joxi.ru/E2p5XWQHv5MMPA
301 Moved Permanently 364 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7f34cadf32e2b75b1d64909a67375a27
2623b955181492b0f3eae7d099a14711277b3385
50f8cfb1caccde1db9c64256afd61fad276d240084a15447bdb2bb62b8c54d5b
GET /E2p5XWQHv5MMPA HTTP/1.1
Host: joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 Feb 2023 07:25:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.26
Cache-Control: private, must-revalidate
Location: http://joxi.net/E2p5XWQHv5MMPA
pragma: no-cache
expires: -1
Vary: Accept-Language
Set-Cookie: js=wFwn3er-8MzND%2CQBxXz0BsbvsZdwzLgjaZ-H%2CQrJr8efLg3qBXFVLZmqI0wl8mq8%2CpgjXKhIWd9tYqAXnCEW%2C2; path=/
lunetics_locale=en; expires=Wed, 08-Feb-2023 07:25:52 GMT; path=/; httponly
Node: vs10
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6886
Expires: Tue, 07 Feb 2023 09:20:38 GMT
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9931
Expires: Tue, 07 Feb 2023 10:11:23 GMT
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17569
Expires: Tue, 07 Feb 2023 12:18:41 GMT
Date: Tue, 07 Feb 2023 07:25:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 06:34:07 GMT
content-type: application/json
age: 3105
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bDyiNrdcuvk17h9rBREOWGdaaI059ENlB+3JmmBhNatZ/jEnR8S1N/H3E49J6Ahd4yk+6vAxso0=
x-amz-request-id: 9B65S7GTGPTQEA74
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 06:45:28 GMT
age: 2424
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:52 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
joxi.net/E2p5XWQHv5MMPA
200 OK 5.6 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (431), with CRLF, LF line terminators
Hash ec61403bbd6f174e96f0d181e839f6bb
2b0a31b8bb5b42750180eb2101e80de400c62b75
66a3f1d990f4580d50438ad1a1542eac11ae1eae09ad174af8221558abe49b75
GET /E2p5XWQHv5MMPA HTTP/1.1
Host: joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.45
Cache-Control: no-cache
Date: Tue, 07 Feb 2023 07:25:52 GMT
Vary: Accept-Language
Set-Cookie: js=kVfcihfrkUectpFTBLtv9zLrBxO2WuzNI7e97eHokz-KA9H4yRdPwZRkaFeVwmQpufYutZHmALvEtNuM6vy9l0; path=/
lunetics_locale=en; expires=Wed, 08-Feb-2023 07:25:53 GMT; path=/; httponly
Node: vs13
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/videojs-ie8.min.js
200 OK 9.6 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/videojs-ie8.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (27236), with no line terminators
Hash a80bb4cc60cfd3e960e0336c9cbf8e99
d9f9999007b9fe6e97b5b188b59355c2cc8af962
554eab323e8bd7716a1aa8b0365edd65d015ea7a488b8772ad3c2dcad10d41c1
GET /assets/video-js/videojs-ie8.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/video-js.css
200 OK 15 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/video-js.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (12483)
Hash ba8c2f399c2058e514f9436fc36b425c
5d566364bc82239b68c7cc3aeffd98403ce13310
99b6d2d589c288c8709bbc4cdb613a624a999d9881af4b2e5bf54159387cc0c2
GET /assets/video-js/video-js.css HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/lang-en.js
200 OK 325 B URL HTTP/1.1 cdn.joxi.ru/assets/js/lang-en.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 86afa16046b722323203baf9bbb82f8b
8f6efdc245c9815d1211f358ecb5366f3c2a879a
c49511af4f4a02ddfe9856512a215c88dc38d0a5a298c09ffab127957ec0c6f3
GET /assets/js/lang-en.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Content-Length: 325
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-145"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/css/common_3d899dba.css
200 OK 36 kB URL HTTP/1.1 cdn.joxi.ru/assets/css/common_3d899dba.css
IP
ASN #24940 Hetzner Online GmbH
File type assembler source text\012- assembler source, Unicode text, UTF-8 text
Hash 0fb3145ae8690d4990f2f89eb77fc2e2
230d0b5ff795f1a8d43b6d88198e86ef8c54bb22
60ac269b14c2da8461a6b33a192fcdac9c6d520fcd98e84afed5e54df42b25e0
GET /assets/css/common_3d899dba.css HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 09 Jun 2020 13:50:40 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/jquery-1.11.1.min.js
200 OK 36 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/jquery-1.11.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32086)
Hash 8445953ea1b2b87a77605996a027e70a
17020d294ea2a0487a337342b9b337892c6a944a
f12966674335f9021e09b016785cf256ce3331293c1b10783bcce8898ab6e2da
GET /assets/js/jquery-1.11.1.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs13
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/jquery-2.2.1.min.js
200 OK 33 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/jquery-2.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32019)
Hash babe8001c39ee2ca531ea5c2c6276325
8ed6c04a85d7e818f356ce195f64d0a0783da67e
fe36ab50f79332aad6c59cd974594b0d98c20a88afb051b8666a2294d62268ee
GET /assets/js/jquery-2.2.1.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/video-js/video-js-5.9.2.min.js
200 OK 67 kB URL HTTP/1.1 cdn.joxi.ru/assets/video-js/video-js-5.9.2.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32012)
Hash 3e8f312b20f385371febf56de3015879
5c86f07d77f45d7071c77eca53ff386dc89ecdd2
0ccc5a49264c4df559ae79f4c0d9561a1efd8056b4d91f3cbfd82c7cf59562b4
GET /assets/video-js/video-js-5.9.2.min.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/js/common_79cf64d9.js
200 OK 26 kB URL HTTP/1.1 cdn.joxi.ru/assets/js/common_79cf64d9.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (789)
Hash 199afa6ba4e122b9cfedfb4afc208865
5a396c2e650c99d5d0e0b0a4e960231684a3eb65
f5eadc5633b14e589e8bdba099b8014572e2b1736c274f6b281ca6717fae4b04
GET /assets/js/common_79cf64d9.js HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2020 20:48:11 GMT
Node: vs10
Access-Control-Allow-Origin: *
Content-Encoding: gzip
cdn.joxi.ru/assets/images/userpic-default.png
200 OK 1.5 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/userpic-default.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced\012- data
Hash 1b240659255d73dd910ccb761ded4f56
0e6da96eacc6f7d7df73cba9045a2e511ad52f6d
0ff196c9d9258507ab91d23671e4b07818fabdfe1167056787bf5b721fe3799e
GET /assets/images/userpic-default.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/png
Content-Length: 1519
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-5ef"
Node: vs10
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
dl4.joxi.net/drive/2023/02/07/0052/2126/3438670/70/6f614907dc.jpg
200 OK 95 kB URL HTTP/1.1 dl4.joxi.net/drive/2023/02/07/0052/2126/3438670/70/6f614907dc.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 572x517, components 3\012- data
Hash 46d44257ca92928707de1e8d9c264891
fc18360cfd0b3f3fc5175037ca5789e16b94d832
75081e926a308030c7ccdd607ab2935dd23699a06cdb850ae6f2d8103de8f2cf
GET /drive/2023/02/07/0052/2126/3438670/70/6f614907dc.jpg HTTP/1.1
Host: dl4.joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/jpeg
Content-Length: 94951
Last-Modified: Tue, 07 Feb 2023 04:04:11 GMT
Connection: keep-alive
ETag: "63e1cdbb-172e7"
Access-Control-Allow-Origin: joxi.ru, joxi.net, beta.joxi.ru, beta.joxi.net
node: vs01
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 06:51:19 GMT
age: 2074
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
rotarb.bid/248h9.min.js?6dde16f
200 OK 20 kB URL HTTP/1.1 rotarb.bid/248h9.min.js?6dde16f
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (63133), with no line terminators
Hash ec2877c1f521e8ebcf0c722fa2919c81
14f91201949e8dd7a1488bb73a62eb2fa5b5e149
ec393922acb5cabdfd3b509ad542a8a245322d89bf3b26b21c8d63b793bcdaf1
GET /248h9.min.js?6dde16f HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Cache-Control: max-age=300
Expires: Tue, 07-Feb-2023 09:30:53 EET
Duration: 402987
Strict-Transport-Security: max-age=63072000
Content-Encoding: gzip
cdn.joxi.ru/assets/images/logo.png
200 OK 27 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/logo.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 116 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 7928b5b1e81f046a0ca2dc5b3e96dcc4
593341a8210ed0259cc481bea2ac97acdce1b2b7
b3aa5d847dd7a9e291a4fcdd26d5fca89f59cd9f9b8e2e5a7761cad0bad8815c
GET /assets/images/logo.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.joxi.ru/assets/css/common_3d899dba.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/png
Content-Length: 27135
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-69ff"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/images/icons-flags.png
200 OK 3.6 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/icons-flags.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 20 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash a8bc0832473ab7a0a60f93edc19085f2
07d2396c9efb49971c5e369c11671c58233c97ba
d506d736956ae463d7d2c5896d2ea92232aa2006c42e1c185cedc99d8d775d87
GET /assets/images/icons-flags.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.joxi.ru/assets/css/common_3d899dba.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/png
Content-Length: 3577
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-df9"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
200 OK 67 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (554)
Hash ef43d3ffb8aef2b411a0b682c4b1ad69
