www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
301 Moved Permanently 568 B URL HTTP/1.1 www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Hash 2761b98db33884ab29711096ab315edb
8cea6e53464aea178b72e06a906205d040f14ca5
9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee
GET /away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23 HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Fri, 24 Feb 2023 17:30:48 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
Content-Type: text/html; charset=utf8
Content-Length: 568
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f313739c4c44174fc9a97ac63621b46
319da68d06694330ad9f7901bcde1ca0a6eeac0d
321236ee07769c741890815bc56fd2700ff1974b0534368b9ff2e96320ae4fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "321236EE07769C741890815BC56FD2700FF1974B0534368B9FF2E96320AE4FEE"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10071
Expires: Fri, 24 Feb 2023 20:18:39 GMT
Date: Fri, 24 Feb 2023 17:30:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67fc460ed2f69dde3c410ec607ef3510
ba9f582ec321351e5c06c9b2c381f06b685ef274
85df74fac7d59d76840b6359bac24648fede201c0048f2a8382af6468225ffb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85DF74FAC7D59D76840B6359BAC24648FEDE201C0048F2A8382AF6468225FFB8"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Fri, 24 Feb 2023 19:41:53 GMT
Date: Fri, 24 Feb 2023 17:30:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 24 Feb 2023 17:04:24 GMT
content-type: application/json
age: 1584
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb59e5d3cdf08b94e5f41fdeb9aec6c
ff644039db3b9f74d7e2fab10f93581bea10614a
861573a00d75364e15783c5e448c4f8b4da48b38d9beba3ebd33a87f993489a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "861573A00D75364E15783C5E448C4F8B4DA48B38D9BEBA3EBD33A87F993489A5"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3129
Expires: Fri, 24 Feb 2023 18:22:57 GMT
Date: Fri, 24 Feb 2023 17:30:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AyVnYb36FIuys8Z0OB+RxPb7b14xFFpW34GwDOJvvg3EEPfqgGuU3g9ZBnN/YWs1l+FEnDB1GHGLXGi+gl25eA==
x-amz-request-id: 06KY0GYJCB7NHY6A
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 24 Feb 2023 16:49:35 GMT
age: 2473
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 07bccf1ff8b85eb2df43c3807d2b00b6
7a313fb3bc3826fe8540f49c83d25c0165b204bd
424d4c3986e50ee376300621fa540a2a0c97899e7cf8159faa4ab698d69307dc
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 Feb 2023 17:30:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 28 Feb 2023 14:03:51 GMT
ETag: "7a313fb3bc3826fe8540f49c83d25c0165b204bd"
Last-Modified: Fri, 24 Feb 2023 14:03:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79e9ee67dd75b4e8-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
200 OK 29 kB URL HTTP/2 www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65496)
Hash 4ce16712a980d39365b3398741d8a164
55d7ef1e3b9f7a97318b705a8e5108ba3bbef193
8200c648ee626354f26d2542576f6bc5fd5ff58d5cf96050aa938342c6ecd094
GET /away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23 HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: ddos-guard
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/html; charset=UTF-8
content-length: 28770
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: __ddg1_=kk10F63SyE8csajjhI2G; Domain=.fl.ru; HttpOnly; Path=/; Expires=Sat, 24-Feb-2024 17:30:48 GMT
XSRF-TOKEN=zLJaGeVnk40J2XrJw1iK53K8S4s8cqr59enCste0; expires=Wed, 01-Mar-2023 17:30:49 GMT; Max-Age=432000; path=/; domain=www.fl.ru; secure
PHPSESSID=S4kC3Aj3TIGkry8Lbul45oOw8AVxMcc7HFxAibDH; expires=Wed, 01-Mar-2023 17:30:49 GMT; Max-Age=432000; path=/; domain=www.fl.ru; secure; httponly
vary: Accept-Encoding
content-encoding: gzip
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c62a65876715f9e7cf361f64b20797e1
ea87a63809cd80575fe985de6a7baca799f027bf
a197cb4ccd38b7f78bf74892665174482c5d1943a2be78d9dbe567757abb8174
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 53987c863c8575c4c44b8c1f23a71f45
4699a5d11afcee39939e30d678e0a9ba3047caa6
1f82dd280aeed978d8082dd19e01c8acd00c9bb20c09554dc118f5b468093570
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=vueRecaptchaApiLoaded&hl=ru
200 OK 578 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=vueRecaptchaApiLoaded&hl=ru
IP
File type ASCII text, with very long lines (914), with no line terminators
Hash e87ecdfcb87e75fdb7bddf8a696209fd
5455589637ac6505d665cda256188a9d2118b177
3aae0a01c77809758aefddfbc0ba621df2814c5c0032da554a7193697b644c54
GET /recaptcha/api.js?onload=vueRecaptchaApiLoaded&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 24 Feb 2023 17:30:49 GMT
date: Fri, 24 Feb 2023 17:30:49 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 578
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 53987c863c8575c4c44b8c1f23a71f45
4699a5d11afcee39939e30d678e0a9ba3047caa6
1f82dd280aeed978d8082dd19e01c8acd00c9bb20c09554dc118f5b468093570
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7ec386e11af8cbf1c9f53c3db293c72c
a281f145551e22d49eb117af943772ce9b0ec909
9a8cee386d98a456aabb3bcc03c379b6d0354852c22189f9fd2882fd84e4f064
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Cache-Control, Backoff, Pragma, Expires, Last-Modified, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 24 Feb 2023 17:20:36 GMT
age: 613
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5b0c9c420d63c63b8fe72a50bba862a2
0f826db28964f06d7c6b7fd9b263588319b64541
8db53b3c3ecadb2be99429fbf30bfc5f6214fbbdadb2c30802ffa720c137a6ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-RD9LL0K106
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RD9LL0K106
IP
File type ASCII text, with very long lines (27670)
Hash 58426d8a45d9c725c7c894a37242525c
b90976f852e4d7528f6a5c32509f9ea6ee5e9de8
7482546ffbc0821faac5071690c21d341a18b64cd8dd23ffceba70c0c5669ff2
GET /gtag/js?id=G-RD9LL0K106 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Feb 2023 17:30:49 GMT
expires: Fri, 24 Feb 2023 17:30:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81968
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5b0c9c420d63c63b8fe72a50bba862a2
0f826db28964f06d7c6b7fd9b263588319b64541
8db53b3c3ecadb2be99429fbf30bfc5f6214fbbdadb2c30802ffa720c137a6ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.fl.ru/fonts/FiraSans-Regular.woff2
200 OK 146 kB URL HTTP/2 cdn.fl.ru/fonts/FiraSans-Regular.woff2
IP
ASN #34665 Petersburg Internet Network ltd.
File type Web Open Font Format (Version 2), TrueType, length 145720, version 1.0\012- data
Size 146 kB (145720 bytes)
Hash cfa5be9e756ebdef4ba6996c6a70c696
ab9f4b623d19e8eb4af2d1458f6b80753a48c1c8
4f5cf570037be6c36dfa12bd31e4cce13897e9fc56268213ebba235f2980d456
GET /fonts/FiraSans-Regular.woff2 HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: application/octet-stream
content-length: 145720
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "cfa5be9e756ebdef4ba6996c6a70c696"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.77107
x-trans-id: 16806cea252d00d6
x-xss-protection: 1; mode=block
age: 5596
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.fl.ru/fonts/FiraSans-SemiBold.woff2
200 OK 155 kB URL HTTP/2 cdn.fl.ru/fonts/FiraSans-SemiBold.woff2
IP
ASN #34665 Petersburg Internet Network ltd.
