Overview

URL goodhealth24.pro/tautonzametkipensionerki/?subid=wf4d1462hidp1l6jif4pdhhk&subid1=120128436}&subid3=62653966&utm_source=mytarget&utm_term=111168&thank_you_page=thank_you_page&lf_utm_source=mytarget&t_id=9&cep=kXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY&lptoken=161b63ee7419104e1829&stream_uuid=bb486ce8-c740-4e5d-9643-ed9d65d4eb9a&utm_content=120128436}&utm_campaign=62653966&utm_medium=5531&subid7=&push=1
IP172.67.150.63
ASNCLOUDFLARENET
Location United States
Report completed2022-09-21 05:47:28 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-21 2 static.bestfeedcpm.com/rpe1h8/qh8vil876/2qtq8hh81pm0uvq0y3yh.js Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (16)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-21 04:08:37 UTC 23.36.76.226
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-20 04:47:04 UTC 34.117.237.239
mnemonic passive DNS mc.yandex.ru (6) 2672 2017-01-29 05:34:36 UTC 2022-09-20 21:24:49 UTC 93.158.134.119
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-21 04:18:21 UTC 34.120.237.76
mnemonic passive DNS cdnjs.cloudflare.com (3) 235 2020-10-20 10:17:36 UTC 2022-09-21 04:03:31 UTC 104.17.25.14
mnemonic passive DNS static.bestfeedcpm.com (3) 886049 2021-03-08 11:11:12 UTC 2022-09-18 15:04:26 UTC 104.21.75.139
mnemonic passive DNS ocsp.globalsign.com (2) 2075 2012-05-25 06:20:55 UTC 2022-09-21 04:02:29 UTC 104.18.20.226
mnemonic passive DNS goodhealth24.pro (2) 0 2022-06-02 12:57:53 UTC 2022-09-17 09:09:19 UTC 104.21.30.20 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-21 04:07:23 UTC 93.184.220.29
mnemonic passive DNS firefox.settings.services.mozilla.com (1) 867 2020-06-04 20:08:41 UTC 2022-09-21 04:18:25 UTC 143.204.55.35
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-21 04:18:32 UTC 143.204.55.110
mnemonic passive DNS api-maps.yandex.ru (5) 32678 2012-11-01 07:04:10 UTC 2022-09-21 04:08:13 UTC 87.250.251.134
mnemonic passive DNS ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-21 04:08:57 UTC 172.64.155.188
mnemonic passive DNS click.lucky.online (2) 580125 2018-12-14 03:12:33 UTC 2022-09-19 23:00:27 UTC 185.203.72.63
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-21 04:20:37 UTC 34.217.237.91
mnemonic passive DNS goodhealth24.pro (2) 0 2022-06-02 12:57:53 UTC 2022-09-17 09:09:19 UTC 172.67.150.63 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 172.67.150.63

Date UQ / IDS / BL URL IP
2022-09-21 05:47:28 +0000
0 - 0 - 1 goodhealth24.pro/tautonzametkipensionerki/?su (...) 172.67.150.63

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-11-28 10:59:44 +0000
0 - 0 - 3 zr6.mzgoodsurvey.top/finance-survey.html 172.67.203.7
2022-11-28 10:55:18 +0000
0 - 0 - 1 www.nativepath.com/1401585725/orders/b84942a8 (...) 23.227.38.74
2022-11-28 10:52:21 +0000
0 - 0 - 1 nl.medicalwholesome.com/20534934-robert-lewan (...) 104.21.50.134
2022-11-28 10:50:28 +0000
1 - 0 - 0 bafybeigotnqwi54p3t6r3vl3tsjo36b3g5ytlmiafw2k (...) 104.18.23.52
2022-11-28 10:45:52 +0000
0 - 0 - 0 wit10g.de 172.67.186.1

Last 1 reports on domain: goodhealth24.pro

Date UQ / IDS / BL URL IP
2022-09-21 05:47:28 +0000
0 - 0 - 1 goodhealth24.pro/tautonzametkipensionerki/?su (...) 172.67.150.63

No other reports with similar screenshot



JavaScript

Executed Scripts (23)


Executed Evals (0)


Executed Writes (3)

#1 JavaScript::Write (size: 16, repeated: 1) - SHA256: 85334ff0d23258a8bc1ca16273f71ff25fb510a0fec9601cddd3b0aa780cf988

                                        18 A5 = BO1@ O 2022
                                    

#2 JavaScript::Write (size: 11, repeated: 1) - SHA256: 60366061d3b37e6c9adca645e9acc3f574edeb96837e7d20be2d3c2a53f79368

                                        21!5 = BO1@ O
                                    

#3 JavaScript::Write (size: 16, repeated: 1) - SHA256: 67857184eed1cbd6716ca1d155001f64f415c368d94b232118dc6e2b8c6e74e0

                                        22 A5 = BO1@ O 2022
                                    


HTTP Transactions (40)