4eda3ff7d52a8f45881d9856c425d92a0ae037ef
62813252c14a793232d7c1bd6cff9d05ea450c30b9e1b4a0a6dd115ebfac4b56
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"28b9e-k7VMbzLlxta0PUMGv7+1skJZRMc"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 Feb 2023 07:25:53 GMT
age: 37402
x-served-by: cache-fra-eddf8230043-FRA, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 67152
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash c7efdde0ae9b6915d7cc299ac61585ca
cc980c9ae1312f2cf37d9d3e846785387c435150
28979796bc89064613e837365c8869f9aa923820bcb6079efb3fcf8b54f21e7d
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "649DD59AA36E72D3CAEFC42F180962BFCA6FD4A8"
Expires: Tue, 07 Feb 2023 19:00:00 GMT
Last-Modified: Tue, 07 Feb 2023 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 839
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64e9d8880b41-OSL
cdn.joxi.ru/assets/images/icons.png
200 OK 70 kB URL HTTP/1.1 cdn.joxi.ru/assets/images/icons.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 242 x 807, 8-bit/color RGBA, non-interlaced\012- data
Hash fc87c39d53b4e68a9c47b305f0943fab
4c03c5ece71bc98fda09b04c34593185735e6718
b86b29f13ca937b3a0f884eea766b082d994c125820f0835fea7dcf117ae4b63
GET /assets/images/icons.png HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.joxi.ru/assets/css/common_3d899dba.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/png
Content-Length: 70165
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-11215"
Node: vs10
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/fonts/helveticaneuecyr-light-webfont.woff
200 OK 24 kB URL HTTP/1.1 cdn.joxi.ru/assets/fonts/helveticaneuecyr-light-webfont.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 24132, version 1.0\012- data
Hash cabd33a55ebc96aab3cf9f02f2acaace
3fb4c86aa1684db0f92cf0019b1c7db70310197e
6344718a67ed4427607fc3163e1af2a302b22bc9164c138e9950e9c47ad59dd4
GET /assets/fonts/helveticaneuecyr-light-webfont.woff HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://joxi.net
Connection: keep-alive
Referer: http://cdn.joxi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: font/woff
Content-Length: 24132
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-5e44"
Node: vs10
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
cdn.joxi.ru/assets/fonts/helveticaneuecyr-ultralight-webfont.woff
200 OK 26 kB URL HTTP/1.1 cdn.joxi.ru/assets/fonts/helveticaneuecyr-ultralight-webfont.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 25740, version 1.0\012- data
Hash e4bc1c2afd9ba699e90116b055812539
e16d1cc0d90dd60bdeda5f34848aa61f630aa1a0
b16c52edca6da03f0e8d51d188b34ed03f4b29de7b7e09e08b5f4b7f0b25bbca
GET /assets/fonts/helveticaneuecyr-ultralight-webfont.woff HTTP/1.1
Host: cdn.joxi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://joxi.net
Connection: keep-alive
Referer: http://cdn.joxi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/font-woff
Content-Length: 25740
Connection: keep-alive
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
ETag: "5a7827a6-648c"
Node: vs13
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
rotarb.bid/248h9.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 1a0d920f8e19408f8487e55573371e41
5003098648ce1491a1b09a2daced53e3061a037e
4c10308890fbb65caef1c24f1211ad16568a17ba246cb1b7a2afb38fee77e00f
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 81
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
rotarb.bid/248h9.json
200 OK 189 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash f102d43c34b3e6f168a3a7e134d00918
c8cc1d00e1a742625db0135e32e80fea22335fa9
bae7e58fefe4c984c0539769971f96647216af059ae9b0c0700f5d6c0ef5a524
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 278
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/json
Content-Length: 189
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4865
Expires: Tue, 07 Feb 2023 08:46:58 GMT
Date: Tue, 07 Feb 2023 07:25:53 GMT
Connection: keep-alive
rotarb.bid/media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png
200 OK 385 kB URL HTTP/1.1 rotarb.bid/media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 240 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 385 kB (385096 bytes)
Hash 56bc9cb8d843453fafb510507f5a0cd0
a6749c40f379673429ffd3273d08b40afe332c04
13595fec98790a573137335e23ead84834ce336edc309a2c57b56783f3211eb0
GET /media/images/teaser/6/8/9/0/5/7/7/6890577.rffa3v.png HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/png
Content-Length: 385096
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Fri, 22 Jul 2022 12:46:29 GMT
ETag: "62da9c25-5e048"
Expires: Tue, 07 Feb 2023 07:35:53 GMT
Cache-Control: max-age=600, public, must_revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 3d2787fda5e5883cdc9cc55b3aa495fe
f8efc6895b41ff9370d0c72355248553c855de92
9f227fed8892fcb96aca2f41e76fe253df308f590772533c867a8cf32ba41369
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 11 Feb 2023 06:24:40 GMT
ETag: "f8efc6895b41ff9370d0c72355248553c855de92"
Last-Modified: Tue, 07 Feb 2023 06:24:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 494
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64eb89bb0b41-OSL
mc.yandex.ru/watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 62077a992b095a491d61906731102871
81e999225b1157e99acb31dea3c7617b67df8619
c12c0b45bde026b2e2eedc66d570934221247ecf5b7579478dba27c1f9e2536a
GET /watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Referer: http://joxi.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 07 Feb 2023 07:25:53 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:53 GMT
last-modified: Tue, 07-Feb-2023 07:25:53 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z9n0JDKkZ0De0O7uWcqVog==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ur54ERdn/8PXD1smQzwC527fqNU=
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Tue, 07 Feb 2023 05:43:33 GMT
Expires: Tue, 07 Feb 2023 07:43:33 GMT
Cache-Control: public, max-age=7200
Age: 6141
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
joxi.net/favicon.ico
200 OK 1.2 kB IP
ASN #24940 Hetzner Online GmbH
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 546dbe511faa76b1ba0cb49ee5223856
d0598d0e0639857572882e2d915c34387f7e4547
3318698dcf656d03f7fdf432aab1e8771b55a4aebcae24c42f38e0087a3ee919
GET /favicon.ico HTTP/1.1
Host: joxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/E2p5XWQHv5MMPA
Cookie: js=kVfcihfrkUectpFTBLtv9zLrBxO2WuzNI7e97eHokz-KA9H4yRdPwZRkaFeVwmQpufYutZHmALvEtNuM6vy9l0; lunetics_locale=en; _ym_uid=1675754802745000121; _ym_d=1675754802
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:53 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Mon, 05 Feb 2018 09:45:10 GMT
Connection: keep-alive
ETag: "5a7827a6-47e"
Node: vs13
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c398b3efc966f31b63f4acc6f1c47551
c49f8bcf1142356f5a9f9260aafc2287e96deb34
ee98d7419fc748cef49095cc01238121561743a4e232ed9e49684d93dda0b0ca
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:13:15 GMT
ETag: "c49f8bcf1142356f5a9f9260aafc2287e96deb34"
Last-Modified: Tue, 07 Feb 2023 05:13:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2764
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64ed5b960b41-OSL
mc.yandex.ru/watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 74 kB URL HTTP/2 mc.yandex.ru/watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /watch/14929090?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14929090/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754802%3Ac%3A1%3Arn%3A687010706%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754802%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 07 Feb 2023 07:25:53 GMT
access-control-allow-origin: http://joxi.net
set-cookie: yabs-sid=1942183461675754753; Path=/; SameSite=None; Secure
i=wL8wVZ4f7FV1E/G+oXnjVN6OuqwzMCzq93300OgrEYWZ/8WhD21A8WBiJZku06aXAhFgx+sWDHm1QX7VFGvg7u4wHYU=; Expires=Fri, 04-Feb-2033 07:25:53 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3683373771675754753; Expires=Wed, 07-Feb-2024 07:25:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3683373771675754753; Expires=Wed, 07-Feb-2024 07:25:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707290753.yc.1675754753#1707290753.yrts.1675754753#1707290753.yrtsi.1675754753; Expires=Wed, 07-Feb-2024 07:25:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:53 GMT
last-modified: Tue, 07-Feb-2023 07:25:53 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:54 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Tue, 07 Feb 2023 08:25:54 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c398b3efc966f31b63f4acc6f1c47551
c49f8bcf1142356f5a9f9260aafc2287e96deb34
ee98d7419fc748cef49095cc01238121561743a4e232ed9e49684d93dda0b0ca
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:13:15 GMT
ETag: "c49f8bcf1142356f5a9f9260aafc2287e96deb34"
Last-Modified: Tue, 07 Feb 2023 05:13:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2764
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64ed5dc80afe-OSL
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906
IP