File type Web Open Font Format (Version 2), TrueType, length 154908, version 1.0\012- data
Size 155 kB (154908 bytes)
Hash 94061f2f769c77e515d64ed97be7dbdd
d0373e7c46d6c5a2008c2c1bab2a78a901118d4b
dd042f85d2b46b2ed60c63e94ec02cfce4df22b3326772917da27f8a5aa1981a
GET /fonts/FiraSans-SemiBold.woff2 HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://cdn.fl.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: application/octet-stream
content-length: 154908
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: "94061f2f769c77e515d64ed97be7dbdd"
last-modified: Wed, 19 May 2021 09:13:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1621415618.81318
x-trans-id: 16806cea27c0746d
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.fl.ru/assets/popup.7111e2898d9926d285ef52f7bf462293.js
200 OK 192 kB URL HTTP/2 cdn.fl.ru/assets/popup.7111e2898d9926d285ef52f7bf462293.js
IP
ASN #34665 Petersburg Internet Network ltd.
Size 192 kB (192107 bytes)
Hash b20bf674be3581b3d2763b6b621e6652
128e20c9c20a47b9419b55dc991a0305b8f10894
cf37cca17f877702ca1bd6923e5527bf41d7e6aa483deafdbe8770f0318cb7de
GET /assets/popup.7111e2898d9926d285ef52f7bf462293.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"7111e2898d9926d285ef52f7bf462293"
last-modified: Thu, 03 Nov 2022 08:01:12 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1667462471.84156
x-trans-id: 17240448965750f5
x-xss-protection: 1; mode=block
age: 2514
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3b6138b2677322d8a77b066ac0d7eaff
70a50aa485fa26373c7175e45bb4b4d374a01051
49527284a1d99825649bec44ec9d044089c62d40d9c82d0162a53d7b78335fe0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3b6138b2677322d8a77b066ac0d7eaff
70a50aa485fa26373c7175e45bb4b4d374a01051
49527284a1d99825649bec44ec9d044089c62d40d9c82d0162a53d7b78335fe0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.fl.ru/assets/all.03630480f0918f1f3ad8999befe07111.css
200 OK 156 kB URL HTTP/2 cdn.fl.ru/assets/all.03630480f0918f1f3ad8999befe07111.css
IP
ASN #34665 Petersburg Internet Network ltd.
Size 156 kB (155619 bytes)
Hash 226dda3f19e58f0b21154f320d0629b1
4dcadf37418e7d278984a2c123dd526e86cd8ff9
d3892025d0e35a61114a30aac81b04dc213520b19ccf01e9600f93130205663f
GET /assets/all.03630480f0918f1f3ad8999befe07111.css HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"03630480f0918f1f3ad8999befe07111"
last-modified: Tue, 21 Feb 2023 08:39:25 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1676968764.95278
x-trans-id: 1745ca34ee606ec1
x-xss-protection: 1; mode=block
age: 45
cache: HIT
x-cached-since: 2023-02-21T08:41:38+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HO8sZuoW2ZvhC6F6X0gRwg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: V61eqaJuq23ym3tnPJZS9PSaRJs=
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21276, version 1.0\012- data
Hash 59c9b83cc112cf7eeb3bf7a5e96b21fe
771790b776b5e1bc3039c337024e400974184208
a8447cdec51e85d9e93971a0d4a53bcf6085d70bf1d201662837d2fb953422c7
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Feb 2023 17:04:17 GMT
expires: Sat, 24 Feb 2024 17:04:17 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:01:17 GMT
content-type: font/woff2
age: 1593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0722337038094856b567dedda585f568
be4b73811ff5eea04da0b31019ac1063821af544
75120e61ad93e2a38ba09d36d616de23a0eded6a7af77ce13e7efad5491dd10f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75120E61AD93E2A38BA09D36D616DE23A0EDED6A7AF77CE13E7EFAD5491DD10F"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2581
Expires: Fri, 24 Feb 2023 18:13:51 GMT
Date: Fri, 24 Feb 2023 17:30:50 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3b6138b2677322d8a77b066ac0d7eaff
70a50aa485fa26373c7175e45bb4b4d374a01051
49527284a1d99825649bec44ec9d044089c62d40d9c82d0162a53d7b78335fe0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28ab2449c39a73e3907a9a7bc910da19
85cb868a470589a628c8627daccc1c0c9728e805
22e60635913d5c7d482fd4c1e7b571bdb3b663bc6e863cf3203892dd1eade9ea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22E60635913D5C7D482FD4C1E7B571BDB3B663BC6E863CF3203892DD1EADE9EA"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3299
Expires: Fri, 24 Feb 2023 18:25:49 GMT
Date: Fri, 24 Feb 2023 17:30:50 GMT
Connection: keep-alive
cdn.fl.ru/assets/vendor.dll.3e1509e9bd1488d2b1ad5eb41e99144f.js
200 OK 311 kB URL HTTP/2 cdn.fl.ru/assets/vendor.dll.3e1509e9bd1488d2b1ad5eb41e99144f.js
IP
ASN #34665 Petersburg Internet Network ltd.
File type ASCII text, with very long lines (65536), with no line terminators
Size 311 kB (311270 bytes)
Hash 42f8d42c4bf197ec675554bd3b356372
bc05bc3c8bb91251a70564328baaca39aa13741d
ffa9dd107ada81e9132d65dab4d2e074f5cfcad29a07afbf75bbab5e9457d536
GET /assets/vendor.dll.3e1509e9bd1488d2b1ad5eb41e99144f.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"3e1509e9bd1488d2b1ad5eb41e99144f"
last-modified: Wed, 18 Jan 2023 10:56:53 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1674039412.41271
x-trans-id: 173b61f9e4ceb0f6
x-xss-protection: 1; mode=block
age: 6
cache: HIT
x-cached-since: 2023-02-17T11:00:15+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.userecho.com/js/widget-script.gz.js?v=2.5.6
200 OK 8.9 kB URL HTTP/2 cdn.userecho.com/js/widget-script.gz.js?v=2.5.6
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, Unicode text, UTF-8 text, with very long lines (30665), with no line terminators
Hash f1727b9f2ab3fe9478365448ff0bb097
8056563221f0369a02be47f8dcd0d4d2a77561dc
355de013364d8efbc67e443b73950aba9f43ae52945a47d228b002b20253cc9b
GET /js/widget-script.gz.js?v=2.5.6 HTTP/1.1
Host: cdn.userecho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: application/javascript
content-length: 8872
last-modified: Mon, 17 Oct 2022 19:26:38 GMT
etag: "634dac6e-22a8"
content-encoding: gzip
expires: Sat, 24 Feb 2024 17:30:50 GMT
cache-control: max-age=31536000, public
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
x.cnt.my/px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523
301 Moved Permanently 295 B URL HTTP/2 x.cnt.my/px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash e3506b655b271a5d1f8bbb0153470889
f96562f851a8818fc95f956c491dcc88d49e5a9f
1964cfd3971503d54742b30f970a1986a315c322e63d63d36aa986c1bb42194b
GET /px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523 HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: text/plain; charset=utf-8
content-length: 295
cache-control: no-cache
set-cookie: xcntUt=x2112210f47de98115; Expires=Sat, 25 Feb 2023 17:30:50 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
location: /px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rand=0.5031227302317839&xtmp=1
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
x.cnt.my/px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rand=0.5031227302317839&xtmp=1
200 OK 35 B URL HTTP/2 x.cnt.my/px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rand=0.5031227302317839&xtmp=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /px/?r=0.09853597319589824&dom=www.fl.ru&tz=0&sw=1280&sh=1024&ow=1280&oh=1024&iw=1280&ih=939&scd=24&url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rand=0.5031227302317839&xtmp=1 HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Connection: keep-alive
Cookie: xcntUt=x2112210f47de98115
