| s04.mydiv-downloads.net/download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe |  51.75.52.14 | 301 Moved Permanently | 185 B |
URL HTTP/1.1s04.mydiv-downloads.net/download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe IP51.75.52.14:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4c555068310076e85908835c721911f5 9ec990aabb4391e139034f68e5e657e0f1d0b74d 568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe HTTP/1.1
Host: s04.mydiv-downloads.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Sat, 04 Feb 2023 21:12:09 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: https://s04.mydiv-downloads.net/download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash81713f952b51a865ad9764cde68e3fdb 278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16607
Expires: Sun, 05 Feb 2023 01:48:56 GMT
Date: Sat, 04 Feb 2023 21:12:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashc21ba65e44ac95470c314e068e49a9eb 17a13b13738993d889d4afa3d848dc63bf6eba64 9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5738
Expires: Sat, 04 Feb 2023 22:47:47 GMT
Date: Sat, 04 Feb 2023 21:12:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashfb7b6b46e708ad73eaaa3c21e74569ae 950663c025acad81556af5aa3022ecc9d55097fe 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13356
Expires: Sun, 05 Feb 2023 00:54:45 GMT
Date: Sat, 04 Feb 2023 21:12:09 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 20:43:39 GMT
content-type: application/json
age: 1710
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zO9XDdZEhMxsi13XTNEO+8TDRVXZJNSP44kiNI4FkSNfENU5qxKKPouMxQwtsTjfvxecfDPBrzr+l3CnkM8Sgw==
x-amz-request-id: 95NG53GH7KNH5JQZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 20:24:10 GMT
age: 2879
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6ae5c3bde85c31e806f70b1d7c17c41c 501cb79ff833c43322a014cd65b6366edb099434 01f77fffc46c14aadc61548b187874eb5941c9af99c6196530298e3e78ac0318
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01F77FFFC46C14AADC61548B187874EB5941C9AF99C6196530298E3E78AC0318"
Last-Modified: Fri, 03 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17047
Expires: Sun, 05 Feb 2023 01:56:17 GMT
Date: Sat, 04 Feb 2023 21:12:10 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 21:07:19 GMT
age: 291
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdedf9c519ac38c4bece9c5bc895787d7 4911175c3f8a435978c5301c33c7a99a5e00a1d5 bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12311
Expires: Sun, 05 Feb 2023 00:37:21 GMT
Date: Sat, 04 Feb 2023 21:12:10 GMT
Connection: keep-alive
|
|
| mydiv.net/build/public/images/c141857003053201a2b0239f9c2571a4.svg | 54.36.106.111 | 200 OK | 3.3 kB |
URL HTTP/2mydiv.net/build/public/images/c141857003053201a2b0239f9c2571a4.svg IP54.36.106.111:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3315), with no line terminators Hashc141857003053201a2b0239f9c2571a4 ed829bb667018790d2256bdb84cbc40e910b890d f4a8a85124370b95447eb9818a3feb3c646f126cf7abd4f80c80605e38b80a10
GET /build/public/images/c141857003053201a2b0239f9c2571a4.svg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/svg+xml
content-length: 3315
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-cf3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/uTorrent.gif | 54.36.106.111 | 200 OK | 1.5 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/uTorrent.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashd8b3a7cb134c0c01d8b730eb52efa445 e5f8e04f40a7149aa1be7256634f86cf370ab7af 8fc5ba6a1a76621176948efd20d396430b35edcbf317d3810750959978d56133
GET /images/ru/win/icons/uTorrent.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1477
last-modified: Sat, 04 Feb 2023 17:35:03 GMT
etag: "63de9747-5c5"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/BlueStacks.gif | 54.36.106.111 | 200 OK | 1.4 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/BlueStacks.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashde4422d577c482189dfe5966c7362737 473e997d0ded39d3ccb1c54f874576c71cc1405f ad97d0191d465353cb1567a6bd615bc00b95057dfcca9d395feff0b223aba739
GET /images/ru/win/icons/BlueStacks.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1438
last-modified: Wed, 01 Feb 2023 20:03:22 GMT
etag: "63dac58a-59e"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Discord.gif | 54.36.106.111 | 200 OK | 946 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Discord.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 31\012- data Hash863bd8be9dbe3fc6ea1c2ebe5e17b0f2 0b8090fa9037490c85fa5bc389e9f89a83540862 0d329bc9801611acea8cda68e2f16de4b07635bf6de752188106e32cc09cb1b1
GET /images/ru/win/icons/Discord.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 946
last-modified: Wed, 01 Feb 2023 16:40:37 GMT
etag: "63da9605-3b2"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Zoom.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Zoom.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashf016ef461c4b5d433f2b75874a3fa9f0 84ca32cbbbdc8e3a4ad052bd9e4ed243ec0f0ceb ada6433e29568a6e2f031cfda2ff1ecac2a620bdfd9bba799fe463790cc1f83c
GET /images/ru/win/icons/Zoom.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1713
last-modified: Fri, 27 Jan 2023 20:17:43 GMT
etag: "63d43167-6b1"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/MediaGet.gif | 54.36.106.111 | 200 OK | 1.6 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/MediaGet.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashb69d7ccb1c036103aaf41086187b37fa 3cec81950db96a58ac7da7a216777c18f960ce0a 2c6ad5f94a93e5a49e305505f95e65e356d1f5e669a101e5a34d31715369ac2d
GET /images/ru/win/icons/MediaGet.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1589
last-modified: Wed, 01 Feb 2023 20:26:42 GMT
etag: "63dacb02-635"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Zona.gif | 54.36.106.111 | 200 OK | 485 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Zona.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashaf31d9cab2614849c9f71f67744d5fe3 51ce21cafb25e407da959bfee9c4a1fbdc1fc0ec 885f59f4d86f36d1387042f418bc9dab60afa57f30c91b62b1492f96bc0dea72
GET /images/ru/win/icons/Zona.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 485
last-modified: Wed, 17 Feb 2021 17:54:03 GMT
etag: "602d583b-1e5"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/WinRAR.gif | 54.36.106.111 | 200 OK | 1.5 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/WinRAR.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 31\012- data Hashde072b93dbf65068ccfc9a91e722ae90 51e63f9279c737c782e9fce4d1991a2286eb1b65 5c45b14e029d2c8e7aff98121b8a5866706cda5dc40336b6b20654d177db8060
GET /images/ru/win/icons/WinRAR.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1484
last-modified: Fri, 27 Jan 2023 19:43:39 GMT
etag: "63d4296b-5cc"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/CCleaner.gif | 54.36.106.111 | 200 OK | 1.6 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/CCleaner.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash28ecdadc6ce55c1c52937fe69634148f 53a1e07d37c4f4e940dcf928f071e1e9698cef5c 56d76d2683ce1d3285094a26ba0150346ff128fb922e3d3a7ec74c22017f563b
GET /images/ru/win/icons/CCleaner.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1626
last-modified: Wed, 18 Jan 2023 11:57:52 GMT
etag: "63c7dec0-65a"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Steam.gif | 54.36.106.111 | 200 OK | 1.5 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Steam.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash86c651e4629614e6c3d484025d31ec96 83f4de4ac00b8ef3d089d7c62eb7ef477bb1a033 e5fea4599e64d0132ca47ae960c3d792c3a1ab958544e69e8a36db71dc4b13f0
GET /images/ru/win/icons/Steam.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1464
last-modified: Fri, 03 Feb 2023 00:44:21 GMT
etag: "63dc58e5-5b8"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Rufus.gif | 54.36.106.111 | 200 OK | 860 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Rufus.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash8c927578b093422fe11e609f10c18aca 1a31f0fa6b91abbf0c7e64aa6e492992dec8fd8a 13c092b93de3bea603c7c63360af929d4f4afd3440c0a96fe24bce927e0dc62b
GET /images/ru/win/icons/Rufus.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 860
last-modified: Mon, 28 Nov 2022 17:52:37 GMT
etag: "6384f565-35c"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/UltraISO-PE.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/UltraISO-PE.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashf31881c998b0af01243f70cb5a1aedfc 56fdc0caa5991515922c15e3dcc4ac00cb8ca6b7 ff4e38c415472a6ecfae02ae03de9e293afe24fc84569298ffb0565fa773ea65