File type ASCII text, with very long lines (3649)
Hash 04976535e285e3140e87ce4450a3c475
1280542c68b517260b4756d997d2d5cdf7495ee9
d1051f76f51eee861a8b3d444d5778bae602111a0090bfddf191ceb026a9da9b
GET /pagead/js/adsbygoogle.js?client=ca-pub-5187259805604906 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 07 Feb 2023 07:25:54 GMT
expires: Tue, 07 Feb 2023 07:25:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 13158912066065083868
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49934
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (3642)
Hash 4ec590e67c7cd77f36338ed4da8bcf1e
839022f35a1b98833e5ad25739a7b02ff6ba2ea4
9657e89a13cff41a5b5e8068eea041afdbdbc01f87e39d2197ab44a1abf4176e
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 07 Feb 2023 07:25:54 GMT
expires: Tue, 07 Feb 2023 07:25:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 10758227883117322677
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=1671317032&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1186159191&gjid=1328357592&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&z=1580051501
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=1671317032&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1186159191&gjid=1328357592&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&z=1580051501
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=1671317032&t=pageview&_s=1&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IGBAgAAB~&jid=1186159191&gjid=1328357592&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&z=1580051501 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Tue, 07 Feb 2023 05:15:43 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 7811
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j99&a=1671317032&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=YGBAgAABAAAAAE~&jid=&gjid=&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&cd1=No&z=1230653397
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=1671317032&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=YGBAgAABAAAAAE~&jid=&gjid=&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&cd1=No&z=1230653397
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=1671317032&t=event&ni=1&_s=2&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&ul=en-us&de=UTF-8&dt=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&ec=system&ea=push&el=adblock&_u=YGBAgAABAAAAAE~&jid=&gjid=&cid=235722552.1675754803&tid=UA-30950280-5&_gid=1284272809.1675754803&cd1=No&z=1230653397 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Tue, 07 Feb 2023 05:15:43 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 7811
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afe7db92a730b1a76bed3113f60da924
531e2ba6a5907332e9e77fdcc2d88da9adb5f703
04534a7ebb8a6583102a0a532496c38d09b744572f1d01a5da952ff4a2b9825f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=235722552.1675754803&jid=1186159191&gjid=1328357592&_gid=1284272809.1675754803&_u=IGBAgAABAAAAAE~&z=1005143271
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=235722552.1675754803&jid=1186159191&gjid=1328357592&_gid=1284272809.1675754803&_u=IGBAgAABAAAAAE~&z=1005143271
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-30950280-5&cid=235722552.1675754803&jid=1186159191&gjid=1328357592&_gid=1284272809.1675754803&_u=IGBAgAABAAAAAE~&z=1005143271 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://joxi.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 07 Feb 2023 07:25:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230202/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230202/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20230202/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Tue, 07 Feb 2023 04:05:08 GMT
expires: Tue, 21 Feb 2023 04:05:08 GMT
cache-control: public, max-age=1209600
age: 12046
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2fce8afed139e1bd1abb4f8cd62f3994
980ecae1200d2ba3892361c131e8893592c024b2
4b88caadabd58cb3bb4da8435133b17239d4330aeb074515822ff82b7fb09f27
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:55:06 GMT
ETag: "980ecae1200d2ba3892361c131e8893592c024b2"
Last-Modified: Tue, 07 Feb 2023 04:55:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3541
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64ee7cb00b41-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2fce8afed139e1bd1abb4f8cd62f3994
980ecae1200d2ba3892361c131e8893592c024b2
4b88caadabd58cb3bb4da8435133b17239d4330aeb074515822ff82b7fb09f27
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:55:06 GMT
ETag: "980ecae1200d2ba3892361c131e8893592c024b2"
Last-Modified: Tue, 07 Feb 2023 04:55:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3541
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64ee8ed60afe-OSL
yastatic.net/partner-code-bundles/716043/b887192c4a62fd372984.js
200 OK 3.5 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/b887192c4a62fd372984.js
IP
File type ASCII text, with very long lines (9149)
Hash 2e50dbda190111e20b06531c8df6dce2
2e37aeb104cb3f7e4564cd701702f803adc4f6b0
9a1f38cb09607578fe9cb9ebc2a0b3fc5d066ab26ae5b9269c13f5c2b121154d
GET /partner-code-bundles/716043/b887192c4a62fd372984.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 3549
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "2e50dbda190111e20b06531c8df6dce2"
expires: Thu, 06 Feb 2053 13:59:10 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afe7db92a730b1a76bed3113f60da924
531e2ba6a5907332e9e77fdcc2d88da9adb5f703
04534a7ebb8a6583102a0a532496c38d09b744572f1d01a5da952ff4a2b9825f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js
200 OK 24 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js
IP
File type ASCII text, with very long lines (65494)
Hash 5d29968bb46055943c2db2d4205797bf
51cb5c66e80cf6a1f135a4922d5fd120bf145974
d3bec2a3bb2d81a15e8b431c184c5d07e7b176efbb2ddbcab0b75b8b472d9451
GET /partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 23531
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "5d29968bb46055943c2db2d4205797bf"
expires: Thu, 06 Feb 2053 13:59:05 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 8.9 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
File type ASCII text, with very long lines (33703), with no line terminators
Hash f80882bf67cf261aa08d636da095149a
3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js
200 OK 4.8 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js
IP
File type ASCII text, with very long lines (14344)
Hash 7749d37e0e2ba5a2c857a1c0bdc8b1fd
c1beb845c858b6d22045d76bf6ba1e90a168714d
ed2c47feabe99774879658c0517c72c406a9e2d2b8fd280394eaf4bb98729970
GET /partner-code-bundles/716043/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "7749d37e0e2ba5a2c857a1c0bdc8b1fd"
expires: Thu, 06 Feb 2053 13:58:56 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yandex.ru/ads/system/header-bidding.js
200 OK 57 kB URL HTTP/2 yandex.ru/ads/system/header-bidding.js
IP
File type ASCII text, with very long lines (65479)
Hash 870d7c458ea7002383150cf7a8a11fb9
f623285d642d1aa1709d28f185d5d3fd02e06109
50f80bddd681a57d72d51bf3fa83519327dcdab7c7ca059f2dfcf6ab81e7e9b8
GET /ads/system/header-bidding.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=UlZrgF55FC5HDiTz8of+Cn0Hv9Qksf/vNkKiNPMHQyfrvOvlAPt1HQWDz08u8do+ucjX55D4rTuQGzo+KTo+XAFBU1o=; Expires=Thu, 06-Feb-2025 07:25:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=3997117661675754754; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:54 GMT; SameSite=None; Secure; HttpOnly
expires: Tue, 07 Feb 2023 08:25:54 GMT
x-yandex-req-id: 1675754754160274-16227559789849547393-vla1-3918-vla-l7-balancer-8080-BAL-7543
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/3e236fcb1ee21489aa80.js
200 OK 8.4 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/3e236fcb1ee21489aa80.js
IP
File type ASCII text, with very long lines (29540)
Hash 38754f22a76b2ffd33f727be33edb241
7588df06536c52983d31f1937349d3befeaa7d7b
ec4927b299c203db56b5761f9609bfdda8ac47c93f69bf13dc16bfd8054e3904
GET /partner-code-bundles/716043/3e236fcb1ee21489aa80.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 8397
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "38754f22a76b2ffd33f727be33edb241"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/07cea2bf8567304efc16.js
200 OK 7.9 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/07cea2bf8567304efc16.js
IP
File type ASCII text, with very long lines (23593)
Hash 9e20c0213c1a25dded304a55c581b154
893a64811863a2d63ad12abf6c04d0c3b8a60a5b
27d7cdda3b34100a6bcabc26195471e0eac866e08111321b4fe8f63c66a0ec8a
GET /partner-code-bundles/716043/07cea2bf8567304efc16.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 7930
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "9e20c0213c1a25dded304a55c581b154"
expires: Thu, 06 Feb 2053 13:59:04 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 2.1 kB URL HTTP/2 mc.yandex.ru/watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
Hash 09997d8f01e586ad7fa18f4ef6592dcc
82ff24812894f0230f8c1e691a4cf98d02d28aa1
630f3c92319e83e4284a13a67789e26c788f741ce0d6c131fe68e180712bf570