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: image/gif; charset=utf-8
content-length: 35
cache-control: no-cache,max-age=0,must-revalidate, no-cache
access-control-allow-origin: *
set-cookie: xcntIDR=y2d6d06555726bb350; Expires=Sat, 24 Feb 2024 17:30:50 GMT; Path=/; Domain=fl.ru; Secure; SameSite=None
xcntID=y2d6d06555726bb350; Expires=Sat, 24 Feb 2024 17:30:50 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
xcntUt=x2112210f47de98115; Expires=Fri, 24 Feb 2023 17:30:50 GMT; Path=/; Domain=.cnt.my; Secure; SameSite=None
expires: 0
pragma: no-cache
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
www.fl.ru/favicon.ico
200 OK 4.5 kB IP
File type MS Windows icon resource - 1 icon, 33x32, 32 bits/pixel\012- data
Hash 2170bd32702d0f420e0f96220e16eb78
6c287f0dcdbf2259710cf6e3409705be4da89a11
2d193279addc3106f20379e618d628f24908c43eff7a502885f3ad45ddc55160
GET /favicon.ico HTTP/1.1
Host: www.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/away/?href=https://docs.google.com/document/d/1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo/edit%23
Cookie: __ddg1_=kk10F63SyE8csajjhI2G; XSRF-TOKEN=zLJaGeVnk40J2XrJw1iK53K8S4s8cqr59enCste0; PHPSESSID=S4kC3Aj3TIGkry8Lbul45oOw8AVxMcc7HFxAibDH; uechat_3_pages_count=1; uechat_3_first_time=1677259895907; _ga_RD9LL0K106=GS1.1.1677259895.1.0.1677259895.0.0.0; _ga=GA1.1.965481171.1677259896
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: image/x-icon
content-length: 4542
last-modified: Fri, 02 Oct 2020 14:04:51 GMT
etag: "5f773383-11be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
towww: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests;, default-src 'self' fl.ru *.fl.ru flstatic-a.akamaihd.net *.facebook.com client.getinchat.com *.jivosite.com *.mail.ru *.yandex.ru *.doubleclick.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: *.fl.ru flstatic-a.akamaihd.net *.acstat.com client.getinchat.com cityadstrack.com www.cityadstrack.com artfut.com www.artut.com cdn.userecho.com connect.facebook.net *.adriver.ru counter.rambler.ru *.newrelic.com *.nr-data.net mc.yandex.ru *.doubleclick.net *.criteo.com *.criteo.net *.mail.ru pagead2.googlesyndication.com tpc.googlesyndication.com *.gstatic.com *.google.com *.google-analytics.com *.googleadservices.com *.googletagservices.com *.googletagmanager.com adservice.google.com adservice.google.ru adservice.google.com.ua *.tns-counter.ru x.cnt.my d31j93rd8oukbv.cloudfront.net *.jivosite.com; img-src data: blob: *; media-src *.fl.ru flstatic-a.akamaihd.net *.jivosite.com; style-src 'unsafe-inline' 'unsafe-eval' blob: https: 'self' *.fl.ru flstatic-a.akamaihd.net client.getinchat.com fonts.googleapis.com *.jivosite.com; font-src 'self' data: blob: https: fonts.gstatic.com an.yandex.ru yastatic.net yastat.net; frame-src 'self' *.fl.ru web.kyc.dev.homeoperator.net kyc-web.beorg.ru flstatic-a.akamaihd.net *.hcaptcha.com *.soundcloud.com fl.userecho.com *.sumsub.com *.cyberity.ru direct.yandex.ru *.yandex.md yastatic.net *.typeform.com client.getinchat.com *.criteo.com *.criteo.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.adriver.ru *.doubleclick.net *.google.com *.google.ru *.indeed.com onesignal.com rutube.ru *.rutube.ru *.vimeo.com youtube.com *.youtube.com; child-src fl.ru *.fl.ru flstatic-a.akamaihd.net; connect-src 'self' *.fl.ru fl.ru fl.ru:* *.fl.ru:* ws://fl.ru:* wss://fl.ru:* ws://*.fl.ru:* wss://*.fl.ru:* *.hcaptcha.com err.t8h.io *.popmechanic.ru api.mindbox.ru *.ingest.sentry.io *.topmind.io *.mradx.net *.mail.ru vk.com *.vk.com ads.betweendigital.com *.bidvol.com *.buzzoola.com *.google.com *.adriver.ru *.advcake.com *.acstat.com flstatic-a.akamaihd.net *.doubleclick.net *.facebook.com pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com *.mail.ru client.getinchat.com *.jivosite.com *.yandex.ru yandex.ru ymetrica1.com wss://*.jivosite.com ws://*.carrotquest.app *.carrottrack.app *.carrotquest.app *.carrotquest.io *.nr-data.net; report-uri https://flru.report-uri.com/r/d/csp/reportOnly
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7358fb6f365152f06fd649980d967c4f
7ae6da029a4706bf6aeb1c62a651bb2a641426ca
ed99c60c94d4b5357d6057f5607d85b852b952ca1da1e4d3b56e33a2465d48e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
x.cnt.my/async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru
200 OK 22 kB URL HTTP/2 x.cnt.my/async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1490)
Hash 86ab4ab10d0834dd349e23e983d4835e
23730a1da74fdecdcf77fa25a33c618cb48e2b31
50a311beb73f20edda6b4dbffe444007c1ab68a6868c7439accbdf9eaa0a59d7
GET /async/parser/www.fl.ru.js?r=4.03&dom=www.fl.ru HTTP/1.1
Host: x.cnt.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: application/javascript
last-modified: Tue, 14 Feb 2023 17:51:39 GMT
etag: W/"63ebca2b-1769"
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js
200 OK 169 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js
IP
File type ASCII text, with very long lines (1569)
Size 169 kB (168940 bytes)
Hash 5ba34140a29a0c772032c13c1a9962c3
3858307e65021fa73bd1d02b07ad75027b4dfd5b
ad5097176c07881c9b847bdf36a52de2485425b600c8cc988991a7a18721d9df
GET /recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 168940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Feb 2023 16:55:32 GMT
expires: Sat, 24 Feb 2024 16:55:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Feb 2023 05:03:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 2118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 8fbb0c74afa8088ba46e47c5c66904da
4eaf5a388afc044171b0a1b8a70d48d4671ce5c4
b89fcc88c1ed896808efed90f5a1a6ab935eebda2f0654efa2cc36f3170e76cd
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 24 Feb 2023 17:30:50 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Tue, 28 Feb 2023 15:12:35 GMT
ETag: "4eaf5a388afc044171b0a1b8a70d48d4671ce5c4"
Last-Modified: Fri, 24 Feb 2023 15:12:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 565
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79e9ee728943b4e8-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7358fb6f365152f06fd649980d967c4f
7ae6da029a4706bf6aeb1c62a651bb2a641426ca
ed99c60c94d4b5357d6057f5607d85b852b952ca1da1e4d3b56e33a2465d48e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b071bc9b5482975fd106c517ecf32ce
779e5d086103fe19ae153f50606759302e88a5d9
ec5f6bf09033e5679826614f9fb79d296a69b16b755a428dee36548ca287ec69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&gjid=1278753634&_gid=300496671.1677259896&_u=aCDAgEABAAAAAEAAI~&z=1747893190
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&gjid=1278753634&_gid=300496671.1677259896&_u=aCDAgEABAAAAAEAAI~&z=1747893190
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&gjid=1278753634&_gid=300496671.1677259896&_u=aCDAgEABAAAAAEAAI~&z=1747893190 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.fl.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 24 Feb 2023 17:30:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 6a599c9bd605553d6e8ea26b240017e5
ce6de2eaa815569841f1b16de3de7aa841ac7e88
8ee4a7bf51b198d826a7320c21965e73d95fd1642d9071a1a840e566ee9303de
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73790
date: Fri, 24 Feb 2023 17:30:50 GMT
access-control-allow-origin: *
etag: "63f47caa-1203e"