GET /images/ru/win/icons/UltraISO-PE.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1689
last-modified: Thu, 14 Jul 2022 18:06:37 GMT
etag: "62d05b2d-699"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/7-Zip.gif | 54.36.106.111 | 200 OK | 401 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/7-Zip.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash769824aa176b2636b1640c3d60afb524 655c4f97e6b7fa6fe12a8ed27da7e4bcdb0a6de9 f191b1e3ef1e66445d0dc5e296ef0009d67a49f4a13cc146a692bd8d48c43721
GET /images/ru/win/icons/7-Zip.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 401
last-modified: Sat, 16 Jul 2022 17:26:25 GMT
etag: "62d2f4c1-191"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Yandex-Browser.gif | 54.36.106.111 | 200 OK | 929 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Yandex-Browser.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 31\012- data Hash9833effb5dd42a027e756f796ddf4cfe 9e99332744c5484e396a029a9d34bf957dff3f73 2ebe442f30652b6c67329d1db561f07da3f941f78e687ecedd11c12c6accd16a
GET /images/ru/win/icons/Yandex-Browser.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 929
last-modified: Fri, 03 Feb 2023 13:54:51 GMT
etag: "63dd122b-3a1"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/OBS-Studio.gif | 54.36.106.111 | 200 OK | 1.0 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/OBS-Studio.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash475687f8d9f500bd84aff0051af75dc0 747eb724c7cd54c9cc583ec2eb034a04accb7cef 4a3f1eb3b4744aff569d957dc76c416a56e1c0ee1529ee487b5af81bf5e60570
GET /images/ru/win/icons/OBS-Studio.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1023
last-modified: Fri, 03 Feb 2023 13:51:49 GMT
etag: "63dd1175-3ff"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Adobe-Animate.gif | 54.36.106.111 | 200 OK | 964 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Adobe-Animate.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash11c35a7e206514cf071c7ad75efee9a6 946062bc95112ae2b7e73a5e33d0a2884d983e34 bc9b9bd0ac35ac4b52ffa722f3d649901b7ce7aa6b08b58e6c1eb5c8865fd075
GET /images/ru/win/icons/Adobe-Animate.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 964
last-modified: Tue, 18 Oct 2022 23:38:14 GMT
etag: "634f38e6-3c4"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Adobe-Audition.gif | 54.36.106.111 | 200 OK | 1.0 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Adobe-Audition.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash84cfb69793f19552fdda4e7ff93ff571 b74176c770ae2a5e7591cf0c220c2031394e343a c24f8c26889b7da66bd9992ca444eff598d2480c066559b6a9883a285f095b8b
GET /images/ru/win/icons/Adobe-Audition.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1014
last-modified: Wed, 07 Dec 2022 12:19:20 GMT
etag: "639084c8-3f6"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Beyond-Compare.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Beyond-Compare.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash281cda91c02f6369c40877ae6082605c 87521985aadaacd158385b23da18bb8c898ea1b4 577d10141709bf8dc60be30559d1f3382f60a13282877d98864080fa856be244
GET /images/ru/win/icons/Beyond-Compare.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1744
last-modified: Fri, 03 Feb 2023 22:37:03 GMT
etag: "63dd8c8f-6d0"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Telegram.gif | 54.36.106.111 | 200 OK | 542 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Telegram.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash9f1216b5ce778e8343b2fdf718134e0d 0172574dbeccca4fc294f15a688b4e6eb85f9b6f 9a83613274a73327357e141d085039270f5c9bf79c443b4fa70c3ede97639893
GET /images/ru/win/icons/Telegram.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 542
last-modified: Fri, 03 Feb 2023 22:32:10 GMT
etag: "63dd8b6a-21e"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/VueScan-Pro.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/VueScan-Pro.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashf8a9b325afa308d4dcadd99ba08a07f8 53c176e65fd73830f1fce5a3fc6e16bb21777b1d 4cc8967330690445abdb3780cbbf87ae60e3be19fb98c89212fc0cbd3e72feed
GET /images/ru/win/icons/VueScan-Pro.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1686
last-modified: Fri, 03 Feb 2023 22:29:00 GMT
etag: "63dd8aac-696"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/VueScan.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/VueScan.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash6c9bb6ec99072a93eab3c406db1ea82f ebe222261ae7d84c82c9e2f20a71ec611cc5e287 798cbab0d1b6316161abd75474919417927851faca59763bc445f4e644124bb0
GET /images/ru/win/icons/VueScan.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1673
last-modified: Fri, 03 Feb 2023 22:26:45 GMT
etag: "63dd8a25-689"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Farbar-Recovery-Scan-Tool.gif | 54.36.106.111 | 200 OK | 873 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Farbar-Recovery-Scan-Tool.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash134e73e517108a1a05890704bf4e3bb6 0b36880e8642421cac40d53f9e4edfc30c3207c5 c244afa65db245f9bbe966957cc78ccb83559198ddcf57e5132d57d43c560411
GET /images/ru/win/icons/Farbar-Recovery-Scan-Tool.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 873
last-modified: Fri, 03 Feb 2023 22:24:12 GMT
etag: "63dd898c-369"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/NetDrive.gif | 54.36.106.111 | 200 OK | 669 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/NetDrive.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 30\012- data Hashfebaededc843803d58c7b356490f0743 71b719e921a44b691902db4a1237147b25dd7efa 59a7a5138d7ed11ebc2dc0313544d1ba68a943c13bcca65d6e298ad100a6d9ea
GET /images/ru/win/icons/NetDrive.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 669
last-modified: Fri, 03 Feb 2023 22:21:11 GMT
etag: "63dd88d7-29d"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/eM-Client.gif | 54.36.106.111 | 200 OK | 924 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/eM-Client.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 31\012- data Hashb5fcdef987f83fcd3d556fae0fc249eb 189e417b47553d7f3df9331123237d44bd707867 691027011523d70d6d7bdcc2a080dc62c8f4cad169378ad2194c51db905d43d8
GET /images/ru/win/icons/eM-Client.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 924
last-modified: Fri, 03 Feb 2023 22:17:43 GMT
etag: "63dd8807-39c"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/NetBalancer.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/NetBalancer.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashbfbde17f4a979096ef8415f4af946788 8c2f5e01e92e818f1beada2585f669302a37367a af4bb8fa1100417025cc998a3dd8d9f94ee1a396596c586daad65b948f9250c0
GET /images/ru/win/icons/NetBalancer.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1655
last-modified: Fri, 03 Feb 2023 22:16:00 GMT
etag: "63dd87a0-677"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Spotify.gif | 54.36.106.111 | 200 OK | 671 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Spotify.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashe965d87771ed1206c689899f4f99d524 ea474001aaae02a9967d4a2875d8d94beb03ddb7 83f98234a7f1225dbc666613a1083ffeb982c25a7b0db8bd971e67ca7154dd28
GET /images/ru/win/icons/Spotify.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 671
last-modified: Fri, 03 Feb 2023 22:14:46 GMT
etag: "63dd8756-29f"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/IDrive.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/IDrive.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashcb66fdd06bf71cb2b516970568110672 2fd45f1d300ed33a40400d378d0518b54a16ada0 b708686310abcbd62621c722ee8cf38cd7c8fba7c654a927502600b15072db7e
GET /images/ru/win/icons/IDrive.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1671
last-modified: Fri, 03 Feb 2023 22:12:36 GMT
etag: "63dd86d4-687"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Sandboxie.gif | 54.36.106.111 | 200 OK | 827 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Sandboxie.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash5938c77e31d9ab7c82c05ad8a65844eb 0c7248d8231d44b4c69b0a44a2c93d226611a00d 5c4fc070457aba5c56b6d633e89dad8a1d71484d0c47e15f271fd404568b2ff3
GET /images/ru/win/icons/Sandboxie.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 827
last-modified: Fri, 03 Feb 2023 22:04:41 GMT
etag: "63dd84f9-33b"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Rainlendar-Lite.gif | 54.36.106.111 | 200 OK | 1.6 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Rainlendar-Lite.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash9eea9804fd17e77a618355d12fc4f77a 8487fc5e596d97379546073bc9ccb47c14636772 7c2fcaff9cdb7a2d957c9992396d4fec0e5283aed3dd44110d39e2fcc038b881
