20Sans:400&display=swap
IP
GET /css?family=Open%20Sans:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 05:27:09 GMT
date: Fri, 09 Dec 2022 05:27:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
OPTIONS /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://goo.su/
Origin: https://goo.su
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
date: Fri, 09 Dec 2022 05:27:10 GMT
access-control-max-age: 1728000
access-control-allow-headers: content-type
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/count/WMiejI_zOEG03Gi0H19ilX2NU2JRl0K0v04GW8200J4lnv9Z000003YKuCm1Y083kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BsD3dTNMQ1wf1mZpP0HUuvXb-0Qg2n36O9vW2FC00000pMTUxu60W8281AWFYERphE7hkCnba13Mz-_PsiExZS41j8sClZu2u1G1y1N1YlRieu-y_6EW5f3oovm6oHRmFzWMWHUe5mtG627u68ZsuAZPZSUIUe0PYHcy2hWP_m706QxMth2wb_2cST8P4dbXOdDVSsLoTcLoBt8tDZGjC-WPaG7m6O320vWQrCDJi1j8k1i3WXmDIM93EcnZObLwGqvbD-aS0F0_W1t_Vu0W0eWW3D0X_m7L8l__V_-18m0000000F0_4m20892AW7Rmv_mMvqOe8OSq7UySc1WQSDUi-Idug2maIANlyEWNWBLpmabK4rlXZy9QTuwIHPaas1u0~1=WMyejI_zO8W0BGi0T1I1ksYNY07EgE2uzFcVyRS1W041Y07QxxxJcm6G0Swfii_WW8200fW1pgcops2u0VgHfzibs076cCoh0U01se2cfW7e0Qm3-07UeDw-0PW2XgZX6g02_92h5R030kW4nWg81OkX0v05aBu4i0Nhsm6u1UlR0S05dDe2o0N9X07G1R4wg0Rk0Qa72FDa15xZc6Mu1u05u0Ve2z08ceg0WSA2W0RW2Bx8rGhe2GU02W7e39C2o12WAA684W6G4W605820WEWKZ0AW5f3oovm6oHRmFz0M_E7UlW6O5w-__Ywu5m705xNM0Q0PxW6u6Vy1WHh__tyzvlsPOA0QlU7S_uFare9Hg1w_SB0V0SWVeupcLRWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZvSN1jl6rwQ1rc2FzxQE-k8lqd4a806qy6-BWGd74yII6V_Dt76EH46lCKsImJHG1~1?stat-id=3&test-tag=379331511638545&banner-sizes=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjEyNjh4MjAwIn0%3D&format-type=118&actual-format=8&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjI0NjI1In0%3D&width=1268&height=200&confirmTime=2101000&confirmRatio=1000000&wmode=0
302 Found 0 B URL HTTP/2 an.yandex.ru/count/WMiejI_zOEG03Gi0H19ilX2NU2JRl0K0v04GW8200J4lnv9Z000003YKuCm1Y083kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BsD3dTNMQ1wf1mZpP0HUuvXb-0Qg2n36O9vW2FC00000pMTUxu60W8281AWFYERphE7hkCnba13Mz-_PsiExZS41j8sClZu2u1G1y1N1YlRieu-y_6EW5f3oovm6oHRmFzWMWHUe5mtG627u68ZsuAZPZSUIUe0PYHcy2hWP_m706QxMth2wb_2cST8P4dbXOdDVSsLoTcLoBt8tDZGjC-WPaG7m6O320vWQrCDJi1j8k1i3WXmDIM93EcnZObLwGqvbD-aS0F0_W1t_Vu0W0eWW3D0X_m7L8l__V_-18m0000000F0_4m20892AW7Rmv_mMvqOe8OSq7UySc1WQSDUi-Idug2maIANlyEWNWBLpmabK4rlXZy9QTuwIHPaas1u0~1=WMyejI_zO8W0BGi0T1I1ksYNY07EgE2uzFcVyRS1W041Y07QxxxJcm6G0Swfii_WW8200fW1pgcops2u0VgHfzibs076cCoh0U01se2cfW7e0Qm3-07UeDw-0PW2XgZX6g02_92h5R030kW4nWg81OkX0v05aBu4i0Nhsm6u1UlR0S05dDe2o0N9X07G1R4wg0Rk0Qa72FDa15xZc6Mu1u05u0Ve2z08ceg0WSA2W0RW2Bx8rGhe2GU02W7e39C2o12WAA684W6G4W605820WEWKZ0AW5f3oovm6oHRmFz0M_E7UlW6O5w-__Ywu5m705xNM0Q0PxW6u6Vy1WHh__tyzvlsPOA0QlU7S_uFare9Hg1w_SB0V0SWVeupcLRWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZvSN1jl6rwQ1rc2FzxQE-k8lqd4a806qy6-BWGd74yII6V_Dt76EH46lCKsImJHG1~1?stat-id=3&test-tag=379331511638545&banner-sizes=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjEyNjh4MjAwIn0%3D&format-type=118&actual-format=8&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjI0NjI1In0%3D&width=1268&height=200&confirmTime=2101000&confirmRatio=1000000&wmode=0
IP
GET /count/WMiejI_zOEG03Gi0H19ilX2NU2JRl0K0v04GW8200J4lnv9Z000003YKuCm1Y083kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BsD3dTNMQ1wf1mZpP0HUuvXb-0Qg2n36O9vW2FC00000pMTUxu60W8281AWFYERphE7hkCnba13Mz-_PsiExZS41j8sClZu2u1G1y1N1YlRieu-y_6EW5f3oovm6oHRmFzWMWHUe5mtG627u68ZsuAZPZSUIUe0PYHcy2hWP_m706QxMth2wb_2cST8P4dbXOdDVSsLoTcLoBt8tDZGjC-WPaG7m6O320vWQrCDJi1j8k1i3WXmDIM93EcnZObLwGqvbD-aS0F0_W1t_Vu0W0eWW3D0X_m7L8l__V_-18m0000000F0_4m20892AW7Rmv_mMvqOe8OSq7UySc1WQSDUi-Idug2maIANlyEWNWBLpmabK4rlXZy9QTuwIHPaas1u0~1=WMyejI_zO8W0BGi0T1I1ksYNY07EgE2uzFcVyRS1W041Y07QxxxJcm6G0Swfii_WW8200fW1pgcops2u0VgHfzibs076cCoh0U01se2cfW7e0Qm3-07UeDw-0PW2XgZX6g02_92h5R030kW4nWg81OkX0v05aBu4i0Nhsm6u1UlR0S05dDe2o0N9X07G1R4wg0Rk0Qa72FDa15xZc6Mu1u05u0Ve2z08ceg0WSA2W0RW2Bx8rGhe2GU02W7e39C2o12WAA684W6G4W605820WEWKZ0AW5f3oovm6oHRmFz0M_E7UlW6O5w-__Ywu5m705xNM0Q0PxW6u6Vy1WHh__tyzvlsPOA0QlU7S_uFare9Hg1w_SB0V0SWVeupcLRWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZvSN1jl6rwQ1rc2FzxQE-k8lqd4a806qy6-BWGd74yII6V_Dt76EH46lCKsImJHG1~1?stat-id=3&test-tag=379331511638545&banner-sizes=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjEyNjh4MjAwIn0%3D&format-type=118&actual-format=8&