expires: Fri, 24 Feb 2023 18:30:50 GMT
last-modified: Tue, 21 Feb 2023 11:11:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?168
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?168
IP
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js?168 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Tue, 28 Feb 2023 17:30:50 GMT
cache-control: max-age=345600
x-frontend: front225207
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
vk.com/rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523
200 OK 65 B URL HTTP/2 vk.com/rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ec4341fe3a8b2c4880fbfe0ef9cde34f
a0947414eb426b2939ca1a05fc870763f6bfc63f
01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?p=VK-RTRG-770158-3bPSa&metatag_url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.113374
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Thu, 22 Feb 2024 21:41:23 GMT; path=/; domain=.vk.com
remixstlid=9077943282545317407_cC1llBKn7xhaEjibWDjoaZpyeBJCVNN7WGgARS1mLIz; expires=Sat, 24 Feb 2024 17:30:50 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front225207
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3499818b1c9415511cddad5b15b1b86
fb27077b0f98f12a0e47e013b18c51452e5ded3a
334a504733f7be397c6fce2e595ae7d2bb3e8927a3410f388b53137b7b39398a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&_u=aCDAgEABAAAAAEAAI~&z=1755767009
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&_u=aCDAgEABAAAAAEAAI~&z=1755767009
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-163162-4&cid=965481171.1677259896&jid=1496005346&_u=aCDAgEABAAAAAEAAI~&z=1755767009 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 24 Feb 2023 17:30:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 568351bd95fb6cc3efb6ffb883525157
141c3b30d7a18d020afd3391656f79b91b410bc0
046e8cb093fbc2cad22c8072485ff7367b480812c5673100f15c0ea607e337d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "046E8CB093FBC2CAD22C8072485FF7367B480812C5673100F15C0EA607E337D7"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8620
Expires: Fri, 24 Feb 2023 19:54:31 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
mc.yandex.ru/watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259896%3Ac%3A1%3Arn%3A311148987%3Arqn%3A1%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C123%2C122%2C0%2C337%2C0%2C%2C1223%2C24%2C%2C%2C%2C1879%3Aco%3A0%3Ans%3A1677259893969%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1677259896%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259896%3Ac%3A1%3Arn%3A311148987%3Arqn%3A1%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C123%2C122%2C0%2C337%2C0%2C%2C1223%2C24%2C%2C%2C%2C1879%3Aco%3A0%3Ans%3A1677259893969%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1677259896%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 0ceb0876b1724f670d7a17ba4ab4aca9
e01edb4f3bb947f0593563f913e8dd2550a35256
d6c8c01aeee9e0120754abe8074c7e887355763b6c4b173b6707f42e0b856922
GET /watch/6051055?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259896%3Ac%3A1%3Arn%3A311148987%3Arqn%3A1%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C123%2C122%2C0%2C337%2C0%2C%2C1223%2C24%2C%2C%2C%2C1879%3Aco%3A0%3Ans%3A1677259893969%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1677259896%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/6051055/1?wmode=7&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afp%3A1517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259896%3Ac%3A1%3Arn%3A311148987%3Arqn%3A1%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C123%2C122%2C0%2C337%2C0%2C%2C1223%2C24%2C%2C%2C%2C1879%3Aco%3A0%3Ans%3A1677259893969%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1677259896%3At%3A&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 24 Feb 2023 17:30:50 GMT
access-control-allow-origin: https://www.fl.ru
set-cookie: yabs-sid=1051184251677259850; Path=/; SameSite=None; Secure
i=/HjoNu2Fdfe4ZAwyUmyCK3B56rLEcNUq/Lc2RAps15Z0+D8Db22WkNkbZMOLrtUly6++e2z0VqBa0ORunyVHKKGEsDg=; Expires=Mon, 21-Feb-2033 17:30:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3001602471677259850; Expires=Sat, 24-Feb-2024 17:30:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3001602471677259850; Expires=Sat, 24-Feb-2024 17:30:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1708795850.yc.1677259850#1708795850.yrts.1677259850#1708795850.yrtsi.1677259850; Expires=Sat, 24-Feb-2024 17:30:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:50 GMT
last-modified: Fri, 24-Feb-2023 17:30:50 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3499818b1c9415511cddad5b15b1b86
fb27077b0f98f12a0e47e013b18c51452e5ded3a
334a504733f7be397c6fce2e595ae7d2bb3e8927a3410f388b53137b7b39398a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-RD9LL0K106>m=45je32m0&_p=749901080&cid=965481171.1677259896&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1677259895&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&dt=&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-RD9LL0K106>m=45je32m0&_p=749901080&cid=965481171.1677259896&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1677259895&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&dt=&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-RD9LL0K106>m=45je32m0&_p=749901080&cid=965481171.1677259896&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1677259895&sct=1&seg=0&dl=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&dt=&en=scroll&_fv=1&_nsi=1&_ss=1&epn.percent_scrolled=90 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.fl.ru
date: Fri, 24 Feb 2023 17:30:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&hittoken=1677259851_e913cc97ad105366723d96e7048b8869c6f042a0c3b0a97765adc25593340491&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259897%3Ac%3A1%3Arn%3A609476928%3Arqn%3A2%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1677259893969%3Ast%3A1677259897&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&hittoken=1677259851_e913cc97ad105366723d96e7048b8869c6f042a0c3b0a97765adc25593340491&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259897%3Ac%3A1%3Arn%3A609476928%3Arqn%3A2%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1677259893969%3Ast%3A1677259897&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/6051055/1?page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&charset=utf-8&hittoken=1677259851_e913cc97ad105366723d96e7048b8869c6f042a0c3b0a97765adc25593340491&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A1227163687712%3Ahid%3A470951319%3Az%3A0%3Ai%3A20230224173136%3Aet%3A1677259897%3Ac%3A1%3Arn%3A609476928%3Arqn%3A2%3Au%3A167725989619013909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1677259893969%3Ast%3A1677259897&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 52
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:51 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:51 GMT
last-modified: Fri, 24-Feb-2023 17:30:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4016
Expires: Fri, 24 Feb 2023 18:37:47 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4016
Expires: Fri, 24 Feb 2023 18:37:47 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4016
Expires: Fri, 24 Feb 2023 18:37:47 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4016
