new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
200 OK 13 kB URL HTTP/1.1 new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
IP
ASN #51852 Private Layer INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12915), with CRLF, CR, LF line terminators
Hash 3f1cfb37ca51a5936b65b37a92cc84c5
20a98670cd38a7f0c35399bdaeb3684a71307c58
4b66662e280ea923de0b1a7bc88acc6b13eea81b5e2c336140adc5528dd516b6
GET /torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/ HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Set-Cookie: korjik_test=1; path=/; domain=new-rutor.org
crackers_days=1; expires=Thu, 30-Nov-2023 19:45:03 GMT; path=/
crackers_visited=1; expires=Tue, 06-Dec-2022 19:45:03 GMT; path=/
crackers_time_visited=1670269503; expires=Tue, 06-Dec-2022 15:45:03 GMT; path=/
crackers_views=1; expires=Tue, 06-Dec-2022 15:45:03 GMT; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13050
Expires: Mon, 05 Dec 2022 23:22:33 GMT
Date: Mon, 05 Dec 2022 19:45:03 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5620
Cache-Control: max-age=145196
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:03 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 12:04:59 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6806
Expires: Mon, 05 Dec 2022 21:38:30 GMT
Date: Mon, 05 Dec 2022 19:45:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 19:20:18 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1486
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: XCTrKkrQwilN9eoAGb74J+/JijLzT/02p7SUwWmC1P/tg8yuYau5weyPpDxEsB3A/O5bx98rhkQ=
x-amz-request-id: RKG7ZRGZRKTPPNNC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 18:46:47 GMT
age: 3497
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
new-rutor.org/parse/s.rutor.org/css.css
200 OK 2.1 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/css.css
IP
ASN #51852 Private Layer INC
Hash ee090b48b2d16dc931a50ea2656ad970
a69bdbfb09ec6e3770ad5611088f9897e7ace242
1f95c699b101e56d99c7bf3a312ea01ebfd12ae5c312e93c4ded25da2be30cc7
GET /parse/s.rutor.org/css.css HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/css
Content-Length: 2055
Connection: keep-alive
Last-Modified: Fri, 13 Mar 2015 12:51:21 GMT
ETag: "6fe46da-1c0f-5112af50b2440"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/css/css.css?27047
200 OK 2.0 kB URL HTTP/1.1 new-rutor.org/css/css.css?27047
IP
ASN #51852 Private Layer INC
Hash cf27caab5bbd97f6c91f955b4fbe9fc6
b758fdaccd31ced8865ac542d1dbb51f2b4227ff
f52ed6485ace0d99063349d272f257bce4e0864c6906ed6f428505092549d1c8
GET /css/css.css?27047 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/css
Content-Length: 2021
Connection: keep-alive
Last-Modified: Sun, 12 Jun 2022 05:49:35 GMT
ETag: "6dc1bc8-1739-5e139bc7939c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/grannypatries/s.css?312s37
200 OK 1.7 kB URL HTTP/1.1 new-rutor.org/grannypatries/s.css?312s37
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (493)
Hash 9ece727780fa2d9fa33d566ac6b222bd
ea8262835d247fb869d4ccc4c6fd4a689e5c972e
a1064a598315513c95dac5bf26ce4b6c6772b97c4194343a9ca9fbf6f5770288
GET /grannypatries/s.css?312s37 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/css
Content-Length: 1674
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 17:29:15 GMT
ETag: "6dc1bc4-141b-5ee77180430c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/css/pluso.css?12s5
200 OK 7.0 kB URL HTTP/1.1 new-rutor.org/css/pluso.css?12s5
IP
ASN #51852 Private Layer INC
Hash bdd3f04ad6a706d0fa1e03653ed9246a
6d9563d972879b36fade36277cb47c752908f3a3
ddd141eabee8196f3fbd4db61b3708f2068b6c02a82687f08362085c18ae07ba
GET /css/pluso.css?12s5 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/css
Content-Length: 6982
Connection: keep-alive
Last-Modified: Wed, 27 Mar 2019 07:21:56 GMT
ETag: "6f409d5-137a8-5850e4ae34d00"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/css/web-mirror.css?2
200 OK 89 B URL HTTP/1.1 new-rutor.org/css/web-mirror.css?2
IP
ASN #51852 Private Layer INC
Hash f663e5909c2bc567ff0fadc8056a45f9
80e1be8519ba7653f84dfa13101052b1cb60402f
ab5dc745fa67dfd32635faba73f1681713d66a93610716776d1ecf10d6604e91
GET /css/web-mirror.css?2 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/jquery.cookie-min.js
200 OK 421 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/jquery.cookie-min.js
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (732), with no line terminators
Hash e8addefccbb7c3a993d0fb01692668d6
7fd261a5fc48a21ed16182aeb34e570eec6aa3f2
0d3e6881371d3b4af6bde5d769ad47ce1b6850a205d6b455e16300f9b5d7bcf6
GET /parse/s.rutor.org/jquery.cookie-min.js HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: application/javascript
Content-Length: 421
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46dd-2dc-4f8f8b3bd6ed1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/css/jquery.tablesorter.new-rutor.min.js?1
200 OK 5.7 kB URL HTTP/1.1 new-rutor.org/css/jquery.tablesorter.new-rutor.min.js?1
IP
ASN #51852 Private Layer INC
File type Unicode text, UTF-8 text, with very long lines (11120)
Hash dcc606285207e8a3b2f9b3598aaf7a06
4fdf4a8a639dbc3b4cf571f1a62881aa929e4e02
2c36a1efdd5fcd3ec0f5fb6cb013d7258f3ce6ff4458242b2cbb39bbb083b418
GET /css/jquery.tablesorter.new-rutor.min.js?1 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: application/javascript
Content-Length: 5693
Connection: keep-alive
Last-Modified: Sat, 14 Jun 2014 10:27:07 GMT
ETag: "6dc2b20-48bf-4fbc93c6394c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/southcentral/js.js?08
200 OK 1.1 kB URL HTTP/1.1 new-rutor.org/southcentral/js.js?08
IP
ASN #51852 Private Layer INC
File type Unicode text, UTF-8 text, with very long lines (869)
Hash 8fef974712966dc347bec2ce8d30e839
bfde7e87f7794c54724a85f85de40c7f8b11ee69
16a2baeada118251232eeb744724d2cb07b7535fa8756e550add434afa690cbf
GET /southcentral/js.js?08 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/t/functions.js
200 OK 1.3 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/functions.js
IP
ASN #51852 Private Layer INC
Hash e87b8b960f0ec3616838a69660b60ca9
050487b464998f6727f1a254c918097f365ea3a7
845a13683ff15241036e77fe57cc7827982fbf7727765a1ed588a93523b6b23f
GET /parse/s.rutor.org/t/functions.js HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: application/javascript
Content-Length: 1327
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46dc-d40-4f8f8b3bd4f91"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/css/pluso-like-small.js?10
200 OK 971 B URL HTTP/1.1 new-rutor.org/css/pluso-like-small.js?10
IP
ASN #51852 Private Layer INC
Hash d0cb91e435baf8f2da1b9638f917ad6f
86eee0d106f125da2aba9b5e0e47c6c4e7711f74
32fb7711d50508de258ad4d0a7cfed9ef9b2d12963acdbc1915a99f25f656eaa
GET /css/pluso-like-small.js?10 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: application/javascript
Content-Length: 971
Connection: keep-alive
Last-Modified: Mon, 20 Apr 2020 10:27:27 GMT
ETag: "6f4079e-8dc-5a3b6587521c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/zax/jquery.min.js
200 OK 25 kB URL HTTP/1.1 new-rutor.org/zax/jquery.min.js
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (820)
Hash 73f29c18c6bf146e10cf6ff96f721aa9
e9a49d93652c5fc57e053b142a95e4f02ea45dc3
6ff79b2e46eeb50a24c422cf2e2d1e5389959fe564b8cb53784a00a8394857d8
GET /zax/jquery.min.js HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: application/javascript
Content-Length: 24606
Connection: keep-alive
Last-Modified: Mon, 25 Apr 2016 17:14:40 GMT
ETag: "6f067e3-119ee-531524fd66db2"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/esh-kichum.js?46
200 OK 6.8 kB URL HTTP/1.1 new-rutor.org/esh-kichum.js?46
IP
ASN #51852 Private Layer INC
File type Unicode text, UTF-8 text, with very long lines (1937)
Hash 7803bea87d9619a585c3fc8c2a71ca64
68b261b1dadc0600b58136b58932d8f33f9094e8
29134785fdc794a21eeb83babf39e9b93b78c4cca6ffc6237989300700673fee
GET /esh-kichum.js?46 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
i.postimg.cc/HxHm9d2T/cover.jpg
200 OK 93 kB URL HTTP/2 i.postimg.cc/HxHm9d2T/cover.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 115x115, segment length 16, baseline, precision 8, 391x500, components 3\012- data
Hash 44048f4589d75941e58b70dd649ae3cf
9f077ea489a9033c761ebc7805a824e0670f0d48
d2ef482467edabd77a08d9f4c4a2233a126eef4da102f759fe5ea6daca5a2b72