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjI0NjI1In0%3D&width=1268&height=200&confirmTime=2101000&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/count/WMiejI_zOEG03Gi0H19ilX2Nq7m-mmK0v04GmO200J4lnv9Z000003YKuCm1Y083kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BsD3dTNMQ1wf1mZpP0HUuvXb-0Qg2n36O9vW2FC00000pMTUxu60W8281AWFYERphE7hkCnba13Mz-_PsiExZS41j8sClZu2u1G1y1N1YlRieu-y_6EW5f3oovm6oHRmFzWMWHUe5mtG627u68ZsuAZPZSUIUe0PYHcy2hWP_m706QxMth2wb_2cST8P4dbXOdDVSsLoTcLoBt8tDZGjC-WPaG7m6O320vWQrCDJi1j8k1i3WXmDIM93EcnZObLwGqvbD-aS0F0_W1t_Vu0W0eWW3D0X_m7L8l__V_-18m0000000F0_4m20892AW7Rmv_mMvqOe8OSq7UySc1WQSDUi-Idug2maIANlyEWNWBLpmabK4rlXZy9QTuwIHPaas1u0~1=WNGejI_zO8q0LGi0n1JHRiy5ZG4GW8200SweuBZq-P_njm600G680ThlljER0P01pgcop-20W802c07EgRBFOBW1-f6dsoNO0SQOpAi1u07QWAQc0UW1h0Fu0TwWthu1c0A6gE4Qe0ByaAiLi0C2w0J62eW5Yw43a0MGlWIm1UlR0RW5wzi1m0MSsWB81Sc40T05iJge1ku1gGS8ysG4NkEOPRW7W0NW1-WBq0YQYe21meA01k08liZL2kW91u0A0UWCamB84A0eeOWI0P0I0O0KW820w1IC0g0MaFBBd0R95l0_q1RyuTw-0PWNhx_-BhWN0S0NjTO1e1dk0RWP_m616l__Vptc_PbWe1gzuTp_W-JMWb6e7hzmi1y1o1-ZZEPLk23daoYG8fc8Af0YcuWgi281rIB__t__WIC0y3-98za_a2FbnS6syRNfe7MO8_tjexwuY_ISIGW0SZmRuk12SSGP9ORFytUyOv4GaynJfB5DU040~1?stat-id=3&test-tag=379331511638545&banner-sizes=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjEyNjh4MjAwIn0%3D&format-type=118&actual-format=8&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzAwNjA3OTU5MSI6IjI0NjI1In0%3D&width=1268&height=200&confirmTime=2101000&confirmRatio=1000000&wmode=0
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: https://goo.su
set-cookie: yandexuid=6491601351670563633; domain=.yandex.ru; path=/; expires=Mon, 06-Dec-2032 05:27:13 GMT
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
expires: Fri, 09 Dec 2022 05:27:13 GMT
last-modified: Fri, 09 Dec 2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/count/WMWejI_zODq0zGe0L19mSKgMrEbZlWK0tG4GmO200J4lnv9Z000003YKuCm1Y084kGAP6szCkR_XPF02vDw-XWgWLl050Q06xW791Y-ZUCMRfaPOgGS8ytWgRkEOPVW70j080WYg2n3Igen42FC00709qMTUxu60W8281AWFYER3u-FjkCnba13Mz-_PsiExZS41j8sClZu2y1N1YlRieu-y_6EW5f3oovm6oHRO5e4Ng1SDq1WX-1Y8zk2esOt7adg06OaP66Uu6Vy1m1ckrjwmkfVmfd7I6H9vOM9pNtDbSdPbSYzoDpOqBJFe6VG9y1c0mWEO6jJ3Kx0RIBWR0u8S3KbYGpf3KsbMUaDEPJVf703mFu0T_t-080A880pG8Vy1rIB__t__WIC00000003mFn80W22GYe1syEVk5kT6A267j1llneOWBk24L_DJxb5Po8zAl-7HBy1gvmGbKKrWwyvHyY0YWti0~1=WN0ejI_zO8W0DGi0L1G8MLU3Y06cX8twaz_PcCq1W06Eql4JY06vny-dcW6G0TQhZExVW8200fW1rgkCxb-u0RACvyibs07yo-2g0U01uiU2fG7e0Pm3-062kUI-0Q02iihN6g031h030kW4v0I81P3e0P05aEW1i0M2ExW5WZl01PUt0yW5r6_G1SqNg0Rk0Qa72FDuAcxZc6Mu1u05u0U62WRW29dbgmte2GU02W7u2e2r6EWCamB84C2W4A7G50te58m2e1QGyikS1iaMy3_G5eAvvBu1c1UA-jCkk1S1m1UrrW6W6Uu1k1d_0O4Q__yFmlOKDN-W6l2PxydLx9R2nW6e7W6m7mF87_wbi5Mf8AVfAwWlJk0_k23daoYG8fc8Af0YcuWgi281rIB__t__WIC0y3-98za_a2ExgfoWsv_Hcju1c2EIaOohelRqaEe12G1hF1j2m3NYI2P930Wm3DkW902PfxZ7mOukCjWcYW00~1=WNyejI_zO9S0hGi0z1GerCYxbm74aEItp9A1WVm1W06zfOa1Y06zfOa1a06WfkdLozhPrWIW0TZocChWW8200gW1sFAOoc2m0PgA_0Yu0VR2mDebs06ujCUh0U01cgpe2UW1b0IO0lQIrGMW0lYIrGMW0mIm0ze4Y0NqfmEG1VId0x05usku1UDhm0Nrj0p81VkJ0z05ZIke1ku1gGS8ytWgRkEOPRW7mWlW1uOAq0YQYf29m8200k08lCdg0kW91u0A0VWAWBKOw0oJ0iWGmB2IYW6XW1I0W808q1ImhRLmw1IC0g0MaFBBd0R95l0_q1REdzw-0PWNozbek1S1m1UrrW6W6Uu1k1d_0O4Q__zNARcSzywe7W6m7mB87vpQurMf87TcFNr68j4_k23daoYG8fc8Af0YcuWgg2Ak0iWY0jKY__z__u4Z0F0_YIFPFv0ZdzdnaR2LnlxN0Ge0XZmR0i0ruKZEbXZ8OHXhGubzgtdAoIkbCuYYmdIEmJPH1000~1=WNOejI_zO8y0PGi0j1HUpBPTZm4GW8200TIgm_pyvEYX_G600QZiWR_A-vBZIeW1ohcOcfq1a07Qtkp2uO20W0AO0ThUxC9Xk07Owgdh9TW1gkYeh07W0RZ2-n3e0Gpu0OIlthu1e0AioD0Mi0C2w0Is1OW5s9u3a0NOdWEm1RTfk0MtQS05XFW2o0NDNz05bIge1ku1gGS8ytWgRkEOPRW7W0NW1uO6u0YMfAWBw0a7W0e1-0g0jHZe39C2o130e12XW1I0W804q1JVmxCGw1IC0g0MaFBBd0R95l0_q1QMuE6-0PWNakwo4RWN0S0NjTO1e1dk0RWP_m7u6Q7Jgoc16l__drr6Ru6ng1u1i1y1o1-Lj9HMgI1NZnctf53nFxWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZsvAB_UxzyTVW0PWZoh2jbeBDgiDY2G1pF1iIm3NYI0wK66XW60j2YQKoJt6E8CCjZMt22m00~1?stat-id=4&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjQxOXgxNTAiLCIxNjg1MTkzMDU0ODcyNjQxNDQiOiI0MTl4MTUwIiwiNzIwNTc2MDY5MDQwNTY1NTUiOiI0MTl4MTUwIn0%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjU3MzYxIiwiMTY4NTE5MzA1NDg3MjY0MTQ0IjoiNDkxNzAiLCI3MjA1NzYwNjkwNDA1NjU1NSI6IjI0NTk1In0%3D&width=1268&height=150&confirmTime=2100000&confirmRatio=1000000&wmode=0