Request Response
                                        
                                            GET /tautonzametkipensionerki/?subid=wf4d1462hidp1l6jif4pdhhk&subid1=120128436}&subid3=62653966&utm_source=mytarget&utm_term=111168&thank_you_page=thank_you_page&lf_utm_source=mytarget&t_id=9&cep=kXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY&lptoken=161b63ee7419104e1829&stream_uuid=bb486ce8-c740-4e5d-9643-ed9d65d4eb9a&utm_content=120128436}&utm_campaign=62653966&utm_medium=5531&subid7=&push=1 HTTP/1.1 
Host: goodhealth24.pro
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.21.30.20
HTTP/1.1 301 Moved Permanently
                                        
Date: Wed, 21 Sep 2022 05:47:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 06:47:17 GMT
Location: https://goodhealth24.pro/tautonzametkipensionerki/?subid=wf4d1462hidp1l6jif4pdhhk&subid1=120128436}&subid3=62653966&utm_source=mytarget&utm_term=111168&thank_you_page=thank_you_page&lf_utm_source=mytarget&t_id=9&cep=kXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY&lptoken=161b63ee7419104e1829&stream_uuid=bb486ce8-c740-4e5d-9643-ed9d65d4eb9a&utm_content=120128436}&utm_campaign=62653966&utm_medium=5531&subid7=&push=1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gSCMmPR60eYGI8QkAHPid9QF52mvkCHg80QXouJnou2YEnVACcGGIIYSYAlocgBs39ZoiznWjnSfm8nCUKC3AOCNT%2BOvSKtOktZ%2F%2Fbt4Abzb5t%2B%2FCbwA%2BmooA3%2F23Fs7mit1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74e08158ee860afe-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 05:13:32 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GwfBZkeiv7GuxxkPAl9N4HXAVojKJPUuv8x-EEXtAXRxO1YdD1cH8Q==
Age: 2025


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6678
Expires: Wed, 21 Sep 2022 07:38:35 GMT
Date: Wed, 21 Sep 2022 05:47:17 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZNmRdoRoH2TF3YseEJHg0k08OnxjzlFu47eLqCo67KaE18oJag-TYw==
age: 4324
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 21 Sep 2022 05:47:17 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
content-length: 26909
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14e4a"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2453761
expires: Mon, 11 Sep 2023 05:47:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sWCNUL1nxxPwhRt0tid7qpFmqaOFbRp3ZCIxMUSHOe%2FPQs52Le71nrSOwZzipfAnY7KOfNAQerlvY0EuD7oj7scPGABFM8aiQxZKKCzsFasmWasqpTSPpsAg5ytQZdeAASGkAQv9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74e0815c48f10afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32065)
Size:   26909
Md5:    63827323c175768ccb0e8ed54589a3e5
Sha1:   9760e238d6ecced66396798559f70593793d801e
Sha256: 196f9479a27db836a2a7454e222f0cb52d4eeb162e0a50e69401ba1a8d81b564
                                        
                                            GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1556218
expires: Mon, 11 Sep 2023 05:47:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uAlB7uD0CPYyuUS6kuYxCeRbmuOJg%2FP4xYLaaKjZ0lv4CPPlv0rV17GlWf1OZuN9M%2F66stsojPpCyV9ARrIhaGedkLbPGeFAMxhJrbVHrHKxXRQCcgLQQoXT6BljagwgiiGsY8Eg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74e0815c48f40afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1266)
Size:   591
Md5:    414869f16aa77a65b4928a018f7f1abb
Sha1:   cea521f7a2958a50239526ed6b068f0937527653
Sha256: afee364ce513c6517247b81cce5eb5eadb1dbbb35e439eb3fa97bbc15fac2cd3
                                        
                                            GET /ajax/libs/jquery-url-parser/2.3.1/purl.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
content-length: 1578
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-1187"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5392908
expires: Mon, 11 Sep 2023 05:47:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2FlZgeRvKz6I%2F0JWSAX4x3oYiNDIGYhw%2BSXpN0a%2B8QZNyQm5%2FNj2%2BrRt2aYnveIaGHco%2BuL5MXPuLuDH2KZ7IBTMsEnXcdVX7G0cvmqtN3PUxKREYAheFfJw8axxJG1cx%2Bg2Pi%2Fy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74e0815c690c0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4487), with no line terminators
Size:   1578
Md5:    f686c69b4eb18d2d28f5e5b4044dde69
Sha1:   123f064833df3dec193c05204622d4ea9d9b9ddc
Sha256: 545368746b235799deaf1e94fec42cd093c1480b2bb31940470596aec072c9ea
                                        
                                            GET /qc98qh7bj1iuo0pypk/t2qtq2/tq2/pm0t2quel27r.js HTTP/1.1 
Host: static.bestfeedcpm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.75.139
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
content-length: 0
cf-bgj: minify
etag: "62f60e8f-0"
last-modified: Fri, 12 Aug 2022 08:25:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4855
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XgRUHXM7K7ddzNqFp%2FpOsT3DzXcxiPcPxDVC4GRxS1t2Gn8guJLOM3POyiLnjyYNDvX0U14hDcDKwJrRXij%2Fm8yPUixFP3Isx7zE%2BdH8uw32Zk26FjKS4dQW9ABJszwRtkTwx8AVNXF1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e0815cae3ab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 05:47:18 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 25 Sep 2022 03:19:25 GMT
ETag: "a86cc40fa27a536a9054208bd132185000bfd303"
Last-Modified: Wed, 21 Sep 2022 03:19:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1557
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74e0815dcb56fab8-OSL