GET /HxHm9d2T/cover.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: image/jpeg
content-length: 92914
last-modified: Sat, 19 Mar 2022 14:31:56 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
new-rutor.org/js/check.js?100500
200 OK 280 B URL HTTP/1.1 new-rutor.org/js/check.js?100500
IP
ASN #51852 Private Layer INC
File type ASCII text, with CRLF line terminators
Hash 512fc38ee333c22f82f81b94362953cb
063033c79bb25957031a29c4fcff168edf6baaa1
54be993503c05cc1e8164afb5e62dd7c5e911e49e4af1a99a863dffb2e651b2a
GET /js/check.js?100500 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/i/lupa.gif
200 OK 3.1 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/lupa.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 55 x 56\012- data
Hash e2c8f8537818f7880be3ae505852b9ff
2a1f5572e6f4c9efc1700f34d6c6969bedbd8535
6946c64a41b61a1e8708b7bcf8274274c71cdc23932aab32da5b868d19212b3a
GET /parse/s.rutor.org/i/lupa.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 3079
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe4b8d-c07-4f8f8b3bc3652"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/t/top.gif
200 OK 612 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/top.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 24 x 24\012- data
Hash ab3755cddb40723270164fa84b8f0362
a7e6700d02578c03bd76b217b23c55b4fba997ea
79df9f5b18cac4dbaec0808448c15e094b5fe20d04aabfe7bed9e6ae07739dfd
GET /parse/s.rutor.org/t/top.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 612
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1e9a-264-4f8f8b3bd20b1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/i/forum.gif
200 OK 6.0 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/forum.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 250 x 42\012- data
Hash 6ed3646afac817366089cc05d97bc358
0c27adfd80ae76f705fe1c6093ea92c720124e15
d9fd75312b80aa988432407952a1fa963f6a6ca7496d5a7533242475b20c600e
GET /parse/s.rutor.org/i/forum.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 6049
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46c1-17a1-4f8f8b3bd3ff1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash ab28f1507651cc540cace6ec43750779
1645be64a114b32d56b1cb860eeda5e1f8190c13
626f752465936007db6b06dc83a0ac3b1e2b6d65f1e6ef2265f23da26433f830
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 09 Dec 2022 19:14:59 GMT
ETag: "1645be64a114b32d56b1cb860eeda5e1f8190c13"
Last-Modified: Mon, 05 Dec 2022 19:15:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 510
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b32c55b50c-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash ab28f1507651cc540cace6ec43750779
1645be64a114b32d56b1cb860eeda5e1f8190c13
626f752465936007db6b06dc83a0ac3b1e2b6d65f1e6ef2265f23da26433f830
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 09 Dec 2022 19:14:59 GMT
ETag: "1645be64a114b32d56b1cb860eeda5e1f8190c13"
Last-Modified: Mon, 05 Dec 2022 19:15:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 510
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b32a0ab51e-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash ab28f1507651cc540cace6ec43750779
1645be64a114b32d56b1cb860eeda5e1f8190c13
626f752465936007db6b06dc83a0ac3b1e2b6d65f1e6ef2265f23da26433f830
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 09 Dec 2022 19:14:59 GMT
ETag: "1645be64a114b32d56b1cb860eeda5e1f8190c13"
Last-Modified: Mon, 05 Dec 2022 19:15:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 510
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b34c7eb50c-OSL
new-rutor.org/parse/s.rutor.org/i/magnet.gif
200 OK 796 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/magnet.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 30 x 30\012- data
Hash 1a31398a96af2ae3e63de5055912daec
55d558e163c634baeae650b15000f513753f29a8
7c92fab95800728d3ab74659b56bdc267928496ec422f03954679ebe0155cf9a
GET /parse/s.rutor.org/i/magnet.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 796
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe5ac4-31c-4f8f8b3bd3051"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
i2.imageban.ru/thumbs/2022.10.19/0804e24d7275c1a7f1d7039ebe75be82.png
200 OK 5.9 kB URL HTTP/2 i2.imageban.ru/thumbs/2022.10.19/0804e24d7275c1a7f1d7039ebe75be82.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 160x90, components 3\012- data
Hash 248795b62a224ac498112b1d74e23b10
77c919e4c156d36374e5f266b214ed64b36ad1e6
412c35d7b50b03f989e86e779bff102c2eee7848b61cf4e1623ec4f762db1d5c
GET /thumbs/2022.10.19/0804e24d7275c1a7f1d7039ebe75be82.png HTTP/1.1
Host: i2.imageban.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: image/png
content-length: 5869
last-modified: Wed, 19 Oct 2022 08:06:20 GMT
etag: "634faffc-16ed"
accept-ranges: bytes
X-Firefox-Spdy: h2
i1.imageban.ru/thumbs/2022.10.19/a28221d3ba287bfa7ec356a7fe2cfb2e.png
200 OK 4.0 kB URL HTTP/2 i1.imageban.ru/thumbs/2022.10.19/a28221d3ba287bfa7ec356a7fe2cfb2e.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 160x90, components 3\012- data
Hash b743b242855915c75cd4caf5004c7e85
2c33326052019029e3dc793c242a3906872a8709
d780bbd4ac411e7aecba3656381c1167547f36a1a45f35dc714d7292d0b4c577
GET /thumbs/2022.10.19/a28221d3ba287bfa7ec356a7fe2cfb2e.png HTTP/1.1
Host: i1.imageban.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: image/png
content-length: 4045
last-modified: Wed, 19 Oct 2022 08:06:21 GMT
etag: "634faffd-fcd"
accept-ranges: bytes
X-Firefox-Spdy: h2
new-rutor.org/parse/s.rutor.org/t/down.png
200 OK 4.6 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/down.png
IP
ASN #51852 Private Layer INC
File type PNG image data, 27 x 27, 8-bit/color RGBA, interlaced\012- data
Hash 7c13d91e67d4debe5cc1469495197d9d
e58a04673dd493302d7e6f1198b68ffdce39ebc2
d2e05bd0c1f904da109ba2558bcc76c84c48e3de9a2cece178ceba790c6d2bb4
GET /parse/s.rutor.org/t/down.png HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 4603
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1ea0-11fb-4f8f8b3bc74d2"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
i3.imageban.ru/thumbs/2022.10.19/f770493ed857803b227fcf785ef308be.png
200 OK 5.9 kB URL HTTP/2 i3.imageban.ru/thumbs/2022.10.19/f770493ed857803b227fcf785ef308be.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 160x90, components 3\012- data
Hash 59cf9b0b5bc42a4482a5a8f7a841bec1
864972caa042524536c47aba09a2a40631eeb334
b3c933a12faa64dd68d1571e7b3140ebaaeef178af70583b9a6553106db044a0
GET /thumbs/2022.10.19/f770493ed857803b227fcf785ef308be.png HTTP/1.1
Host: i3.imageban.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: image/png
content-length: 5903
last-modified: Wed, 19 Oct 2022 08:06:19 GMT
etag: "634faffb-170f"
accept-ranges: bytes
X-Firefox-Spdy: h2
new-rutor.org/parse/s.rutor.org/i/d.gif
200 OK 359 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/d.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 13 x 13\012- data
Hash 3def66024a583b6ca763e249acb3c426
82f2f897d3e2746181b889811ac675565dcaf0fa
7d4fb7d5a9e681b2313ca88338e3255364aa452f243d6397aa905783e98bfca0
GET /parse/s.rutor.org/i/d.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 359
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46c0-167-4f8f8b3bd7e71"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/i/m.png
200 OK 656 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/m.png
IP
ASN #51852 Private Layer INC
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 1c923e4247dd2fbbc7e407beecf6028c
37a7cd424c135206071cad59df92511df4fb6e5e
efb2d84b9882f1e58d07b358cb77ad0b67fcce154bc7dc70086532abe8f57fff
GET /parse/s.rutor.org/i/m.png HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46d0-290-4f8f8b3bdad50"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/rutor-logo.jpg
200 OK 41 kB URL HTTP/1.1 new-rutor.org/rutor-logo.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x110, components 3\012- data
Hash dfc84b0055c981234dd3f48bb8ea7ec2
43124eced811630622b81e968590e11071c31040
c22baf90cbd403ab7d173f6fa65999a6246d71612d6859181ea7642e98a75279
GET /rutor-logo.jpg HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/jpeg
Content-Length: 40987
Connection: keep-alive
Last-Modified: Sun, 06 Oct 2013 21:18:39 GMT
ETag: "6dc110c-a01b-4e819144909c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash ab28f1507651cc540cace6ec43750779
1645be64a114b32d56b1cb860eeda5e1f8190c13