GET /images/ru/win/icons/Rainlendar-Lite.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1566
last-modified: Fri, 03 Feb 2023 22:02:05 GMT
etag: "63dd845d-61e"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Affinity-Photo.gif | 54.36.106.111 | 200 OK | 1.9 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Affinity-Photo.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash20353a41192e33993214f5fd5a298e49 ffd668983964f1f7b856d487643c34fb98029333 f3d5de3f0d79f06f9996ddc5de1f485bfb5d5e04df296223c6b57599a2d5c6f0
GET /images/ru/win/icons/Affinity-Photo.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1875
last-modified: Sat, 04 Feb 2023 04:54:30 GMT
etag: "63dde506-753"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/MetaMask.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/MetaMask.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashcb08c413ea9fe08be7af7c8c7be8e8c5 c69da52ccd3c0faea43239cf2cb8aa158dec8268 c489614defa31557bd332973ad69aaaeb0a21e9ef66a361189182ee3a40468ac
GET /images/ru/win/icons/MetaMask.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1681
last-modified: Sat, 04 Feb 2023 05:34:25 GMT
etag: "63ddee61-691"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Lenovo-Vantage.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Lenovo-Vantage.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash906f0557f705ccb9dabe06f96ea59b1c 98508a9f476eca8fa223306960192bfa582b271e 5d79cdd54e68cffb21c4eda7ca436dd50c7f7d9a7148df7ea6bb24ea99ebdabf
GET /images/ru/win/icons/Lenovo-Vantage.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1719
last-modified: Tue, 31 Jan 2023 12:34:57 GMT
etag: "63d90af1-6b7"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/iMyFone-LockWiper.gif | 54.36.106.111 | 200 OK | 1.6 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/iMyFone-LockWiper.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash939c8fadc6e1456474204b8c0203c0d1 243aaf58bc1c7fc7d1e155c6148dfd73f711673c 458d697fc08466306ee9796ec07b8dee2fd7f55a16aaf5fa7a7d84cf36053a31
GET /images/ru/win/icons/iMyFone-LockWiper.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1629
last-modified: Thu, 26 Jan 2023 00:19:35 GMT
etag: "63d1c717-65d"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/BotMeK.gif | 54.36.106.111 | 200 OK | 1.8 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/BotMeK.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash138dce8c5a3ec0362ca2afcd744c3bb2 acdaf9010e1f9798725056e2bd80de2741ad87a6 e187849ab756980332d2f71663a2c53f728a2a523d247f39119a83819558ebe6
GET /images/ru/win/icons/BotMeK.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1766
last-modified: Sun, 29 Jan 2023 19:41:57 GMT
etag: "63d6cc05-6e6"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/MSI-App-Player.gif | 54.36.106.111 | 200 OK | 1.8 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/MSI-App-Player.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash4a10119e665e61e066381e3ff07d88a9 0df59193d8db4edd977efee1982d063868e17c3d 4c2833094169527267e03887a2bf2237b94d34b0e6a3e004278dd561e1db3788
GET /images/ru/win/icons/MSI-App-Player.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1818
last-modified: Fri, 20 Jan 2023 07:16:00 GMT
etag: "63ca3fb0-71a"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Brackets.gif | 54.36.106.111 | 200 OK | 1.8 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Brackets.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash5b475bdbe3221606747a096b54723806 baec4a0ccfaf8f62d150c3c7862c5c0094fc9322 921a90525592ce0b4a82731b0a593f8e45233157dfd831ff1774a21f106e2f5b
GET /images/ru/win/icons/Brackets.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1753
last-modified: Sun, 15 Jan 2023 09:01:46 GMT
etag: "63c3c0fa-6d9"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/balenaEtcher.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/balenaEtcher.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash2085f8efc46afc96f3ca6af71dac6c20 3d49165890be69028a51fc9da28e19a9b9b8dced c0c64d516d434a49d3ecedbae5ab327ec5941223c3c5af6906d96265fba0af53
GET /images/ru/win/icons/balenaEtcher.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1706
last-modified: Wed, 25 Jan 2023 19:25:24 GMT
etag: "63d18224-6aa"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/Aorus-Engine.gif | 54.36.106.111 | 200 OK | 705 B |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/Aorus-Engine.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hashff6ae70efbcf7a60256f6210dfb11aa1 cffd5dfe797cb5e0ac7f22df2484d735b5302caa 0fcf1b65f317c8abff574c897e65c89304612b3148131beb2232a87a24def00f
GET /images/ru/win/icons/Aorus-Engine.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 705
last-modified: Thu, 12 Jan 2023 04:46:08 GMT
etag: "63bf9090-2c1"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/WizTree.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/WizTree.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash3deb7d33547460325d244ba7d0a944e8 fffb17458610680db34d2004095d23dd5d902b0b f7e7cc5dd91b0679287fb65021d8478c0de6f4091a45f12b5c8210e97adaaf03
GET /images/ru/win/icons/WizTree.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1733
last-modified: Tue, 10 Jan 2023 01:34:47 GMT
etag: "63bcc0b7-6c5"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/RGB-Fusion.gif | 54.36.106.111 | 200 OK | 1.7 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/RGB-Fusion.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash6d8b065b215ef8258196abce2e5ea170 c531162b5deef40904540ccf9c159e237d79c509 112f9e78ea58e24ab1cc174f604a61c223ccf672a2247e2eb23bc02dfc944f9c
GET /images/ru/win/icons/RGB-Fusion.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1676
last-modified: Fri, 06 Jan 2023 04:45:14 GMT
etag: "63b7a75a-68c"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| soft.mydiv.net/images/ru/win/icons/AutoDWG-PDF-to-DWG-Converter.gif | 54.36.106.111 | 200 OK | 1.6 kB |
URL HTTP/2soft.mydiv.net/images/ru/win/icons/AutoDWG-PDF-to-DWG-Converter.gif IP54.36.106.111:0
File typeGIF image data, version 87a, 32 x 32\012- data Hash6814e115c43ff8e0d0fed7323db825dc 8c6602c57c16628d552fac610a272ae4dbe3d7fe 438d595f2e53574d716cc6c23b75c4491b67a29c9f8be91ae2337552e3bf096b
GET /images/ru/win/icons/AutoDWG-PDF-to-DWG-Converter.gif HTTP/1.1
Host: soft.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/gif
content-length: 1604
last-modified: Sat, 12 Nov 2022 03:30:05 GMT
etag: "636f133d-644"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28503_small.jpg | 54.36.106.111 | 200 OK | 3.9 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28503_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash6bdf5d3f3e850e1b21ab105f2f4f2288 fb5695894e1177d718d473db4415b55ce1c08fde 3f48d4343a6e336b819aed476fa0b6908168824d54a7dce8992417a420dcc2e9
GET /images/arts/ru/screens/28503_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 3920
last-modified: Wed, 01 Feb 2023 10:16:35 GMT
etag: "63da3c03-f50"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/7487_small.jpg | 54.36.106.111 | 200 OK | 13 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/7487_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hasha066367bbfe1a63b4270f84f22b6b500 ffe1a653b109df02c551395886540bb4b084884b a15d5587fa33b8219b72145ea104f3c61ec2a35e5f34913c7f337389e6dbf086
GET /images/arts/ru/screens/7487_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 12661
last-modified: Sat, 17 Nov 2012 13:50:17 GMT
etag: "50a79619-3175"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28490_small.jpg | 54.36.106.111 | 200 OK | 13 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28490_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash694f97713a7546d460dbbfed09a03c3b c0394726932a448d1c8c4ee8341e8796a1f33535 a4cbcd590323ec0299b3855861fb054a7b69cbf59c769af05f2f2cb6b4faff22
GET /images/arts/ru/screens/28490_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 12769
last-modified: Sat, 28 Jan 2023 21:30:29 GMT
etag: "63d593f5-31e1"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/8306_small.jpg | 54.36.106.111 | 200 OK | 29 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/8306_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashd360dc00bf85021a6a9fbb24e5a11cee 23e10a6e0ead21308395fe37fa128ae1d57739af 36bd15852301c9373ee783ffa968effc9e6d39281af81c214807f6b9cfe3fbf9
GET /images/arts/ru/screens/8306_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 28944
last-modified: Fri, 28 Aug 2015 11:48:48 GMT
etag: "55e04aa0-7110"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28480_small.jpg | 54.36.106.111 | 200 OK | 5.1 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28480_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashb6a0a7d1686be1ede4d363e2d8724cc5 59cc8020390eb58c1d1c4970d31a3aa407b3eaaa 091792468a237426615ae44dd555ccd4c58868c104cd8776e25e028a047ec220
GET /images/arts/ru/screens/28480_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 5086
last-modified: Thu, 26 Jan 2023 07:52:34 GMT
etag: "63d23142-13de"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28479_small.jpg | 54.36.106.111 | 200 OK | 10 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28479_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash9cd84a0fd89b3bb0a23e4317f1eddb98 2df236e47e4bb0d4008a54816d2067bd398f7088 59cb72971706cf45893f090902225f4c8450f6c9213598e7dedc1f132f9c866c
GET /images/arts/ru/screens/28479_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 10217
last-modified: Fri, 20 Jan 2023 12:08:43 GMT
etag: "63ca844b-27e9"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.218.164.174 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.218.164.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5fSnnaZ3LdGd8IWpn1Wdew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8oSEdzitJ/gRQskQ76oz7UU70HQ=
|
|
| mydiv.net/images/arts/ru/screens/28477_small.jpg | 54.36.106.111 | 200 OK | 16 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28477_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 190x190, components 3\012- data Hashb4de4e3729587a8bfea9db8dd0f4c857 387d0d1748af852d943b50afd6385deb24c1691b 0d76f732ca9e3edddeda13e6e2fe55e6e763f926167c7d91ae3c79690ef65536
GET /images/arts/ru/screens/28477_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 15556
last-modified: Fri, 13 Jan 2023 01:49:54 GMT
etag: "63c0b8c2-3cc4"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28474_small.jpg | 54.36.106.111 | 200 OK | 7.4 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28474_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 190x190, components 3\012- data Hash2af54ab80f6affe610ba45d44387d278 d9c7a0e5a0a078fe3af5265ed5ba4558e85ed532 fed64ef7fdcf7567324ba3cda02c08d8fec73df525bdffc43e999bc44a7265ae
GET /images/arts/ru/screens/28474_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 7402
last-modified: Tue, 10 Jan 2023 11:28:25 GMT
etag: "63bd4bd9-1cea"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28473_small.jpg | 54.36.106.111 | 200 OK | 9.9 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28473_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashdcb66ca2a3cbbe6add96f76687ace21c 14666535c0a3e58376b4e9e39c0c3e97790fc4b2 4b41fbdb044163fa111d2beffa99e233e015497ffa2e5e4cda4fc769a0e0bbce
GET /images/arts/ru/screens/28473_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 9944
last-modified: Wed, 28 Dec 2022 12:32:04 GMT
etag: "63ac3744-26d8"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/images/arts/ru/screens/28471_small.jpg | 54.36.106.111 | 200 OK | 3.9 kB |
URL HTTP/2mydiv.net/images/arts/ru/screens/28471_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashe7e260581e8c3ad95904d8a412d02016 c65e3a709056703eed2f931714178d0b38c7fb6f 383568878c0a4be64b20bdc357d496f439dec592be48bfdb974007daccc33398
GET /images/arts/ru/screens/28471_small.jpg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 3910
last-modified: Wed, 21 Dec 2022 12:41:53 GMT
etag: "63a2ff11-f46"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png | 54.36.106.111 | 200 OK | 1.8 kB |
URL HTTP/2mydiv.net/build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png IP54.36.106.111:0
File typePNG image data, 117 x 27, 8-bit/color RGBA, non-interlaced\012- data Hashc539cc4109c4ed80ec05cb5812112d1c e54ad527d32113957d3c6fbc42f5dee7cf2a15f5 3abcf0a2a296461fb1cf4584d08a2a9afdbd0c0861a7211ab6f53fc64f8fe83a
GET /build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/png
content-length: 1770
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-6ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/69355_small.jpg | 54.36.106.111 | 200 OK | 8.7 kB |
URL HTTP/2games.mydiv.net/images/screens/69355_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashda504253ef75615ad9551c23b3224ab3 bcf2ff423726b8fc20e47ba37e279d1caf394298 c9f6c74d478b6789721f4f48f6f5172f5c12bbf1c625f208ad0956e8261b4874
GET /images/screens/69355_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 8695
last-modified: Wed, 29 Jan 2014 07:26:01 GMT
etag: "52e8ad09-21f7"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72620_small.jpg | 54.36.106.111 | 200 OK | 5.4 kB |
URL HTTP/2games.mydiv.net/images/screens/72620_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "MobyGames.com", baseline, precision 8, 190x190, components 3\012- data Hash5f2dda2bd11f146a35950e2d6b2e69ca f40af53f00d58fe5ee4f1c73e1864cc9abe0f2b7 aee308a28e20909127274a2ed6e808c9a13fca355255ab7bdd413d0805c66bd7
GET /images/screens/72620_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 5390
last-modified: Fri, 23 Dec 2022 10:44:12 GMT
etag: "63a5867c-150e"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/71879_small.jpg | 54.36.106.111 | 200 OK | 17 kB |
URL HTTP/2games.mydiv.net/images/screens/71879_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash405ee08eced5b33bb439a3979e9b3c6a 5f5e9499c4a6bfbdf5d66704d4a663443e5fbb46 c3f5a147c84d13fea3fa5b29e86ceb07808ad5acbf7f265dfd82781583051d1c
GET /images/screens/71879_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 16623
last-modified: Tue, 16 Jun 2020 20:32:11 GMT
etag: "5ee92c4b-40ef"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72645_small.jpg | 54.36.106.111 | 200 OK | 22 kB |
URL HTTP/2games.mydiv.net/images/screens/72645_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash1960d1a1625d0c91e5840e2996739698 029da5e2fa29c1657320ef38dff7d58cbf5f7eb3 111fcd73413769030921fbfef895468c8e669714d8bcc731f9895676685fbd91
GET /images/screens/72645_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 21628
last-modified: Tue, 17 Jan 2023 01:14:54 GMT
etag: "63c5f68e-547c"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72635_small.jpg | 54.36.106.111 | 200 OK | 8.6 kB |
URL HTTP/2games.mydiv.net/images/screens/72635_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashc81b354e6de7da0153e3ce30756dfa9d 04555e9d5ba8e8b271cbcf3703bafce90041f362 2ae9f5184ec8d973bcd9ca078588e4885bd88bd069bfd85d9e265270cb7a67d5
GET /images/screens/72635_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 8573
last-modified: Wed, 11 Jan 2023 15:07:52 GMT
etag: "63bed0c8-217d"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/4100_small.jpg | 54.36.106.111 | 200 OK | 17 kB |
URL HTTP/2games.mydiv.net/images/screens/4100_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hashf9b15de5fe22676d4c9829ad9195b15d 26aeee97c3d3cd198dae620806f1d55b79a226fc 1998d0579ffe07adb18b89614cda227eaba45ae8792487b7aa8278c4ddfaeebc
GET /images/screens/4100_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 16850
last-modified: Wed, 18 Jan 2012 07:16:15 GMT
etag: "4f1671bf-41d2"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72640_small.jpg | 54.36.106.111 | 200 OK | 20 kB |
URL HTTP/2games.mydiv.net/images/screens/72640_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 190x190, components 3\012- data Hash0bb4daac57625cc779fb7a4a779d82a1 c9a405671beb14df420f5521e89fd87e70ff0ea6 193dcb104dc5d68d29216c64ee1a9b258d81111b20b32444ca7a849bfee3b276
GET /images/screens/72640_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 19964
last-modified: Sat, 14 Jan 2023 04:03:05 GMT
etag: "63c22979-4dfc"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js | 151.101.129.229 | 200 OK | 86 kB |
URL HTTP/2cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js IP151.101.129.229:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (659) Hashddf45926107f7a74103f5d00d3bf564c 03c2b22623ccf1d593513956829f891ff07f3169 c709076ef37b9b1720b78c124e329645762b476d566ed204a23cadd762e9c580
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"34e3a-eIUrj6hD3pmnKAQZCp7YaNtM0Rc"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 04 Feb 2023 21:12:11 GMT
age: 27336
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85751
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72625_small.jpg | 54.36.106.111 | 200 OK | 19 kB |
URL HTTP/2games.mydiv.net/images/screens/72625_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash2b1ff426ead715fece232a0492b36e91 eb50fade5844ff9504516e963d15b47c457048fd d422673dc5d2f1dfc6d47db211631e00cf333b6959b65c43a51548ecf3b47dce
GET /images/screens/72625_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 19222
last-modified: Fri, 30 Dec 2022 21:44:44 GMT
etag: "63af5bcc-4b16"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| games.mydiv.net/images/screens/72630_small.jpg | 54.36.106.111 | 200 OK | 16 kB |
URL HTTP/2games.mydiv.net/images/screens/72630_small.jpg IP54.36.106.111:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data Hash07c23aeba1ff6817f68465a5741cf83f 919014488daafeb8f451ac3b7e4ee7f3dd1fd6d4 de1a7cf399742b7d6c345cbfb44bd6077af2a4ffa8a162dd048d57a88bcecd2f
GET /images/screens/72630_small.jpg HTTP/1.1
Host: games.mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/jpeg
content-length: 16448
last-modified: Sat, 31 Dec 2022 11:20:26 GMT
etag: "63b01afa-4040"
expires: Mon, 06 Mar 2023 21:12:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/build/public/images/e7812d5843d1bdde5f676ec192619596.png | 54.36.106.111 | 200 OK | 4.9 kB |
URL HTTP/2mydiv.net/build/public/images/e7812d5843d1bdde5f676ec192619596.png IP54.36.106.111:0
File typePNG image data, 450 x 45, 8-bit colormap, non-interlaced\012- data Hashe7812d5843d1bdde5f676ec192619596 33f68a6af0085917a61ec1a04ab007dbc0036afe ddfe30fde5e1c5bb5b65fc54e21b59ed54c2df16c3a907909a0fba08c027acad
GET /build/public/images/e7812d5843d1bdde5f676ec192619596.png HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/build/public/styles/site.mydiv.css?ver=e802211c2f3185f6ecab
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: image/png
content-length: 4885
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-1315"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash5452c58c07ce8d3cade93b323b271c35 581b1e438daeb32a12feaf50f2aab17dcf3e3171 b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash5452c58c07ce8d3cade93b323b271c35 581b1e438daeb32a12feaf50f2aab17dcf3e3171 b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 |  104.18.21.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 IP104.18.21.226:0
Hashc18abe2300d453a0723fc5c110f40de6 8998d532b5306598aad459a75486337ab849d125 f15f028d4c85e694860adfa154a4bf6f4235326fdc47f207af763efd79278ae7
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "B78FF6BC0E792F44DA4B9256BA1F7C3E0B4A1B44"
Expires: Sun, 05 Feb 2023 08:00:00 GMT
Last-Modified: Sat, 04 Feb 2023 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 463
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7946672d4d74b4f3-OSL
|
|
| fonts.gstatic.com/s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 22920, version 1.0\012- data Hash70487f355d22aef7eee8f36bca4d03b8 9ffd6785eeaad33637a9c1be6a0c208f346e134e d28cae33a9cff1cd54246e2bca04018f101451707a5b5f426d32ea768e911186
GET /s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 01:09:29 GMT
expires: Fri, 02 Feb 2024 01:09:29 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Apr 2021 22:06:35 GMT
content-type: font/woff2
age: 244962
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash5452c58c07ce8d3cade93b323b271c35 581b1e438daeb32a12feaf50f2aab17dcf3e3171 b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| mydiv.net/tim/design/favicon/favicon-192x192.png | 54.36.106.111 | 200 OK | 19 kB |
URL HTTP/2mydiv.net/tim/design/favicon/favicon-192x192.png IP54.36.106.111:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash70289d57de1e3d2dffeb3c3a85418a9c 673136d7d97ebfea4e16a65b2c356b2f4e4f6067 b4c347b138911ec83090f2af209ae4173a7fce7a5d9b301cf6a90166d5a97f96
GET /tim/design/favicon/favicon-192x192.png HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: image/png
content-length: 18575
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-488f"
expires: Mon, 06 Mar 2023 21:12:11 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mydiv.net/tim/design/favicon/favicon.min.svg | 54.36.106.111 | 200 OK | 4.5 kB |
URL HTTP/2mydiv.net/tim/design/favicon/favicon.min.svg IP54.36.106.111:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4463), with no line terminators Hashde51b957170a46e23a1a3eaf49df0554 e53b7df07f1b62f7d5b76e8053cd8708ba2d71c2 ca1f1d02dbbb12b24625d69a3a1ee4d61e600fbbde602877b48102b819647220
GET /tim/design/favicon/favicon.min.svg HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: image/svg+xml
content-length: 4463
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-116f"
expires: Mon, 06 Mar 2023 21:12:11 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash153d0de36959c722c00df71ba86daca2 305f56a3134879ebf0828e169e903e560540c070 0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash5ac5aaa2dd1a2ab697244f3c0fe3b5b5 bb8a9aeb28cc645435760f3a9a57d85e295de419 d42327bb295e41a2b04efa1c2ad6094a3480d0010de10bb32600f4d17fe9f0d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| google-analytics.com/analytics.js | 142.250.74.132 | 200 OK | 20 kB |
URL HTTP/2google-analytics.com/analytics.js IP142.250.74.132:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 04 Feb 2023 19:44:33 GMT
expires: Sat, 04 Feb 2023 21:44:33 GMT
cache-control: public, max-age=7200
age: 5258
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash5ac5aaa2dd1a2ab697244f3c0fe3b5b5 bb8a9aeb28cc645435760f3a9a57d85e295de419 d42327bb295e41a2b04efa1c2ad6094a3480d0010de10bb32600f4d17fe9f0d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 940 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash830188bb042d667d5f02d73c62842989 4083b621ffcc2c57d09d10c3429e6c57e7c59c02 1f51c3ea17d6add2aa46222b14ee8311e17c6cba8d006d9531d61d7dc5ee3bf3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 08 Feb 2023 16:59:12 GMT
ETag: "4083b621ffcc2c57d09d10c3429e6c57e7c59c02"
Last-Modified: Sat, 04 Feb 2023 16:59:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3371
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7946672dee48b4f3-OSL
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 172.217.21.162 | 200 OK | 50 kB |
URL HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP172.217.21.162:0
File typeASCII text, with very long lines (3649) Hashea4ab39f0c5ced207f7b0dac16ee6c16 6cca4aeff7f3c5b2ceeb990349977d85dc98a368 f98ba9282c19fafd481f02428353538e7d297cc2ef837c0eef8591892d7913b8
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 04 Feb 2023 21:12:11 GMT
expires: Sat, 04 Feb 2023 21:12:11 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 4598105683062475629
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49895
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash153d0de36959c722c00df71ba86daca2 305f56a3134879ebf0828e169e903e560540c070 0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash5ac5aaa2dd1a2ab697244f3c0fe3b5b5 bb8a9aeb28cc645435760f3a9a57d85e295de419 d42327bb295e41a2b04efa1c2ad6094a3480d0010de10bb32600f4d17fe9f0d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yandex.ru/ads/system/context.js |  77.88.55.66 | 200 OK | 84 kB |
URL HTTP/2yandex.ru/ads/system/context.js IP77.88.55.66:0
File typeASCII text, with very long lines (65492) Hashbbf0a8510be7ff5c1607f8ce53a9ee5a d70ce3b72d805474e4528eff649a9c3b52325f01 804d6e5992a75d259c85f9b84b2640b6600681d480cdc720c5d60ab220c38a17
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=1LF28s/DxDtXpcKSD/wRjIRRY16V9WaWPDAAMrrmI7jL9RaHgjPxsHVQDWUlcChz065P5IebVTKh0hnGBkfNrDA9csc=; Expires=Mon, 03-Feb-2025 21:12:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=1791885731675545131; Path=/; Domain=.yandex.ru; Expires=Sun, 04 Feb 2024 21:12:11 GMT; SameSite=None; Secure; HttpOnly
expires: Sat, 04 Feb 2023 22:12:11 GMT
x-yandex-req-id: 1675545131213380-13778848982528524097-sas2-0547-sas-l7-balancer-8080-BAL-5757
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
|
|
| mydiv.net/build/public/site.mydiv.bundle.js?ver=e802211c2f3185f6ecab | 54.36.106.111 | 200 OK | 99 kB |
URL HTTP/2mydiv.net/build/public/site.mydiv.bundle.js?ver=e802211c2f3185f6ecab IP54.36.106.111:0
Hash607bc7334374fcd4041f379b6101dae6 6d1ec4420e99b766fac9cabc0e53ec02df2ea163 fadcaf067f9f2541a536fac83112346b1466b646fa7fbdd9c2d28d957210bf5b
GET /build/public/site.mydiv.bundle.js?ver=e802211c2f3185f6ecab HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 Feb 2023 22:39:04 GMT
vary: Accept-Encoding
etag: W/"63dc3b88-45ddc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/52589233/1?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 | 77.88.21.119 | 200 OK | 400 B |
URL HTTP/2mc.yandex.ru/watch/52589233/1?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 IP77.88.21.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hash53505aabc2d5f6db1bdd5875a336bcab fd72cb39ce393fe274a189f2ea4a0ac15e72badf f938a58b6b2b78a0438b4404329b60acd37f038b504247f7e413fc7dd68c3f0e
GET /watch/52589233/1?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Referer: https://mydiv.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 04 Feb 2023 21:12:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:11 GMT