GET /watch/89142389?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/89142389/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 07 Feb 2023 07:25:54 GMT
access-control-allow-origin: http://joxi.net
set-cookie: yabs-sid=1547928511675754754; Path=/; SameSite=None; Secure
i=JxgdWUZKpiPAkoL7WJdctpOLBNV4s2g/Ch734mcFxZ2KgdNh5yJ9+02eAzMUGGpNLbnEP1Tj/HUEXATqtNM2vUSVHRA=; Expires=Fri, 04-Feb-2033 07:25:43 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6131966211675754754; Expires=Wed, 07-Feb-2024 07:25:54 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6131966211675754754; Expires=Wed, 07-Feb-2024 07:25:54 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707290754.yc.1675754754#1707290754.yrts.1675754754#1707290754.yrtsi.1675754754; Expires=Wed, 07-Feb-2024 07:25:54 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:54 GMT
last-modified: Tue, 07-Feb-2023 07:25:54 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js
200 OK 113 kB URL HTTP/2 yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js
IP
File type ASCII text, with very long lines (65497)
Size 113 kB (113366 bytes)
Hash 0736127f132f9c5d09ad0fb5d789a73a
f9203cd3a945aad6f790f8d2e286052c40d2fa50
9a14aedcb1039ca82f4ddfa1b338a50fd48ebe92a20c82c37dc2b85d0c6ac377
GET /partner-code-bundles/716043/de9c4be8e88d42b2efb9.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 113366
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "0736127f132f9c5d09ad0fb5d789a73a"
expires: Thu, 06 Feb 2053 13:58:56 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89142389/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/89142389/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 8cd4aabc48d067ee2343abe2bdebed0e
37b3feaea7c07855cd8adf4384d9f531ca8d5936
84471647fa93874bfc291f8997f2c489e6be3007d567d3de16d9f897cfbbe998
GET /watch/89142389/1?wmode=7&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A977%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072642%3Aet%3A1675754803%3Ac%3A1%3Arn%3A673571479%3Arqn%3A1%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C38%2C108%2C0%2C364%2C0%2C%2C518%2C14%2C%2C%2C%2C1061%3Aco%3A0%3Ans%3A1675754801138%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675754803%3At%3A1675742649787%20%2893%20kb%29%20uploaded%20February%207%2C%202023%20Joxi&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Referer: http://joxi.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 07 Feb 2023 07:25:54 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:54 GMT
last-modified: Tue, 07-Feb-2023 07:25:54 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c237907efa3bd2f6e22dccda6e75f4b3
f6fb0b276065990bcb75c304de17bb99ddab010b
5f091d584dfaff3bd8addf0c862bc547589454589cc73c370628bf76709ab884
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F091D584DFAFF3BD8ADDF0C862BC547589454589CC73C370628BF76709AB884"
Last-Modified: Sun, 05 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3989
Expires: Tue, 07 Feb 2023 08:32:23 GMT
Date: Tue, 07 Feb 2023 07:25:54 GMT
Connection: keep-alive
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 5275808ddc90a180d34bf4edf4be49d8
0dbc16f150f5ce35067356822f4a98c1026380ff
57fc4b8ec63e1709144b9568b97b63a92543f44091b607d72e4b33ca3409bc7f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:23:43 GMT
ETag: "0dbc16f150f5ce35067356822f4a98c1026380ff"
Last-Modified: Tue, 07 Feb 2023 05:23:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1577
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64f04e570b41-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bf5dde1998e758f435532059b3f02580
87e23fc73c8669ee1a0aba633185acafb72196f1
d123fa0668b1504ff2ccf7d0476d0c2c83ff97029464d3cd7726bb7c736f9a35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D123FA0668B1504FF2CCF7D0476D0C2C83FF97029464D3CD7726BB7C736F9A35"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5190
Expires: Tue, 07 Feb 2023 08:52:24 GMT
Date: Tue, 07 Feb 2023 07:25:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5668ddba7a7f740deb36f83b1a9badc1
5c259d95d7af456c128be24f31921a0c5806ee5e
d034f4cea704c9661a14599951fcfb45f52e1325bbf8770ffc6e9708e11b8a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D034F4CEA704C9661A14599951FCFB45F52E1325BBF8770FFC6E9708E11B8A3F"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4377
Expires: Tue, 07 Feb 2023 08:38:51 GMT
Date: Tue, 07 Feb 2023 07:25:54 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 048afb8b19f34f62d6d9f836636dd63d
cb81d2e01c055c556663f969c032ff21cad592f4
5c8dd3d01b87efcd0412d9034fe488e67a9be6b1ceb81c0b7f0454ff9c3a7c8c
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:07:30 GMT
ETag: "cb81d2e01c055c556663f969c032ff21cad592f4"
Last-Modified: Tue, 07 Feb 2023 05:07:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1638
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64f05bb7b51e-OSL
ssp.bidvol.com/rtb/pl999
200 OK 11 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /rtb/pl999 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 815
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: application/json; charset=utf-8
content-length: 11
x-request-id: 5e664f9a-89a3-4524-98c6-63d6149542a0
set-cookie: bvuid=15ykgnvzh3; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=15ykgnvzh3; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.ftd.agency/libs/e.js
200 OK 1.7 kB IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 02f679c9e331e69ac43f87af96915b9d
e589290852a088c34cbf7bb3104faa833244e1d4
7ea9bdfdd368aa5835ba2930414dc029b4d2ffbd46c362e33d2efaffbb8fad32
GET /libs/e.js HTTP/1.1
Host: cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 13 Sep 2022 09:47:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"632051a8-aec"
Expires: Wed, 08 Feb 2023 07:25:54 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Headers: X-PINGOTHER
Access-Control-Max-Age: 1728000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block;
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ca65a4dd6952351eac9c5c6039514b08
0727c851a1651548bf4633d3b51c262c49443f31
db811f42029ccdd0afec242162cf5380cee260cead834fc994bb8d210b736d74
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 11 Feb 2023 05:02:16 GMT
ETag: "0727c851a1651548bf4633d3b51c262c49443f31"
Last-Modified: Tue, 07 Feb 2023 05:02:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 92
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64f09e900b41-OSL
matchid.adfox.yandex.ru/getcookie
200 OK 88 B URL HTTP/2 matchid.adfox.yandex.ru/getcookie
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 120ab2d76e8018294802093c690d33e6
ca3e4ef6f35af21557a97e364c62c7b6ca8dc891
48c606538182ba90423c232efab1e76fe39d7b842b4ecede1b181b78545fffbe
GET /getcookie HTTP/1.1
Host: matchid.adfox.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 88
access-control-allow-credentials: true
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: application/json
timing-allow-origin: *
access-control-allow-origin: http://joxi.net
x-content-type-options: nosniff
X-Firefox-Spdy: h2
yhb.p.otm-r.com/yhb
200 OK 11 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yhb HTTP/1.1
Host: yhb.p.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 815
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.23.2
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: text/plain; charset=utf-8
content-length: 11
access-control-allow-credentials: true
access-control-allow-origin: http://joxi.net
set-cookie: mpid=NjNlMWZkMDIwMzZlNzkyYg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash dbb3fe4d8642c214cf6c1f4523abff84
595c46af4c12a911a209b5d4c6f12b5834b4cbc1
2193d8508d4538173a02bca99856f53dc4b1e4ad0c2bbd057b20d76349f25435
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 03:41:04 GMT
Expires: Sat, 11 Feb 2023 03:41:03 GMT
Etag: "595c46af4c12a911a209b5d4c6f12b5834b4cbc1"
Cache-Control: max-age=331508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795a64f08a530b65-OSL
kdmttk.com/get_data?format=adfox
204 No Content 0 B URL HTTP/2 kdmttk.com/get_data?format=adfox
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /get_data?format=adfox HTTP/1.1
Host: kdmttk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 821
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.19.0
date: Tue, 07 Feb 2023 07:25:54 GMT
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: http://joxi.net
set-cookie: sspUid=116fe1b4fc52f3202f04966b49b9059d; expires=Wed, 07 Feb 2024 07:25:54 GMT; domain=kdmttk.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
exchange.buzzoola.com/ssp/adfox
307 Temporary Redirect 0 B URL HTTP/2 exchange.buzzoola.com/ssp/adfox
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ssp/adfox HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
server: nginx
date: Tue, 07 Feb 2023 07:25:54 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, If-None-Match
access-control-allow-origin: http://joxi.net
access-control-expose-headers: Set-Cookie, Etag
etag: W/"588d86badbc14b559effa6c230e732938b228f6592e50677d28dd037dd15969a"
location: /ssp/adfox?set_buzzoola_cookie=t
set-cookie: uuid=d3af09df-4924-4d22-4c72-76f5edf2a409; Path=/; Domain=exchange.buzzoola.com; Expires=Thu, 09 Mar 2023 07:25:54 GMT; Max-Age=2592000; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
yandex.ru/ads/system/context.js
200 OK 83 kB URL HTTP/2 yandex.ru/ads/system/context.js
IP
File type ASCII text, with very long lines (65492)
Hash b24f522616dacc618447adb9bde82e0d
2481c699ef38d2c28c06e8f1fc916e2c0b7b416a
ccd8d3a0a8f2176ed7d113622ca2fb98b298fb39d1199e2f4563f040458ad5a4
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=siybVIgxGwLfsDKhb8SnO8i1aT8XN5FZSzzmzH0H0vd3SD1FBnjIZvA/c7vljisCsytHf3JUyoEQGaZumsmTKgd6qfY=; Expires=Thu, 06-Feb-2025 07:25:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=9859663751675754754; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:54 GMT; SameSite=None; Secure; HttpOnly
expires: Tue, 07 Feb 2023 08:25:54 GMT
x-yandex-req-id: 1675754754164909-2609427395267461719-vla1-3918-vla-l7-balancer-8080-BAL-9003
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
z.cdn.ftd.agency/load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2149&hc=16&n=1675754803288&url=joxi.net%2FE2p5XWQHv5MMPA&vc=0&ti=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=102400391
204 No Content 0 B URL HTTP/1.1 z.cdn.ftd.agency/load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2149&hc=16&n=1675754803288&url=joxi.net%2FE2p5XWQHv5MMPA&vc=0&ti=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=102400391
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1284981025&div=zone_1284981025&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2149&hc=16&n=1675754803288&url=joxi.net%2FE2p5XWQHv5MMPA&vc=0&ti=1675742649787%20(93%20kb)%20uploaded%20February%207%2C%202023%20Joxi&zyx=102400391 HTTP/1.1
Host: z.cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 07 Feb 2023 07:25:54 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
P3P: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Set-Cookie: AU=66910b6b4414ac9f; Expires=Tue, 06 Feb 2035 22:00:38 GMT; Path=/; HttpOnly; Domain=.cdn.ftd.agency; SameSite=None; Secure
adservice.google.no/adsid/integrator.js?domain=joxi.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=joxi.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=joxi.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:54 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=joxi.net
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=joxi.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=joxi.net HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:54 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/adfoxhb
200 OK 11 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /adfoxhb HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 821
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Access-Control-Allow-Origin: http://joxi.net
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Set-Cookie: sspuid=CkIDNWPh/QIvswBQ3uxoAq68fjaX/Hy9XwD06FYQVUtUzkt7; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ocsp.sectigo.com/
200 OK 471 B IP
Hash d28ed3e080cbd1ec203a146092a4fbcb
9a6603e8c7baf71763e6580ed393eac576aea446
67055b2b4523563bf69bdfdd432a16bf6b9521ef296694c57bd4e8dce105e429
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:03:24 GMT
Expires: Sat, 11 Feb 2023 14:03:23 GMT
Etag: "9a6603e8c7baf71763e6580ed393eac576aea446"
Cache-Control: max-age=368848,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795a64f05e25b524-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2e90fb4abc4adea51d5da8fca3895c90
9ea128cefd8a4e91bc93a306cdafdcf5c0b99a40
6de37bd6d8e446c4e3b2d739ad311f23c403bb59c6adbfade793b274da3b5f28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t
200 OK 11 B URL HTTP/2 exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /ssp/adfox?set_buzzoola_cookie=t HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Referer: http://joxi.net/
Connection: keep-alive
Cookie: uuid=d3af09df-4924-4d22-4c72-76f5edf2a409
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:55 GMT
content-type: text/plain; charset=utf-8
content-length: 11
access-control-allow-credentials: true
access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, If-None-Match
access-control-allow-origin: http://joxi.net
access-control-expose-headers: Set-Cookie, Etag
set-cookie: cookiesyncs=000000000000000000000000d93dab9edf0912baf9008f35866978f1; Path=/; Domain=exchange.buzzoola.com; Expires=Tue, 07 Feb 2023 19:25:55 GMT; Max-Age=43200; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.mail.ru/hbid_yandex/
200 OK 262 B IP
Hash c548d6f8770a0d03e1c06f79ed595ba3
298fc6ab4ec1b97b7e012eae79f515c71c223292
e7314bb7975f4eaaaaffdb3dbbae66561c63bd776c07a6b33cb7bffc6a296463
POST /hbid_yandex/ HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:54 GMT
content-type: application/json
cache-control: private, no-cache, no-store
timing-allow-origin: *
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=adfox
200 OK 96 B URL HTTP/2 ads.betweendigital.com/adjson?t=adfox
IP
Hash c21da208d459f5700c733e07b4c644b0
784f2bfd916dbb364d37fad7f18a8b8800a97a3b
f098893a246a7bb3b6656a1339c280d669e35579612515417405438ff90854a5
POST /adjson?t=adfox HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 827
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:54 GMT; Path=/; Domain=.betweendigital.com
tuuid=042a74e5-fed0-5226-a65f-85bac5be78b8; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:54 GMT; Path=/; Domain=.betweendigital.com
ut=Y-H9AgAMyXDgpn4XLubsnBDR8q23aLwL4XTlEA==; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:54 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Wed, 07 Feb 2024 07:25:54 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eacdb128cb4c4270c389816f33b2bb15
97bdbd4416cf816e822421ea576175b7aeb2f7cf
436d88e47be153d724949abb1aeea7ec7f3880f703fc5c67c516f9fd7b51bb71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rotarb.bid/248h9.json
200 OK 59 B IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash 1f49538abf96b89f9ee7fe7c0ec4b36c
57b7d350dea06cb8c16abaadc0ee88f61fcacf8c
fa280b5bfec28ae8452bb815684573ec5d067140e81759235dc357714c5c934a
POST /248h9.json HTTP/1.1
Host: rotarb.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 150
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
HTTP/1.1 200 OK
Server: cloudflare-nginx
Date: Tue, 07 Feb 2023 07:25:54 GMT
Content-Type: application/json
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Strict-Transport-Security: max-age=63072000
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230202&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230202&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14906), with no line terminators
Hash 2ec19cb9b5499f995ed9b39ccf729573
3cb162519070a487ea7dfaf596a2d7c857e05790
92d101809d818ee9a2df03315885977beaa68b6d9da63c3adbafcacc522fea35
GET /getconfig/sodar?sv=200&tid=gda&tv=r20230202&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Tue, 07 Feb 2023 07:25:54 GMT
server: cafe
content-length: 11252
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f48592c9ce931276d6e5e6e7e342cc3
55bfae3bef5fb97c8262eb622a54a0f603d41ec9
36472b536e89d8c01926bcdb2e23240f69f0bd7cde3b39a53a75b0a804291fd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 07 Feb 2023 07:25:54 GMT
expires: Tue, 07 Feb 2023 07:25:54 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 23:41:05 GMT
expires: Tue, 06 Feb 2024 23:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 27890
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0c18b789b296a2b3cc9adb04c94e6f7
a0fa241f813c414178f5dffd30d5c2b82d16669b
95ec61ae9d1384fdbcee256ec441d6db4e3243ed3f8e1801b3607ce3c2e1e3f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 07:25:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11919
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11919
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11919
Expires: Tue, 07 Feb 2023 10:44:34 GMT
Date: Tue, 07 Feb 2023 07:25:55 GMT
Connection: keep-alive
www.google.com/recaptcha/api2/aframe
200 OK 512 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 358f84c1687acc623d80fcdee6ab8dd5
be91ada24d2ee328b583e135ad26775b123c4803
c3a491446ec531122b107be417c6fee672b69ae2c6e41b806c236eb382b1ef63
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 07 Feb 2023 07:25:55 GMT
date: Tue, 07 Feb 2023 07:25:55 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-MdoPy6uTvuNY485rMcDWxA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 512
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92008e687831334af1cdbf4b8a57579f
e6ff750f12836637adf5b253d64c2102fdf3c180
39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5wy_7Z30HRIcZufSPCTKu9UoJD1o_NDlhuyL5bvidDwbqC_3p99yYA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:57 GMT
age: 34858
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3cd20c6639e2b0d996fbbd7df2d4f47
2e54c22fb83981e2690161cd521e4fc3998e9c16
9b2b1f3e062fca74341d09540e44d2a02ec451b8349440ed5917073e8fab988d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6316