626f752465936007db6b06dc83a0ac3b1e2b6d65f1e6ef2265f23da26433f830
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 09 Dec 2022 19:14:59 GMT
ETag: "1645be64a114b32d56b1cb860eeda5e1f8190c13"
Last-Modified: Mon, 05 Dec 2022 19:15:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 510
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b3bad6b51e-OSL
i2.imageban.ru/thumbs/2022.10.19/9c38ba2c07b45f24e5c3c63631e79b8c.png
200 OK 3.2 kB URL HTTP/2 i2.imageban.ru/thumbs/2022.10.19/9c38ba2c07b45f24e5c3c63631e79b8c.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 160x90, components 3\012- data
Hash 226aed0960da8565345941bf98a1bcc1
fe33ab9350214ae6ea51fd2143f56b7196c5c250
b948ae7eacf9d978f0a5ff7f390a5ac8fe596cf6fff10105329e939673dee539
GET /thumbs/2022.10.19/9c38ba2c07b45f24e5c3c63631e79b8c.png HTTP/1.1
Host: i2.imageban.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: image/png
content-length: 3179
last-modified: Wed, 19 Oct 2022 08:06:22 GMT
etag: "634faffe-c6b"
accept-ranges: bytes
X-Firefox-Spdy: h2
new-rutor.org/parse/s.rutor.org/i/menu_b1.gif
200 OK 2.5 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/menu_b1.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 81 x 30\012- data
Hash e6e60f34a712eb50e8783b7d5798cd19
edd102808f38d2c3e2d980bb903ee07f2d932150
f04b184eb5417b9a81ab455fc07378efa326bbed2a5c74869b3d876b287307d8
GET /parse/s.rutor.org/i/menu_b1.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/parse/s.rutor.org/css.css
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 2487
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe5c60-9b7-4f8f8b3bd4f91"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/t/news_line.jpg
200 OK 815 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/news_line.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x1, components 3\012- data
Hash 0ae0cab0ed0d41e3dd26ccbb8c17b4d9
c539f0433f976b2509490fc5b5fa9f358b10fa2b
8b9592e1f87ca0409266d4b98fd553dec8c9905ec2782f1c0526db1178e48757
GET /parse/s.rutor.org/t/news_line.jpg HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/parse/s.rutor.org/css.css
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/jpeg
Content-Length: 815
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1ea1-32f-4f8f8b3bd6ed1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/js/video.js?4894
200 OK 4.0 kB URL HTTP/1.1 new-rutor.org/js/video.js?4894
IP
ASN #51852 Private Layer INC
File type Unicode text, UTF-8 text, with very long lines (3879)
Hash 214b0786218a5e2742180c79bdaa267d
3430ff10acf5e6a53d29dace268bbfb78727e1d2
dd85f709930288b71585f9919c374788708cc978b50773099392b9be6166f2c9
GET /js/video.js?4894 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/i/bbackgr.png
200 OK 2.9 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/bbackgr.png
IP
ASN #51852 Private Layer INC
File type PNG image data, 2 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 556ed9fbc3543fde2370f99c737be049
420c334349f796ee85f261bed6753719221a2fe9
a682fdf55d12206673fd39d71e37893badd8286e7c511dfa95e05c0b509b9618
GET /parse/s.rutor.org/i/bbackgr.png HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/parse/s.rutor.org/css.css
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 2859
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe480b-b2b-4f8f8b3bd6ed1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/agrrr/img/movies_btn.gif
200 OK 3.0 kB URL HTTP/1.1 new-rutor.org/agrrr/img/movies_btn.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 170 x 34\012- data
Hash 986dea298e550985fea4a222d746a9f0
eaaa5ecb37610c35ca8516f909158d39d5059524
00568b506987f6412fbceb9b5880521a0212706d7e392eb48c315dabc7a900e5
GET /agrrr/img/movies_btn.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/css/css.css?27047
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 3036
Connection: keep-alive
Last-Modified: Sun, 15 Mar 2015 23:32:06 GMT
ETag: "6f47e88-bdc-5115c243a0980"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/t/icon_plus_1.gif
200 OK 191 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/icon_plus_1.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 9 x 9\012- data
Hash a80048713675f927b56cb662060fca09
0b11a2704361388ef0c7411481600ea47f1cf66d
12511c9756a8556182399c6721b442b7a9182622746a6435032e0eb5179f8641
GET /parse/s.rutor.org/t/icon_plus_1.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/parse/s.rutor.org/css.css
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 191
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1e9b-bf-4f8f8b3bc26b2"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/i/poisk_bg.gif
200 OK 2.0 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/poisk_bg.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 46 x 56\012- data
Hash 76118a48fd5ae4b926e34f4edb427386
4aa5f228e3f511bf626afa6703488d1d7c6df5e0
4912841156c4582948d016867a6c71845a0221f1dd6419ea911f6f83bbc431d7
GET /parse/s.rutor.org/i/poisk_bg.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 1998
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe48ba-7ce-4f8f8b3bd3ff1"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
37.1.217.113/kimjongun/psyduck4/?srt=on
200 OK 1.2 kB URL HTTP/1.1 37.1.217.113/kimjongun/psyduck4/?srt=on
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (351), with CRLF line terminators
Hash a5a30881ba423f7eda00da16ab0e8711
92ea1322392e9912da4467f692eacc9f49153e47
4537d7cd8525414a1591c682a79ff218b3960f6ae61df5ace54d8cba83c76334
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/psyduck4/?srt=on HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/i/com.gif
200 OK 295 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/com.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 11 x 9\012- data
Hash e91f48c29a8f6285ade898585e58f8ad
c171b970bbdb33210c1e9714bc7fa96e42bdb0bf
30bacf9c5db02b0b5fdbe670c15301ec8231d2e526ab20ea5f8dfb8692e02f17
GET /parse/s.rutor.org/i/com.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 295
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46cb-127-4f8f8b3bdbcf0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/t/arrowdown.gif
200 OK 51 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/arrowdown.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 5 x 8\012- data
Hash fe98a58fe6509fb7cb897d25228329d3
34d9e63fe61d4b543f84003c70d0473b6893926f
a045e7b1f5ceaefbab2ef782b86b12de0a41fc2ca34c43cbf6b8b8a107d339ff
GET /parse/s.rutor.org/t/arrowdown.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 51
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1e9d-33-4f8f8b3bdad50"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
37.1.217.113/kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
200 OK 863 B URL HTTP/1.1 37.1.217.113/kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (305), with CRLF line terminators
Hash 70b784159f338279c9b53073c79dd7f0
1deccdc4c0511c0b8de705bef6b330e2aff7904c
0f3e7141e6d8b08a06b722ad52b19d952ea5ccdd25e866e0bf23cf40aafbeff1
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/ HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 732e225315b1e120b8eeedaca2b74a53
5f8d52c54f28dfc6906aff73b397271b064fae69
d31903b741d15dfa04ab956a53a759b960c3b4ec9b419265ec42a5274375b701
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D31903B741D15DFA04AB956A53A759B960C3B4EC9B419265EC42A5274375B701"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7597
Expires: Mon, 05 Dec 2022 21:51:41 GMT
Date: Mon, 05 Dec 2022 19:45:04 GMT
Connection: keep-alive
37.1.217.113/kimjongun/bulbasaur4/?srt=on
200 OK 1.3 kB URL HTTP/1.1 37.1.217.113/kimjongun/bulbasaur4/?srt=on
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 7b43f5514a886c6e01f2b4f544f5831b
a11767996f811eec9c5ab9f862f87f1e513bec63
a7ba8257a1a2b28d95bbf88e15dca73e5153d97fadd334d8ebd2bb60124ed52c
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/bulbasaur4/?srt=on HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/t/arrowup.gif
200 OK 52 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/t/arrowup.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 5 x 8\012- data
Hash 7cbfc089fd0b0d261187a0c1ef0826af
1583fd0ccdd6a7dcb24ef670761ab01387cf87cf
b88cfd011c972f65586f207621005b8b3336773a252e2a309ddbd9b7dda7b8b9
GET /parse/s.rutor.org/t/arrowup.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 52