last-modified: Sat, 04-Feb-2023 21:12:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash8dfe04126e926b8b95c24905f1acf512 c8cf8def9fa13887d1a594b19bd7fd9300226fdd a958c2e0d3cc326c08a65bd3147be33ce3774f9e266175b3873008a5f14c954c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 08 Feb 2023 19:25:54 GMT
ETag: "c8cf8def9fa13887d1a594b19bd7fd9300226fdd"
Last-Modified: Sat, 04 Feb 2023 19:25:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 440
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794667300987b4f3-OSL
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash8dfe04126e926b8b95c24905f1acf512 c8cf8def9fa13887d1a594b19bd7fd9300226fdd a958c2e0d3cc326c08a65bd3147be33ce3774f9e266175b3873008a5f14c954c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 08 Feb 2023 19:25:54 GMT
ETag: "c8cf8def9fa13887d1a594b19bd7fd9300226fdd"
Last-Modified: Sat, 04 Feb 2023 19:25:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 440
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7946673029a1b4f3-OSL
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash8dfe04126e926b8b95c24905f1acf512 c8cf8def9fa13887d1a594b19bd7fd9300226fdd a958c2e0d3cc326c08a65bd3147be33ce3774f9e266175b3873008a5f14c954c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 08 Feb 2023 19:25:54 GMT
ETag: "c8cf8def9fa13887d1a594b19bd7fd9300226fdd"
Last-Modified: Sat, 04 Feb 2023 19:25:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 440
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794667302dac0b39-OSL
|
|
| mydiv.net/build/public/styles/site.mydiv.css?ver=e802211c2f3185f6ecab | 54.36.106.111 | 200 OK | 45 kB |
URL HTTP/2mydiv.net/build/public/styles/site.mydiv.css?ver=e802211c2f3185f6ecab IP54.36.106.111:0
Hash31d2f4c041f4c9ac3525b3b4afb967c6 fff0cbbd5d002075e7097b4b379712d76ed73475 734dac58ee04db37469cc49840568786166a8fe7a4d5f775adf8b222b28e074a
GET /build/public/styles/site.mydiv.css?ver=e802211c2f3185f6ecab HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: text/css
last-modified: Thu, 02 Feb 2023 22:39:04 GMT
vary: Accept-Encoding
etag: W/"63dc3b88-2759f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash8dfe04126e926b8b95c24905f1acf512 c8cf8def9fa13887d1a594b19bd7fd9300226fdd a958c2e0d3cc326c08a65bd3147be33ce3774f9e266175b3873008a5f14c954c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 21:12:11 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 08 Feb 2023 19:25:54 GMT
ETag: "c8cf8def9fa13887d1a594b19bd7fd9300226fdd"
Last-Modified: Sat, 04 Feb 2023 19:25:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 440
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7946673039cbb4f3-OSL
|
|
| yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2 | 178.154.131.216 | 200 OK | 26 kB |
URL HTTP/2yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2 IP178.154.131.216:0
File typeWeb Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data Hash7f0cdaf91230f9789ca4162aedff612e 965de571aa794dab64076c3cc64dc8894b843f23 033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Mon, 05 Feb 2024 03:01:07 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: f2ee6f102bbbb149
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js | 178.154.131.216 | 200 OK | 113 kB |
URL HTTP/2yastatic.net/partner-code-bundles/716043/de9c4be8e88d42b2efb9.js IP178.154.131.216:0
File typeASCII text, with very long lines (65497) Size113 kB (113366 bytes) Hash0736127f132f9c5d09ad0fb5d789a73a f9203cd3a945aad6f790f8d2e286052c40d2fa50 9a14aedcb1039ca82f4ddfa1b338a50fd48ebe92a20c82c37dc2b85d0c6ac377
GET /partner-code-bundles/716043/de9c4be8e88d42b2efb9.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 113366
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "0736127f132f9c5d09ad0fb5d789a73a"
expires: Tue, 04 Feb 2053 03:43:46 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/partner-code-bundles/716043/2ec9a88e40a26b53acde.js | 178.154.131.216 | 200 OK | 2.1 kB |
URL HTTP/2yastatic.net/partner-code-bundles/716043/2ec9a88e40a26b53acde.js IP178.154.131.216:0
File typeASCII text, with very long lines (6989) Hash09997d8f01e586ad7fa18f4ef6592dcc 82ff24812894f0230f8c1e691a4cf98d02d28aa1 630f3c92319e83e4284a13a67789e26c788f741ce0d6c131fe68e180712bf570
GET /partner-code-bundles/716043/2ec9a88e40a26b53acde.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 2065
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "09997d8f01e586ad7fa18f4ef6592dcc"
expires: Tue, 04 Feb 2053 03:43:46 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js | 178.154.131.216 | 200 OK | 4.8 kB |
URL HTTP/2yastatic.net/partner-code-bundles/716043/1c0942547d39e10f5f56.js IP178.154.131.216:0
File typeASCII text, with very long lines (14344) Hash7749d37e0e2ba5a2c857a1c0bdc8b1fd c1beb845c858b6d22045d76bf6ba1e90a168714d ed2c47feabe99774879658c0517c72c406a9e2d2b8fd280394eaf4bb98729970
GET /partner-code-bundles/716043/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "7749d37e0e2ba5a2c857a1c0bdc8b1fd"
expires: Tue, 04 Feb 2053 03:43:14 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/safeframe-bundles/0.83/host.js | 178.154.131.216 | 200 OK | 8.9 kB |
URL HTTP/2yastatic.net/safeframe-bundles/0.83/host.js IP178.154.131.216:0
File typeASCII text, with very long lines (33703), with no line terminators Hashf80882bf67cf261aa08d636da095149a 3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd 4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Tue, 04 Feb 2053 03:46:22 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js | 178.154.131.216 | 200 OK | 24 kB |
URL HTTP/2yastatic.net/partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js IP178.154.131.216:0
File typeASCII text, with very long lines (65494) Hash5d29968bb46055943c2db2d4205797bf 51cb5c66e80cf6a1f135a4922d5fd120bf145974 d3bec2a3bb2d81a15e8b431c184c5d07e7b176efbb2ddbcab0b75b8b472d9451
GET /partner-code-bundles/716043/0ff0b6319a1aadb8b00d.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 23531
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "5d29968bb46055943c2db2d4205797bf"
expires: Tue, 04 Feb 2053 03:43:46 GMT
last-modified: Thu, 02 Feb 2023 14:36:26 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/advert.gif | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:11 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sat, 04 Feb 2023 22:12:11 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j99&a=304661138&t=pageview&_s=1&dl=https%3A%2F%2Fmydiv.net%2F&ul=en-us&de=UTF-8&dt=%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=935140842&gjid=1811679644&cid=1297843883.1675545169&tid=UA-4459188-1&_gid=458123159.1675545169&_r=1&_slc=1&z=1913964328 | 142.250.74.14 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j99&a=304661138&t=pageview&_s=1&dl=https%3A%2F%2Fmydiv.net%2F&ul=en-us&de=UTF-8&dt=%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=935140842&gjid=1811679644&cid=1297843883.1675545169&tid=UA-4459188-1&_gid=458123159.1675545169&_r=1&_slc=1&z=1913964328 IP142.250.74.14:0
File typeASCII text, with no line terminators Hash38684612f0c6bb6dfa16da92f4a6878f 6fe62d0dd7db314b7f9bb945672f078e01d27f0f a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&a=304661138&t=pageview&_s=1&dl=https%3A%2F%2Fmydiv.net%2F&ul=en-us&de=UTF-8&dt=%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=935140842&gjid=1811679644&cid=1297843883.1675545169&tid=UA-4459188-1&_gid=458123159.1675545169&_r=1&_slc=1&z=1913964328 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://mydiv.net
date: Sat, 04 Feb 2023 21:12:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashdfcdbf455580029a0c665fe5215ac927 e5fa1eb26e208c7599a07f327dd46356b7c5e806 b118c64c81b215c1379a81a9e64aa28eb647893870c0aaae293bf6adfa311f7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash8077210062c315b98902cb06c74d485b 808e94ac31f1b45185103ce25c1bc2afd056b17a 78871f45de0c58bffa6a86b50f6bd0db61932bf6a2b7d8191dba0f0eaab628b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc7d887fc3e3b7a68b7872c76802085c0 eb26f820776e7d87a00489eb14f918e5f6945835 915e873e95d8f0276f4763e5596b03cac487f6f8a36c65577c6622fc8560d929
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| partner.googleadservices.com/gampad/cookie.js?domain=mydiv.net&callback=_gfp_s_&client=ca-pub-1842037506098481 | 142.250.74.34 | 200 OK | 251 B |
URL HTTP/2partner.googleadservices.com/gampad/cookie.js?domain=mydiv.net&callback=_gfp_s_&client=ca-pub-1842037506098481 IP142.250.74.34:0
File typeASCII text, with very long lines (385), with no line terminators Hash1a8886c641c091a908b45a172bf4a432 89f0afd48d5df38bf12c7f32bca5cf0f9c81161f b41b26323daf6b9d77027e58a82a9ac47ebb4195eae6cdf2a40d1402ad6e5204