--- Additional Info ---
Magic:  data
Size:   2650
Md5:    692946649693438d7959a71d2f20b690
Sha1:   e6d182116e5ca9c41ed01ebbfafcceac696c4325
Sha256: c58586a2163feafda2c2bf61dde42594cea4a1d4a9c8877b1e2e0d8c3c02481a
                                        
                                            GET /2.0-stable/?load=package.standard&lang=ru-RU HTTP/1.1 
Host: api-maps.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         87.250.251.134
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
vary: Accept-Encoding
date: Wed, 21 Sep 2022 05:47:18 GMT
x-content-type-options: nosniff
set-cookie: _yasc=/Ax+846XFiV3os/WCO/oQaUxM68z1EV/9MaxL0KXkG86mQ==; domain=.yandex.ru; path=/; expires=Fri, 21-Oct-2022 05:47:18 GMT; secure i=7voydF282WzBZ68EUMVtwzMRGWLMcDLZby+0g6rqJVNhyNt9KStckooI8t1ZyU0ghWuvl2uIs7I5W5HNBnNHWFLFgXI=; Expires=Fri, 20-Sep-2024 05:47:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"11dc5-0B+wFaCChZj7KNGJtHpVFy/Pr1E"
x-xss-protection: 1; mode=block
expires: 0
x-lighttpd-locale: ru_RU
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   20695
Md5:    cf474ec7098d4a2b758a9020464b9229
Sha1:   b5ba9673c20cec18bd591f154fc98d1f33068b2f
Sha256: b524affb45ff206bf9ce1e18e34bbcc5b0601032c6925ebc4367db62143baba3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 05:47:18 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 20 Sep 2022 00:15:25 GMT
Expires: Tue, 27 Sep 2022 00:15:24 GMT
Etag: "82676476e716bbedd477b09a43a879dea59e8219"
Cache-Control: max-age=497885,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74e081611a6ab51d-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5948
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 05:47:18 GMT
Last-Modified: Wed, 21 Sep 2022 04:08:10 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /click/ip-location.html HTTP/1.1 
Host: click.lucky.online
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.203.72.63
HTTP/1.1 200 OK
Content-Type: application/vnd.api+json; charset=UTF-8
                                        
Server: nginx
Date: Wed, 21 Sep 2022 05:47:18 GMT
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-VARITI-CCR: 6745359949:37
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: rerf=AAAAAGMqpWaq5UT0BTN9Ag==; expires=Fri, 21-Oct-22 05:47:18 GMT; path=/ ipp_uid=1663739238796/WOI2SGbGvHerhOFr/LEWXtvf9rjCII9KKHI/wMg==; Expires=Tue, 31 Dec 2030 23:59:59 GMT; Path=/
Connection: keep-alive
Keep-Alive: timeout=60


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Size:   80
Md5:    bedc094f62f1b09a6d437aaf811a9320
Sha1:   5d76550369b0e0fdec52709037c847ccf31285d1
Sha256: 62496c36689b0a0b3582c298b3cd0fb425b286203e04b1063851dbeaace3c5a9
                                        
                                            GET /click/ip-location.html HTTP/1.1 
Host: click.lucky.online
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.203.72.63
HTTP/1.1 200 OK
Content-Type: application/vnd.api+json; charset=UTF-8
                                        
Server: nginx
Date: Wed, 21 Sep 2022 05:47:18 GMT
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-VARITI-CCR: 6745361255:17
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: rerf=AAAAAGMqpWaZQkTXA44xAg==; expires=Fri, 21-Oct-22 05:47:18 GMT; path=/ ipp_uid=1663739238909/Wwwvn7AtXH86FJVK/0UV14BSCeRk74aNMpRrbkA==; Expires=Tue, 31 Dec 2030 23:59:59 GMT; Path=/
Connection: keep-alive
Keep-Alive: timeout=60


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Size:   80
Md5:    bedc094f62f1b09a6d437aaf811a9320
Sha1:   5d76550369b0e0fdec52709037c847ccf31285d1
Sha256: 62496c36689b0a0b3582c298b3cd0fb425b286203e04b1063851dbeaace3c5a9
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZJWKV0nEDgXi/sjXogiVng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.217.237.91
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gZz6sd+xLNXIhDqZX4hkVsywli0=

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 21 Sep 2022 05:47:19 GMT
Content-Length: 940
Connection: keep-alive
Expires: Sun, 25 Sep 2022 03:48:07 GMT
ETag: "85bd8cf24f85d4707458bb2a7b0e3de4fed4b02d"
Last-Modified: Wed, 21 Sep 2022 03:48:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74e081652f09fab8-OSL


--- Additional Info ---
Magic:  data
Size:   1900
Md5:    0867a488220c1068543caecc43a300bd
Sha1:   2069bad5650fa0a8a001929be4eca9c27a594c1a
Sha256: c2c428c75f05d84ad7e369dfaf303d399b81a2c484e6e5c2c5272930d6ad5e9a
                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 72207
date: Wed, 21 Sep 2022 05:47:19 GMT
access-control-allow-origin: *
etag: "63295b76-11a0f"
expires: Wed, 21 Sep 2022 06:47:19 GMT
last-modified: Tue, 20 Sep 2022 09:19:34 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Size:   72207
Md5:    27e20c7dbfa3e9cb49571531093d3023
Sha1:   a0f047f86b421891cef771da8171160e831a8471
Sha256: f25ce8f6f6a4fe1fda545849cc37eada3d1f12779d6411b02fcd16e5345e6d5d
                                        