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe1e9c-34-4f8f8b3bd9db0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/i/backgr.png
200 OK 2.9 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/backgr.png
IP
ASN #51852 Private Layer INC
File type PNG image data, 2 x 40, 8-bit/color RGB, non-interlaced\012- data
Hash c3ce2bb8d4c132e9de2119357cc9996a
a9852953a234009e3f2269bd8b2cc4f2f2c432c9
169a94c46ca015567d2a42296bc93f41bbf6251b46ddbe476d6843da2a1360d6
GET /parse/s.rutor.org/i/backgr.png HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/parse/s.rutor.org/css.css
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 2869
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46d5-b35-4f8f8b3bd5f31"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/parse/s.rutor.org/i/zaiti.gif
200 OK 3.1 kB URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/i/zaiti.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 99 x 30\012- data
Hash 9815ec4cdd376b7d71df61b74a7ce6c6
962c557ce627cc0332bc6ee175914946ff4bd2a1
a1d3e2383ecd387242844341a7200834f5cf3517ab846f17d276a2adc0286421
GET /parse/s.rutor.org/i/zaiti.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 3070
Connection: keep-alive
Last-Modified: Fri, 09 May 2014 14:49:17 GMT
ETag: "6fe46d6-bfe-4f8f8b3bd1111"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
37.1.217.113/kimjongun/under_desc/
200 OK 584 B URL HTTP/1.1 37.1.217.113/kimjongun/under_desc/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash aba61636205de3c62984fd880b742b03
6c6ef0f6790bed1163c228f7eb45e617e4270296
054ae128176c810b1fcb7ca08f086be4760e4c253b23f73152a83d4013325849
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/under_desc/ HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 19:11:19 GMT
cache-control: public,max-age=3600
age: 2025
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
37.1.217.113/chimichanga/galets.js
200 OK 604 B URL HTTP/1.1 37.1.217.113/chimichanga/galets.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 1293075965dcaab0f8b2492c291f404d
9b018e834eb95d7dcdb3cd796c97c0cd96a2a622
03dd10b46dcbdefa4f170224882b6ba0c3b259a7bdb06dd984d150a44d3932b7
Analyzer Verdict Alert quad9 Sinkholed
GET /chimichanga/galets.js HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/kimjongun/psyduck4/?srt=on
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:02 GMT
Content-Type: application/javascript
Content-Length: 604
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 10:15:43 GMT
ETag: "6ec5eda-601-5e88c4b7b71c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/agrrr/img/star.png
200 OK 804 B URL HTTP/1.1 new-rutor.org/agrrr/img/star.png
IP
ASN #51852 Private Layer INC
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 6776065477867f151562cfa57a131d82
e4f63dba014c6be1eaef919389f2dc8ae5a08e19
c58ad482e75127b2dd0fe9e0d15e84b7eb51e16b09208b7b1b46cb6cb5aed999
GET /agrrr/img/star.png HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/css/css.css?27047
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1; kimchi_counter=1; michaelbay_counter=1; pokemoky_counter=1; jassyandjames_rand=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 804
Connection: keep-alive
Last-Modified: Thu, 16 Mar 2017 17:14:22 GMT
ETag: "8125aa3-324-54adc312f5780"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
new-rutor.org/agrrr/img/sort-bg.gif
200 OK 1.3 kB URL HTTP/1.1 new-rutor.org/agrrr/img/sort-bg.gif
IP
ASN #51852 Private Layer INC
File type GIF image data, version 89a, 14 x 150\012- data
Hash 53f7cf3385ab633c3e89cd03e81e345f
a16c805eb1d535e67e6afe3bd98152560270b868
0f2955a402f25983ced88e0332805c9cdda2ec3077b20b0f90fd511a6a423ca8
GET /agrrr/img/sort-bg.gif HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/css/css.css?27047
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1; kimchi_counter=1; michaelbay_counter=1; pokemoky_counter=1; jassyandjames_rand=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/gif
Content-Length: 1264
Connection: keep-alive
Last-Modified: Sat, 12 Apr 2014 15:35:22 GMT
ETag: "6dc280f-4f0-4f6da32c64280"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
ocsp.digicert.com/
200 OK 280 B IP
Hash 8da6c731002155b4d0cbea26cb76db42
2c48b6977c94e39e1c0f43560acbd8b405f62850
3bfcc0a73f5acc61662f6f96a5a90dc6a83ca5ec68d35978081c2044459354f0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3657
Cache-Control: max-age=170197
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:04 GMT
Etag: "638e31cc-118"
Expires: Wed, 07 Dec 2022 19:01:41 GMT
Last-Modified: Mon, 05 Dec 2022 18:00:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 8da6c731002155b4d0cbea26cb76db42
2c48b6977c94e39e1c0f43560acbd8b405f62850
3bfcc0a73f5acc61662f6f96a5a90dc6a83ca5ec68d35978081c2044459354f0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3657
Cache-Control: max-age=170197
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:04 GMT
Etag: "638e31cc-118"
Expires: Wed, 07 Dec 2022 19:01:41 GMT
Last-Modified: Mon, 05 Dec 2022 18:00:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
37.1.217.113/zax/jquery.min.js
200 OK 25 kB URL HTTP/1.1 37.1.217.113/zax/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash 73f29c18c6bf146e10cf6ff96f721aa9
e9a49d93652c5fc57e053b142a95e4f02ea45dc3
6ff79b2e46eeb50a24c422cf2e2d1e5389959fe564b8cb53784a00a8394857d8
Analyzer Verdict Alert quad9 Sinkholed
GET /zax/jquery.min.js HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:02 GMT
Content-Type: application/javascript
Content-Length: 24606
Connection: keep-alive
Last-Modified: Mon, 25 Apr 2016 17:14:40 GMT
ETag: "6f067e3-119ee-531524fd66db2"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5583
Cache-Control: max-age=140091
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:04 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 10:39:55 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
jsn.24smi.net/smi.js
200 OK 29 kB IP
Hash 6ece1d0034711e7d5280667d216749d4
60fb5f2e09c48bf5615b85957bdf12883d4e306e
e1b3b34859956000fe7cf6b407ddb4fe155c1647669ad5a2715199f076bccb29
GET /smi.js HTTP/1.1
Host: jsn.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 19:45:04 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 11:47:07 GMT
etag: W/"6321bf3b-16f76"
content-encoding: gzip
cache-control: max-age=1200
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Mon, 05 Dec 2022 19:45:56 GMT
strict-transport-security: max-age=0
cf-cache-status: HIT
age: 548
access-control-allow-origin: *
server: cloudflare
cf-ray: 774f47b59e9595f4-ARN
X-Firefox-Spdy: h2
counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/
HTTP/1.1 302 Moved Temporarily
Date: Mon, 05 Dec 2022 19:45:05 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635
Content-Length: 32
Expires: Sat, 04 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
37.1.217.113/kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
200 OK 1.2 kB URL HTTP/1.1 37.1.217.113/kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash ee2374bdf0d3af74b05d40ef255123ec
08f05ff8bef30def12857622a2dd3c9b8f7f3fda
04760d2861f3b0c96a7daaa90fff6a2f4a8d02b91b3f21ad488ac299cc4023d6
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/ HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
new-rutor.org/parse/s.rutor.org/favicon.ico
200 OK 894 B URL HTTP/1.1 new-rutor.org/parse/s.rutor.org/favicon.ico
IP
ASN #51852 Private Layer INC
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash ab55f59a775976829d8352a7a0584d3e
e4b29ec4ac46d97ea15c582d61d02c523dd0485b
e68d4b7f22b5027fef4672cc5ba884fb52ac248fd1ca4648c9ac89d95b0e58f4
GET /parse/s.rutor.org/favicon.ico HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1; kimchi_counter=1; michaelbay_counter=1; pokemoky_counter=1; jassyandjames_rand=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:45 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 894
Connection: keep-alive
Last-Modified: Fri, 30 May 2014 11:59:48 GMT
ETag: "7002811-37e-4fa9cc83b1500"
Accept-Ranges: bytes
data.24smi.net/cfg?object=24908&ver=40&pio=true&pps=true&callback=__smiCb1670269502290
200 OK 284 B URL HTTP/1.1 data.24smi.net/cfg?object=24908&ver=40&pio=true&pps=true&callback=__smiCb1670269502290
IP
File type ASCII text, with very long lines (428), with no line terminators
Hash c1982fe6d4fd475d46b286c7a4fc448d
6ae47e1304f7c1fc294d8cc0c9ee319b77b84096
94cf704282280d1d6863d4579eed8af4c37e30fa42dc3c035413bca41593814b
GET /cfg?object=24908&ver=40&pio=true&pps=true&callback=__smiCb1670269502290 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Set-Cookie: smi_uid=KYO4o4nWX; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=0
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47b68c19fac0-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
data.24smi.net/cfg?object=24563&ver=40&pio=true&pps=true&callback=__smiCb1670269502302
200 OK 283 B URL HTTP/1.1 data.24smi.net/cfg?object=24563&ver=40&pio=true&pps=true&callback=__smiCb1670269502302
IP
File type ASCII text, with very long lines (428), with no line terminators
Hash 1aee019a6276e0cea84e294850ea65be
f34db265337deeac633f0f1e5c4525d628d472c0
d991d2686c35cc2cebf2224ed2fd362bcd9cf1b678c2bad44c4ebce6adb292e3
GET /cfg?object=24563&ver=40&pio=true&pps=true&callback=__smiCb1670269502302 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Set-Cookie: smi_uid=xVgMCWeN0; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=0
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47b68d1fb4f3-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
37.1.217.113/kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
200 OK 1.2 kB URL HTTP/1.1 37.1.217.113/kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash ee2374bdf0d3af74b05d40ef255123ec
08f05ff8bef30def12857622a2dd3c9b8f7f3fda
04760d2861f3b0c96a7daaa90fff6a2f4a8d02b91b3f21ad488ac299cc4023d6
Analyzer Verdict Alert quad9 Sinkholed
GET /kimjongun/pikachu_bar_2/?_amp_smp=noteone&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/ HTTP/1.1
Host: 37.1.217.113
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/kimjongun/pikachu_bar_2/?pokemoky=1&f=/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Mon, 05 Dec 2022 19:45:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45-0+deb7u5
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash d790c34c01ac3fcb6c4d0c9c818ef5c4
7e725aaea86b3d5f4adc6892fc8c48e6b6f593e7
223af53f80dcfd913a1dd5f699334ddfd049680ac823e222fc52def84e31da1d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Fri, 09 Dec 2022 18:32:24 GMT
ETag: "7e725aaea86b3d5f4adc6892fc8c48e6b6f593e7"
Last-Modified: Mon, 05 Dec 2022 18:32:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1245
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b74b39b4f4-OSL
data.24smi.net/cfg?object=24832&ver=40&pio=true&pps=true&callback=__smiCb1670269502321
200 OK 284 B URL HTTP/1.1 data.24smi.net/cfg?object=24832&ver=40&pio=true&pps=true&callback=__smiCb1670269502321
IP
File type ASCII text, with very long lines (428), with no line terminators
Hash dcec121dfb89d3708b8efc6ea78c63a9
eba1750d01c3a323afeff83e0e4c456d9959f4d8
6a81b65dfa64e53781849c293787d224812391e97ccf713e47a02dab195f574e
GET /cfg?object=24832&ver=40&pio=true&pps=true&callback=__smiCb1670269502321 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Set-Cookie: smi_uid=0utGvwJxx; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=0
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47b6cd5cb521-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
courteous-development.com/a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU
301 Moved Permanently 162 B URL HTTP/1.1 courteous-development.com/a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU HTTP/1.1
Host: courteous-development.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://courteous-development.com/a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?r;s1280*1024*24;uhttp%3A//new-rutor.org/torrent/892730/adobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk/;hnew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK;0.10595063153227635 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://new-rutor.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Sat, 04 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
new-rutor.org/css/img/pluso/sprite.png?1
200 OK 472 B URL HTTP/1.1 new-rutor.org/css/img/pluso/sprite.png?1
IP
ASN #51852 Private Layer INC
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
GET /css/img/pluso/sprite.png?1 HTTP/1.1
Host: new-rutor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://new-rutor.org/css/pluso.css?12s5
Cookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1670269503; crackers_views=1
HTTP/1.1 200 OK
Server: nginx/1.12.1
Date: Mon, 05 Dec 2022 19:44:44 GMT
Content-Type: image/png
Content-Length: 259091
Connection: keep-alive
Last-Modified: Tue, 14 Apr 2015 04:47:19 GMT
ETag: "78e0019-3f413-513a7eced63c0"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 04 Jan 2023 19:45:04 GMT
ocsp.pki.goog/gts1c3
200 OK 12 kB IP
File type gzip compressed data, from Unix\012- data
Hash 64d381d06f167a168c234a1b69420c6c
df2611c97af28dad3217f60c855c87017cafcc51
7f8f3b2c71095099322878371e44c34c2bca405c7decabd167d00aecc0a8770d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DfNTdBPhixmggrDhW6SEgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ssmSY3/wdsWWtcxFzlH7sNADV/I=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
data.24smi.net/informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24908&template_id=15592&num=6&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=FWZ2nsXL7o&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fpsyduck4%2F%3Fsrt%3Don&callback=__smiCb1670269502291
200 OK 1.5 kB URL HTTP/1.1 data.24smi.net/informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24908&template_id=15592&num=6&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=FWZ2nsXL7o&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fpsyduck4%2F%3Fsrt%3Don&callback=__smiCb1670269502291
IP
File type Unicode text, UTF-8 text, with very long lines (4216), with no line terminators
Hash 789bd243767edb2c10b22e9ef0f7dddf
4dade02928df8995d20611e16039978f828aa976
f34924df6b3410b4edc0c828a499c30cfcaeb04d59d5927602a7f7e3645134ad
GET /informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24908&template_id=15592&num=6&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=FWZ2nsXL7o&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fpsyduck4%2F%3Fsrt%3Don&callback=__smiCb1670269502291 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: no-store
Set-Cookie: smi_uid=TLNuFrTtj; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=0
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47b7cd6efac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash a4567a1e52f99c2b3870f58375ec8cac
dbfc795e71fc19f7e45e8637abc4ac770f639a48
2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73266
date: Mon, 05 Dec 2022 19:45:05 GMT
access-control-allow-origin: *
etag: "6388ac0c-11e32"
expires: Mon, 05 Dec 2022 20:45:05 GMT
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dominantroute.com/bens/vinos.js?24469&u=null&a=0.16778817324906226
200 OK 472 B URL HTTP/1.1 dominantroute.com/bens/vinos.js?24469&u=null&a=0.16778817324906226
IP
ASN #6681 Rozetka Sp. z o.o.
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
GET /bens/vinos.js?24469&u=null&a=0.16778817324906226 HTTP/1.1
Host: dominantroute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 19:45:04 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"
Set-Cookie: uuid=16702694201532635802; expires=Wed, 04-Dec-2024 19:45:04 GMT; Max-Age=63072000; path=/; samesite=None; domain=.dominantroute.com; secure
data.24smi.net/informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24563&template_id=14870&num=18&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=AYPkxRc2HJ&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fbulbasaur4%2F%3Fsrt%3Don&callback=__smiCb1670269502303
200 OK 14 kB URL HTTP/1.1 data.24smi.net/informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24563&template_id=14870&num=18&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=AYPkxRc2HJ&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fbulbasaur4%2F%3Fsrt%3Don&callback=__smiCb1670269502303
IP
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (14476)
Hash 87745fdbfac5d9fbb802cd99147e6999
5d2dcfb336aadd147e4077a4fd82b25e96060464
9d4ecceea326699e38ff3687704516347533e56d4d92858caeb742334d1249d3
GET /informer?psw=1280&psh=1024&pow=1280&poh=1024&pdpr=1&pdt=1670269502&ptz=0&pl=en-US&object=24563&template_id=14870&num=18&ref=http%3A%2F%2Fnew-rutor.org&output=json&chash=AYPkxRc2HJ&extids=&page=http%3A%2F%2F37.1.217.113%2Fkimjongun%2Fbulbasaur4%2F%3Fsrt%3Don&callback=__smiCb1670269502303 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: no-store
Set-Cookie: smi_uid=skPvEj3iP; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=0
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47b8be6afac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fonts.googleapis.com/css2?family=Inter:wght@500&display=swap
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@500&display=swap
IP
Hash c9a3071531d71592a7415091742e498f
fb1b93b805f98ab293b0d061ab289633c4179896
31209d614acc4b8733fd7d42b567fcba7cd1fa9a51dc5525095eff7d81030dbc
GET /css2?family=Inter:wght@500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 19:45:05 GMT
date: Mon, 05 Dec 2022 19:45:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 27 kB IP
File type gzip compressed data, from Unix\012- data
Hash 25688e497f4418fd37b1b72a3931961c
8412d054bd02f01b1dd3b361be797a7a01068d2b
733e733b3ad315d97eaaaf073bc796da1827eaa99dd20c2b803f16d7e0de4246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.8 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
File type gzip compressed data, max compression\012- data
Hash bbb697c89af7585d2a6c9f0b0def8367
b12832b0d9b04140d2c8b73f0b1f0e69124f2ba8
598058e10970c0efd45158d0a05fd7966883de7e7ca2b84f17c97a176e8af9b0
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 09 Dec 2022 17:43:32 GMT
ETag: "878440cc6b7e83189395b78eabad232c23d8f817"
Last-Modified: Mon, 05 Dec 2022 17:43:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1205
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f47b77b14b50c-OSL
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 432669
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 432671
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash 7b08b9e11fc6b8a8a1398b357e874144
4b5fb5790fae1c96655aaa7a426b697f5ab986d0
3728fbdd191d75bad5b83a838dfe2fc15f84c2aaa36ffa573321275847db31a9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:41:49 GMT
expires: Thu, 30 Nov 2023 19:41:49 GMT
cache-control: public, max-age=31536000
age: 432196
last-modified: Wed, 11 May 2022 19:24:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:09:46 GMT
expires: Fri, 01 Dec 2023 08:09:46 GMT
cache-control: public, max-age=31536000
age: 387319
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22760, version 1.0\012- data
Hash d36cf1e01f039283292b186b9c85c883
569131c8375a808d1f6a1ad22786cc6b32ec9820
8a90f9c307d889844f7286c11a9e8596c9a41b2e91123ab49cca0fbaa4b48dc7
GET /s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:56:58 GMT
expires: Wed, 29 Nov 2023 18:56:58 GMT
cache-control: public, max-age=31536000
age: 521287
last-modified: Thu, 21 Apr 2022 16:56:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveQhf6TF0.woff2
200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveQhf6TF0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10292, version 1.0\012- data
Hash 5ce63cee63b77eedf45d5a921666e93c
30b1df82435c87360544cc5f47f4e37a8c7e5704
79784ec903af5c471ab83aaf19b764dfdbef85aa9122472d3c956e151db3a815
GET /s/firasans/v16/va9B4kDNxMZdWfMOD5VnZKveQhf6TF0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:27:07 GMT
expires: Fri, 01 Dec 2023 08:27:07 GMT
cache-control: public, max-age=31536000
age: 386278
last-modified: Thu, 21 Apr 2022 16:51:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasans/v16/va9E4kDNxMZdWfMOD5Vvl4jL.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/firasans/v16/va9E4kDNxMZdWfMOD5Vvl4jL.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22592, version 1.0\012- data
Hash 4528524c7142b4e2d5c0438763223328
d439d881fd8c4f41e77c2fb07678e53fce3e331a
ea03bd5d723c75f6d0a9419d4f9651afd78ea2a4abfcee7f926cbde0681a2671
GET /s/firasans/v16/va9E4kDNxMZdWfMOD5Vvl4jL.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22592
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:50 GMT
expires: Wed, 29 Nov 2023 15:42:50 GMT
cache-control: public, max-age=31536000
age: 532935
last-modified: Thu, 21 Apr 2022 16:51:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasans/v16/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2
200 OK 11 kB URL HTTP/2 fonts.gstatic.com/s/firasans/v16/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2
IP
File type gzip compressed data, from Unix\012- data
Hash 644f601e71d4fe0a778d2b06b40822c4
f9034f38f4fcc83b6c4ae07123e5c700242fcdb7
4f96df4f7fe295940d2bcaeb57ec8f24e0ef9c8cb9e200e7b3585d5866bb3cb5
GET /s/firasans/v16/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://37.1.217.113
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 00:02:51 GMT
expires: Sat, 02 Dec 2023 00:02:51 GMT
cache-control: public, max-age=31536000
age: 330134
last-modified: Thu, 21 Apr 2022 17:08:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img.24smi.net/350_350/3/7/371be1353fbcc99956185634678dec31.jpeg
200 OK 40 kB URL HTTP/1.1 img.24smi.net/350_350/3/7/371be1353fbcc99956185634678dec31.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash 0474e60d715388461213da22bfe9b3c9
a6f9ef7265182aeabb1517890834c9ce956ccaf0
7dcc3ec173b552e51e5a3dd8aff369557b04dc9b0f9392b31a66662f7c0a9807
GET /350_350/3/7/371be1353fbcc99956185634678dec31.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 40388
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=40702, status=webp_bigger
ETag: W/"633aa743-1889c"
Expires: Wed, 27 Sep 2023 15:25:13 GMT
Last-Modified: Mon, 03 Oct 2022 09:11:31 GMT
Age: 351796
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb2dca98fc-ARN
img.24smi.net/350_350/6/a/6a58bb8fc288e9f553136678883bccc7.jpeg
200 OK 40 kB URL HTTP/1.1 img.24smi.net/350_350/6/a/6a58bb8fc288e9f553136678883bccc7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash 292d9df19d07bab17aab6be63d744b44
68e999f867a39719d3ed84e0d82aa0e1469a9c86
a7cecfdb4615bbfa5db271646eae740a6c7432933389b6115aace937a64f5e13
GET /350_350/6/a/6a58bb8fc288e9f553136678883bccc7.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 40157
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=40333, status=webp_bigger
ETag: W/"638ceb1e-18ec3"
Expires: Sat, 30 Sep 2023 18:50:48 GMT
Last-Modified: Sun, 04 Dec 2022 18:46:54 GMT
Age: 54140
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb2f1d98ea-ARN
img.24smi.net/350_350/4/0/40eb3f0e142b79eaa5f78673d711fbce.jpeg
200 OK 42 kB URL HTTP/1.1 img.24smi.net/350_350/4/0/40eb3f0e142b79eaa5f78673d711fbce.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash 18d976208323541c9a0a6b96039aa393
59bc424a985c493f2fc2a2ebfc63436a430dfeee
2f00eb9be19dce183f37257069e9c8388832fce9dc1077e0f4e95d9f77eaa77c
GET /350_350/4/0/40eb3f0e142b79eaa5f78673d711fbce.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 41649
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=41887, status=webp_bigger
ETag: W/"62d7b915-19ca4"
Expires: Mon, 11 Sep 2023 08:00:41 GMT
Last-Modified: Wed, 20 Jul 2022 08:13:09 GMT
Age: 346193
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb29840a29-ARN
img.24smi.net/350_350/f/5/f5b8ab559b1e3c1187591f28f65f2b7f.jpeg
200 OK 33 kB URL HTTP/1.1 img.24smi.net/350_350/f/5/f5b8ab559b1e3c1187591f28f65f2b7f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash accf3526709594f60b5028560d39cef2
7e9540cda1f3d05772505b68fa20d763e7fbac0b
b48215a06a6d96134fe03b167139f448d6c941adc2947e9a86292aa12eca1fd2
GET /350_350/f/5/f5b8ab559b1e3c1187591f28f65f2b7f.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 33127
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=33501, status=webp_bigger
ETag: W/"6388d443-15b52"
Expires: Wed, 27 Sep 2023 17:04:46 GMT
Last-Modified: Thu, 01 Dec 2022 16:20:19 GMT
Age: 6343
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb2f1095fa-ARN
img.24smi.net/350_350/2/5/25fcf2dafdfb1307c7baa2e7132deba4.jpeg
200 OK 43 kB URL HTTP/1.1 img.24smi.net/350_350/2/5/25fcf2dafdfb1307c7baa2e7132deba4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash 9679add45db0280dc720ceb8f0ee0d74
fd75771edbf2235250965fee840cbe66572bbde5
2f5c4d5ec7cb0f76feb6857bd3886530ff70396274891a08cf45296ffc5520a6
GET /350_350/2/5/25fcf2dafdfb1307c7baa2e7132deba4.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 43257
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=43413, status=webp_bigger
ETag: W/"63862238-1968c"
Expires: Mon, 25 Sep 2023 15:25:22 GMT
Last-Modified: Tue, 29 Nov 2022 15:16:08 GMT
Age: 533629
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb291a990e-ARN
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Dec 2022 19:45:05 GMT
access-control-allow-origin: *
etag: "6388ac0c-2b"
expires: Mon, 05 Dec 2022 20:45:05 GMT
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img.24smi.net/350_350/1/2/122b0b00f2659cfe9fc639dad5a424a5.jpeg
200 OK 54 kB URL HTTP/1.1 img.24smi.net/350_350/1/2/122b0b00f2659cfe9fc639dad5a424a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 350x350, components 3\012- data
Hash f8c85c7ed8e07faacbece4a471b9e85b
3f72f44ecde7fcf51189b1914040f04f47c902d5
33c6c33267ca0f2efa3fc52070ea8fdcd7e0893f826439623478e147b7d6d8ac
GET /350_350/1/2/122b0b00f2659cfe9fc639dad5a424a5.jpeg HTTP/1.1
Host: img.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:05 GMT
Content-Type: image/jpeg
Content-Length: 53626
Connection: keep-alive
Cache-Control: max-age=25920000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=54078, status=webp_bigger
ETag: W/"638dd2f3-2230f"
Expires: Sun, 01 Oct 2023 11:53:33 GMT
Last-Modified: Mon, 05 Dec 2022 11:16:03 GMT
Age: 6343
Vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Strict-Transport-Security: max-age=0
CF-Cache-Status: HIT
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Server: cloudflare
CF-RAY: 774f47bb29840a34-ARN
mc.yandex.ru/watch/90533905/1?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/90533905/1?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash fd80a37c68651e74af732301898fee9d
b82a983f80d1521a012672963e9b8db4c1ff4a01
5e3030d453ad8476a06918daa20e5aeffcafa71c191d0392018420f1f99acdd4
GET /watch/90533905/1?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://new-rutor.org
Referer: http://new-rutor.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Mon, 05 Dec 2022 19:45:05 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://new-rutor.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 19:45:05 GMT
last-modified: Mon, 05-Dec-2022 19:45:05 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
data.24smi.net/collect?obj=24908&template_id=15592&teaser_ids=4573902%2C4567118%2C4571851%2C4567140%2C4562816%2C4573903&isizes=350&rd=410&dd=78&t=1670269502292
200 OK 43 B URL HTTP/1.1 data.24smi.net/collect?obj=24908&template_id=15592&teaser_ids=4573902%2C4567118%2C4571851%2C4567140%2C4562816%2C4573903&isizes=350&rd=410&dd=78&t=1670269502292
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /collect?obj=24908&template_id=15592&teaser_ids=4573902%2C4567118%2C4571851%2C4567140%2C4562816%2C4573903&isizes=350&rd=410&dd=78&t=1670269502292 HTTP/1.1
Host: data.24smi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://37.1.217.113/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:45:06 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 19:45:06 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: no-store
Strict-Transport-Security: max-age=0
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f47bf3cf0fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12857
Expires: Mon, 05 Dec 2022 23:19:23 GMT
Date: Mon, 05 Dec 2022 19:45:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12857
Expires: Mon, 05 Dec 2022 23:19:23 GMT
Date: Mon, 05 Dec 2022 19:45:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12857
Expires: Mon, 05 Dec 2022 23:19:23 GMT
Date: Mon, 05 Dec 2022 19:45:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:44 GMT
age: 78922
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcb8fe0c4ba323ab2483fa290c291051
6706e02d6b95edc3a33c951f07d04b0fb7415b77
6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: joWP2kLWVD0lEy2rMV4Fjm3mJh3mzsPyTWiHDVZZNMy5s_WPViKtCw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
content-type: image/jpeg
age: 78997
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:42:39 GMT
age: 79347
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90533905?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20(2022)%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 59 kB URL HTTP/2 mc.yandex.ru/watch/90533905?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20(2022)%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type gzip compressed data, from Unix\012- data
Hash 4af63e045ca06cbb91490455d8a9fe85
cb3657c65babd3eebd3776429a8306e944bb5958
29943e130c5e72779340e0e7e13aaed7c96de824ad7886520692d1a8e2505d20
GET /watch/90533905?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20(2022)%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://new-rutor.org
Connection: keep-alive
Referer: http://new-rutor.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/90533905/1?wmode=7&page-url=http%3A%2F%2Fnew-rutor.org%2Ftorrent%2F892730%2Fadobe-photoshop-2023-23.5.2.751-2022-pc-repack-by-kpojiuk%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A874%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1118557754751%3Ahid%3A871270986%3Az%3A0%3Ai%3A20221205194502%3Aet%3A1670269503%3Ac%3A1%3Arn%3A554473207%3Arqn%3A1%3Au%3A1670269503106989632%3Aw%3A1268x927%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C31%2C121%2C32%2C-6%2C0%2C%2C668%2C49%2C%2C%2C%2C908%3Aco%3A0%3Ans%3A1670269500945%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670269503%3At%3Anew-rutor.org%20%3A%3A%20Adobe%20Photoshop%202023%2023.5.2.751%20%282022%29%20PC%20%7C%20RePack%20by%20KpoJIuK&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Mon, 05 Dec 2022 19:45:05 GMT
access-control-allow-origin: http://new-rutor.org
set-cookie: yabs-sid=588877841670269505; Path=/; SameSite=None; Secure
i=CP7NU8mrIFs/4Dm7SZh896B5qlZX9RLHLCw+lhpDAjZ7dDXK6bAaflOGkBfH5y/E2FLTUQDMwInlnHUcWGD+YvHYrsI=; Expires=Thu, 02-Dec-2032 19:45:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=169324451670269505; Expires=Tue, 05-Dec-2023 19:45:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=169324451670269505; Expires=Tue, 05-Dec-2023 19:45:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701805505.yc.1670269505#1701805505.yrts.1670269505#1701805505.yrtsi.1670269505; Expires=Tue, 05-Dec-2023 19:45:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Dec-2022 19:45:05 GMT
last-modified: Mon, 05-Dec-2022 19:45:05 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kmki-SBINSx1kbiIkaSGebdCLrnDeHVhYeotAWzE__CevkNDdfzRGg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:44:05 GMT
age: 79261
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f71032604eecccf0a81f323a5f96a400
f8866d4f3185bcf7871581d75339998b34d6cf6d
d053eedc717d7fd86e621ba948680be16538396d1ba9854b6816626d149b1c57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6886
x-amzn-requestid: d721caf6-2252-4ede-9533-3d3fcd6cce0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpsw-FfRoAMFtOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d5b39-7644a195142f6c420ec7eac6;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 02:45:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn_L-TMV_ypQZFmolIRm4r5dyj5PpN12jrtafcP9HEkALUPfSzJ38w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 02:45:54 GMT
age: 61152
etag: "f8866d4f3185bcf7871581d75339998b34d6cf6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
courteous-development.com/c.H-VJzKaLGMl_tOZPzQ9Rh-ZTEUlVkWP_TYQZ0aObD-AdzeMfigZ_jidjDk0lm-ZnnoBp2qP_Tskt2uMvD-AxmyZznAJ_2CPDTEEFy-MHDIAJwKJ_mMlNtOZPz-1RoSdTHUR_wWcXyYUZz-QbScUdyeR_igUhyiRjj-ElwmOnToQ_1qLrTsItu-cvyw5xjyZ_GA4BxCNDS-5FjGbH2I0_lKMLkMZNj-cPmQVRhSd_GUlV2WZXX-MZlaMbkcY_xeNfzgEhz-NjTkcllmM_koYpyqMrT-YtxuMvTwM_lyMzkAYB0-NDDEgFwGM_zIJJfKNLD-VNhONPzQg_uScTGU5Vn-JXnYBZhae_Tc0d5eNfj-AhwiJjnkB_hmenWo9p1-drFsBtluc_kwNxsyazW-NBrCPDTEA_mGcHmIVJ2-PLTMENyOM_DQARwSJTn-NVJWZXDYM_9aJbncNdz-PfTgMhmic_3kQl9mMnS-Zp6qbr2s5_luSvWwQx9-NzDAUB2CN_TEQF0GMHg-
302 Found 0 B URL HTTP/2 courteous-development.com/c.H-VJzKaLGMl_tOZPzQ9Rh-ZTEUlVkWP_TYQZ0aObD-AdzeMfigZ_jidjDk0lm-ZnnoBp2qP_Tskt2uMvD-AxmyZznAJ_2CPDTEEFy-MHDIAJwKJ_mMlNtOZPz-1RoSdTHUR_wWcXyYUZz-QbScUdyeR_igUhyiRjj-ElwmOnToQ_1qLrTsItu-cvyw5xjyZ_GA4BxCNDS-5FjGbH2I0_lKMLkMZNj-cPmQVRhSd_GUlV2WZXX-MZlaMbkcY_xeNfzgEhz-NjTkcllmM_koYpyqMrT-YtxuMvTwM_lyMzkAYB0-NDDEgFwGM_zIJJfKNLD-VNhONPzQg_uScTGU5Vn-JXnYBZhae_Tc0d5eNfj-AhwiJjnkB_hmenWo9p1-drFsBtluc_kwNxsyazW-NBrCPDTEA_mGcHmIVJ2-PLTMENyOM_DQARwSJTn-NVJWZXDYM_9aJbncNdz-PfTgMhmic_3kQl9mMnS-Zp6qbr2s5_luSvWwQx9-NzDAUB2CN_TEQF0GMHg-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.H-VJzKaLGMl_tOZPzQ9Rh-ZTEUlVkWP_TYQZ0aObD-AdzeMfigZ_jidjDk0lm-ZnnoBp2qP_Tskt2uMvD-AxmyZznAJ_2CPDTEEFy-MHDIAJwKJ_mMlNtOZPz-1RoSdTHUR_wWcXyYUZz-QbScUdyeR_igUhyiRjj-ElwmOnToQ_1qLrTsItu-cvyw5xjyZ_GA4BxCNDS-5FjGbH2I0_lKMLkMZNj-cPmQVRhSd_GUlV2WZXX-MZlaMbkcY_xeNfzgEhz-NjTkcllmM_koYpyqMrT-YtxuMvTwM_lyMzkAYB0-NDDEgFwGM_zIJJfKNLD-VNhONPzQg_uScTGU5Vn-JXnYBZhae_Tc0d5eNfj-AhwiJjnkB_hmenWo9p1-drFsBtluc_kwNxsyazW-NBrCPDTEA_mGcHmIVJ2-PLTMENyOM_DQARwSJTn-NVJWZXDYM_9aJbncNdz-PfTgMhmic_3kQl9mMnS-Zp6qbr2s5_luSvWwQx9-NzDAUB2CN_TEQF0GMHg- HTTP/1.1