Expires: Fri, 24 Feb 2023 18:37:47 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4016
Expires: Fri, 24 Feb 2023 18:37:47 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fafbb00-9b17-46ac-bf85-f6839e1c4460.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fafbb00-9b17-46ac-bf85-f6839e1c4460.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e6a96712407e6157d626667997afc81
222de98cf9a30714bd7708c7f09dbe86b36eb01d
1cf001d922fbeab8cece0e04ab0ba710bece40f1e6dc6a44104a041c6e2d3e77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fafbb00-9b17-46ac-bf85-f6839e1c4460.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9391
x-amzn-requestid: 43106fa3-86dc-404b-a632-b1742d6d0729
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9dEGBLoAMFm3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dc53-6f67759f554549454c6ec79d;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:36:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TGKCQr0bWvuaib67MnqmEb8Ihn2Qv_4yLxBkIS1pqFaPvWGWru7uDg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Feb 2023 17:04:24 GMT
age: 1587
etag: "222de98cf9a30714bd7708c7f09dbe86b36eb01d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfddc284-f440-456d-8bfb-7114ad8092b0.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfddc284-f440-456d-8bfb-7114ad8092b0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd1631d34431c0dfc1d66bad3d6bb464
73030f74289ab10d7f94cd3fe358390efacc3268
843d4318291fafe4ee2bea039635262ca7574a4e9688aaab30fee97560f6ec81
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfddc284-f440-456d-8bfb-7114ad8092b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5624
x-amzn-requestid: 2c253ff3-61e4-4f15-948f-862bb71a9ed8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9EtFDjIAMFhmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbb7-058c9199058eb3342abc2395;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TzfrDxICmaSWOxTUHuMQUHkMXWS3unISI-tsR6yTw5DfYJyXc15RwQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Feb 2023 16:55:47 GMT
age: 2104
etag: "73030f74289ab10d7f94cd3fe358390efacc3268"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14d33f5b-7d9e-43b3-80d8-b09ed1779cc9.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14d33f5b-7d9e-43b3-80d8-b09ed1779cc9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75c51c003a7b1577d725dc96862af3e2
6da59a43b08277208fb29dfd6915cc5e6fffce46
e12a642e1a11f7b783cbaac9af2c0d7ab54360fb4e31bb5899592605a99ce78d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14d33f5b-7d9e-43b3-80d8-b09ed1779cc9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9381
x-amzn-requestid: 67f5dcd4-06ed-434e-929e-dea33f3206c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9FNFpQoAMF6Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbba-017f87b61ceda06c1390b79d;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nOInEPsLviMsoBukvNqpu5Af5msPzUMY0fFMIrAHkBWRz060ArXy2A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Feb 2023 17:01:31 GMT
age: 1760
etag: "6da59a43b08277208fb29dfd6915cc5e6fffce46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4763b5fd-51d2-46bb-a306-ce5d0799eca3.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4763b5fd-51d2-46bb-a306-ce5d0799eca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fedefde8c4f90a6f10f769419f2ff485
35cbe3e6981dc9fd1bcbb8743c61ff28fde443fc
65adf7a2930673f45f83cafb75cde5ec3f61ed1bed2018cd27cd4da068e511ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4763b5fd-51d2-46bb-a306-ce5d0799eca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9387
x-amzn-requestid: a2db2470-843a-4180-8cca-8338ed4237bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9E4GDcIAMF5cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbb8-3a87935b42932f213cb9a7ee;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iwod49tuzw2JYk_CDcrwxPGYEvDnfHJgJ-63r_aJC29b1ye5dL9Nsw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 21:39:12 GMT
age: 71499
etag: "35cbe3e6981dc9fd1bcbb8743c61ff28fde443fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a98720b-53ac-4018-8bb9-955bb22a9e52.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a98720b-53ac-4018-8bb9-955bb22a9e52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78bcc318c65f1f7b827f7ff792f14595
6bd53a60048a57322c3fc5d12c9f849e38fd2765
d83a699697cb6c728563b667e82a538237472ec86f841b34bc5f7639c94702e8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a98720b-53ac-4018-8bb9-955bb22a9e52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11089
x-amzn-requestid: 8738c63f-1ac3-4ce9-afe7-d5bed232e4b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ax-wyHd6IAMF-WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7119e-1fe3416019806b2550524e41;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 07:11:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UTWIOBVzeriNaMV_ROuRIwodof3mBbceNtk_eVlmDu01H2EtJH9-zA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Feb 2023 07:17:13 GMT
age: 36818
etag: "6bd53a60048a57322c3fc5d12c9f849e38fd2765"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6e0f61d-f4aa-4f95-9bb6-85293a1c2a7b.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6e0f61d-f4aa-4f95-9bb6-85293a1c2a7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d85d33259ccf1aafbe8982507e3a4fbd
28b000d1da5b8a1f82152ebc91b3693512ba66ce
4dc76b0f8bef989d90463cc3ca0431d87008d5c93eee05ece9661c1f08a90686
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6e0f61d-f4aa-4f95-9bb6-85293a1c2a7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4234
x-amzn-requestid: 555774d4-9947-40dc-a01c-4a0fcb4e2078
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9M5FUdoAMFY_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbeb-51fdadb066a95c0943d77264;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YMLp6ccv5mVGJMr1XcTTMD_dRm91uW0gHDMaT9oIB6sYo4wwz2Jpgw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Feb 2023 17:04:24 GMT
age: 1587
etag: "28b000d1da5b8a1f82152ebc91b3693512ba66ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:51 GMT
access-control-allow-origin: *
etag: "63f47caa-2b"
expires: Fri, 24 Feb 2023 18:30:51 GMT
accept-ranges: bytes
last-modified: Tue, 21 Feb 2023 11:11:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
client.getinchat.com/ue/agents/feedback.fl.ru?rnd=0.9507143682640709&uewv=2.5.6
200 OK 2 B URL HTTP/2 client.getinchat.com/ue/agents/feedback.fl.ru?rnd=0.9507143682640709&uewv=2.5.6
IP
Hash 897316929176464ebc9ad085f31e7284
09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
GET /ue/agents/feedback.fl.ru?rnd=0.9507143682640709&uewv=2.5.6 HTTP/1.1
Host: client.getinchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.6
date: Fri, 24 Feb 2023 17:30:51 GMT
content-type: text/html
content-length: 2
last-modified: Thu, 19 Dec 2019 20:38:16 GMT
etag: "5dfbdfb8-2"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
js-agent.newrelic.com/async-api.6bb277af-1225.min.js
200 OK 1.1 kB URL HTTP/2 js-agent.newrelic.com/async-api.6bb277af-1225.min.js
IP
File type ASCII text, with very long lines (2040), with no line terminators
Hash 58d9e96cdc32504fb45373f15ebdedda
26d4bd4290dad12187fb807c1bf3e5bbe13841e7
96aa6e169e4b557b3c12652ea21fa40e6dc30c8d4ee7fd2d5dfaa89d40d8110e