                                            GET /2.0/images/ef50ac9e93aaebe3299791c79f277f8e.cur HTTP/1.1 
Host: api-maps.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.251.134
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 326
date: Wed, 21 Sep 2022 05:47:19 GMT
set-cookie: _yasc=cxQwL3an5d59AqZieLIKlOEt7zVgOJIZe47HQt5RONt1ng==; domain=.yandex.ru; path=/; expires=Fri, 21-Oct-2022 05:47:19 GMT; secure i=EALphtA0PLAIa2cB5/qAb6UkFYsUkNPU4frNGn1cl62njxmJPERuHdpX/PmPzdub5gk0YGtgNkDWytT2HdnM3v3vBi4=; Expires=Fri, 20-Sep-2024 05:47:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: "6294de9f-146"
accept-ranges: bytes
last-modified: Mon, 30 May 2022 15:11:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows cursor resource - 1 icon, 32x32, hotspot @15x15\012- data
Size:   326
Md5:    ef50ac9e93aaebe3299791c79f277f8e
Sha1:   fbd667e863c8278950e7761aee54b394cd93ea0c
Sha256: 13e327b334d10b2b24101040eecace86aaaa2eed03d282fa75a04aa3bebf69c1
                                        
                                            GET /2.0/images/3ce22e999d54bb9ca8150a59207f9d3e.cur HTTP/1.1 
Host: api-maps.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.251.134
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 326
date: Wed, 21 Sep 2022 05:47:19 GMT
set-cookie: _yasc=LMx9a/JY/Tc1JXlfrcTBKoBaFSOL+tR/N5jHlE75goTx5w==; domain=.yandex.ru; path=/; expires=Fri, 21-Oct-2022 05:47:19 GMT; secure i=oipQgmPg0ZQ1NPUgIvkZHixiCBatSJNZCTWktSnZGYGq44ZGC69z5pjokc5xr5e1Uwlo6qUgDG6l1Tc3BgWIAcpCrA8=; Expires=Fri, 20-Sep-2024 05:47:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: "6294de9f-146"
accept-ranges: bytes
last-modified: Mon, 30 May 2022 15:11:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows cursor resource - 1 icon, 32x32, hotspot @15x15\012- data
Size:   326
Md5:    3ce22e999d54bb9ca8150a59207f9d3e
Sha1:   f30d68405751e730ca94ada8628df45b4839931f
Sha256: a0fb89588dc7b711c0ffddb5fa2f6852f670ef1f615985bb65b2ea446cceb79f
                                        
                                            GET /2.0/images/4965b66fe115b2f2ed500ece66514d86.cur HTTP/1.1 
Host: api-maps.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.251.134
HTTP/2 200 OK
content-type: application/octet-stream
                                        
content-length: 326
date: Wed, 21 Sep 2022 05:47:19 GMT
set-cookie: _yasc=vN4NBsf97UJKiNtFAItplEgPYFPjz86Nl82b3vR2twP9Cg==; domain=.yandex.ru; path=/; expires=Fri, 21-Oct-2022 05:47:19 GMT; secure i=z/TYvIATXCoumzaS+kZaLdoHk1qOOaaBvVEz5nRvxS0eALplvcl9xHt4Vyid8N7nCKWRTnE7jMHKzUH0zQ1fOCsRXLw=; Expires=Fri, 20-Sep-2024 05:47:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: "6294de9f-146"
accept-ranges: bytes
last-modified: Mon, 30 May 2022 15:11:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 2 colors\012- data
Size:   326
Md5:    4965b66fe115b2f2ed500ece66514d86
Sha1:   32074b76fca8a0382b474c1b9555d6742b274986
Sha256: 128811e08fc761c192794eadb0ca1ece135e0b3a8ea7d897c2f7f9fd5a37281f
                                        