Host: courteous-development.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 05 Dec 2022 19:45:07 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
location: https://10945-2.s.cdn15.com/creatives/171357/216113/448032_45a78.png
x-content-type-options: nosniff
X-Firefox-Spdy: h2
courteous-development.com/cbH-Vdzea.Gflgt_Zizj9khlZ-EnlokpPqT_Qs0tOuDvA-zxMyizZAj_dCDD0EmFZ-nHBI2JPKT_kM2NMODPA-mRZSnTJU2_PWTXEYyZM-DbAcwdJem_lgthZizj1-oldmHnRow_cqyrUsztQ-SvUwyxRyi_UAyBRCjDE-wFOGTHQI1_LKTLIMuNc-yP5QjRZSG_4UxVNWSX5-jZba2b0cl_MekfZgjhc-mjVkhldmG_lo2pZqXrM-ltMukvYwx_NyzzEAzBN-TDcElFMGk_YIyJMKTLY-xNMOTPMQl_MSkTYU0VN-DXgYwZMaz_JcfdNeDfV-hhNizjgku_cmGn5onpJ-nrBshteuT_0w5xNyjzA-wBJCnDBEh_eGWH9I1Jd-FLBMlNcOk_NQsRaSWTN-rVPWTXAYm_cambVc2dP-TfEgyhMiD_AkwlJmnnN-JpZqDrMs9_JunvNwzxP-TzMAmBcC3_QE9FMGSHZ-6JbK2L5Ml_SOWPQQ9RN-DTUU2VNWT_QY0ZMagb
302 Found 0 B URL HTTP/2 courteous-development.com/cbH-Vdzea.Gflgt_Zizj9khlZ-EnlokpPqT_Qs0tOuDvA-zxMyizZAj_dCDD0EmFZ-nHBI2JPKT_kM2NMODPA-mRZSnTJU2_PWTXEYyZM-DbAcwdJem_lgthZizj1-oldmHnRow_cqyrUsztQ-SvUwyxRyi_UAyBRCjDE-wFOGTHQI1_LKTLIMuNc-yP5QjRZSG_4UxVNWSX5-jZba2b0cl_MekfZgjhc-mjVkhldmG_lo2pZqXrM-ltMukvYwx_NyzzEAzBN-TDcElFMGk_YIyJMKTLY-xNMOTPMQl_MSkTYU0VN-DXgYwZMaz_JcfdNeDfV-hhNizjgku_cmGn5onpJ-nrBshteuT_0w5xNyjzA-wBJCnDBEh_eGWH9I1Jd-FLBMlNcOk_NQsRaSWTN-rVPWTXAYm_cambVc2dP-TfEgyhMiD_AkwlJmnnN-JpZqDrMs9_JunvNwzxP-TzMAmBcC3_QE9FMGSHZ-6JbK2L5Ml_SOWPQQ9RN-DTUU2VNWT_QY0ZMagb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cbH-Vdzea.Gflgt_Zizj9khlZ-EnlokpPqT_Qs0tOuDvA-zxMyizZAj_dCDD0EmFZ-nHBI2JPKT_kM2NMODPA-mRZSnTJU2_PWTXEYyZM-DbAcwdJem_lgthZizj1-oldmHnRow_cqyrUsztQ-SvUwyxRyi_UAyBRCjDE-wFOGTHQI1_LKTLIMuNc-yP5QjRZSG_4UxVNWSX5-jZba2b0cl_MekfZgjhc-mjVkhldmG_lo2pZqXrM-ltMukvYwx_NyzzEAzBN-TDcElFMGk_YIyJMKTLY-xNMOTPMQl_MSkTYU0VN-DXgYwZMaz_JcfdNeDfV-hhNizjgku_cmGn5onpJ-nrBshteuT_0w5xNyjzA-wBJCnDBEh_eGWH9I1Jd-FLBMlNcOk_NQsRaSWTN-rVPWTXAYm_cambVc2dP-TfEgyhMiD_AkwlJmnnN-JpZqDrMs9_JunvNwzxP-TzMAmBcC3_QE9FMGSHZ-6JbK2L5Ml_SOWPQQ9RN-DTUU2VNWT_QY0ZMagb HTTP/1.1
Host: courteous-development.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 05 Dec 2022 19:45:07 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
location: https://10945-2.s.cdn15.com/creatives/171357/216113/448032_45a78.png
x-content-type-options: nosniff
X-Firefox-Spdy: h2
10945-2.s.cdn15.com/creatives/171357/216113/448032_45a78.png
200 OK 9.4 kB URL HTTP/2 10945-2.s.cdn15.com/creatives/171357/216113/448032_45a78.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 03cfef95b159bac03fd92ca6864284e6
709a5eba38c15a0fb2c9fff295021019877df5c5
53e0793d137cd5a3896a1ca0126b5548b9d67053eb8a8b8feeb5c501beb045aa
GET /creatives/171357/216113/448032_45a78.png HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://37.1.217.113/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Mon, 05 Dec 2022 19:45:07 GMT
content-type: image/png
content-length: 9418
last-modified: Tue, 27 Sep 2022 12:35:41 GMT
etag: "03cfef95b159bac03fd92ca6864284e6"
x-timestamp: 1664282140.63901
x-trans-id: tx110c496f138d4f98aec28-006332ee22
x-openstack-request-id: tx110c496f138d4f98aec28-006332ee22
expires: Thu, 09 Mar 2023 20:20:57 GMT
cache-control: max-age=8123750
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsog41fW3hOd965Uj5PfSqLO5jngzO4v15H/4XOXMHf5kBdesHq2ojvvXowTQOwGQ5U=
x-served-from: l1
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 106, 22961
accept-ranges: bytes
X-Firefox-Spdy: h2
courteous-development.com/c.H-VTzUaVGWl_tYZZza9bh-ZdEelfkgP_TiQj1kNlD-gnyoNpyqZ_jsdtDu0vm-ZxnyBz2AP_TCADmEZFn-JH2IPJTKA_mMaNWO1Pn-PRWShT0Ud_HWBXzYJZT-NbBcJdTeJ_GgJhTiJjG-MlTmAn5oN_DqUrtsMti-5vzwLxmyN_kAbBjCED1-LFmGNHvIb_SKULyMRNm-NPyQZRWSF_0UaVXWZXl-cZyaUbycR_jeEf1gMhj-MjykNlymU_yoRpjqIry-MtTuUv4wO_SyUzyARBj-QD1ENFDGg_yINJ1K8L3-NNjOYPxQM_SS5TqUcVG-cXmYcZGaF_5cPdTeAfm-chGiFj5kb_3mVn0oUpG-VrysQt2ux_pwYx2ysz9-MBCCZDyEZ_XGYH9IMJC-ZLzMSNWOQ_zQPRSSZTz-cVzW0XzYJ_naNb0cPdT-Efmgehmi9_ukZlUmlnk-PpTqQr1sN_juUv0wNxD-Iz
302 Found 0 B URL HTTP/2 courteous-development.com/c.H-VTzUaVGWl_tYZZza9bh-ZdEelfkgP_TiQj1kNlD-gnyoNpyqZ_jsdtDu0vm-ZxnyBz2AP_TCADmEZFn-JH2IPJTKA_mMaNWO1Pn-PRWShT0Ud_HWBXzYJZT-NbBcJdTeJ_GgJhTiJjG-MlTmAn5oN_DqUrtsMti-5vzwLxmyN_kAbBjCED1-LFmGNHvIb_SKULyMRNm-NPyQZRWSF_0UaVXWZXl-cZyaUbycR_jeEf1gMhj-MjykNlymU_yoRpjqIry-MtTuUv4wO_SyUzyARBj-QD1ENFDGg_yINJ1K8L3-NNjOYPxQM_SS5TqUcVG-cXmYcZGaF_5cPdTeAfm-chGiFj5kb_3mVn0oUpG-VrysQt2ux_pwYx2ysz9-MBCCZDyEZ_XGYH9IMJC-ZLzMSNWOQ_zQPRSSZTz-cVzW0XzYJ_naNb0cPdT-Efmgehmi9_ukZlUmlnk-PpTqQr1sN_juUv0wNxD-Iz
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.H-VTzUaVGWl_tYZZza9bh-ZdEelfkgP_TiQj1kNlD-gnyoNpyqZ_jsdtDu0vm-ZxnyBz2AP_TCADmEZFn-JH2IPJTKA_mMaNWO1Pn-PRWShT0Ud_HWBXzYJZT-NbBcJdTeJ_GgJhTiJjG-MlTmAn5oN_DqUrtsMti-5vzwLxmyN_kAbBjCED1-LFmGNHvIb_SKULyMRNm-NPyQZRWSF_0UaVXWZXl-cZyaUbycR_jeEf1gMhj-MjykNlymU_yoRpjqIry-MtTuUv4wO_SyUzyARBj-QD1ENFDGg_yINJ1K8L3-NNjOYPxQM_SS5TqUcVG-cXmYcZGaF_5cPdTeAfm-chGiFj5kb_3mVn0oUpG-VrysQt2ux_pwYx2ysz9-MBCCZDyEZ_XGYH9IMJC-ZLzMSNWOQ_zQPRSSZTz-cVzW0XzYJ_naNb0cPdT-Efmgehmi9_ukZlUmlnk-PpTqQr1sN_juUv0wNxD-Iz HTTP/1.1
Host: courteous-development.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 05 Dec 2022 19:45:08 GMT
content-length: 0
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
location: https://10945-2.s.cdn15.com/creatives/152327/221589/454827_76611.jpg
x-content-type-options: nosniff
X-Firefox-Spdy: h2
10945-2.s.cdn15.com/creatives/152327/221589/454827_76611.jpg
200 OK 5.9 kB URL HTTP/2 10945-2.s.cdn15.com/creatives/152327/221589/454827_76611.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash b25b5b5897b48cae445fa064747fd00d
bbb2b336bb0505068b6aacc6e8078a338fe9ed47
465387f86c3e0346172e54e336867a7412f4c182cb125da26ca41f76e2752140
GET /creatives/152327/221589/454827_76611.jpg HTTP/1.1
Host: 10945-2.s.cdn15.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://37.1.217.113/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ucdn/1.22.1
date: Mon, 05 Dec 2022 19:45:08 GMT
content-type: image/jpeg
content-length: 5853
last-modified: Wed, 23 Nov 2022 14:43:24 GMT
etag: "b25b5b5897b48cae445fa064747fd00d"
x-timestamp: 1669214603.33353
x-trans-id: txbf9e6110f8f0416481d48-00637f3e00
x-openstack-request-id: txbf9e6110f8f0416481d48-00637f3e00
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsog41fW3hOd965Uj5PfSqLO5jngzO4v15H/4XOXMHf5kGWFKlOXOXOXfGLht+484/Jts6zEvyF1ZH9OemC+xIgV
x-served-from: l1
expires: Sat, 06 May 2023 17:33:59 GMT
cache-control: max-age=13124931
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
x-vhostid: 194, 24379
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap
IP
GET /css2?family=Roboto:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 19:45:05 GMT
date: Mon, 05 Dec 2022 19:45:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap
IP
GET /css2?family=Rubik:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 19:45:05 GMT
date: Mon, 05 Dec 2022 19:45:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Ubuntu:wght@400;500;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Ubuntu:wght@400;500;700&display=swap
IP
GET /css2?family=Ubuntu:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://37.1.217.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 19:45:05 GMT
date: Mon, 05 Dec 2022 19:45:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
courteous-development.com/a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU
200 OK 0 B URL HTTP/2 courteous-development.com/a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU
IP
GET /a/W/5.wqYkWAdDlhQT2t9ak_ZGTW9x6vbp2j5/l_SzWnQR9ENwDAUW2bN/TnQv0pMniN0K0YNcTqYf1/N/DkQZzU HTTP/1.1
Host: courteous-development.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://37.1.217.113/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 19:45:05 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
179.43.157.105
34.117.237.239
104.18.21.226
93.158.134.119
193.200.64.20
93.184.220.29
23.36.77.32
162.19.88.68