200 OK 0 B URL HTTP/2 an.yandex.ru/count/WMWejI_zODq0zGe0L19mSKgMrEbZlWK0tG4GmO200J4lnv9Z000003YKuCm1Y084kGAP6szCkR_XPF02vDw-XWgWLl050Q06xW791Y-ZUCMRfaPOgGS8ytWgRkEOPVW70j080WYg2n3Igen42FC00709qMTUxu60W8281AWFYER3u-FjkCnba13Mz-_PsiExZS41j8sClZu2y1N1YlRieu-y_6EW5f3oovm6oHRO5e4Ng1SDq1WX-1Y8zk2esOt7adg06OaP66Uu6Vy1m1ckrjwmkfVmfd7I6H9vOM9pNtDbSdPbSYzoDpOqBJFe6VG9y1c0mWEO6jJ3Kx0RIBWR0u8S3KbYGpf3KsbMUaDEPJVf703mFu0T_t-080A880pG8Vy1rIB__t__WIC00000003mFn80W22GYe1syEVk5kT6A267j1llneOWBk24L_DJxb5Po8zAl-7HBy1gvmGbKKrWwyvHyY0YWti0~1=WN0ejI_zO8W0DGi0L1G8MLU3Y06cX8twaz_PcCq1W06Eql4JY06vny-dcW6G0TQhZExVW8200fW1rgkCxb-u0RACvyibs07yo-2g0U01uiU2fG7e0Pm3-062kUI-0Q02iihN6g031h030kW4v0I81P3e0P05aEW1i0M2ExW5WZl01PUt0yW5r6_G1SqNg0Rk0Qa72FDuAcxZc6Mu1u05u0U62WRW29dbgmte2GU02W7u2e2r6EWCamB84C2W4A7G50te58m2e1QGyikS1iaMy3_G5eAvvBu1c1UA-jCkk1S1m1UrrW6W6Uu1k1d_0O4Q__yFmlOKDN-W6l2PxydLx9R2nW6e7W6m7mF87_wbi5Mf8AVfAwWlJk0_k23daoYG8fc8Af0YcuWgi281rIB__t__WIC0y3-98za_a2ExgfoWsv_Hcju1c2EIaOohelRqaEe12G1hF1j2m3NYI2P930Wm3DkW902PfxZ7mOukCjWcYW00~1=WNyejI_zO9S0hGi0z1GerCYxbm74aEItp9A1WVm1W06zfOa1Y06zfOa1a06WfkdLozhPrWIW0TZocChWW8200gW1sFAOoc2m0PgA_0Yu0VR2mDebs06ujCUh0U01cgpe2UW1b0IO0lQIrGMW0lYIrGMW0mIm0ze4Y0NqfmEG1VId0x05usku1UDhm0Nrj0p81VkJ0z05ZIke1ku1gGS8ytWgRkEOPRW7mWlW1uOAq0YQYf29m8200k08lCdg0kW91u0A0VWAWBKOw0oJ0iWGmB2IYW6XW1I0W808q1ImhRLmw1IC0g0MaFBBd0R95l0_q1REdzw-0PWNozbek1S1m1UrrW6W6Uu1k1d_0O4Q__zNARcSzywe7W6m7mB87vpQurMf87TcFNr68j4_k23daoYG8fc8Af0YcuWgg2Ak0iWY0jKY__z__u4Z0F0_YIFPFv0ZdzdnaR2LnlxN0Ge0XZmR0i0ruKZEbXZ8OHXhGubzgtdAoIkbCuYYmdIEmJPH1000~1=WNOejI_zO8y0PGi0j1HUpBPTZm4GW8200TIgm_pyvEYX_G600QZiWR_A-vBZIeW1ohcOcfq1a07Qtkp2uO20W0AO0ThUxC9Xk07Owgdh9TW1gkYeh07W0RZ2-n3e0Gpu0OIlthu1e0AioD0Mi0C2w0Is1OW5s9u3a0NOdWEm1RTfk0MtQS05XFW2o0NDNz05bIge1ku1gGS8ytWgRkEOPRW7W0NW1uO6u0YMfAWBw0a7W0e1-0g0jHZe39C2o130e12XW1I0W804q1JVmxCGw1IC0g0MaFBBd0R95l0_q1QMuE6-0PWNakwo4RWN0S0NjTO1e1dk0RWP_m7u6Q7Jgoc16l__drr6Ru6ng1u1i1y1o1-Lj9HMgI1NZnctf53nFxWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZsvAB_UxzyTVW0PWZoh2jbeBDgiDY2G1pF1iIm3NYI0wK66XW60j2YQKoJt6E8CCjZMt22m00~1?stat-id=4&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjQxOXgxNTAiLCIxNjg1MTkzMDU0ODcyNjQxNDQiOiI0MTl4MTUwIiwiNzIwNTc2MDY5MDQwNTY1NTUiOiI0MTl4MTUwIn0%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjU3MzYxIiwiMTY4NTE5MzA1NDg3MjY0MTQ0IjoiNDkxNzAiLCI3MjA1NzYwNjkwNDA1NjU1NSI6IjI0NTk1In0%3D&width=1268&height=150&confirmTime=2100000&confirmRatio=1000000&wmode=0
IP
GET /count/WMWejI_zODq0zGe0L19mSKgMrEbZlWK0tG4GmO200J4lnv9Z000003YKuCm1Y084kGAP6szCkR_XPF02vDw-XWgWLl050Q06xW791Y-ZUCMRfaPOgGS8ytWgRkEOPVW70j080WYg2n3Igen42FC00709qMTUxu60W8281AWFYER3u-FjkCnba13Mz-_PsiExZS41j8sClZu2y1N1YlRieu-y_6EW5f3oovm6oHRO5e4Ng1SDq1WX-1Y8zk2esOt7adg06OaP66Uu6Vy1m1ckrjwmkfVmfd7I6H9vOM9pNtDbSdPbSYzoDpOqBJFe6VG9y1c0mWEO6jJ3Kx0RIBWR0u8S3KbYGpf3KsbMUaDEPJVf703mFu0T_t-080A880pG8Vy1rIB__t__WIC00000003mFn80W22GYe1syEVk5kT6A267j1llneOWBk24L_DJxb5Po8zAl-7HBy1gvmGbKKrWwyvHyY0YWti0~1=WN0ejI_zO8W0DGi0L1G8MLU3Y06cX8twaz_PcCq1W06Eql4JY06vny-dcW6G0TQhZExVW8200fW1rgkCxb-u0RACvyibs07yo-2g0U01uiU2fG7e0Pm3-062kUI-0Q02iihN6g031h030kW4v0I81P3e0P05aEW1i0M2ExW5WZl01PUt0yW5r6_G1SqNg0Rk0Qa72FDuAcxZc6Mu1u05u0U62WRW29dbgmte2GU02W7u2e2r6EWCamB84C2W4A7G50te58m2e1QGyikS1iaMy3_G5eAvvBu1c1UA-jCkk1S1m1UrrW6W6Uu1k1d_0O4Q__yFmlOKDN-W6l2PxydLx9R2nW6e7W6m7mF87_wbi5Mf8AVfAwWlJk0_k23daoYG8fc8Af0YcuWgi281rIB__t__WIC0y3-98za_a2ExgfoWsv_Hcju1c2EIaOohelRqaEe12G1hF1j2m3NYI2P930Wm3DkW902PfxZ7mOukCjWcYW00~1=WNyejI_zO9S0hGi0z1GerCYxbm74aEItp9A1WVm1W06zfOa1Y06zfOa1a06WfkdLozhPrWIW0TZocChWW8200gW1sFAOoc2m0PgA_0Yu0VR2mDebs06ujCUh0U01cgpe2UW1b0IO0lQIrGMW0lYIrGMW0mIm0ze4Y0NqfmEG1VId0x05usku1UDhm0Nrj0p81VkJ0z05ZIke1ku1gGS8ytWgRkEOPRW7mWlW1uOAq0YQYf29m8200k08lCdg0kW91u0A0VWAWBKOw0oJ0iWGmB2IYW6XW1I0W808q1ImhRLmw1IC0g0MaFBBd0R95l0_q1REdzw-0PWNozbek1S1m1UrrW6W6Uu1k1d_0O4Q__zNARcSzywe7W6m7mB87vpQurMf87TcFNr68j4_k23daoYG8fc8Af0YcuWgg2Ak0iWY0jKY__z__u4Z0F0_YIFPFv0ZdzdnaR2LnlxN0Ge0XZmR0i0ruKZEbXZ8OHXhGubzgtdAoIkbCuYYmdIEmJPH1000~1=WNOejI_zO8y0PGi0j1HUpBPTZm4GW8200TIgm_pyvEYX_G600QZiWR_A-vBZIeW1ohcOcfq1a07Qtkp2uO20W0AO0ThUxC9Xk07Owgdh9TW1gkYeh07W0RZ2-n3e0Gpu0OIlthu1e0AioD0Mi0C2w0Is1OW5s9u3a0NOdWEm1RTfk0MtQS05XFW2o0NDNz05bIge1ku1gGS8ytWgRkEOPRW7W0NW1uO6u0YMfAWBw0a7W0e1-0g0jHZe39C2o130e12XW1I0W804q1JVmxCGw1IC0g0MaFBBd0R95l0_q1QMuE6-0PWNakwo4RWN0S0NjTO1e1dk0RWP_m7u6Q7Jgoc16l__drr6Ru6ng1u1i1y1o1-Lj9HMgI1NZnctf53nFxWWvvCea2APY2gG8fk8Ah0Y0TKY__z__u4Z0F0_YIFPFv0ZsvAB_UxzyTVW0PWZoh2jbeBDgiDY2G1pF1iIm3NYI0wK66XW60j2YQKoJt6E8CCjZMt22m00~1?stat-id=4&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjQxOXgxNTAiLCIxNjg1MTkzMDU0ODcyNjQxNDQiOiI0MTl4MTUwIiwiNzIwNTc2MDY5MDQwNTY1NTUiOiI0MTl4MTUwIn0%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNzEyNzE0NDM2NSI6IjU3MzYxIiwiMTY4NTE5MzA1NDg3MjY0MTQ0IjoiNDkxNzAiLCI3MjA1NzYwNjkwNDA1NjU1NSI6IjI0NTk1In0%3D&width=1268&height=150&confirmTime=2100000&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goo.su