                                            GET /2.0/combine?modules=3O3E8V04060q0807091c1d010j0*0-0d0.0g0!0s0)0Q1f1a1g5X0J5Y2F3Y3I3,3B3D3$355r5s5W0a504T136u3-1u1-193S3T3V3U3R3P5t5u7H45414247494X4)4(4!4.4_4*4-7$815g5i5l5m8*8E896y6g4q3(8R8P8M8N8O8X8W8Y1(1!6h565V5S7f7k7i7e1k1i0G0F$S5d5a5f6r6s6t1.6m1H4t4z4Q4Z4j4J$f$c$W$j-m$e$1$9$_$*-R-H-L-M-P-S-O005-050,$2$,0Z$a031b0(0_5x0u0b$--d0e576x0f0Y0X$Q7c4M0r2E3N527l-Y5$1*-F-D-E-06c-V1j2M2v2x2y2D323M3_6N3F7g39$M$G$37F54$q6L0W6d6w6M4S$b0K176v1r333Z0L0N0I5o$k1t1w5p7G4V51465e43-i44$7$i2N2O2L$m4U402c4$2K2H-p83847-825k5h-n-f5n8(8F8$6W6V6X6S3J1v757I7K5I5F585_5,6l6a556k5T6f6p5U6i$l9J-l-U-t5R7h1h$F$O5c5b0S0T7_0c$81_6o0O1A$B141K$u-G-N-I$g02$)$J$Z0$5B-b-k6P6_6Q6.0p1s88$o$n1q2w2l2A2r2B1Z-T6759-s$Y4o8U6b$t2p6Y6A666D6C6B$N0P2G2C$X4a0M0R0H$4482e2f$r1Q2n1J2i787776747973878!8G6R6I6H6K6F1B6n1M1S105M5Q5Z5)5q$s69$D$R6*0t0h0l1y1D-w-K7d8-$H-h-g6O7b$y6)$d2g2a2o2t4x-21m4s808T6Z2b1z2m2s1)2I2k$06e4Y0U2u!n!m!o!l72856z$K$L!3!2!4!5!68v8w8l8n8m8o8i8A8C8B8D8x6T6E$T$5121T114,68-o$!0k-u-r53-W!Y4I$A$x8S6q6$2h1,2d!G$I.5.y_N_K_R_a_e-Z_f_b_d.6!P!O8u8k!T!U!V!S!W!p!r8y*g*f!F4W1F1Y1R1G1E5($z0n-v-3!X-5.4.K.M.v.F.D.U.0.B_V_P_T_M_w-J-z_i_n.t.l.r!N!I!L.O8p8t_u!d_g$C$V0i7m.h.f.e.H.R.d_F_y_I_B_D.a!k!h!f_p!c-q5.3)36303K3q6U&jsonp_prefix=ymaps HTTP/1.1 
Host: api-maps.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.251.134
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
vary: Accept-Encoding
date: Wed, 21 Sep 2022 05:47:19 GMT
x-content-type-options: nosniff
set-cookie: _yasc=bdtxoQKzrKeXb0Qv8cAfTomNIC7CAZgSjgwpVRqm6eCnvA==; domain=.yandex.ru; path=/; expires=Fri, 21-Oct-2022 05:47:19 GMT; secure i=ZTRcmpnZA/f7Yr2FtGJxab3FUnFYf4G3P9gNRCQkEuXdOmXLnsS5dIR1LhT0avYa56kfBXQ46QMYUv/A+M+B1FjRH2Q=; Expires=Fri, 20-Sep-2024 05:47:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"d7e29-wh9fPj1axPcaUWdsGhoexMzXlVY"
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   269493
Md5:    f7ebed0454a9cf8a896135deaa216cd6
Sha1:   d3fe9f2554259e99fa0e4458525da1e313b73964
Sha256: dcd75a5a4e7b35fd5c29a323889b55323524aa9cf70262aab054f387e452e703
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Wed, 21 Sep 2022 05:47:19 GMT
access-control-allow-origin: *
etag: "63295b76-2b"
expires: Wed, 21 Sep 2022 06:47:19 GMT
accept-ranges: bytes
last-modified: Tue, 20 Sep 2022 09:19:34 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/88633285?wmode=7&page-url=https%3A%2F%2Fgoodhealth24.pro%2Ftautonzametkipensionerki%2F%3Fsubid%3Dwf4d1462hidp1l6jif4pdhhk%26subid1%3D120128436%7D%26subid3%3D62653966%26utm_source%3Dmytarget%26utm_term%3D111168%26thank_you_page%3Dthank_you_page%26lf_utm_source%3Dmytarget%26t_id%3D9%26cep%3DkXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY%26lptoken%3D161b63ee7419104e1829%26stream_uuid%3Dbb486ce8-c740-4e5d-9643-ed9d65d4eb9a%26utm_content%3D120128436%7D%26utm_campaign%3D62653966%26utm_medium%3D5531%26subid7%3D%26push%3D1&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abkhw48i07cggsex1juigo%3Afp%3A832%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A903%3Acn%3A1%3Adp%3A0%3Als%3A1140179728668%3Ahid%3A77401037%3Az%3A0%3Ai%3A20220921054719%3Aet%3A1663739240%3Ac%3A1%3Arn%3A426724856%3Arqn%3A1%3Au%3A166373924018384804%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C26%2C47%2C1%2C302%2C0%2C%2C1290%2C115%2C%2C%2C%2C1709%3Ans%3A1663739237198%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663739240%3At%3A%D0%91%D1%8B%D0%BB%D0%B0%20%D0%B1%D0%B0%D0%B1%D0%BA%D0%BE%D0%B9%20%D1%81%20%D0%BA%D0%B0%D1%82%D0%B0%D1%80%D0%B0%D0%BA%D1%82%D0%BE%D0%B9%2C%20%D0%B0%20%D1%81%D1%82%D0%B0%D0%BB%D0%B0%20%D0%B7%D1%80%D1%8F%D1%87%D0%B5%D0%B9!