x-amzn-requestid: 1988058c-5aee-4964-9046-83a5f14a927d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwhjnFdxoAMFgpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dce2e3-5ec35d0d6bef4d4944c629c0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 10:33:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z9b1A_GpinQXvbA-g2PoKhVSNVd5gMrId0WUTmKSCkg-YAan1dtp-w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:21:35 GMT
age: 32660
etag: "2e54c22fb83981e2690161cd521e4fc3998e9c16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88178e0f623494e30ece4da4eed04d60
7f016d87157a577e4ad4e4cf6c854a0489f8571a
e5658ac599ca37e797637a596ca9b65c80c1053b2ce5dacc667ae3b8b1ce54a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6384
x-amzn-requestid: 5f91a438-31d9-42ca-96b4-71344cc736c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77IcE2-oAMFbZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17235-1ce1ebfa4e9ae6053434c48d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ee3lrCu0ZcpPQ-tQiF3j59bjY0W_zFOKl2H__y_twSGGESxmir3JHg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:46:30 GMT
age: 34765
etag: "7f016d87157a577e4ad4e4cf6c854a0489f8571a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 34627
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0594f78c4fdfed5dd2e0666312555f40
db903b9a3f387c1510170f8d16dd4d289f7df83f
8874083a529064657b18be58147ae7df5fe79c822c4bd2a023fdf3df7186a62e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e47a0b9-4a27-4f39-8f25-f88789a2408f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3712
x-amzn-requestid: 44c7e7bd-1a95-49b6-9b0a-f8aff3725ded
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftbOtH-lIAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba591-2fb19c33646c3d327681e9f9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 11:59:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ws42XiDa6w4O13v7obhNXNfA0QQIv03RG0Ze0IPrKWxxvsvUY2eCVg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:55 GMT
age: 34620
etag: "db903b9a3f387c1510170f8d16dd4d289f7df83f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: c380f2eb-c707-4086-9646-179ea89ba210
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy9JKEpqoAMF9RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dddbd4-49510561740468ba7b39f211;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 04:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ofAz9sRlztBs3zypgsL9DkiJypsxagC7ZcUX3PLL_7FzUALp_MxtKA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:39 GMT
age: 45676
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754753_d286294b4f58331f8ecf96bd5e70e5127140872fb7c0e373a788b2485693b7b8&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A831859487%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754753_d286294b4f58331f8ecf96bd5e70e5127140872fb7c0e373a788b2485693b7b8&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A831859487%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/14929090/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754753_d286294b4f58331f8ecf96bd5e70e5127140872fb7c0e373a788b2485693b7b8&browser-info=pa%3A1%3Aar%3A1%3Avf%3Afppw4pdxetycw4cz2ehur%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A973764971648%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A831859487%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:55 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:55 GMT
last-modified: Tue, 07-Feb-2023 07:25:55 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754754_b3c0762b58567a1cd971b08892bc0721960c13bbe90876e95e873bee1ba1ef7e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A469093589%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754754_b3c0762b58567a1cd971b08892bc0721960c13bbe90876e95e873bee1ba1ef7e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A469093589%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/89142389/1?page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&charset=utf-8&hittoken=1675754754_b3c0762b58567a1cd971b08892bc0721960c13bbe90876e95e873bee1ba1ef7e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A1265364724969%3Ahid%3A70836017%3Az%3A0%3Ai%3A20230207072643%3Aet%3A1675754804%3Ac%3A1%3Arn%3A469093589%3Arqn%3A2%3Au%3A1675754802745000121%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2370%2C2370%2C1%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675754801138%3Aadb%3A2%3Ast%3A1675754804&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:25:55 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:25:55 GMT
last-modified: Tue, 07-Feb-2023 07:25:55 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4894759983606832
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4894759983606832
IP
File type ASCII text, with very long lines (3642)
Hash c7212963adbadd9e22447a325a9e154e
35eabca11f92025d21f82cfa945458b086ec027e
f6f13c49083180e141cb80935d9d50cea44cd8b195e3a165b6f9c0a028da4dea
GET /pagead/js/adsbygoogle.js?client=ca-pub-4894759983606832 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 07 Feb 2023 07:25:55 GMT
expires: Tue, 07 Feb 2023 07:25:55 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 9084468410825391455
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49991
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 751bf754ecdf35a1d48719a9465156d5
781d9e85c30c5a95825e67e35cfc6bf75659f0e4
8fc1b63e43873f9cfcc03190c79ab52501c07cdc9a26455a7f416b8aed3b9aea
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 07:25:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 11 Feb 2023 04:32:24 GMT
ETag: "781d9e85c30c5a95825e67e35cfc6bf75659f0e4"
Last-Modified: Tue, 07 Feb 2023 04:32:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 590
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795a64f5fb130b41-OSL
ads.adfox.ru/260971/event?pm=cyz&hash=fafcf0a5de736ee0&duid=1675754802745000121&p5=nfmax&rand=giyozdi&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=cyz&hash=fafcf0a5de736ee0&duid=1675754802745000121&p5=nfmax&rand=giyozdi&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=cyz&hash=fafcf0a5de736ee0&duid=1675754802745000121&p5=nfmax&rand=giyozdi&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:55 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:55 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=joxi.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=joxi.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=joxi.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 07 Feb 2023 07:25:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b2e23bb6724e595eb6c0aa372bc89174
f1c1d0ef0ee43ee04a455285e366c0869d75ee00
ff7895904a78e7acc28a69d5dfd2a7bd87a8238aaa859e8f760706db992cb579
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 Feb 2023 07:25:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 06 Feb 2023 21:46:26 GMT
Expires: Tue, 07 Feb 2023 21:46:26 GMT
ETag: "f1c1d0ef0ee43ee04a455285e366c0869d75ee00"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ads.adfox.ru/260971/event?pm=cza&hash=530f8e22deb1ee69&duid=1675754802745000121&p5=nfmax&rand=fuwqgbn&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=cza&hash=530f8e22deb1ee69&duid=1675754802745000121&p5=nfmax&rand=fuwqgbn&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=cza&hash=530f8e22deb1ee69&duid=1675754802745000121&p5=nfmax&rand=fuwqgbn&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:56 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:56 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adfox.ru/260971/event?pm=bmn&hash=d01293752d1b1213&duid=1675754802745000121&p5=nfmax&rand=jgkcreh&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
204 No Content 0 B URL HTTP/2 ads.adfox.ru/260971/event?pm=bmn&hash=d01293752d1b1213&duid=1675754802745000121&p5=nfmax&rand=jgkcreh&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /260971/event?pm=bmn&hash=d01293752d1b1213&duid=1675754802745000121&p5=nfmax&rand=jgkcreh&sj=aubjnaBAEau51MynRbbmOYcrHOIde3GsDqjCJiYMXB02STOUEWTNm0T5DUE%3D&ad-session-id=8619121675754803918&utg=oxum<s=flbbjdz&ytt=146786414231557&ybv=0.716043&ylv=0.716043&dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&pr=duqalsk&p1=cusln&rqs=AAAAAAAAAAAD_eFjqSC9y727paEWyveR&p2=gxmo HTTP/1.1
Host: ads.adfox.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
timing-allow-origin: *
date: Tue, 07 Feb 2023 07:25:57 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
pragma: no-cache
expires: Mon, 04 Dec 1999 21:29:02 GMT
last-modified: Tue, 07 Feb 2023 07:25:57 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/14929090?wv-check=7022&wv-type=0&wmode=0&wv-part=1&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=179691223&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/14929090?wv-check=7022&wv-type=0&wmode=0&wv-part=1&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=179691223&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/14929090?wv-check=7022&wv-type=0&wmode=0&wv-part=1&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=179691223&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:26:01 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:26:01 GMT