GET /async-api.6bb277af-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rSWxHAdrQXzx6OYAF8zIuXT+j2kRjZDNXnNymXKns/lsPdlyZCA3Lu4oE76kEFNPoXySb9R8+9s=
x-amz-request-id: RFBW100H8DZHQBYY
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "dd573d973dfb2a2559befdfb616d511d"
x-amz-version-id: ccu4IA9M.iSFjMQAJQZ9WRC6vNK74xfk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 4270
x-timer: S1677259851.387411,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1094
X-Firefox-Spdy: h2
js-agent.newrelic.com/lazy-loader.48127245-1225.min.js
200 OK 520 B URL HTTP/2 js-agent.newrelic.com/lazy-loader.48127245-1225.min.js
IP
File type ASCII text, with very long lines (1626), with no line terminators
Hash dac2dcb0be1ec3567fd43c71533f9349
7884cfed34956988b073997edea42ef48bf12bbb
e64fd50eed1865917d16e1cfaf4cf06eeae9c5c8ebcb17485fbc6ccf87fe254e
GET /lazy-loader.48127245-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mzlCsWFcWK2yKcdS6CRRcRJCvTP9nbONJ1yMaYngoM7qDajAGgBjFFYAa4pkDF8EiiK//lfCjNk=
x-amz-request-id: D96P9XD4ZV301PRW
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "a3759bbbd15fffd73531bda1e8166ae7"
x-amz-version-id: x72sIi24uKUpr9UhD5QY7PCKtNgMfeY4
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 4285
x-timer: S1677259851.391452,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 520
X-Firefox-Spdy: h2
js-agent.newrelic.com/118.d37755e4-1225.min.js
200 OK 3.4 kB URL HTTP/2 js-agent.newrelic.com/118.d37755e4-1225.min.js
IP
File type ASCII text, with very long lines (8082), with no line terminators
Hash d58584cb1dae4f27cca2eb7eefe0f56c
756e2972e24b07b284fa8a183802d452abbf10df
4428e6d9386bf61704f938b19d26ef519a7df0db4228eae13ed7fb296f3daecd
GET /118.d37755e4-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rgBs979CAp8TOMdZoxDNJyBFcsImny3CHi02Fo81ecBGPU2zqo2bRtC9g0yhZp442cpU1DQSpms=
x-amz-request-id: D96HPA0CA2V0XCDN
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "9c8a05b5703a1c30e0418f9ba42337df"
x-amz-version-id: 8iuwUwYODDWrlAN7lGJW4CKaVaPtd.FC
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 4166
x-timer: S1677259852.560457,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3412
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_view_timing-aggregate.e791ce32-1225.min.js
200 OK 2.2 kB URL HTTP/2 js-agent.newrelic.com/page_view_timing-aggregate.e791ce32-1225.min.js
IP
File type ASCII text, with very long lines (5466), with no line terminators
Hash abf4524d0219c4c6f7a4ee0febe89bdd
e0eb8cf49aad5c169c95d94b4c3a3c22e1ea8368
21997de34bc02fcbc7814b704b1c9d925a692c318ff60f125a9300c0b0c521fb
GET /page_view_timing-aggregate.e791ce32-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Pk6PlDL21ftqiJhzW4rvKHZsGAZKQF1a6zDAmncZs1KpqS0u+byVel/8/e68KSCOCJrSqbZc4lI=
x-amz-request-id: D96QZS5NN5407CTB
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "84ba19034cf0206a49ecf68893086bdd"
x-amz-version-id: 5Hc0bLUe_lA8zF4035AV9Xl5FkevBdYq
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 4163
x-timer: S1677259852.560790,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2248
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_view_event-aggregate.29613e65-1225.min.js
200 OK 1.7 kB URL HTTP/2 js-agent.newrelic.com/page_view_event-aggregate.29613e65-1225.min.js
IP
File type ASCII text, with very long lines (3756), with no line terminators
Hash 35fdcaafba8f604fe8152190954d93eb
e1537f360e464c093387edd97026ddca78c1ea6d
2fb9729a1dcfdd833a779d62dcbfaaebd9b71af424780d482ab744f75a2cb881
GET /page_view_event-aggregate.29613e65-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: g+Mo2m7r1J8etEteurM4KJQ3uRQ2qk7H9lr2odgCVvU1ZA0ocS/5HkGZx76Ja9IHulTnPaq2USk=
x-amz-request-id: D96WDH6RA9X2HDJT
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "0743ee0ec30428f3654ee07d779efb64"
x-amz-version-id: Q2wYJMaFVSMNo7QiSpnsS727o5X3kt_1
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 4159
x-timer: S1677259852.560602,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1682
X-Firefox-Spdy: h2
js-agent.newrelic.com/metrics-aggregate.b4a54ed9-1225.min.js
200 OK 730 B URL HTTP/2 js-agent.newrelic.com/metrics-aggregate.b4a54ed9-1225.min.js
IP
File type ASCII text, with very long lines (1462), with no line terminators
Hash 06622b57d0fe9bcec8836283465164e6
6db00be57d42f5a8f460482d584f35e9c8005419
e17522a6f7c054873528f4367f7ee8609a40a68d8d905e7e9e323fc084cfcb6b
GET /metrics-aggregate.b4a54ed9-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: qSVluXCs7ztv4j4tMfKEpbMwoT1hevpIOli0KP5IRdzeXudndyGwUvIK6kZ1/x2J9RDzINk4WnY=
x-amz-request-id: D96Z420A7Q0JYY6H
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "395608505dac1e4fbe08bd146e09f5c0"
x-amz-version-id: 0sI71h2BU2Q4FabSOYi.9wzegJNG1fuh
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 3466
x-timer: S1677259852.561005,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 730
X-Firefox-Spdy: h2
js-agent.newrelic.com/session_trace-aggregate.94c80cda-1225.min.js
200 OK 3.7 kB URL HTTP/2 js-agent.newrelic.com/session_trace-aggregate.94c80cda-1225.min.js
IP
File type ASCII text, with very long lines (9923), with no line terminators
Hash 2e39f076c3fc4a8164527d8d64507a6c
d782b077ea9e5f90e7637be7d9e0e0a3456a44db
30413cdb23a77d0e93e5b7ddd3cfe477efaae816fc77a62c68e761a1c139873e
GET /session_trace-aggregate.94c80cda-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: g21gn6mtxMantU+IlVPjDGFBMN1UfBVQNHHjIjDNbfTTthW+AxKmOyRQ3rVR3ibI4LdLJnv9he0=
x-amz-request-id: C4TMR6GAN0STB5R6
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "424a549cc28afe269b792b20fdae0acb"
x-amz-version-id: VTTWLoMb09kYDpNhQPhusVScECFKJVwU
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 2395
x-timer: S1677259852.561647,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3743
X-Firefox-Spdy: h2
js-agent.newrelic.com/jserrors-aggregate.ef250e1c-1225.min.js
200 OK 2.9 kB URL HTTP/2 js-agent.newrelic.com/jserrors-aggregate.ef250e1c-1225.min.js
IP
File type ASCII text, with very long lines (7709), with no line terminators
Hash 93b16d74ffff600a49c849121f467e4a
4366b5a47fbe40c3c34c70cc76c62920a1758541
38c3b144396986326f7b13d2e061895faea00ae13c3b45bf42220ad4dec61d8d
GET /jserrors-aggregate.ef250e1c-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HkbYpgrqs6C+ELFnuUFi15SryKkpzUVgK/YTlwZD8ynsQn1+b0jfopKcE9Xm59pr7BTsiDoCKKU=
x-amz-request-id: C4TMGGXJ0E9CWHC9
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "57226211458d66408fe8e6f2a870ac73"
x-amz-version-id: ZOM52KkW0qOLL2pO6zep8b6LBe5eLeAu
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 2407
x-timer: S1677259852.561438,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2947
X-Firefox-Spdy: h2
js-agent.newrelic.com/ajax-aggregate.fc672923-1225.min.js
200 OK 2.4 kB URL HTTP/2 js-agent.newrelic.com/ajax-aggregate.fc672923-1225.min.js
IP
File type ASCII text, with very long lines (5209), with no line terminators
Hash dace26b8a12e0270ba43b3809fc9a87a
e6fabe6da658bc5407fb023fd3d52a46061b9e3c
5e5f26520765d041901000a8eb51cd6cb7231440e748155d05d92392e200f70a
GET /ajax-aggregate.fc672923-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: v7Ue29RFRjNyNzwbPGLWxQlfp1RYboNbr77r2YX29q19bZOwa1XCBPybgFmWnt2Tqba8DUV9frQ=
x-amz-request-id: C4TQF1ENPVSGZHEW
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "166e664a45eea3f57f277bbe4c918943"
x-amz-version-id: frHq3kL0RCG6sqBZr8JQrpE1DTcTY4r.