%20%D0%9F%D1%80%D0%B5%D0%BA%D1%80%D0%B0%D1%81%D0%BD%D0%BE%D0%B5%20%D0%B7%D1%80%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B7%D0%B0%20%D0%BA%D0%BE%D0%BF%D0%B5%D0%B9%D0%BA%D0%B8%20-%20%D1%8D%D1%82%D0%BE%20%D1%80%D0%B5%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE!&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/88633285/1?wmode=7&page-url=https%3A%2F%2Fgoodhealth24.pro%2Ftautonzametkipensionerki%2F%3Fsubid%3Dwf4d1462hidp1l6jif4pdhhk%26subid1%3D120128436%7D%26subid3%3D62653966%26utm_source%3Dmytarget%26utm_term%3D111168%26thank_you_page%3Dthank_you_page%26lf_utm_source%3Dmytarget%26t_id%3D9%26cep%3DkXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY%26lptoken%3D161b63ee7419104e1829%26stream_uuid%3Dbb486ce8-c740-4e5d-9643-ed9d65d4eb9a%26utm_content%3D120128436%7D%26utm_campaign%3D62653966%26utm_medium%3D5531%26subid7%3D%26push%3D1&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abkhw48i07cggsex1juigo%3Afp%3A832%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A903%3Acn%3A1%3Adp%3A0%3Als%3A1140179728668%3Ahid%3A77401037%3Az%3A0%3Ai%3A20220921054719%3Aet%3A1663739240%3Ac%3A1%3Arn%3A426724856%3Arqn%3A1%3Au%3A166373924018384804%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C26%2C47%2C1%2C302%2C0%2C%2C1290%2C115%2C%2C%2C%2C1709%3Ans%3A1663739237198%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663739240%3At%3A%D0%91%D1%8B%D0%BB%D0%B0%20%D0%B1%D0%B0%D0%B1%D0%BA%D0%BE%D0%B9%20%D1%81%20%D0%BA%D0%B0%D1%82%D0%B0%D1%80%D0%B0%D0%BA%D1%82%D0%BE%D0%B9%2C%20%D0%B0%20%D1%81%D1%82%D0%B0%D0%BB%D0%B0%20%D0%B7%D1%80%D1%8F%D1%87%D0%B5%D0%B9%21%20%D0%9F%D1%80%D0%B5%D0%BA%D1%80%D0%B0%D1%81%D0%BD%D0%BE%D0%B5%20%D0%B7%D1%80%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B7%D0%B0%20%D0%BA%D0%BE%D0%BF%D0%B5%D0%B9%D0%BA%D0%B8%20-%20%D1%8D%D1%82%D0%BE%20%D1%80%D0%B5%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%21&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 21 Sep 2022 05:47:19 GMT
access-control-allow-origin: https://goodhealth24.pro
set-cookie: yandexuid=9754218991663739239; Expires=Thu, 21-Sep-2023 05:47:19 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=9754218991663739239; Expires=Thu, 21-Sep-2023 05:47:19 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=2680503391663739239; Path=/; SameSite=None; Secure i=GW1rwQCnt0B4M5RzCmUpVej7v9Bvo1yHVBdocKw64LXFxYwA16BOR9wJ1djm243q7ivj7rOK+p9tLoABy2XGFwZi8AQ=; Expires=Sat, 18-Sep-2032 05:47:15 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1695275239.yrts.1663739239#1695275239.yrtsi.1663739239; Expires=Thu, 21-Sep-2023 05:47:19 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 21-Sep-2022 05:47:19 GMT
last-modified: Wed, 21-Sep-2022 05:47:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Size:   400
Md5:    2dcf0db2083bf4647f82fb27dbb79679
Sha1:   9f2eb1f71c45e57d74ccf173d30a9bc1c17e029a
Sha256: 2a7076fa14100d7db29a64cfef68264a9b874c9b30c89c1f49e9314b3537812b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9429
Expires: Wed, 21 Sep 2022 08:24:29 GMT
Date: Wed, 21 Sep 2022 05:47:20 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9429
Expires: Wed, 21 Sep 2022 08:24:29 GMT
Date: Wed, 21 Sep 2022 05:47:20 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9429
Expires: Wed, 21 Sep 2022 08:24:29 GMT
Date: Wed, 21 Sep 2022 05:47:20 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9429
Expires: Wed, 21 Sep 2022 08:24:29 GMT
Date: Wed, 21 Sep 2022 05:47:20 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e3MMA-NVstIsR7M9_JGH05i1e8pK17RsjyERrSMlC3uoHsWw_7ABtA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 19:18:32 GMT