last-modified: Tue, 07-Feb-2023 07:26:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=831502316&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=831502316&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/14929090?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=70836017&page-url=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&rn=831502316&browser-info=et%3A1675754810%3Aw%3A1280x939%3Av%3A960%3Az%3A0%3Ai%3A20230207072650%3Au%3A1675754802745000121%3Avf%3Afppw4pdxetycw4cz2ehur%3Ast%3A1675754810&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 07 Feb 2023 07:26:01 GMT
access-control-allow-origin: http://joxi.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 07-Feb-2023 07:26:01 GMT
last-modified: Tue, 07-Feb-2023 07:26:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.digitalcaramel.com/js/joxi.ru.js
200 OK 0 B URL HTTP/2 ads.digitalcaramel.com/js/joxi.ru.js
IP
ASN #24940 Hetzner Online GmbH
GET /js/joxi.ru.js HTTP/1.1
Host: ads.digitalcaramel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 23 Aug 2022 11:46:50 GMT
vary: Accept-Encoding
etag: W/"6304be2a-1b3e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15724800; includeSubdomains; preload
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
yandex.ru/ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&date=2023-02-07T07%3A26%3A43.915%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=3556706967&pr=1171694378&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786414231557&is-turbo=0&skip-token=&ad-session-id=8619121675754803918&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=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%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&pcode-test-ids=657518%2C0%2C22%3B685674%2C0%2C76%3B711101%2C0%2C64%3B716614%2C0%2C22%3B716623%2C0%2C90%3B711505%2C0%2C20%3B717982%2C0%2C61%3B709027%2C0%2C12%3B712946%2C0%2C85%3B715192%2C0%2C98%3B716043%2C0%2C83%3B716461%2C0%2C9&pcode-flags-map=eJytWGtv2zYU%2FSuDPw%2Bd3o9%2BoyTKJqzXSMqOWxSEm7iJNycZ0qTLUuS%2F71KUbUl26CQbUKSO4nt4eR%2FnnqufIzIuSopFThjDiUgQR6JCFOVMpCUVM5LgUpBCxGUelaOPn3%2BOfiw3D6vRx9Hq8a%2FRr6P71fd7cgG%2FuqHhuO7o%2BcuvoxliguLfa8y4mOWoEiktc4ES1rPntMZdAM%2F0rcBoAHCBogwPDocPKSkIx%2BBfPGWTkos54ZOy5gKB75zpvPNc1wvsN4P%2FH8goy0RFy6SOOTs85m3QGCDfmJcOiMwLnDmHVIgMRThroAAkQkWBqT47nm07fteXAs8Fm4I1%2FJOAJUowFVWGFgOooUOBa4XhziFSVGiMBeMkni5EQpgET5qoRTK1SVqewWOKYy4YzrIeND6r%2BtC%2Bae2ha9b3skBFVetvGZq%2B4ewA%2BIRCtDClMkypYDWd4QWEHJI4FoSJAspkhjKSnAC1PDfYgaJERn8h67ZF4qVqk7ZntGC%2B4TuBvwfLMvCwLLKFqOooI7FAFWnSCilhHDpbj2aahmt2mjYvZ1iUGdiST3hHBLJ9X%2B%2BhaQeOsS84rpoCU0bKomcJ37SCsG8LNGI1tnVB2pJqbpNXXdP7u4dVx8yxAjtUR8qcM9ZU9cBmWIcdIxkrjAtRRgxDigfle7P8uln1LG3PClUOUnIG1FmICSbjCRcF1x%2FpuHaowr1ARYLPBK1FUuaIFFpqNXzL9nbnRbScgrNwlhjTQe0NLU3fDbyjB8pW45REWnPLNDzVDp9wYYm0hq6ckwSIkeTQtVpbx3RaOm9s284WUUllUilKSM1%2BeSXCAkm%2FlcNQ83O00HKy69h%2BG%2BcklVXLqrKAwuAkx9B3PVPLMIy%2BrWPY6s5VXCZYNinDhZaoXccFmLaUJF9RLGt3e56QNKU1d3zfOjQHyoGfc9lEUJ3vQdg6ACRV97JlG8etM4xoIXKpCGaIEjS4t9U71DWMNsoVJSUlfCGiBYwmPK9Kqg%2BY53tt723roqX4mGmHhwsEHXQqEkg4RsDPMCjiGLLENCzhhrZrmj3bporZTkdUwM2kGOtBHLdlt7isCw6lzBcVFrbea%2BBst5OenMYQJ0YikkHU9MeFvveiJTC%2FiIH1pydO32LkdcaJmvYCCDYlMGmJvESKYn03h4Hl%2Bx0%2FWhClQ2CAQbHJ0R%2BBrJEdw2mZZSd0gGE5tqq6MUWRpf8ulKix%2F24znroGrmkZuu8f6XzTfcFiWxwT3IwfihPMQCVr%2FTNdy1PWUnBQnALnTEATjUmstwvslmAbLUBz2UEUF9u5V1Ec6SneA462zF4rwQykUNcFdNMEQz4kbbOYygnHmJaJPDM0HeVPxwhVlbzKGFpDb2yZodvzZEJ4c40OGARzyku9F7ZvWT3dG1e5yHFCkAAQxMmsGfJ6jNDubxNxFf9njIG0T3CKoKPeqOod1%2FC8XphYjigXIK1qLMFPJcn1PG%2B%2FaSmROvBMadZSyt5GoAqWnfDKN%2F22G2OpvcuirUKUSo4jKShBrES%2Bvhz9IPTCnRRLKQEYUKfKnjTF9Ab7aHrQ6gcWXmi3NduxeOv66vmhY%2Fg7FJiDiUTI9ScHjmcOT1ZFpj%2FLslqV22kMqeVe1R2B55j2ljNAEsFiCVeFohG2ZSiN1swEJbcOV7sDPD%2BwD2%2FBx%2Fo7QJqCvdWe8pmoYJzAZIWdd4bz4Uweffsu7m8fzq8Ga5cRWMPlUtHukTy2q%2FmJ5MDW1Tavai%2FYAivBaTOgTo1MLwwdu91h%2BkenWamWK%2BXoCZCgbamXQJpK7Ydn%2FSiul4%2FiarW%2BvLp%2FAY4UkpKnOEKRgI1A5wSss4Hf62tFDfMJlFyn%2BuQqq9bRGgZes3qDHsPAktp2903DaZUNpULNPl6DhFS00QS6Yah6PDm5iTqq7zP0adEwjWgEeNfs5%2Bjb6v78Kl%2FeXa5v2hF%2Bfft1vVmx8%2BVmfXM5%2Bmg99%2FdJ0C2dIlAcC3pcRJmshIz0t9nPo%2BvlevPh7gF8%2B2d5c7F6hM%2B%2Fra%2BXl6vvvUeXy%2BvmycXT6kZ9ffljfX%2BrPl5%2F6PxycbNun0rkHQI8uFs%2BbW6frto%2FP92p%2Fx%2Fulh9uVn9%2FP%2FjCH8vb63Vj%2BuX4Fbvtu0%2BtPn3ets57xrI%2B0YnEg%2BX%2BzUHbto2WZKDjYdXfbdNt03VUK8VyQegXfsyzwVsiz3feiQ%2FKbbY95ZWHdF%2Bw7d7WyeqQXTt8ozdgnvP7zaCUTcNstTJLpsMXChA6z3QGwZRP1IKfNfNWLSYgBuMMMSaVOmX6Qz2v1Uw6CCCN3rox2tze%2FvkenION0urJ6Q4MXJ8T4B6Rwq6GZQLl672T71Uhiq7hHoy5uGRyzxDQzVPM4WMsfePF0XU1qhd9SD9sx8wxyDnJkgjYkeATju1QZGXOKkQ0i7ZvGL24GKFh7V%2FftevT%2B4xlxyLg7YlsAZKDOt%2BvYM2bOyybpcPq%2BjnxDuw3AEZ1mgIWzivozwwQj1zX1Vy2tW%2FUzXvidVy4y2vCogTrUtbbqrfMAjWCOB4v9PVghY53dMzvx%2Bu7Djpo8d1BUuxtyQ9CmoGt3kXXDK39O60jjGQ49oAG5JPnL8%2F%2FArwPrZs%3D&use-server-side-rendering=1&pcode-icookie=ICTxh8nVUWgTo8bURZv6DqodX7PcmVm6xb0yWri05Y1PdjQ5diK9A8eX8WgJIiMNT1S1JZk88CsxCaxAJ1ZqnJvUMHs%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqiicSTJ74Ew1vfC2r_mUOKYYv-h_ibp1qWTYCX0rx2nnbNu_bYmRMKyMC1sircVKGktk2_pN3S78ngbM8gg87iRgkSERCSRkUgQiBCJGxoEyBtnQt2y0socPza4N7M8M-wmAr_JyGTIG6gC16GTET7FnYz8X7cxlSjn3-kzthu_oRO0qDaLoP0cFiH22N4CZawJVEeJoH6cu071EW3cw2JKHsneRqnxa0S0bSq7fPxl2pXYS0Wvpbp8zTJgt9FmSoi2MvVfsbe3XUafReY6sebM20GXxCiB4jvcjxWLclRHx4q0A56z18-sTi4YtMK2KGRWU5FbW-3xcY9clFEw9RimyNSKXpaZZx225W6eF_HRuFTIYm1Irld9SbmFULfQLFmdbceHi0tuMc_WdS06kF6xn9NvPnutj_F1wSXbArNj7jAyO3gz1vu6tHAkl7NS7AbOkZADTjYqVT0XWeHEcz1PutJbc_zc1Rv4FSdlVrHSBawon42ZznnA3pFhrm7BnDIx2hDsxl_EBGpgsQSo8BdjloKvBb57CGzykNXjqyt4IJd22ZlyjKWiBc31E9WVs_EUiBGWS_emNBVWbxpGkWtc6o8-tz-DoV78hPOwQEeOf-NEtTh8Lqr4arrQqm4B3Qr2cWlq89hdV7qPA0NJZT82jLb9zGe49KPnN8c49dYrjjX1PUQ34M_hgABK4zBxX-yTQD-doN9JaFaZolyDX3u9jcaVVNGKeW7YIxDazMGiSQAe5sB83HP7mx22XMzxZwKCJ7iNXhVZGvxu0_y2lDaN10o7nSjQ98wWfCAmFknpJ61EAtUxs3fLJW3dI3Q2zxuMYPSi2TE4HaQFr-TH9seAgPEjIJyKHw_A5wFzmEPk2MGqp0DRzWT67TiohIqhGBi7VjIBgC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BVhx-U_G6_ClRFoZ3DGCglAOaQdY05ciJ22RPKg6pM7xfQfJgyZ1UZBFrm8gH4Fy4-YZUj1h_qJ9iecl-DCuLowO_WuPwIXvbQvIcuL7NIscNy82tw56VAD_rKZd8FtO526Y0QH3P8xp4HiaVLkxaZu2yOhnYnvqZnCbDubDGc9nyBAmLZq0KAwuojC4iMzykRP_mKVzFHlYmlcAEREYkSJLL_PSbdH1M9-gi-WaImwLUjpXFdOiRU0K3Qd7OEMUo0big70OPydurNdAdmF7uWbDwwMHZYM_2c0nlXb-IEL9gEKjMF1cLCl2LLMVL69KtQHYPSjBAFwM8A%3D%3D&tga-with-creatives=1
200 OK 0 B URL HTTP/2 yandex.ru/ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&date=2023-02-07T07%3A26%3A43.915%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=3556706967&pr=1171694378&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786414231557&is-turbo=0&skip-token=&ad-session-id=8619121675754803918&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=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%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&pcode-test-ids=657518%2C0%2C22%3B685674%2C0%2C76%3B711101%2C0%2C64%3B716614%2C0%2C22%3B716623%2C0%2C90%3B711505%2C0%2C20%3B717982%2C0%2C61%3B709027%2C0%2C12%3B712946%2C0%2C85%3B715192%2C0%2C98%3B716043%2C0%2C83%3B716461%2C0%2C9&pcode-flags-map=eJytWGtv2zYU%2FSuDPw%2Bd3o9%2BoyTKJqzXSMqOWxSEm7iJNycZ0qTLUuS%2F71KUbUl26CQbUKSO4nt4eR%2FnnqufIzIuSopFThjDiUgQR6JCFOVMpCUVM5LgUpBCxGUelaOPn3%2BOfiw3D6vRx9Hq8a%2FRr6P71fd7cgG%2FuqHhuO7o%2BcuvoxliguLfa8y4mOWoEiktc4ES1rPntMZdAM%2F0rcBoAHCBogwPDocPKSkIx%2BBfPGWTkos54ZOy5gKB75zpvPNc1wvsN4P%2FH8goy0RFy6SOOTs85m3QGCDfmJcOiMwLnDmHVIgMRThroAAkQkWBqT47nm07fteXAs8Fm4I1%2FJOAJUowFVWGFgOooUOBa4XhziFSVGiMBeMkni5EQpgET5qoRTK1SVqewWOKYy4YzrIeND6r%2BtC%2Bae2ha9b3skBFVetvGZq%2B4ewA%2BIRCtDClMkypYDWd4QWEHJI4FoSJAspkhjKSnAC1PDfYgaJERn8h67ZF4qVqk7ZntGC%2B4TuBvwfLMvCwLLKFqOooI7FAFWnSCilhHDpbj2aahmt2mjYvZ1iUGdiST3hHBLJ9X%2B%2BhaQeOsS84rpoCU0bKomcJ37SCsG8LNGI1tnVB2pJqbpNXXdP7u4dVx8yxAjtUR8qcM9ZU9cBmWIcdIxkrjAtRRgxDigfle7P8uln1LG3PClUOUnIG1FmICSbjCRcF1x%2FpuHaowr1ARYLPBK1FUuaIFFpqNXzL9nbnRbScgrNwlhjTQe0NLU3fDbyjB8pW45REWnPLNDzVDp9wYYm0hq6ckwSIkeTQtVpbx3RaOm9s284WUUllUilKSM1%2BeSXCAkm%2FlcNQ83O00HKy69h%2BG%2BcklVXLqrKAwuAkx9B3PVPLMIy%2BrWPY6s5VXCZYNinDhZaoXccFmLaUJF9RLGt3e56QNKU1d3zfOjQHyoGfc9lEUJ3vQdg6ACRV97JlG8etM4xoIXKpCGaIEjS4t9U71DWMNsoVJSUlfCGiBYwmPK9Kqg%2BY53tt723roqX4mGmHhwsEHXQqEkg4RsDPMCjiGLLENCzhhrZrmj3bporZTkdUwM2kGOtBHLdlt7isCw6lzBcVFrbea%2BBst5OenMYQJ0YikkHU9MeFvveiJTC%2FiIH1pydO32LkdcaJmvYCCDYlMGmJvESKYn03h4Hl%2Bx0%2FWhClQ2CAQbHJ0R%2BBrJEdw2mZZSd0gGE5tqq6MUWRpf8ulKix%2F24znroGrmkZuu8f6XzTfcFiWxwT3IwfihPMQCVr%2FTNdy1PWUnBQnALnTEATjUmstwvslmAbLUBz2UEUF9u5V1Ec6SneA462zF4rwQykUNcFdNMEQz4kbbOYygnHmJaJPDM0HeVPxwhVlbzKGFpDb2yZodvzZEJ4c40OGARzyku9F7ZvWT3dG1e5yHFCkAAQxMmsGfJ6jNDubxNxFf9njIG0T3CKoKPeqOod1%2FC8XphYjigXIK1qLMFPJcn1PG%2B%2FaSmROvBMadZSyt5GoAqWnfDKN%2F22G2OpvcuirUKUSo4jKShBrES%2Bvhz9IPTCnRRLKQEYUKfKnjTF9Ab7aHrQ6gcWXmi3NduxeOv66vmhY%2Fg7FJiDiUTI9ScHjmcOT1ZFpj%2FLslqV22kMqeVe1R2B55j2ljNAEsFiCVeFohG2ZSiN1swEJbcOV7sDPD%2BwD2%2FBx%2Fo7QJqCvdWe8pmoYJzAZIWdd4bz4Uweffsu7m8fzq8Ga5cRWMPlUtHukTy2q%2FmJ5MDW1Tavai%2FYAivBaTOgTo1MLwwdu91h%2BkenWamWK%2BXoCZCgbamXQJpK7Ydn%2FSiul4%2FiarW%2BvLp%2FAY4UkpKnOEKRgI1A5wSss4Hf62tFDfMJlFyn%2BuQqq9bRGgZes3qDHsPAktp2903DaZUNpULNPl6DhFS00QS6Yah6PDm5iTqq7zP0adEwjWgEeNfs5%2Bjb6v78Kl%2FeXa5v2hF%2Bfft1vVmx8%2BVmfXM5%2Bmg99%2FdJ0C2dIlAcC3pcRJmshIz0t9nPo%2BvlevPh7gF8%2B2d5c7F6hM%2B%2Fra%2BXl6vvvUeXy%2BvmycXT6kZ9ffljfX%2BrPl