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 2406
x-timer: S1677259852.561430,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2384
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_action-aggregate.92657d87-1225.min.js
200 OK 1.2 kB URL HTTP/2 js-agent.newrelic.com/page_action-aggregate.92657d87-1225.min.js
IP
File type ASCII text, with very long lines (2764), with no line terminators
Hash a10c648bfb16e18d740e933a115900fe
080d355914831b974d8dd335f10934ecc908e9a8
8fb60609f9109b4f410f2647db66c510cef20365d1d789d53a60a0794e7cc5d0
GET /page_action-aggregate.92657d87-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: laR2IjCZIRgFBC62f4uYFBLh33phYOQBgmpf2T1QyXMN4WBvVM3AihAIuYw+JgzuEbJHi/g4vUE=
x-amz-request-id: 07CH2PRZW58HAVA8
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "44fd542c32559790db696a8ee7ade0b1"
x-amz-version-id: LWJLU5TdVV0.TfnYrT4knyPvYg1S141q
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 2402
x-timer: S1677259852.562280,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1200
X-Firefox-Spdy: h2
js-agent.newrelic.com/spa-aggregate.6bec5056-1225.min.js
200 OK 6.7 kB URL HTTP/2 js-agent.newrelic.com/spa-aggregate.6bec5056-1225.min.js
IP
File type ASCII text, with very long lines (18769), with no line terminators
Hash 516108be92f71c9755071dfe737c1d87
7f5bf5f38224f72b7e95b2f5cb71751163590700
63f3ef3423fac80426ea194131413755cf29638bb8242e28cc5f0270323a6b7d
GET /spa-aggregate.6bec5056-1225.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: s6EEtOXkSBjANYIRW+hnerNUI0envAhRt8EKmxODyZ4Qrq608BZ3oVd30irPR74KVKfhS8HYTSI=
x-amz-request-id: C4TRB01ZZQBNDF7B
last-modified: Fri, 10 Feb 2023 20:23:02 GMT
etag: "4ef5a28c37c21f283a99a9932c1a7799"
x-amz-version-id: svOBdF4N1y6yNVbjkxlscNzjeBM5BNX2
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 24 Feb 2023 17:30:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1534
x-timer: S1677259852.563504,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6654
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0d962b0cbba278e9fdfeb501a7635416
e724ede73adc130b8e928002117fb88bee4c3e80
0884c7ee8e7c675bea0bd05ba2eafc4c511b7634fb7fe55400256db790e1319f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0884C7EE8E7C675BEA0BD05BA2EAFC4C511B7634FB7FE55400256DB790E1319F"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4974
Expires: Fri, 24 Feb 2023 18:53:45 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
citydsp.com/dsp?h=www.fl.ru&r=0.8806917267689476
200 OK 300 B URL HTTP/1.1 citydsp.com/dsp?h=www.fl.ru&r=0.8806917267689476
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (540), with no line terminators
Hash e249bb83554c5077e442d453c091defe
23de50ad6cc57487e7cb4bd500d14be025b310ad
71a96e9ffae1b3c27a03b8a810f2703ab566b204d53dc95ae3d13691910cd4cf
GET /dsp?h=www.fl.ru&r=0.8806917267689476 HTTP/1.1
Host: citydsp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Feb 2023 17:30:51 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: userId=9371048350; path=/; HttpOnly; Secure; SameSite=none; expires=Wed, 23 Aug 2023 17:30:51 GMT; httponly
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3439356c47fb743ba26c062deb8d10d4
cf258ed9c08881fc94ab8bbc74224824552740fe
090e1ca3a38eb8e11351674611e6e5553e89f752e33ec4740baf3ad79d91a90b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "090E1CA3A38EB8E11351674611E6E5553E89F752E33EC4740BAF3AD79D91A90B"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2287
Expires: Fri, 24 Feb 2023 18:08:58 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7acfb148c58e94d3b7a969eca88ee8fc
7825fa3aa1b8bb117ae610fe443ef2b1686ae8ce
9ed2afe06cb9f08ae1ae18d67d2174fb9660dd9c5dcd67ee981c40c06ccb7de4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 24 Feb 2023 17:30:51 GMT
Last-Modified: Fri, 24 Feb 2023 16:32:03 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
bam.eu01.nr-data.net/1/NRJS-d04e86df01600da7fdc?a=480519922&v=1225.PROD&to=MhBSZQoZXhUFBUVYDAtacVIMEV8ISydBQT8oGlREFB1DOicJXFwMCylnVBokeBIQFm1yDAsBQl4UFFUUFzpwRgIcNl9fDApfCggDQ3EKCxFVSTkbRA8LCA%3D%3D&rst=3163&ck=0&s=1bd09a189e7fd4ad&ref=https://www.fl.ru/away/&ap=77&be=676&fe=2163&dc=1203&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1677259893969,%22n%22:0,%22f%22:337,%22dn%22:385,%22dne%22:386,%22c%22:386,%22s%22:408,%22ce%22:510,%22rq%22:510,%22rp%22:631,%22rpe%22:631,%22dl%22:651,%22di%22:1853,%22ds%22:1878,%22de%22:1903,%22dc%22:2822,%22l%22:2822,%22le%22:2857%7D,%22navigation%22:%7B%7D%7D&fcp=1517&at=HldRE0IDTRs%3D&jsonp=NREUM.setToken
402 Payment Required 2 B URL HTTP/1.1 bam.eu01.nr-data.net/1/NRJS-d04e86df01600da7fdc?a=480519922&v=1225.PROD&to=MhBSZQoZXhUFBUVYDAtacVIMEV8ISydBQT8oGlREFB1DOicJXFwMCylnVBokeBIQFm1yDAsBQl4UFFUUFzpwRgIcNl9fDApfCggDQ3EKCxFVSTkbRA8LCA%3D%3D&rst=3163&ck=0&s=1bd09a189e7fd4ad&ref=https://www.fl.ru/away/&ap=77&be=676&fe=2163&dc=1203&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1677259893969,%22n%22:0,%22f%22:337,%22dn%22:385,%22dne%22:386,%22c%22:386,%22s%22:408,%22ce%22:510,%22rq%22:510,%22rp%22:631,%22rpe%22:631,%22dl%22:651,%22di%22:1853,%22ds%22:1878,%22de%22:1903,%22dc%22:2822,%22l%22:2822,%22le%22:2857%7D,%22navigation%22:%7B%7D%7D&fcp=1517&at=HldRE0IDTRs%3D&jsonp=NREUM.setToken
IP
ASN #206998 New Relic International Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /1/NRJS-d04e86df01600da7fdc?a=480519922&v=1225.PROD&to=MhBSZQoZXhUFBUVYDAtacVIMEV8ISydBQT8oGlREFB1DOicJXFwMCylnVBokeBIQFm1yDAsBQl4UFFUUFzpwRgIcNl9fDApfCggDQ3EKCxFVSTkbRA8LCA%3D%3D&rst=3163&ck=0&s=1bd09a189e7fd4ad&ref=https://www.fl.ru/away/&ap=77&be=676&fe=2163&dc=1203&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1677259893969,%22n%22:0,%22f%22:337,%22dn%22:385,%22dne%22:386,%22c%22:386,%22s%22:408,%22ce%22:510,%22rq%22:510,%22rp%22:631,%22rpe%22:631,%22dl%22:651,%22di%22:1853,%22ds%22:1878,%22de%22:1903,%22dc%22:2822,%22l%22:2822,%22le%22:2857%7D,%22navigation%22:%7B%7D%7D&fcp=1517&at=HldRE0IDTRs%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.eu01.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 402 Payment Required
Date: Fri, 24 Feb 2023 17:30:51 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 2
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RcyjiJ6IBZb3Y3xu2NYuPwMoiN96t8IOGQWv2IYo8RRW5AhAe61CzNsF0b5c0NUSgRaRBfMkPOdrhwYnFOWP4zOnW3zFEepueVuDjk8YoKzWIItEPHqo9I27QiAdWj95P18MwZq0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79e9ee799b7f2e10-ARN
stikilo.com/start?r=0.6481026784464361
200 OK 20 B URL HTTP/1.1 stikilo.com/start?r=0.6481026784464361
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /start?r=0.6481026784464361 HTTP/1.1
Host: stikilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Feb 2023 17:30:51 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e1ad4b8f2a515b5db242928c3c6388ec
6c5577ff3b84c3f9cb994225e111fdc6c3dae046
baaae922fdf438971fe67af22ada2fcd124741647a30ca73f38280e21f320c29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAAAE922FDF438971FE67AF22ADA2FCD124741647A30CA73F38280E21F320C29"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3328
Expires: Fri, 24 Feb 2023 18:26:19 GMT
Date: Fri, 24 Feb 2023 17:30:51 GMT
Connection: keep-alive
retagro.com/init?r=0.5040690387308351
200 OK 920 B URL HTTP/1.1 retagro.com/init?r=0.5040690387308351
IP
ASN #8972 Host Europe GmbH
File type Unicode text, UTF-8 text, with very long lines (1735), with no line terminators
Hash fb848d30bf39462bc95935f7996716eb
6d780937b42fe437abca036aed83d4ff1f1072c8
5ee34f92c97028151a63ba5752780f2dfc0abae7505dc49d411769ec4b451078
GET /init?r=0.5040690387308351 HTTP/1.1
Host: retagro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Feb 2023 17:30:51 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Content-Encoding: gzip
retagro.com/analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221677259897424657%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1280%2C%22height%22%3A939%2C%22outerWidth%22%3A1280%2C%22outerHeight%22%3A1024%7D
200 OK 20 B URL HTTP/1.1 retagro.com/analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221677259897424657%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1280%2C%22height%22%3A939%2C%22outerWidth%22%3A1280%2C%22outerHeight%22%3A1024%7D
IP
ASN #8972 Host Europe GmbH
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /analytics?id=null¶ms=%7B%22i%22%3Afalse%2C%22r%22%3A%22%22%2C%22u%22%3A%22https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523%22%2C%22c%22%3A%7B%22advcake_utm_partner%22%3A%22%22%2C%22analytic_id%22%3A%221677259897424657%22%7D%2C%22a%22%3A%7B%7D%2C%22store%22%3A%7B%7D%2C%22width%22%3A1280%2C%22height%22%3A939%2C%22outerWidth%22%3A1280%2C%22outerHeight%22%3A1024%7D HTTP/1.1
Host: retagro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Feb 2023 17:30:51 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
Cache-Control: no-store, no-cache, private
Set-Cookie: user_id=10271336123; path=/; HttpOnly; Secure; SameSite=none; expires=Wed, 23 Aug 2023 17:30:51 GMT; httponly
Content-Encoding: gzip
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=281560315&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=281560315&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=281560315&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1757
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:53 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:53 GMT
last-modified: Fri, 24-Feb-2023 17:30:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=439302886&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259898%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259898&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=439302886&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259898%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259898&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=439302886&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259898%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173138%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259898&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 626714
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:53 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:53 GMT
last-modified: Fri, 24-Feb-2023 17:30:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=3&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=96380366&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=3&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=96380366&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=3&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=96380366&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1341
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:53 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:53 GMT
last-modified: Fri, 24-Feb-2023 17:30:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=610783520&wv-type=3&browser-info=we%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=610783520&wv-type=3&browser-info=we%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=610783520&wv-type=3&browser-info=we%3A1%3Aet%3A1677259899%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173139%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259899&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:53 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:53 GMT
last-modified: Fri, 24-Feb-2023 17:30:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wv-check=3930&wv-type=0&wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1046273689&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wv-check=3930&wv-type=0&wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1046273689&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wv-check=3930&wv-type=0&wmode=0&wv-part=1&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1046273689&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:57 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:57 GMT
last-modified: Fri, 24-Feb-2023 17:30:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=4&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=830506704&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=4&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=830506704&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=4&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=830506704&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:57 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:57 GMT
last-modified: Fri, 24-Feb-2023 17:30:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1028917420&wv-type=3&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1028917420&wv-type=3&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/6051055?wmode=0&wv-part=2&wv-hit=470951319&page-url=https%3A%2F%2Fwww.fl.ru%2Faway%2F%3Fhref%3Dhttps%253A%252F%252Fdocs.google.com%252Fdocument%252Fd%252F1I1d4WO7npvCPNXZoRmzNHbbI4orWpZdPLrlqy36Dgwo%252Fedit%2523&rn=1028917420&wv-type=3&browser-info=we%3A1%3Aet%3A1677259903%3Aw%3A1280x939%3Av%3A970%3Az%3A0%3Ai%3A20230224173142%3Au%3A167725989619013909%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1677259903&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://www.fl.ru
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 24 Feb 2023 17:30:57 GMT
access-control-allow-origin: https://www.fl.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 24-Feb-2023 17:30:57 GMT
last-modified: Fri, 24-Feb-2023 17:30:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext
IP
GET /css?family=Montserrat:300,400,500,700&display=swap&subset=cyrillic-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 24 Feb 2023 17:30:49 GMT
date: Fri, 24 Feb 2023 17:30:49 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.fl.ru/assets/all.de49a196bafa706ce48df4c8ebda5eb7.js
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/all.de49a196bafa706ce48df4c8ebda5eb7.js
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/all.de49a196bafa706ce48df4c8ebda5eb7.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"de49a196bafa706ce48df4c8ebda5eb7"
last-modified: Thu, 03 Nov 2022 08:01:19 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1667462478.32330
x-trans-id: 1724044a18ac275a
x-xss-protection: 1; mode=block
age: 461
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/vue/entry-client.9f0933177f04b07de664c07e14847f6f.js
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/vue/entry-client.9f0933177f04b07de664c07e14847f6f.js
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/vue/entry-client.9f0933177f04b07de664c07e14847f6f.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"9f0933177f04b07de664c07e14847f6f"
last-modified: Tue, 21 Feb 2023 12:14:46 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1676981685.66869
x-trans-id: 1745d5f5450cff09
x-xss-protection: 1; mode=block
age: 38
cache: HIT
x-cached-since: 2023-02-21T12:16:08+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/vue/vendor.a5ce7ef636afb1a9fdc1270459f1833e.js
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/vue/vendor.a5ce7ef636afb1a9fdc1270459f1833e.js
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/vue/vendor.a5ce7ef636afb1a9fdc1270459f1833e.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"a5ce7ef636afb1a9fdc1270459f1833e"
last-modified: Thu, 03 Nov 2022 08:01:19 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1667462478.89438
x-trans-id: 1724044a3ab7a7da
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/vendor.7032140c41eb0b3bd9f235faa097c4e6.js
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/vendor.7032140c41eb0b3bd9f235faa097c4e6.js
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/vendor.7032140c41eb0b3bd9f235faa097c4e6.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"7032140c41eb0b3bd9f235faa097c4e6"
last-modified: Wed, 18 Jan 2023 10:56:52 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1674039411.08806
x-trans-id: 173b61f995dba812
x-xss-protection: 1; mode=block
age: 5
cache: HIT
x-cached-since: 2023-02-17T11:00:16+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/vue/manifest.267b5a81fe9842433cfe9c8fda1e48a6.js
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/vue/manifest.267b5a81fe9842433cfe9c8fda1e48a6.js
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/vue/manifest.267b5a81fe9842433cfe9c8fda1e48a6.js HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: application/javascript
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"267b5a81fe9842433cfe9c8fda1e48a6"
last-modified: Thu, 03 Nov 2022 08:01:19 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1667462478.79759
x-trans-id: 1724044a34f5b9f1
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-02-01T09:27:07+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/vendor.114926bd473d15924d9c42a8ef9c4fd0.css
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/vendor.114926bd473d15924d9c42a8ef9c4fd0.css
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/vendor.114926bd473d15924d9c42a8ef9c4fd0.css HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fl.ru/
Cookie: __ddg1_=kk10F63SyE8csajjhI2G
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:49 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"114926bd473d15924d9c42a8ef9c4fd0"
last-modified: Wed, 18 Jan 2023 10:56:39 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1674039398.18795
x-trans-id: 173b61f694f37ec4
x-xss-protection: 1; mode=block
age: 0
cache: HIT
x-cached-since: 2023-02-17T10:59:19+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.fl.ru/assets/icons.svg
200 OK 0 B URL HTTP/2 cdn.fl.ru/assets/icons.svg
IP
ASN #34665 Petersburg Internet Network ltd.
GET /assets/icons.svg HTTP/1.1
Host: cdn.fl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fl.ru/
Origin: https://www.fl.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 24 Feb 2023 17:30:50 GMT
content-type: image/svg+xml
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, Etag, X-Timestamp, X-Trans-Id, X-Openstack-Request-Id, Content-Length, Accept-Ranges, X-Xss-Protection
cache-control: max-age=2592000
etag: W/"4b95fb91fc8e3a11165c2e5b2c2493e0"
last-modified: Tue, 21 Feb 2023 08:40:00 GMT
x-container-storage-policy-index: 0
x-container-storage-policy-name: Policy-0
x-timestamp: 1676968799.34031
x-trans-id: 1745ca3cf008e52a
x-xss-protection: 1; mode=block
age: 2244
cache: HIT
x-cached-since: 2023-02-21T10:17:00+00:00
x-id: fr5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
185.129.100.57
62.138.6.193
138.201.250.173
147.135.44.9
104.18.20.226
185.221.85.3
23.33.119.27
93.184.220.29