GET /gampad/cookie.js?domain=mydiv.net&callback=_gfp_s_&client=ca-pub-1842037506098481 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 04 Feb 2023 21:12:11 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adservice.google.no/adsid/integrator.js?domain=mydiv.net | 142.250.74.2 | 200 OK | 100 B |
URL HTTP/2adservice.google.no/adsid/integrator.js?domain=mydiv.net IP142.250.74.2:0
File typeASCII text, with no line terminators Hash917951a58be8c6c6f3680159550ba3c2 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mydiv.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 04 Feb 2023 21:12:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adservice.google.com/adsid/integrator.js?domain=mydiv.net | 142.250.74.98 | 200 OK | 100 B |
URL HTTP/2adservice.google.com/adsid/integrator.js?domain=mydiv.net IP142.250.74.98:0
File typeASCII text, with no line terminators Hash917951a58be8c6c6f3680159550ba3c2 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mydiv.net HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 04 Feb 2023 21:12:11 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash8077210062c315b98902cb06c74d485b 808e94ac31f1b45185103ce25c1bc2afd056b17a 78871f45de0c58bffa6a86b50f6bd0db61932bf6a2b7d8191dba0f0eaab628b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashdfcdbf455580029a0c665fe5215ac927 e5fa1eb26e208c7599a07f327dd46356b7c5e806 b118c64c81b215c1379a81a9e64aa28eb647893870c0aaae293bf6adfa311f7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc7d887fc3e3b7a68b7872c76802085c0 eb26f820776e7d87a00489eb14f918e5f6945835 915e873e95d8f0276f4763e5596b03cac487f6f8a36c65577c6622fc8560d929
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashc14d3cf8ade0150a711f094be32ac474 11e7fb5487d364c5392e1594e09f5b49831043ea 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16592
Expires: Sun, 05 Feb 2023 01:48:44 GMT
Date: Sat, 04 Feb 2023 21:12:12 GMT
Connection: keep-alive
|
|
| mc.yandex.ru/watch/52589233?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) | 77.88.21.119 | 302 Found | 503 B |
URL HTTP/2mc.yandex.ru/watch/52589233?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP77.88.21.119:0
Hashc14d3cf8ade0150a711f094be32ac474 11e7fb5487d364c5392e1594e09f5b49831043ea 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
GET /watch/52589233?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/52589233/1?wmode=7&page-url=https%3A%2F%2Fmydiv.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1326%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A351497627502%3Ahid%3A868088241%3Az%3A0%3Ai%3A20230204211248%3Aet%3A1675545169%3Ac%3A1%3Arn%3A641937834%3Arqn%3A1%3Au%3A1675545169722029717%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A55%2C109%2C151%2C1%2C628%2C0%2C%2C313%2C3%2C%2C%2C%2C1367%3Aco%3A0%3Ans%3A1675545166824%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675545169%3At%3A%D0%9B%D1%83%D1%87%D1%88%D0%B8%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%2C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20%D0%B8%20%D0%B8%D0%B3%D1%80%D1%8B%20-%20%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%B4%D0%BB%D1%8F%20Windows%2C%20Android%2C%20iOS%20%D0%B8%20MacOS&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 04 Feb 2023 21:12:11 GMT
access-control-allow-origin: https://mydiv.net
set-cookie: yabs-sid=606915901675545131; Path=/; SameSite=None; Secure
i=5f2zaT1DJ+kcpsXgRJLs3+MXRHxDxv5nqjP6HGy9IWPjRVqmJSH8y4xtDlosndHa1dc6VbZXTeqkVmxcehq23/ZLK7k=; Expires=Tue, 01-Feb-2033 21:12:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1675473981675545131; Expires=Sun, 04-Feb-2024 21:12:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1675473981675545131; Expires=Sun, 04-Feb-2024 21:12:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707081131.yc.1675545131#1707081131.yrts.1675545131#1707081131.yrtsi.1675545131; Expires=Sun, 04-Feb-2024 21:12:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:11 GMT
last-modified: Sat, 04-Feb-2023 21:12:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6661b7263315f5eb3cd2465f671e1fcd b7b5831c6b3ccc41d7a980b6088adc10ff8785f1 eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 82899
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash392b61306c346508d3ac4a2f28218f9c d2de32b52e0d3f4fc6acaf687b3521294b01dc03 018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G8F3Fflod6HB4QFtjpD09xzi-2LKPw_DBJT0PKYKU3bs3pvOwO_LRw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:32 GMT
age: 82900
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe5b4e4f15da3323c73974c3f1cdb5d74 1f14971d0cf979cc34ff191849dc43d86e8ac463 5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 82911
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf7101f6e43855cb76ce48271a847ffbd 8e674830a97d8ce3818132fda197db4f0289d316 e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9141
x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD8zE5lIAMF1HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6kDIOqhM4aVL80sF02uFu2TuGbiBE7_L_S2W7x-P46hO5YZFmuL9nQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:13:30 GMT
age: 82722
etag: "8e674830a97d8ce3818132fda197db4f0289d316"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash114e345e134986d7451148fcea31b29d 541e878afee68c8802bb52b0cbbe5a5a0a185392 5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 03:08:59 GMT
age: 64993
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe366b32074025aaf60bbae8bdb08d330 a52c2883bad98fa20333aa639a5dd3a5bf544c8e 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:04 GMT
age: 84248
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/mysidia/8229fa5a5c3ebd24f3e2eb95db7eba72.js?tag=client_fast_engine_2019 | 216.58.211.3 | 200 OK | 4.2 kB |
URL HTTP/2www.gstatic.com/mysidia/8229fa5a5c3ebd24f3e2eb95db7eba72.js?tag=client_fast_engine_2019 IP216.58.211.3:0
File typeASCII text, with very long lines (2595) Hash22b1107093ffdaf82c67748570c23847 23dfc8f212390c65e14e5429f57808ba23519546 cbbc030a379d4135d1a593fe405ab78879df73eef55d3cb03774cc3b3c27ac82
GET /mysidia/8229fa5a5c3ebd24f3e2eb95db7eba72.js?tag=client_fast_engine_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 4209
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 01:07:23 GMT
expires: Wed, 03 May 2023 01:07:23 GMT
cache-control: public, max-age=7776000
last-modified: Wed, 01 Feb 2023 06:12:50 GMT
content-type: text/javascript
age: 245089
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/mysidia/9e5698c686bc55900eb7505b234da968.js?tag=text/vanilla_highlight | 216.58.211.3 | 200 OK | 4.5 kB |
URL HTTP/2www.gstatic.com/mysidia/9e5698c686bc55900eb7505b234da968.js?tag=text/vanilla_highlight IP216.58.211.3:0
File typeC++ source, ASCII text, with very long lines (1812) Hashaedf474400722a008158e56e573bc5d0 72656d7103183a1ced0cfe3495612a7a6232d5bb 0ddf3aa087012380c967098be900c1b7ab2e26618375d81d3740f470f3bcd792
GET /mysidia/9e5698c686bc55900eb7505b234da968.js?tag=text/vanilla_highlight HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 4467
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 05:47:53 GMT
expires: Mon, 01 May 2023 05:47:53 GMT
cache-control: public, max-age=7776000
last-modified: Fri, 27 Jan 2023 00:31:18 GMT
content-type: text/javascript
age: 401059
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash98be7fe21d059e46146a43d20c4eea92 1ec58129fea75085588be7b8baec05b0874b5274 7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash7d70322f4f6af3289d4d7f4c22a4c179 f2abd2a7c1575ab0b362920699143dce3ff60d75 0e5b166c8e8d91421e0122ab3863a9cdd88ca4dffa1d9beb9cdf61aca0ac95f2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash7d70322f4f6af3289d4d7f4c22a4c179 f2abd2a7c1575ab0b362920699143dce3ff60d75 0e5b166c8e8d91421e0122ab3863a9cdd88ca4dffa1d9beb9cdf61aca0ac95f2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| tpc.googlesyndication.com/pagead/js/r20230201/r20110914/client/qs_click_protection_fy2021.js | 216.58.211.1 | 200 OK | 7.6 kB |
URL HTTP/2tpc.googlesyndication.com/pagead/js/r20230201/r20110914/client/qs_click_protection_fy2021.js IP216.58.211.1:0
File typeASCII text, with very long lines (1605) Hashaeaebc4fec11dcafa566897f3b2aa937 7b4507c8793c1ce833dccaeb7dbc956c1fd06668 c23b4a16d9468c0018f502492594408fc809fc0fe003aed2f1145ba3dca87bae
GET /pagead/js/r20230201/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7647
x-xss-protection: 0
date: Sat, 04 Feb 2023 19:23:41 GMT
expires: Sat, 18 Feb 2023 19:23:41 GMT
cache-control: public, max-age=1209600
age: 6511
etag: 2161395064574532456
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tpc.googlesyndication.com/pagead/js/r20230201/r20110914/abg_lite_fy2021.js | 216.58.211.1 | 200 OK | 9.0 kB |