5%2F6PxycbNun0rkHQI8uFs%2BbW6frto%2FP92p%2Fx%2Fulh9uVn9%2FP%2FjCH8vb63Vj%2BuX4Fbvtu0%2BtPn3ets57xrI%2B0YnEg%2BX%2BzUHbto2WZKDjYdXfbdNt03VUK8VyQegXfsyzwVsiz3feiQ%2FKbbY95ZWHdF%2Bw7d7WyeqQXTt8ozdgnvP7zaCUTcNstTJLpsMXChA6z3QGwZRP1IKfNfNWLSYgBuMMMSaVOmX6Qz2v1Uw6CCCN3rox2tze%2FvkenION0urJ6Q4MXJ8T4B6Rwq6GZQLl672T71Uhiq7hHoy5uGRyzxDQzVPM4WMsfePF0XU1qhd9SD9sx8wxyDnJkgjYkeATju1QZGXOKkQ0i7ZvGL24GKFh7V%2FftevT%2B4xlxyLg7YlsAZKDOt%2BvYM2bOyybpcPq%2BjnxDuw3AEZ1mgIWzivozwwQj1zX1Vy2tW%2FUzXvidVy4y2vCogTrUtbbqrfMAjWCOB4v9PVghY53dMzvx%2Bu7Djpo8d1BUuxtyQ9CmoGt3kXXDK39O60jjGQ49oAG5JPnL8%2F%2FArwPrZs%3D&use-server-side-rendering=1&pcode-icookie=ICTxh8nVUWgTo8bURZv6DqodX7PcmVm6xb0yWri05Y1PdjQ5diK9A8eX8WgJIiMNT1S1JZk88CsxCaxAJ1ZqnJvUMHs%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqiicSTJ74Ew1vfC2r_mUOKYYv-h_ibp1qWTYCX0rx2nnbNu_bYmRMKyMC1sircVKGktk2_pN3S78ngbM8gg87iRgkSERCSRkUgQiBCJGxoEyBtnQt2y0socPza4N7M8M-wmAr_JyGTIG6gC16GTET7FnYz8X7cxlSjn3-kzthu_oRO0qDaLoP0cFiH22N4CZawJVEeJoH6cu071EW3cw2JKHsneRqnxa0S0bSq7fPxl2pXYS0Wvpbp8zTJgt9FmSoi2MvVfsbe3XUafReY6sebM20GXxCiB4jvcjxWLclRHx4q0A56z18-sTi4YtMK2KGRWU5FbW-3xcY9clFEw9RimyNSKXpaZZx225W6eF_HRuFTIYm1Irld9SbmFULfQLFmdbceHi0tuMc_WdS06kF6xn9NvPnutj_F1wSXbArNj7jAyO3gz1vu6tHAkl7NS7AbOkZADTjYqVT0XWeHEcz1PutJbc_zc1Rv4FSdlVrHSBawon42ZznnA3pFhrm7BnDIx2hDsxl_EBGpgsQSo8BdjloKvBb57CGzykNXjqyt4IJd22ZlyjKWiBc31E9WVs_EUiBGWS_emNBVWbxpGkWtc6o8-tz-DoV78hPOwQEeOf-NEtTh8Lqr4arrQqm4B3Qr2cWlq89hdV7qPA0NJZT82jLb9zGe49KPnN8c49dYrjjX1PUQ34M_hgABK4zBxX-yTQD-doN9JaFaZolyDX3u9jcaVVNGKeW7YIxDazMGiSQAe5sB83HP7mx22XMzxZwKCJ7iNXhVZGvxu0_y2lDaN10o7nSjQ98wWfCAmFknpJ61EAtUxs3fLJW3dI3Q2zxuMYPSi2TE4HaQFr-TH9seAgPEjIJyKHw_A5wFzmEPk2MGqp0DRzWT67TiohIqhGBi7VjIBgC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BVhx-U_G6_ClRFoZ3DGCglAOaQdY05ciJ22RPKg6pM7xfQfJgyZ1UZBFrm8gH4Fy4-YZUj1h_qJ9iecl-DCuLowO_WuPwIXvbQvIcuL7NIscNy82tw56VAD_rKZd8FtO526Y0QH3P8xp4HiaVLkxaZu2yOhnYnvqZnCbDubDGc9nyBAmLZq0KAwuojC4iMzykRP_mKVzFHlYmlcAEREYkSJLL_PSbdH1M9-gi-WaImwLUjpXFdOiRU0K3Qd7OEMUo0big70OPydurNdAdmF7uWbDwwMHZYM_2c0nlXb-IEL9gEKjMF1cLCl2LLMVL69KtQHYPSjBAFwM8A%3D%3D&tga-with-creatives=1
IP
GET /ads/adfox/260971/getBulk/v2?dl=http%3A%2F%2Fjoxi.net%2FE2p5XWQHv5MMPA&date=2023-02-07T07%3A26%3A43.915%2B00%3A00&pd=7&pdh=1024&pdw=1280&pr1=3556706967&pr=1171694378&prr=&pv=7&pw=2&extid_loader=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&extid_tag_loader=joxi.net&ylv=0.716043&ybv=0.716043&ytt=146786414231557&is-turbo=0&skip-token=&ad-session-id=8619121675754803918&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A240%2C%22h%22%3A400%2C%22width%22%3A240%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1025%2C%22top%22%3A223%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=716043&available-width=240&available-height=400&yaru=true&p1=cusln&p2=gxmo&slotNumber=1&bids=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%3D&utf8=%E2%9C%93&duid=MTY3NTc1NDgwMjc0NTAwMDEyMQ%3D%3D&pcode-test-ids=657518%2C0%2C22%3B685674%2C0%2C76%3B711101%2C0%2C64%3B716614%2C0%2C22%3B716623%2C0%2C90%3B711505%2C0%2C20%3B717982%2C0%2C61%3B709027%2C0%2C12%3B712946%2C0%2C85%3B715192%2C0%2C98%3B716043%2C0%2C83%3B716461%2C0%2C9&pcode-flags-map=eJytWGtv2zYU%2FSuDPw%2Bd3o9%2BoyTKJqzXSMqOWxSEm7iJNycZ0qTLUuS%2F71KUbUl26CQbUKSO4nt4eR%2FnnqufIzIuSopFThjDiUgQR6JCFOVMpCUVM5LgUpBCxGUelaOPn3%2BOfiw3D6vRx9Hq8a%2FRr6P71fd7cgG%2FuqHhuO7o%2BcuvoxliguLfa8y4mOWoEiktc4ES1rPntMZdAM%2F0rcBoAHCBogwPDocPKSkIx%2BBfPGWTkos54ZOy5gKB75zpvPNc1wvsN4P%2FH8goy0RFy6SOOTs85m3QGCDfmJcOiMwLnDmHVIgMRThroAAkQkWBqT47nm07fteXAs8Fm4I1%2FJOAJUowFVWGFgOooUOBa4XhziFSVGiMBeMkni5EQpgET5qoRTK1SVqewWOKYy4YzrIeND6r%2BtC%2Bae2ha9b3skBFVetvGZq%2B4ewA%2BIRCtDClMkypYDWd4QWEHJI4FoSJAspkhjKSnAC1PDfYgaJERn8h67ZF4qVqk7ZntGC%2B4TuBvwfLMvCwLLKFqOooI7FAFWnSCilhHDpbj2aahmt2mjYvZ1iUGdiST3hHBLJ9X%2B%2BhaQeOsS84rpoCU0bKomcJ37SCsG8LNGI1tnVB2pJqbpNXXdP7u4dVx8yxAjtUR8qcM9ZU9cBmWIcdIxkrjAtRRgxDigfle7P8uln1LG3PClUOUnIG1FmICSbjCRcF1x%2FpuHaowr1ARYLPBK1FUuaIFFpqNXzL9nbnRbScgrNwlhjTQe0NLU3fDbyjB8pW45REWnPLNDzVDp9wYYm0hq6ckwSIkeTQtVpbx3RaOm9s284WUUllUilKSM1%2BeSXCAkm%2FlcNQ83O00HKy69h%2BG%2BcklVXLqrKAwuAkx9B3PVPLMIy%2BrWPY6s5VXCZYNinDhZaoXccFmLaUJF9RLGt3e56QNKU1d3zfOjQHyoGfc9lEUJ3vQdg6ACRV97JlG8etM4xoIXKpCGaIEjS4t9U71DWMNsoVJSUlfCGiBYwmPK9Kqg%2BY53tt723roqX4mGmHhwsEHXQqEkg4RsDPMCjiGLLENCzhhrZrmj3bporZTkdUwM2kGOtBHLdlt7isCw6lzBcVFrbea%2BBst5OenMYQJ0YikkHU9MeFvveiJTC%2FiIH1pydO32LkdcaJmvYCCDYlMGmJvESKYn03h4Hl%2Bx0%2FWhClQ2CAQbHJ0R%2BBrJEdw2mZZSd0gGE5tqq6MUWRpf8ulKix%2F24znroGrmkZuu8f6XzTfcFiWxwT3IwfihPMQCVr%2FTNdy1PWUnBQnALnTEATjUmstwvslmAbLUBz2UEUF9u5V1Ec6SneA462zF4rwQykUNcFdNMEQz4kbbOYygnHmJaJPDM0HeVPxwhVlbzKGFpDb2yZodvzZEJ4c40OGARzyku9F7ZvWT3dG1e5yHFCkAAQxMmsGfJ6jNDubxNxFf9njIG0T3CKoKPeqOod1%2FC8XphYjigXIK1qLMFPJcn1PG%2B%2FaSmROvBMadZSyt5GoAqWnfDKN%2F22G2OpvcuirUKUSo4jKShBrES%2Bvhz9IPTCnRRLKQEYUKfKnjTF9Ab7aHrQ6gcWXmi3NduxeOv66vmhY%2Fg7FJiDiUTI9ScHjmcOT1ZFpj%2FLslqV22kMqeVe1R2B55j2ljNAEsFiCVeFohG2ZSiN1swEJbcOV7sDPD%2BwD2%2FBx%2Fo7QJqCvdWe8pmoYJzAZIWdd4bz4Uweffsu7m8fzq8Ga5cRWMPlUtHukTy2q%2FmJ5MDW1Tavai%2FYAivBaTOgTo1MLwwdu91h%2BkenWamWK%2BXoCZCgbamXQJpK7Ydn%2FSiul4%2FiarW%2BvLp%2FAY4UkpKnOEKRgI1A5wSss4Hf62tFDfMJlFyn%2BuQqq9bRGgZes3qDHsPAktp2903DaZUNpULNPl6DhFS00QS6Yah6PDm5iTqq7zP0adEwjWgEeNfs5%2Bjb6v78Kl%2FeXa5v2hF%2Bfft1vVmx8%2BVmfXM5%2Bmg99%2FdJ0C2dIlAcC3pcRJmshIz0t9nPo%2BvlevPh7gF8%2B2d5c7F6hM%2B%2Fra%2BXl6vvvUeXy%2BvmycXT6kZ9ffljfX%2BrPl5%2F6PxycbNun0rkHQI8uFs%2BbW6frto%2FP92p%2Fx%2Fulh9uVn9%2FP%2FjCH8vb63Vj%2BuX4Fbvtu0%2BtPn3ets57xrI%2B0YnEg%2BX%2BzUHbto2WZKDjYdXfbdNt03VUK8VyQegXfsyzwVsiz3feiQ%2FKbbY95ZWHdF%2Bw7d7WyeqQXTt8ozdgnvP7zaCUTcNstTJLpsMXChA6z3QGwZRP1IKfNfNWLSYgBuMMMSaVOmX6Qz2v1Uw6CCCN3rox2tze%2FvkenION0urJ6Q4MXJ8T4B6Rwq6GZQLl672T71Uhiq7hHoy5uGRyzxDQzVPM4WMsfePF0XU1qhd9SD9sx8wxyDnJkgjYkeATju1QZGXOKkQ0i7ZvGL24GKFh7V%2FftevT%2B4xlxyLg7YlsAZKDOt%2BvYM2bOyybpcPq%2BjnxDuw3AEZ1mgIWzivozwwQj1zX1Vy2tW%2FUzXvidVy4y2vCogTrUtbbqrfMAjWCOB4v9PVghY53dMzvx%2Bu7Djpo8d1BUuxtyQ9CmoGt3kXXDK39O60jjGQ49oAG5JPnL8%2F%2FArwPrZs%3D&use-server-side-rendering=1&pcode-icookie=ICTxh8nVUWgTo8bURZv6DqodX7PcmVm6xb0yWri05Y1PdjQ5diK9A8eX8WgJIiMNT1S1JZk88CsxCaxAJ1ZqnJvUMHs%3D&top-ancestor=http%3A%2F%2Fjoxi.net&top-ancestor-undetermined=0&grab-orig-len=1372&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo4NH0KKqiicSTJ74Ew1vfC2r_mUOKYYv-h_ibp1qWTYCX0rx2nnbNu_bYmRMKyMC1sircVKGktk2_pN3S78ngbM8gg87iRgkSERCSRkUgQiBCJGxoEyBtnQt2y0socPza4N7M8M-wmAr_JyGTIG6gC16GTET7FnYz8X7cxlSjn3-kzthu_oRO0qDaLoP0cFiH22N4CZawJVEeJoH6cu071EW3cw2JKHsneRqnxa0S0bSq7fPxl2pXYS0Wvpbp8zTJgt9FmSoi2MvVfsbe3XUafReY6sebM20GXxCiB4jvcjxWLclRHx4q0A56z18-sTi4YtMK2KGRWU5FbW-3xcY9clFEw9RimyNSKXpaZZx225W6eF_HRuFTIYm1Irld9SbmFULfQLFmdbceHi0tuMc_WdS06kF6xn9NvPnutj_F1wSXbArNj7jAyO3gz1vu6tHAkl7NS7AbOkZADTjYqVT0XWeHEcz1PutJbc_zc1Rv4FSdlVrHSBawon42ZznnA3pFhrm7BnDIx2hDsxl_EBGpgsQSo8BdjloKvBb57CGzykNXjqyt4IJd22ZlyjKWiBc31E9WVs_EUiBGWS_emNBVWbxpGkWtc6o8-tz-DoV78hPOwQEeOf-NEtTh8Lqr4arrQqm4B3Qr2cWlq89hdV7qPA0NJZT82jLb9zGe49KPnN8c49dYrjjX1PUQ34M_hgABK4zBxX-yTQD-doN9JaFaZolyDX3u9jcaVVNGKeW7YIxDazMGiSQAe5sB83HP7mx22XMzxZwKCJ7iNXhVZGvxu0_y2lDaN10o7nSjQ98wWfCAmFknpJ61EAtUxs3fLJW3dI3Q2zxuMYPSi2TE4HaQFr-TH9seAgPEjIJyKHw_A5wFzmEPk2MGqp0DRzWT67TiohIqhGBi7VjIBgC5lWQ9dpVkuKpWx0OsPTJ4B6bZRmbdTEOoJ9o5naG_gTpzmaAGOcvU9aZ9CbbC0BVhx-U_G6_ClRFoZ3DGCglAOaQdY05ciJ22RPKg6pM7xfQfJgyZ1UZBFrm8gH4Fy4-YZUj1h_qJ9iecl-DCuLowO_WuPwIXvbQvIcuL7NIscNy82tw56VAD_rKZd8FtO526Y0QH3P8xp4HiaVLkxaZu2yOhnYnvqZnCbDubDGc9nyBAmLZq0KAwuojC4iMzykRP_mKVzFHlYmlcAEREYkSJLL_PSbdH1M9-gi-WaImwLUjpXFdOiRU0K3Qd7OEMUo0big70OPydurNdAdmF7uWbDwwMHZYM_2c0nlXb-IEL9gEKjMF1cLCl2LLMVL69KtQHYPSjBAFwM8A%3D%3D&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://joxi.net
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://joxi.net
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1675754755322326-14158517876215204700-vla1-3918-vla-l7-balancer-8080-BAL-6646
last-modified: Tue, 07 Feb 2023 07:25:55 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Tue, 07 Feb 2023 07:25:55 GMT
set-cookie: yandexuid=2152047001675754755; Path=/; Domain=.yandex.ru; Expires=Fri, 04-Feb-2033 07:25:55 GMT; SameSite=None; Secure
i=4PHB1+8aQSZpLyRWHiPtOikQNBOAA8oSq7CFQrEESYm+vR4/ZO6D0iwGLW+dd/Dgzk/NHXsKDbwYbpobt+bvagHYsWg=; Expires=Thu, 06-Feb-2025 07:25:55 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=1890962671675754755; Path=/; Domain=.yandex.ru; Expires=Wed, 07 Feb 2024 07:25:55 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Tue, 07 Feb 2023 07:25:55 GMT
X-Firefox-Spdy: h2
ads.digitalcaramel.com/css/joxi.ru.css
200 OK 0 B URL HTTP/2 ads.digitalcaramel.com/css/joxi.ru.css
IP
ASN #24940 Hetzner Online GmbH
GET /css/joxi.ru.css HTTP/1.1
Host: ads.digitalcaramel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://joxi.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 07:25:53 GMT
content-type: text/css
last-modified: Tue, 23 Aug 2022 11:46:50 GMT
vary: Accept-Encoding
etag: W/"6304be2a-231"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15724800; includeSubdomains; preload
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
78.47.21.152
142.250.74.110
93.158.134.118
37.48.117.210
188.42.191.196
95.216.65.102
95.101.11.115
104.18.21.226