age: 37728
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10244
Md5:    14e6ddceb639a5f4875aecb796f95c79
Sha1:   b1cd04a66852694284eeef16a1cde38896e33c03
Sha256: 4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7383
x-amzn-requestid: 32b97df0-b979-4e80-a54f-cae77affc915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy2sHJ_oAMF0bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31c4-2c6db6e21fa1db233a4c1f49;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cgtMqpEEGh4T-E7vTcy_XhKVaoN9trQ_gtoxx1igk62zYATMmZBQCA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:41:30 GMT
age: 29150
etag: "96048f054243b5a13f14ab3dd9f4a0f3f2e0feae"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7383
Md5:    681b3e236c8b9bc524d935af247ec72b
Sha1:   96048f054243b5a13f14ab3dd9f4a0f3f2e0feae
Sha256: aaa2f649fd336f89b3c0fc1d9226f8763f5a8cd850826a7f0819ebe7414fbf2a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F689f6ab4-a759-42b3-82a8-f66964d5ece4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9574
x-amzn-requestid: 3dfa0e8c-77e6-4fc5-9f64-00ac854abbfa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy1mEj2IAMFWdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31bd-745819ba4b5c16ee6e649ad7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: huvZVDXGF4n0xe8WcPyCtzH4E4UzNo4xprREMsCnwi0aTDhsRWVFhg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:41:30 GMT
age: 29150
etag: "3371965b4417ee0b74a3a5094adfc1632d4849b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9574
Md5:    eff7103898a5102e685ce6741cdf19f8
Sha1:   3371965b4417ee0b74a3a5094adfc1632d4849b1
Sha256: c326683c06d56a02d8c1a36dd34c1eff1b9d242b8b5280a1824b0602ccd28020
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12654
x-amzn-requestid: efc99152-2b51-462d-b48b-67ba8263b1cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJOGVYoAMFcvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-00eeb6913e06ac151f293263;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: nSWUmBqJPIBYNoLtyrfAN7CK4367b6TEku9eki8BGJVdTWW3dSyckw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 07:21:22 GMT
age: 80758
etag: "d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12654
Md5:    f7b780d39877eea116277625aaa01f1b
Sha1:   d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db
Sha256: ca9d59056e0a3f512d36db11f4a4bd3109c2ce1e13b29b5f40dce84df079e71f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rq4QHCD4EubBKHyCj7jyKqpct5d7U33TvNufqj_w8mWunqQsouoh7w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:25:17 GMT
age: 26523
etag: "09bd3300d710c3212483159f8398b84cde09da26"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7507
Md5:    4d98acc059a69d51165fb5e0c7430ea3
Sha1:   09bd3300d710c3212483159f8398b84cde09da26
Sha256: 6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5174
x-amzn-requestid: 19cef827-7a71-4789-ae2f-03861f7d65c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsvkiG9BoAMFqRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63282c83-695865cd7f0a236300a179cb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 08:46:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pt-UpDrev8YQvpm0E3xWMpkUSsxo80_jlCq1jJ0ePrpLb9rE7_kQ8w==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:45:39 GMT
age: 25301
etag: "cf334c1fc3191c5dcafaa2df55f62a10e16fda69"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5174
Md5:    5a21b393fc4213d090f794f3eeee2333
Sha1:   cf334c1fc3191c5dcafaa2df55f62a10e16fda69
Sha256: 43553a352e6d7c8108bd5152d1c949d8acfb922344a00f8c77c986e2d8f665d9
                                        