URL HTTP/2tpc.googlesyndication.com/pagead/js/r20230201/r20110914/abg_lite_fy2021.js IP216.58.211.1:0
File typeASCII text, with very long lines (1672) Hash9aa683d616d8b2d10fe0100d761df816 60f84308b40072edcc24b6fd54c68247786001aa 2e8549a4bc0e1f4a4eda2637f239105e780b2ae2879c9a241b1ffe7130386e0a
GET /pagead/js/r20230201/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8993
x-xss-protection: 0
date: Sat, 04 Feb 2023 19:23:41 GMT
expires: Sat, 18 Feb 2023 19:23:41 GMT
cache-control: public, max-age=1209600
age: 6511
etag: 12355142264901698679
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash98be7fe21d059e46146a43d20c4eea92 1ec58129fea75085588be7b8baec05b0874b5274 7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500 | 142.250.74.106 | 200 OK | 867 B |
URL HTTP/2fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500 IP142.250.74.106:0
Hash24851c0efa2c9b66158d70795ffc379d 1b05f46bd3d99d099590ba60bbe94531c263bbd7 148325b604c4796f351380447c89a07bd90e296b35f44e205180522ac8cf844c
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 21:12:12 GMT
date: Sat, 04 Feb 2023 21:12:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 28 kB |
URL HTTP/2fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data Hash53b5e785dfdca21fa7adf7119fa1f8cc a3a86dfd216ad29183ba5493ae39d45b62f9d8b8 4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 14:34:21 GMT
expires: Fri, 02 Feb 2024 14:34:21 GMT
cache-control: public, max-age=31536000
age: 196671
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hasha78b06ca527ce7542b24b349e0485d8b 6f5e5126c1c9d40c9ba09d58e1755d2ca39d02ab bc7dc156ab8b2b33422fff0922e219246eb1d12469d10ac8007416fed41ac473
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 21:12:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/pagead/drt/ui | 142.250.74.132 | 302 Found | 0 B |
URL HTTP/2www.google.com/pagead/drt/ui IP142.250.74.132:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 04 Feb 2023 21:12:12 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adservice.google.no/adsid/integrator.js?domain=mydiv.net | 142.250.74.2 | 200 OK | 100 B |
URL HTTP/2adservice.google.no/adsid/integrator.js?domain=mydiv.net IP142.250.74.2:0
File typeASCII text, with no line terminators Hash917951a58be8c6c6f3680159550ba3c2 21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4 cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=mydiv.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 04 Feb 2023 21:12:13 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=926391125&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211251%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=926391125&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211251%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=926391125&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211251%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 140484
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:14 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:14 GMT
last-modified: Sat, 04-Feb-2023 21:12:14 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=1063936371&wv-type=3&browser-info=we%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211252%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=1063936371&wv-type=3&browser-info=we%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211252%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=1063936371&wv-type=3&browser-info=we%3A1%3Aet%3A1675545172%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211252%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545172&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:14 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:14 GMT
last-modified: Sat, 04-Feb-2023 21:12:14 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=636036112&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545173%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211253%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545173&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=636036112&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545173%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211253%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545173&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=636036112&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545173%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211253%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545173&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 82
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:15 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:15 GMT
last-modified: Sat, 04-Feb-2023 21:12:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wv-check=44753&wv-type=0&wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=924614838&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wv-check=44753&wv-type=0&wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=924614838&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wv-check=44753&wv-type=0&wmode=0&wv-part=1&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=924614838&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:18 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:18 GMT
last-modified: Sat, 04-Feb-2023 21:12:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=586793569&wv-type=3&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=586793569&wv-type=3&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=586793569&wv-type=3&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:18 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:18 GMT
last-modified: Sat, 04-Feb-2023 21:12:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=3&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=626372319&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wmode=0&wv-part=3&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=626372319&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wmode=0&wv-part=3&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=626372319&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:18 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:18 GMT
last-modified: Sat, 04-Feb-2023 21:12:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/52589233?wv-check=50327&wv-type=0&wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=846263002&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/52589233?wv-check=50327&wv-type=0&wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=846263002&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/52589233?wv-check=50327&wv-type=0&wmode=0&wv-part=2&wv-hit=868088241&page-url=https%3A%2F%2Fmydiv.net%2F&rn=846263002&browser-info=we%3A1%3Aet%3A1675545176%3Aw%3A1268x939%3Av%3A960%3Az%3A0%3Ai%3A20230204211255%3Au%3A1675545169722029717%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1675545176&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: https://mydiv.net
Connection: keep-alive
Referer: https://mydiv.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 21:12:18 GMT
access-control-allow-origin: https://mydiv.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 21:12:18 GMT
last-modified: Sat, 04-Feb-2023 21:12:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| s04.mydiv-downloads.net/download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe | 51.75.52.14 | 302 Found | 0 B |
URL HTTP/2s04.mydiv-downloads.net/download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe IP51.75.52.14:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /download/ahr0chm6ly9zb2z0lm15zgl2lm5ldc93aw4vzg93bmxvywqtumftu21hc2guahrtba==/048f9/61b8b69160614/soft/dfiles/ru/win/ramsmash/236904/ramsmash.exe HTTP/1.1
Host: s04.mydiv-downloads.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx/1.14.2
date: Sat, 04 Feb 2023 21:12:10 GMT
content-type: text/html; charset=UTF-8
location: https://mydiv.net/
X-Firefox-Spdy: h2
|
|
| mydiv.net/build/public/langchunks/lang.ru_RU.chunk.js?ver=d2a67168164b5da8a051 | 54.36.106.111 | 200 OK | 0 B |
URL HTTP/2mydiv.net/build/public/langchunks/lang.ru_RU.chunk.js?ver=d2a67168164b5da8a051 IP54.36.106.111:0
GET /build/public/langchunks/lang.ru_RU.chunk.js?ver=d2a67168164b5da8a051 HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydiv.net/
Cookie: suid=5e530014c8191e69862cd7798a1ea46b2dbb519094be3c40a3088a582983aa57; ifh=29738566263deca2a6ac541.40977460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Sat, 04 Feb 2023 21:12:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 Feb 2023 22:39:04 GMT
vary: Accept-Encoding
etag: W/"63dc3b88-1202"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
|
|