Content-Type: application/x-www-form-urlencoded
Referer: https://goo.su/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:14 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:14 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:14 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/rtbcount/1TRhZy2M0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCZ83HQuoWgJkCZB8C33yPPp5nC0mbmaaifOf2aYUPVeF1A-O1EOBVBhCyPc1eLZsU7hSUrQ6lqmWirkPMO5aBxCYa9pA3D8sbvaDP24p4uC2o3wMZSm_JohrBtntbFSaivvomShoS-rbLy4gxuB9dymEJlmGvxBCVNK6p5h1Cazg0mlZ3XRM0ooCDw5--63_a6NxXrTMaNUlsxzb0Rb_0IllITPSIKwmz0NMXeO6bfkiUgl5b-q-u5lubHNay0ws1fOPR5SE1ozWwzwpUKFhtpFxorQomOmvmEPnWetv4HklPvApLPP7LN2Lir-g-Kisc8K_uQo9x4_MBErSV-Mj_InsDZDBGmjBWmtiJ3lOUKwmYpzWRx_Lj7FIfmsBkN-mym00O2EDp000
200 OK 0 B URL HTTP/2 an.yandex.ru/rtbcount/1TRhZy2M0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCZ83HQuoWgJkCZB8C33yPPp5nC0mbmaaifOf2aYUPVeF1A-O1EOBVBhCyPc1eLZsU7hSUrQ6lqmWirkPMO5aBxCYa9pA3D8sbvaDP24p4uC2o3wMZSm_JohrBtntbFSaivvomShoS-rbLy4gxuB9dymEJlmGvxBCVNK6p5h1Cazg0mlZ3XRM0ooCDw5--63_a6NxXrTMaNUlsxzb0Rb_0IllITPSIKwmz0NMXeO6bfkiUgl5b-q-u5lubHNay0ws1fOPR5SE1ozWwzwpUKFhtpFxorQomOmvmEPnWetv4HklPvApLPP7LN2Lir-g-Kisc8K_uQo9x4_MBErSV-Mj_InsDZDBGmjBWmtiJ3lOUKwmYpzWRx_Lj7FIfmsBkN-mym00O2EDp000
IP
GET /rtbcount/1TRhZy2M0TK100000000U9nJr9kTO3LHuK2M8STddGwtnpDIBVMEJqfc009Fc4Yeo2RPp5Yk6P8CgOn0yKoEpmSgGUAb85vjEP1ePGIHdI0-430np6IKuuMm5p8Ai41OAnbReF9x6Ny7iJ0S1VFFCZ83HQuoWgJkCZB8C33yPPp5nC0mbmaaifOf2aYUPVeF1A-O1EOBVBhCyPc1eLZsU7hSUrQ6lqmWirkPMO5aBxCYa9pA3D8sbvaDP24p4uC2o3wMZSm_JohrBtntbFSaivvomShoS-rbLy4gxuB9dymEJlmGvxBCVNK6p5h1Cazg0mlZ3XRM0ooCDw5--63_a6NxXrTMaNUlsxzb0Rb_0IllITPSIKwmz0NMXeO6bfkiUgl5b-q-u5lubHNay0ws1fOPR5SE1ozWwzwpUKFhtpFxorQomOmvmEPnWetv4HklPvApLPP7LN2Lir-g-Kisc8K_uQo9x4_MBErSV-Mj_InsDZDBGmjBWmtiJ3lOUKwmYpzWRx_Lj7FIfmsBkN-mym00O2EDp000 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
goo.su/Bk9pXdy
200 OK 0 B IP
GET /Bk9pXdy HTTP/1.1
Host: goo.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 09 Dec 2022 05:27:09 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.0.15
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6Im1LNDFld3Y3UHFKREtpaVhqQldnNXc9PSIsInZhbHVlIjoiNXh1ZG9iVkJpbFFsYWNybkVzdVhEVkdDak1pa3B4UnVyeERIM0xyZ0FpeGlIRUtPNTlnWW85TFZ1TGhrS1puME5SLzNpQXB1WTlHUUFNa1VaWVY1eGNiM3E1dm5NU2F6b0pEZ1RUai9wRERYRkFWT3F5d2RIWW9CZHFCVVo4V0kiLCJtYWMiOiJmMTJjNjFiZjA5NTQ5YTEwZjYzYjVmMGY3YmE5YzEzZjljNzllMmRjMmVkYjNhN2FkNzZhZGQ5NWQzZDg1YTc0IiwidGFnIjoiIn0%3D; expires=Sat, 10-Dec-2022 00:07:09 GMT; Max-Age=67200; path=/; samesite=lax
goosu_session=eyJpdiI6IlZ2UFBtT1BZRDhBRDk3Tk1QVjhsRHc9PSIsInZhbHVlIjoid3lSaGhQRDNYVlFPb0JuYmZqYlFsTVRMKzRRRk5MQ08ydlZFcXNIbVhoZkptNlozWnBlR3l4OEhMeEYyeG9pWEpWdDZxM0k3WHRkVGxlV05ubGVYY2N6emxKL3JDV2dXSE9YMFZ1c0NnQTdKVGVJa0xRbXcyWUQ2ZWJpMVR1TTAiLCJtYWMiOiJlOWQ5OGQ5ZjI4OGRlYzBlNGY3Yjk1NDdhYTUxZDlhY2I2MTAzOGEyZmJkMDg5NTJkYjc3NTRkYzUyODIxYmRiIiwidGFnIjoiIn0%3D; expires=Sat, 10-Dec-2022 00:07:09 GMT; Max-Age=67200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w2hEHgmSGa%2F96R4mtoTfZLHNQYwgDpXlstVoscha8hD0z9yPCtRR8uISYON%2FOxoh0exJYW94euLagJ9nTYMwsYvfNT%2BB5rpqUvWyedFM7uJSKFEhOyBMiDE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776b547aaa9a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400&display=swap
IP
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 05:27:09 GMT
date: Fri, 09 Dec 2022 05:27:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
an.yandex.ru/meta/1677322?target-ref=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&pcode-test-ids=657519%2C0%2C20%3B687483%2C0%2C62%3B689702%2C0%2C7%3B687413%2C0%2C49%3B689960%2C0%2C75%3B672577%2C0%2C24%3B690948%2C0%2C38%3B689268%2C0%2C1%3B691890%2C0%2C52%3B681848%2C0%2C27%3B687368%2C0%2C60&pcode-flags-map=eJytV21v2zYQ%2FiuDPw%2Bd3l%2F6jZIom7NEaiRlxy0Kwk3dNECSDq1TdCv633cUFUeSXbreBuSDY%2Fh57ngvz919m5E5ZRyrmgiBC1UgiVSDOKqFKhlXK1JgpghVOaszNnv5%2Btvsy%2FbucTd7Odt9%2FXP262y%2F%2B7wn7%2BDfMHWCMJx9f%2FPrbIWE4viPFgupVjVqVMlZrVAhRnjJWzwkiNzYS5yOAFOUVXhiHD6UhBKJwb98KRZMqjWRC9ZKhcB3KWzeRWEYJf7F5P8HM6oq1XBWtLkUx2Yuo8ZAeWFeBiQ6L2BzDalQFcpw1VEBSYYoxdyencj3g7ijKZiizBCtMJckR5UiK5W1UjJqJ4EMx8mUBLBAsjznQOy7aXACiytcYyrPFFfsJ%2B4olBSvlVjC4%2BFPx4OhAnPVVGgzcWQazyT00vQQT0IbNMdK6BdsVEGEJi%2B6pGe6MouSXcHXHOdSCVxVI2p81YypY9cz1H1Xig2VCwzcpo%2FkpsGmO7E8F64E%2BtF7Trs0pYm5IJMkwS99SMoQC9A0OWBbMY4WRbRp7cZTN3ZMrlpK%2BtDqWkN1MwTuPz3uBrDAS%2FzUKIC2KURXnBPMNB8DEKRRYEwVywTmq2kaH7Zv73YjpB95qSnpklyBAlK1wGS%2BkIpKu8kg9FO3A24QLfCV4q0qWI0ItSqkE3t%2BdLCXcbYEZ8GWmnNSWJFuHCbRSYO65CQnmRXuuU5k0vEKU0%2BVLVTnmhSgb6SG6rViAzfoVbnD9hWuMsZ1UjkqSCt%2B%2BUmGDdJ%2BG4ehRdZoY5XWMPDjPs5F2cBIEQ2jUBiS1BhkfwT1HMcZYwPHN29uclZgEEqAUqvehkEINH0p6b7lWNfukz2l29UKD%2BLYO4aTUgvMWnchVOe%2FYXhyYIWqdpQt3zmNrjDiVNVaQlaIEzR5tzcyGjpOH%2BWGE8aJ3KhsAxMGrxvG7QGL4qjvvae66KUuF1YRDUEgkkFFEqFyxDlMXZTnUzGfqESY%2BqHrjrBdFYvDOtCgoiB0bicJwsB4nrOWgpoacfXtXgdJHA7SU3MQZiJIRiqImt1cGkc%2FRCoGg7yCCXLG%2BhNH3VaSmKGtQGBLAhOH6EeUKLd3c5p4cTzwoycx64RkulD1CMxgO9EdIzmrqjPz0PEC31TdnKPMs%2F8WStR5%2Fq0S5NXI39D1HNvvT3S%2BG%2F4A8VQcC9yNH44LLGCsWv1zQy8yaD3wOC5BcxawG8xJbsclfi%2BwELSS8Fp3EMf0ae41HGd2iY9Aoz131EowAznUNYVuWmDIh5ZtkXM94YSwKlHkpm5g%2FBmAUNPop8yhNexgz03DkScLIrtnDMggmEvJ7F74seeNdq68qVWNC4IUkCBJVt2Qt3Ok%2FvgoyJv8P3NMNvQClwg66sLlPAidKBqFSdSISwV3T4s1%2BbkkhVEUmThX6NWm20BVN6uGqG%2Bz97v99Yd6%2B%2Bnm9qGv9vuPb2%2FvduJ6e3f7cDN76X0f7emh0y81Q3dgdKms0l1dwfgdGng9u9%2Fe3r349Ai%2B%2FbV9eLf7Cp9%2Fu73f3uw%2Bj7662d5337z7e%2Fdgfr79crv%2FaD7evzj88%2Ba0N3qTlAuuj4Zx9DHoPtcKSCjMNwI7XHUm8rEb94qT6z2b0b7TUKl1nJR6PzYLvb3l4iSN0sO6WXICNNVGGTzpGuYCfLY8krMjRJT6fV8OEJde2lGcBk58YIFZX2iG2m45CSJ3atk0kt2W5zneVEn0vvpTCpBEQX916fULzoRcwlOhMZTvOWYP7eaeWSmPr9Ajvjjxj18h5%2FY3QJqSZ9TzWBOqgZEJ2wOc56sTR%2BT7z2r%2F8fH6w%2BS0cRJvUtGwS8%2BxPF3J5n8yrujr%2Fd3kXUF%2Fo8NBCw7mGHVXJIXNRsLB1lUz6LZqGIRrtGnM4BTuEZNHx33iultKl3SJVgR%2Bai4xujkI6JnTGZzrk4gKUSynhxVYSiNnYjvtxyihv%2Bt1cFA7z%2BHX%2B0a%2BaOny8gbwwn6L6QXARH69AP6BKQrR7%2BbxvIXp393jsJxieLFdF1IHFr3%2Bwdnh4hELVECuuzkoIH7QdBVjZ%2Bo19aLk%2BQg5Cl3qwpk%2BKa%2Bk26i%2F%2FwMSIr59&pcode-icookie=NvWskiyyxM6bI8RMZ4k7zUOTJ8hzY4U7edHtAcnLsBtMju2%2FL%2BpF%2BMBiF4H%2FQZJNa5skDdwonJO6nuLUFC5O8CJTSD0%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=379331511582722&ad-session-id=992461670563629561&target-id=52254974&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fgoo.su&top-ancestor-undetermined=0&pcode-version=691890&pcodever=691890&flash-ver=0&available-width=145&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2NjkKNzIwNTc2MDcxODA2MDI3MDUKNzIwNTc2MDcxNjE0MDM0NjE%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1268%2C%22h%22%3A939%2C%22width%22%3A145%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A561%2C%22top%22%3A327%2C%22ad_no%22%3A3%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=384&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1Nn0Kgq6-kTvf80MM9dSIvWpXyDVKKJWAv3dMTrXf_RCJBARtWiSSJVXo23A4YeY8-OPWXpz1OEmSuvgwzkkG-114gvShwyVzD5l2vhdm6JALc4nLZXbCZcKiVHWVqsa84yBy4RbzMSRjYGW68Y3mfg49jQ8pQjU4-GfElzUpMZeUi6GSR07MWczGaz7RJ-eusvVSybEuT2SxZq26n1jNhkO3eH7OPuXMzjrf7LHPYkNozC2OGZnIHp3eeOAfQUXZfOVfixc0G7Xen9VvXcBDK1MqM2lNyB1g7Gi_ApI2EAhEZASpR2QA2yhMVBSQgv8%3D&uniformat=true&callback=Ya%5B3797496432643%5D
200 OK 0 B URL HTTP/2 an.yandex.ru/meta/1677322?target-ref=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&pcode-test-ids=657519%2C0%2C20%3B687483%2C0%2C62%3B689702%2C0%2C7%3B687413%2C0%2C49%3B689960%2C0%2C75%3B672577%2C0%2C24%3B690948%2C0%2C38%3B689268%2C0%2C1%3B691890%2C0%2C52%3B681848%2C0%2C27%3B687368%2C0%2C60&pcode-flags-map=eJytV21v2zYQ%2FiuDPw%2Bd3l%2F6jZIom7NEaiRlxy0Kwk3dNECSDq1TdCv633cUFUeSXbreBuSDY%2Fh57ngvz919m5E5ZRyrmgiBC1UgiVSDOKqFKhlXK1JgpghVOaszNnv5%2Btvsy%2FbucTd7Odt9%2FXP262y%2F%2B7wn7%2BDfMHWCMJx9f%2FPrbIWE4viPFgupVjVqVMlZrVAhRnjJWzwkiNzYS5yOAFOUVXhiHD6UhBKJwb98KRZMqjWRC9ZKhcB3KWzeRWEYJf7F5P8HM6oq1XBWtLkUx2Yuo8ZAeWFeBiQ6L2BzDalQFcpw1VEBSYYoxdyencj3g7ijKZiizBCtMJckR5UiK5W1UjJqJ4EMx8mUBLBAsjznQOy7aXACiytcYyrPFFfsJ%2B4olBSvlVjC4%2BFPx4OhAnPVVGgzcWQazyT00vQQT0IbNMdK6BdsVEGEJi%2B6pGe6MouSXcHXHOdSCVxVI2p81YypY9cz1H1Xig2VCwzcpo%2FkpsGmO7E8F64E%2BtF7Trs0pYm5IJMkwS99SMoQC9A0OWBbMY4WRbRp7cZTN3ZMrlpK%2BtDqWkN1MwTuPz3uBrDAS%2FzUKIC2KURXnBPMNB8DEKRRYEwVywTmq2kaH7Zv73YjpB95qSnpklyBAlK1wGS%2BkIpKu8kg9FO3A24QLfCV4q0qWI0ItSqkE3t%2BdLCXcbYEZ8GWmnNSWJFuHCbRSYO65CQnmRXuuU5k0vEKU0%2BVLVTnmhSgb6SG6rViAzfoVbnD9hWuMsZ1UjkqSCt%2B%2BUmGDdJ%2BG4ehRdZoY5XWMPDjPs5F2cBIEQ2jUBiS1BhkfwT1HMcZYwPHN29uclZgEEqAUqvehkEINH0p6b7lWNfukz2l29UKD%2BLYO4aTUgvMWnchVOe%2FYXhyYIWqdpQt3zmNrjDiVNVaQlaIEzR5tzcyGjpOH%2BWGE8aJ3KhsAxMGrxvG7QGL4qjvvae66KUuF1YRDUEgkkFFEqFyxDlMXZTnUzGfqESY%2BqHrjrBdFYvDOtCgoiB0bicJwsB4nrOWgpoacfXtXgdJHA7SU3MQZiJIRiqImt1cGkc%2FRCoGg7yCCXLG%2BhNH3VaSmKGtQGBLAhOH6EeUKLd3c5p4cTzwoycx64RkulD1CMxgO9EdIzmrqjPz0PEC31TdnKPMs%2F8WStR5%2Fq0S5NXI39D1HNvvT3S%2BG%2F4A8VQcC9yNH44LLGCsWv1zQy8yaD3wOC5BcxawG8xJbsclfi%2BwELSS8Fp3EMf0ae41HGd2iY9Aoz131EowAznUNYVuWmDIh5ZtkXM94YSwKlHkpm5g%2FBmAUNPop8yhNexgz03DkScLIrtnDMggmEvJ7F74seeNdq68qVWNC4IUkCBJVt2Qt3Ok%2FvgoyJv8P3NMNvQClwg66sLlPAidKBqFSdSISwV3T4s1%2BbkkhVEUmThX6NWm20BVN6uGqG%2Bz97v99Yd6%2B%2Bnm9qGv9vuPb2%2FvduJ6e3f7cDN76X0f7emh0y81Q3dgdKms0l1dwfgdGng9u9%2Fe3r349Ai%2B%2FbV9eLf7Cp9%2Fu73f3uw%2Bj7662d5337z7e%2Fdgfr79crv%2FaD7evzj88%2Ba0N3qTlAuuj4Zx9DHoPtcKSCjMNwI7XHUm8rEb94qT6z2b0b7TUKl1nJR6PzYLvb3l4iSN0sO6WXICNNVGGTzpGuYCfLY8krMjRJT6fV8OEJde2lGcBk58YIFZX2iG2m45CSJ3atk0kt2W5zneVEn0vvpTCpBEQX916fULzoRcwlOhMZTvOWYP7eaeWSmPr9Ajvjjxj18h5%2FY3QJqSZ9TzWBOqgZEJ2wOc56sTR%2BT7z2r%2F8fH6w%2BS0cRJvUtGwS8%2BxPF3J5n8yrujr%2Fd3kXUF%2Fo8NBCw7mGHVXJIXNRsLB1lUz6LZqGIRrtGnM4BTuEZNHx33iultKl3SJVgR%2Bai4xujkI6JnTGZzrk4gKUSynhxVYSiNnYjvtxyihv%2Bt1cFA7z%2BHX%2B0a%2BaOny8gbwwn6L6QXARH69AP6BKQrR7%2BbxvIXp393jsJxieLFdF1IHFr3%2Bwdnh4hELVECuuzkoIH7QdBVjZ%2Bo19aLk%2BQg5Cl3qwpk%2BKa%2Bk26i%2F%2FwMSIr59&pcode-icookie=NvWskiyyxM6bI8RMZ4k7zUOTJ8hzY4U7edHtAcnLsBtMju2%2FL%2BpF%2BMBiF4H%2FQZJNa5skDdwonJO6nuLUFC5O8CJTSD0%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=379331511582722&ad-session-id=992461670563629561&target-id=52254974&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fgoo.su&top-ancestor-undetermined=0&pcode-version=691890&pcodever=691890&flash-ver=0&available-width=145&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2NjkKNzIwNTc2MDcxODA2MDI3MDUKNzIwNTc2MDcxNjE0MDM0NjE%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1268%2C%22h%22%3A939%2C%22width%22%3A145%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A561%2C%22top%22%3A327%2C%22ad_no%22%3A3%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=384&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1Nn0Kgq6-kTvf80MM9dSIvWpXyDVKKJWAv3dMTrXf_RCJBARtWiSSJVXo23A4YeY8-OPWXpz1OEmSuvgwzkkG-114gvShwyVzD5l2vhdm6JALc4nLZXbCZcKiVHWVqsa84yBy4RbzMSRjYGW68Y3mfg49jQ8pQjU4-GfElzUpMZeUi6GSR07MWczGaz7RJ-eusvVSybEuT2SxZq26n1jNhkO3eH7OPuXMzjrf7LHPYkNozC2OGZnIHp3eeOAfQUXZfOVfixc0G7Xen9VvXcBDK1MqM2lNyB1g7Gi_ApI2EAhEZASpR2QA2yhMVBSQgv8%3D&uniformat=true&callback=Ya%5B3797496432643%5D
IP
GET /meta/1677322?target-ref=https%3A%2F%2Fgoo.su%2FBk9pXdy&charset=utf-8&pcode-test-ids=657519%2C0%2C20%3B687483%2C0%2C62%3B689702%2C0%2C7%3B687413%2C0%2C49%3B689960%2C0%2C75%3B672577%2C0%2C24%3B690948%2C0%2C38%3B689268%2C0%2C1%3B691890%2C0%2C52%3B681848%2C0%2C27%3B687368%2C0%2C60&pcode-flags-map=eJytV21v2zYQ%2FiuDPw%2Bd3l%2F6jZIom7NEaiRlxy0Kwk3dNECSDq1TdCv633cUFUeSXbreBuSDY%2Fh57ngvz919m5E5ZRyrmgiBC1UgiVSDOKqFKhlXK1JgpghVOaszNnv5%2Btvsy%2FbucTd7Odt9%2FXP262y%2F%2B7wn7%2BDfMHWCMJx9f%2FPrbIWE4viPFgupVjVqVMlZrVAhRnjJWzwkiNzYS5yOAFOUVXhiHD6UhBKJwb98KRZMqjWRC9ZKhcB3KWzeRWEYJf7F5P8HM6oq1XBWtLkUx2Yuo8ZAeWFeBiQ6L2BzDalQFcpw1VEBSYYoxdyencj3g7ijKZiizBCtMJckR5UiK5W1UjJqJ4EMx8mUBLBAsjznQOy7aXACiytcYyrPFFfsJ%2B4olBSvlVjC4%2BFPx4OhAnPVVGgzcWQazyT00vQQT0IbNMdK6BdsVEGEJi%2B6pGe6MouSXcHXHOdSCVxVI2p81YypY9cz1H1Xig2VCwzcpo%2FkpsGmO7E8F64E%2BtF7Trs0pYm5IJMkwS99SMoQC9A0OWBbMY4WRbRp7cZTN3ZMrlpK%2BtDqWkN1MwTuPz3uBrDAS%2FzUKIC2KURXnBPMNB8DEKRRYEwVywTmq2kaH7Zv73YjpB95qSnpklyBAlK1wGS%2BkIpKu8kg9FO3A24QLfCV4q0qWI0ItSqkE3t%2BdLCXcbYEZ8GWmnNSWJFuHCbRSYO65CQnmRXuuU5k0vEKU0%2BVLVTnmhSgb6SG6rViAzfoVbnD9hWuMsZ1UjkqSCt%2B%2BUmGDdJ%2BG4ehRdZoY5XWMPDjPs5F2cBIEQ2jUBiS1BhkfwT1HMcZYwPHN29uclZgEEqAUqvehkEINH0p6b7lWNfukz2l29UKD%2BLYO4aTUgvMWnchVOe%2FYXhyYIWqdpQt3zmNrjDiVNVaQlaIEzR5tzcyGjpOH%2BWGE8aJ3KhsAxMGrxvG7QGL4qjvvae66KUuF1YRDUEgkkFFEqFyxDlMXZTnUzGfqESY%2BqHrjrBdFYvDOtCgoiB0bicJwsB4nrOWgpoacfXtXgdJHA7SU3MQZiJIRiqImt1cGkc%2FRCoGg7yCCXLG%2BhNH3VaSmKGtQGBLAhOH6EeUKLd3c5p4cTzwoycx64RkulD1CMxgO9EdIzmrqjPz0PEC31TdnKPMs%2F8WStR5%2Fq0S5NXI39D1HNvvT3S%2BG%2F4A8VQcC9yNH44LLGCsWv1zQy8yaD3wOC5BcxawG8xJbsclfi%2BwELSS8Fp3EMf0ae41HGd2iY9Aoz131EowAznUNYVuWmDIh5ZtkXM94YSwKlHkpm5g%2FBmAUNPop8yhNexgz03DkScLIrtnDMggmEvJ7F74seeNdq68qVWNC4IUkCBJVt2Qt3Ok%2FvgoyJv8P3NMNvQClwg66sLlPAidKBqFSdSISwV3T4s1%2BbkkhVEUmThX6NWm20BVN6uGqG%2Bz97v99Yd6%2B%2Bnm9qGv9vuPb2%2FvduJ6e3f7cDN76X0f7emh0y81Q3dgdKms0l1dwfgdGng9u9%2Fe3r349Ai%2B%2FbV9eLf7Cp9%2Fu73f3uw%2Bj7662d5337z7e%2Fdgfr79crv%2FaD7evzj88%2Ba0N3qTlAuuj4Zx9DHoPtcKSCjMNwI7XHUm8rEb94qT6z2b0b7TUKl1nJR6PzYLvb3l4iSN0sO6WXICNNVGGTzpGuYCfLY8krMjRJT6fV8OEJde2lGcBk58YIFZX2iG2m45CSJ3atk0kt2W5zneVEn0vvpTCpBEQX916fULzoRcwlOhMZTvOWYP7eaeWSmPr9Ajvjjxj18h5%2FY3QJqSZ9TzWBOqgZEJ2wOc56sTR%2BT7z2r%2F8fH6w%2BS0cRJvUtGwS8%2BxPF3J5n8yrujr%2Fd3kXUF%2Fo8NBCw7mGHVXJIXNRsLB1lUz6LZqGIRrtGnM4BTuEZNHx33iultKl3SJVgR%2Bai4xujkI6JnTGZzrk4gKUSynhxVYSiNnYjvtxyihv%2Bt1cFA7z%2BHX%2B0a%2BaOny8gbwwn6L6QXARH69AP6BKQrR7%2BbxvIXp393jsJxieLFdF1IHFr3%2Bwdnh4hELVECuuzkoIH7QdBVjZ%2Bo19aLk%2BQg5Cl3qwpk%2BKa%2Bk26i%2F%2FwMSIr59&pcode-icookie=NvWskiyyxM6bI8RMZ4k7zUOTJ8hzY4U7edHtAcnLsBtMju2%2FL%2BpF%2BMBiF4H%2FQZJNa5skDdwonJO6nuLUFC5O8CJTSD0%3D&imp-id=3&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=379331511582722&ad-session-id=992461670563629561&target-id=52254974&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fgoo.su&top-ancestor-undetermined=0&pcode-version=691890&pcodever=691890&flash-ver=0&available-width=145&skip-token=yabs.NzIwNTc2MDU2NDAwNDc2NjkKNzIwNTc2MDcxODA2MDI3MDUKNzIwNTc2MDcxNjE0MDM0NjE%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1268%2C%22h%22%3A939%2C%22width%22%3A145%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A561%2C%22top%22%3A327%2C%22ad_no%22%3A3%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A1%7D&grab-orig-len=384&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1Nn0Kgq6-kTvf80MM9dSIvWpXyDVKKJWAv3dMTrXf_RCJBARtWiSSJVXo23A4YeY8-OPWXpz1OEmSuvgwzkkG-114gvShwyVzD5l2vhdm6JALc4nLZXbCZcKiVHWVqsa84yBy4RbzMSRjYGW68Y3mfg49jQ8pQjU4-GfElzUpMZeUi6GSR07MWczGaz7RJ-eusvVSybEuT2SxZq26n1jNhkO3eH7OPuXMzjrf7LHPYkNozC2OGZnIHp3eeOAfQUXZfOVfixc0G7Xen9VvXcBDK1MqM2lNyB1g7Gi_ApI2EAhEZASpR2QA2yhMVBSQgv8%3D&uniformat=true&callback=Ya%5B3797496432643%5D HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
access-control-allow-origin: https://goo.su
x-xss-protection: 1; mode=block
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-yandex-req-id: 1670563631003456-1616663145705430586200106-production-app-host-vla-pcode-210
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
date: Fri, 09 Dec 2022 05:27:11 GMT
set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Fri, 16-Dec-2022 05:27:11 GMT
i=WGUF7SglMEmrDVFqmT709Bv0FU+QF7aVYSl9TzLtvmuhnG5ENPeJl1NAghERjCfInuRyoG4QDZkfHENXgbkU5gPdm74=; Expires=Sun, 08-Dec-2024 05:27:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
ssr: true
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 05:27:11 GMT
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 0 B URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 05:27:10 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 16:42:10 GMT
set-cookie: FTID=1RMYgQ0tkIIE:1670563630:0:::; path=/; expires=Sun, 10-Dec-23 05:27:10 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"637e4d62-85c6"
expires: Fri, 09 Dec 2022 06:27:10 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
an.yandex.ru/count/WMiejI_zOEG03Gi0P19f7R8KaiSNUmK0v04GW8200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WOKejI_zO9a0tGi0j1LAnrqwcG64klwYweVWZPa1W07rc9Mc-xcC-Di1Y077gCJ7XG6G0UgmqhZMW8200fW1egpIk5Qu0PIHzjWZs06Aew2Y0U01bfMlcG7ycDw-0Q02Zlg50R03WWM81Ps_2905seeUi0N_qWUu1V_I1y05yfNA0SW5aBCpq0NCXmEe1ku1gGS8yy1vHkEOPRW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39C2o130i9220Q684W6G4W605820W0JG5F_4WL3e58m2e1QGyikS1iaM0F0_q1REdzw-0PWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__dxSN-Zw-e1he-hBStFIklsMe7W6m7m787yMHa56f87179vKk8Ra_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8yE-XeNcpUpbnm6O8v_lnCwK-ARB5ma088e0ruYZ3BY4ieY9dNdAkIgbynUSw37EYpS81m00~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0
302 Found 0 B URL HTTP/2 an.yandex.ru/count/WMiejI_zOEG03Gi0P19f7R8KaiSNUmK0v04GW8200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WOKejI_zO9a0tGi0j1LAnrqwcG64klwYweVWZPa1W07rc9Mc-xcC-Di1Y077gCJ7XG6G0UgmqhZMW8200fW1egpIk5Qu0PIHzjWZs06Aew2Y0U01bfMlcG7ycDw-0Q02Zlg50R03WWM81Ps_2905seeUi0N_qWUu1V_I1y05yfNA0SW5aBCpq0NCXmEe1ku1gGS8yy1vHkEOPRW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39C2o130i9220Q684W6G4W605820W0JG5F_4WL3e58m2e1QGyikS1iaM0F0_q1REdzw-0PWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__dxSN-Zw-e1he-hBStFIklsMe7W6m7m787yMHa56f87179vKk8Ra_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8yE-XeNcpUpbnm6O8v_lnCwK-ARB5ma088e0ruYZ3BY4ieY9dNdAkIgbynUSw37EYpS81m00~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0
IP
GET /count/WMiejI_zOEG03Gi0P19f7R8KaiSNUmK0v04GW8200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WOKejI_zO9a0tGi0j1LAnrqwcG64klwYweVWZPa1W07rc9Mc-xcC-Di1Y077gCJ7XG6G0UgmqhZMW8200fW1egpIk5Qu0PIHzjWZs06Aew2Y0U01bfMlcG7ycDw-0Q02Zlg50R03WWM81Ps_2905seeUi0N_qWUu1V_I1y05yfNA0SW5aBCpq0NCXmEe1ku1gGS8yy1vHkEOPRW7W0NW1uOAq0YwY821me201k08X_r2w0a7W0e1-0g0jHZe39C2o130i9220Q684W6G4W605820W0JG5F_4WL3e58m2e1QGyikS1iaM0F0_q1REdzw-0PWNbxMqBBWN0S0NjTO1e1dk0RWP_m616l__dxSN-Zw-e1he-hBStFIklsMe7W6m7m787yMHa56f87179vKk8Ra_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8yE-XeNcpUpbnm6O8v_lnCwK-ARB5ma088e0ruYZ3BY4ieY9dNdAkIgbynUSw37EYpS81m00~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/count/WMiejI_zOEG03Gi0P19f7R8KEf_o10K0v04GmO200J4knv9Z000003YKuCm1Y081kGAP6szCkR_XPF02dA6zrg1My0K1e0Rk0Sa6BfjWEf4Wm6gf1mZpm7b6uvXb-9yGyjC8ym00Snt7PrxlWO20W8W4g0-8vhF1wEYup6MG4DRtxzdQmxkDmG6qZOo-FWBW507m5S6AzkoZZxpyOw0MaFBBd0R95l0_s1Q15wWN3T0O8VWOYFRWgDcDnv9wW1c96MqP2G000000k1d_0S0PhjRUiBgNyAPnqXaIUM5YSrzpPN9sPN8lSZSsD2qpw1cH0V0PWC83c1hKmrEm6qYu6mE270r9OaCwQaXwKtf3JcKtwHm0y3-07Vz_W202Y20Cq27_0TKY__z__u4Z00000000y3yI080Wa8g0TkBlDu8EEQJfUEV0nD20ksRDJy57PI51Ads7Hxy0h9r3dKGrXnN-ABTrvoXEb4c2GG40~1=WMyejI_zO8a0BGi011JS5YGdYG68wvlJuP27huy1W06ZbUoCtgEiZmo80RMRYhET0P01Yk72u-60W802c06AuSBZORW1n9oJy2NO0TppmAm1u06kohsU0UW1s0Ju0TwWthu1e0AKm_0Oe0C6i0Fi1OW5cuq5a0NcrWQm1QZR0hW5gDi2m0NvsWN81V-e0j05zbQe1ku1gGS8yy1vHkEOPRW7W0NW1v0Dme201k08og6u3EW91u0A0UWCamB84C2W4A605820W0JG5BAMvc3e58m2e1QGyikS1iaMq1Q-lTw-0PWNselABRWN0S0NjTO1e1dk0RWP_m616l__St1hKad0g1u1i1y3o1_kkQ1MgI227ygwHeNoFxWWvvCea2APY2gG8fk8AjKY__z__u4Z0F0_YIFPFv0ZyTlDrlgmpxga0PWZXCA7hAsMrF_I0Ge0R3mRak12SCJrGP11C0mJeIHucQSClJkFhRLAwHo3RQ88~1=WNaejI_zO940VGi091KzBjh6aG6ovvIzmeAEWW600RdOsgljwBMUYG680T_GvCoT0P01ehNgzU60W802c06YjUhrORW1xANTyYNO0Q2imQm1u07UeC6i0UW1EFW1afFUlW6O0jRCXnkW0jJCXnkW0mIm0mBe1Ey7Y0NimGEG1Ro-1R05pB81k0NCiW701SAD1SW5awO1q0MtHwW6xW6f1mZpm7b6uvXbk0U01U07XiA0W0RW2Ahcmmte2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0KgyFYFUWKZ0AW5f3oovm6oHO0y3_G5XVBgDCmk1S1m1UrrW6W6Uu1k1d_0O4Q__-paWQ9_loe7W6m7mB87v3Me5Qf81Z28dgbOV0_k23daoYG8fc8Af0YcuWgrIB__t__WIC0y3-98vgPsJ-G8-IZvyBpwRIbmG6O8wFnfkAw_UxJBGa084g22-64tSmGmFsLHK10yvItKJBCCfWXYW00~1=WOeejI_zO9u01Gm011PHZv0BdW4GW8200OIw_gBgX-2DcG600VMObQRxkOpusm680SUenCU50P01wh3IkDQ0W802c06YhDAuLhW1b97ss2FO0OgZeA81u06MbQ-P0VoOthu1e0AE-eK1i0E21OW5dRy8a0NQYXwm1V_I1xW5_z87m0NobSe1o0MGipFG1So70wW6xW6f1mZpm7b6uvXbk0U01U07XWhG2Bg8W872W806u0Y7_KBe2GU02W7u2e2r6EWCamB84C2ma881eOWI0P0I0O0KW8201D0K_yI1KEWKZ0AW5f3oovm6oHO0y3_G5iwVthu1c1UNjRGik1S1m1UrrW6W6Uu1k1d_0O4Q__-VjnVwFhwW6kZwijpSzAw_PQWU0R0V0SWVnP6GKQaWS4SdbIuXkJ-u8EUJA90YcOWga2ARY2hL8l__V_-18m3mFuaZcfdPFv0Zmxw6XURDxEN70PWZd-_4pfJufiiN2G0WYW3NYACCkDIoY8cYUSe9AwNp5w7eCOwnJSm1~1?stat-id=1&test-tag=379331511638577&banner-sizes=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE4MDYwMjcwNSI6IjQxOXgxMDAiLCI3MjA1NzYwNzE2MTQwMzQ2MSI6IjQxOXgxMDAifQ%3D%3D&format-type=118&actual-format=10&pcodever=691890&banner-test-tags=eyI3MjA1NzYwNTY0MDA0NzY2OSI6IjU3MzkzIiwiNzIwNTc2MDcxODA2MDI3MDUiOiI1NzM5NCIsIjcyMDU3NjA3MTYxNDAzNDYxIjoiNTczOTUifQ%3D%3D&width=1268&height=100&confirmTime=2102000&confirmRatio=1000000&wmode=0
date: Fri, 09 Dec 2022 05:27:13 GMT
access-control-allow-origin: https://goo.su
set-cookie: yandexuid=5289092431670563633; domain=.yandex.ru; path=/; expires=Mon, 06-Dec-2032 05:27:13 GMT
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
expires: Fri, 09 Dec 2022 05:27:13 GMT
last-modified: Fri, 09 Dec 2022 05:27:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 298
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/event_confirmation
200 OK 0 B URL HTTP/2 an.yandex.ru/event_confirmation
IP
POST /event_confirmation HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 298
Origin: https://goo.su
Connection: keep-alive
Referer: https://goo.su/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Fri, 09 Dec 2022 05:27:11 GMT
access-control-allow-origin: https://goo.su
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09 Dec 2022 05:27:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 09 Dec 2022 05:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
172.67.139.105
23.36.77.32
81.19.89.18
93.184.220.29
104.21.38.221