                                            POST /webvisor/88633285?wmode=0&wv-part=1&wv-hit=77401037&page-url=https%3A%2F%2Fgoodhealth24.pro%2Ftautonzametkipensionerki%2F%3Fsubid%3Dwf4d1462hidp1l6jif4pdhhk%26subid1%3D120128436%7D%26subid3%3D62653966%26utm_source%3Dmytarget%26utm_term%3D111168%26thank_you_page%3Dthank_you_page%26lf_utm_source%3Dmytarget%26t_id%3D9%26cep%3DkXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY%26lptoken%3D161b63ee7419104e1829%26stream_uuid%3Dbb486ce8-c740-4e5d-9643-ed9d65d4eb9a%26utm_content%3D120128436%7D%26utm_campaign%3D62653966%26utm_medium%3D5531%26subid7%3D%26push%3D1&rn=916980615&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1663739243%3Aw%3A1268x939%3Av%3A903%3Az%3A0%3Ai%3A20220921054723%3Au%3A166373924018384804%3Avf%3Abkhw48i07cggsex1juigo%3Awe%3A1%3Ast%3A1663739243&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Wed, 21 Sep 2022 05:47:23 GMT
access-control-allow-origin: https://goodhealth24.pro
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 21-Sep-2022 05:47:23 GMT
last-modified: Wed, 21-Sep-2022 05:47:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/88633285?wmode=0&wv-part=1&wv-hit=77401037&page-url=https%3A%2F%2Fgoodhealth24.pro%2Ftautonzametkipensionerki%2F%3Fsubid%3Dwf4d1462hidp1l6jif4pdhhk%26subid1%3D120128436%7D%26subid3%3D62653966%26utm_source%3Dmytarget%26utm_term%3D111168%26thank_you_page%3Dthank_you_page%26lf_utm_source%3Dmytarget%26t_id%3D9%26cep%3DkXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY%26lptoken%3D161b63ee7419104e1829%26stream_uuid%3Dbb486ce8-c740-4e5d-9643-ed9d65d4eb9a%26utm_content%3D120128436%7D%26utm_campaign%3D62653966%26utm_medium%3D5531%26subid7%3D%26push%3D1&rn=269153374&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1663739243%3Aw%3A1268x939%3Av%3A903%3Az%3A0%3Ai%3A20220921054722%3Au%3A166373924018384804%3Avf%3Abkhw48i07cggsex1juigo%3Awe%3A1%3Ast%3A1663739243&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 277638
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Wed, 21 Sep 2022 05:47:23 GMT
access-control-allow-origin: https://goodhealth24.pro
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 21-Sep-2022 05:47:23 GMT
last-modified: Wed, 21-Sep-2022 05:47:23 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/88633285?wv-check=56499&wv-type=0&wmode=0&wv-part=1&wv-hit=77401037&page-url=https%3A%2F%2Fgoodhealth24.pro%2Ftautonzametkipensionerki%2F%3Fsubid%3Dwf4d1462hidp1l6jif4pdhhk%26subid1%3D120128436%7D%26subid3%3D62653966%26utm_source%3Dmytarget%26utm_term%3D111168%26thank_you_page%3Dthank_you_page%26lf_utm_source%3Dmytarget%26t_id%3D9%26cep%3DkXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY%26lptoken%3D161b63ee7419104e1829%26stream_uuid%3Dbb486ce8-c740-4e5d-9643-ed9d65d4eb9a%26utm_content%3D120128436%7D%26utm_campaign%3D62653966%26utm_medium%3D5531%26subid7%3D%26push%3D1&rn=715423067&browser-info=gdpr%3A14%3Aet%3A1663739246%3Aw%3A1268x939%3Av%3A903%3Az%3A0%3Ai%3A20220921054726%3Au%3A166373924018384804%3Avf%3Abkhw48i07cggsex1juigo%3Awe%3A1%3Ast%3A1663739246&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://goodhealth24.pro
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Wed, 21 Sep 2022 05:47:26 GMT
access-control-allow-origin: https://goodhealth24.pro
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 21-Sep-2022 05:47:26 GMT
last-modified: Wed, 21-Sep-2022 05:47:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /tautonzametkipensionerki/?subid=wf4d1462hidp1l6jif4pdhhk&subid1=120128436}&subid3=62653966&utm_source=mytarget&utm_term=111168&thank_you_page=thank_you_page&lf_utm_source=mytarget&t_id=9&cep=kXTaNMKLOPsFgZ8z848-iAcX4ySP_fAgLMH9FW0qO-8ksk7WmpXOTRb_C893qCnlgN0TK46PHtcmYC6jNHXFyvfr8u36nd4Iyd-lwIY_qE-_Ck3SdccxbSTgMY_UZHc2-QtEmdRCrdYaM11qLeNHYhMq-7i_6GzXqKZlj9v-NBqKo2x5a-54P9RqENvsVBhuacy8Gzoabz0trmwxopEX04lhuvF_7v4S7qf2toAxy7S0vjtfgIoNGYn3SX9L4wGz6E2OuOhczAGsmf1BLBfGly-SeguFYpmmk3r5HPb8m4NImAGKlZkgakXITt5dUAm7sr8YiMZ__y-DgWqVyujoybhcyjjIsDu_nzzhiNajV1lq0gp3a0R-u2LvT5osWTkpZzGy7PJlTWZJUvbkAmhwbHxArsOUj_YRncfUOIpTz5HwNdPfY4Z2aMXlaCtJIrxXe7El3Df014dkmOaXkJSNcrPJcynXqxssQ9-_5-_zAI_jsMXIiYqt0xmJPVIN_U0Sb2HFh8bGN3RUyLHoCVmUoktLRPS7gybqrYJK16TToIY&lptoken=161b63ee7419104e1829&stream_uuid=bb486ce8-c740-4e5d-9643-ed9d65d4eb9a&utm_content=120128436}&utm_campaign=62653966&utm_medium=5531&subid7=&push=1 HTTP/1.1 
Host: goodhealth24.pro
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         172.67.150.63
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
x-powered-by: PHP/7.4.29
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GanDYa7ntruDeBMotSfrxQZXWSghoMCi4FWr%2F9gtwHhsvn3XOAMPH9HH2Q4HoEposW9UXVw28THQxUDqg8dHGoNsn2uzHbtqx0cvpW1txAJ0rButyAzU3e9oHv2imkOJpEId"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e0815ab8890b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /zhn97aiu1/9a7/91217l/l17qt20mp/p0mbj7rhl.js HTTP/1.1 
Host: static.bestfeedcpm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.75.139
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
cf-bgj: minify
etag: W/"62f60e8f-12a"
last-modified: Fri, 12 Aug 2022 08:25:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSUwtPPIBl%2B6%2B0xYcjZEBYXcrqrK6w6rRG6wmW%2Be8GxKmouNatQO%2BtaVULL4YHc7CiQswMC5TChpngubr%2FvY2nuTm%2B9jDj2gUsEjLYy1Ri7d9uzJaudhd6oM82YJtq1hP8dOhb9QQHPm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e0815cae37b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /rpe1h8/qh8vil876/2qtq8hh81pm0uvq0y3yh.js HTTP/1.1 
Host: static.bestfeedcpm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goodhealth24.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.75.139
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 21 Sep 2022 05:47:17 GMT
cf-bgj: minify
etag: W/"62f60e8f-d89"
last-modified: Fri, 12 Aug 2022 08:25:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tx32DWfQDQfL6GfGwmoNf19fcZDg3FqquYCqehJdIty4ZhQyLnqmDxmAFZGlJH6ujpgwUgxApRaXMtP1Noe6D2HPQYVs%2BhLKFAZsr6ls5qO3a%2Fzm0ly2ub3q%2BJRXB02MO8Rqn%2F7KDVQA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e0815cae3db51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware