185.87.48.28 169 B IP 185.87.48.28:0
ASN #35196 Ihor Hosting LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: dynnamn.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Sat, 25 Nov 2023 21:45:27 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://alviy.com/redirect/dynnamn.ru
cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.1/moment-with-locales.min.js
104.17.25.14200 OK 59 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.1/moment-with-locales.min.js
IP 104.17.25.14:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 65a5016e8598f76b25ff443edb362e62
04ac187d01e70ff5b7f1ae4f4262bec199ffe33d
1374a7c31e85e2dec3880fcbdc380f93a227d8cd7be3b2526aefb73d68ed4b92
GET /ajax/libs/moment.js/2.29.1/moment-with-locales.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.alviy.com
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 58892
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f7c5ca4-5a218"
last-modified: Tue, 06 Oct 2020 12:01:40 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 320629
expires: Thu, 14 Nov 2024 21:45:28 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FMbECHesRhCqyOajf0%2F2eZ7VsIfmENsaudGoRSi9UsALIVtj0oU4MwZfpiJIhoBzNqbE53QQT6dCS%2FgxWKmqNa%2Bv2%2BMhXbA5jjG4lwX4QkZQ2cCg5bBPW5DHAuUczFGapWT00UOp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82bd14320b49b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.25.14200 OK 6.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP 104.17.25.14:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 50745
expires: Thu, 14 Nov 2024 21:45:28 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2FJk7QD9At9MHcvrBwzrGyc3C9i92kzKCYymkjq10Zp5Fg%2BUn3tRe0uFOD9CjqOx1eoqn%2BYExdFa5jUtCC4A33tcANT2%2FbhVJIoQ%2FeHPuYtqBypoU4OcmjokaW79h4AFEkOMrQYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82bd1432292b0b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js
104.17.25.14200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32058)
Hash c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 27277
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15283"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2491267
expires: Thu, 14 Nov 2024 21:45:28 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PxDvhdKn3ec1ezXPImfFeVrl6U0GOGC4CUlWqjQE10THH%2FZU%2BaKgRsMr7j70odzgTsTSRbM2y1aF8KtuBhfrJXFLrBhJfybIinPnzAiTKCSh0CRjrjDf4hqk1%2B%2BEkz5B%2BJCt7F49"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82bd143229250b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.alviy.com/static/images/vkon-black.png
188.114.97.1200 OK 11 kB URL GET HTTP/3 www.alviy.com/static/images/vkon-black.png
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, interlaced\012- data
Hash 25dcae395387b6ecda1e69007ffdbd78
16143804b55f12ee5676c88a18bc2c2f4cdababc
aad764ebf50707daa9e4ade21f28356e2f15d60e6d0095bc04a407cb08f9d33c
GET /static/images/vkon-black.png HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: image/png
content-length: 11275
last-modified: Wed, 21 Dec 2022 20:02:44 GMT
etag: "63a36664-2c0b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gu1OjYtPSJ%2BpX6kqV%2F3PUnr4uvHSR45vLCKrhufuhcR8dH1uC%2F7gVzJ5vwwQr%2FPdgRHIQ85PPObJVwxmr021nISSZj%2BQBynQuSBXcS4zRxfJoLal35tMa1tVMvMHhwql"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431ea5d0b49-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-KX57MF8
142.250.74.168200 OK 64 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KX57MF8
IP 142.250.74.168:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3745)
Hash 9b7d218cb18fec16448c6e0b3c301e85
0a921474097cb31dd720966d6bba5f955eefc325
727992fa9d5be18d5ca17121ec1b7adc40c3e883a49f394005ceb79f7ae19116
GET /gtm.js?id=GTM-KX57MF8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Nov 2023 21:45:28 GMT
expires: Sat, 25 Nov 2023 21:45:28 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Nov 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 63572
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.bundle.min.js
104.18.10.207200 OK 20 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.bundle.min.js
IP 104.18.10.207:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65298)
Hash 98d2c1da1c0a495f8fc8ad144ea1d3d2
a0f7a287003f6d0c8a2543e6183fdc14417b6793
bb3d017273ed487674d9766d8401cf458228596adcc0c3a6024f44ae715090db
GET /bootstrap/4.0.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 2021-08-02 21:17:38
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: f5ab77be70f0c57adc006405d0f7e773
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 312834
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82bd14322b715685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-RBB7C7CSQJ&l=dataLayer&cx=c
142.250.74.168200 OK 88 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-RBB7C7CSQJ&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (7711)
Hash eadfdff898967e775ec634bfa5a3e3c5
037285e85a0cdaa7dc292c6bbd5e41b2fde322b5
57b29cea350a8fe4e6eb47dd97f9c04f02e3eb9954364015aa53154b321b97ec
GET /gtag/js?id=G-RBB7C7CSQJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Nov 2023 21:45:29 GMT
expires: Sat, 25 Nov 2023 21:45:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87732
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP 216.58.207.227:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14940, version 1.0\012- data
Hash a46fb7aae99225fdfd9d64b2b8b1063f
1ee50bf5985c1956dde1c06d9b1cec4645ddb92b
4b5816bbfc52587979139951355fe4048da02ce60e40cef8e4a1efb6cd396281
GET /s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.alviy.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14940
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:58:28 GMT
expires: Fri, 22 Nov 2024 04:58:28 GMT
cache-control: public, max-age=31536000
age: 233221
last-modified: Wed, 13 Sep 2023 22:46:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.alviy.com/static/images/face-black.png
188.114.97.1200 OK 12 kB URL GET HTTP/3 www.alviy.com/static/images/face-black.png
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, interlaced\012- data
Hash 72f957b6d676f24d35b3e433ee4e96cc
3329c6c0e86bdc0c70174ff7bd3dad485150d55f
710b204aa28989fb6847cd69325403a08dbb4445d8342dc0683f37fb7604e9d5
GET /static/images/face-black.png HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: image/png
content-length: 12068
last-modified: Wed, 21 Dec 2022 20:02:44 GMT
etag: "63a36664-2f24"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FgnP37WJb4FXel3QvtAoUGn5Czb7mrSFv7QZctiRfREbn745SrUy1MLyMm%2F6XqD9251fcjJcEfxpLj0DJdt1sw7VTAqbaGE7hDgi%2FpaKYwc7jpBHNQlHEY%2FdOUidgML%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431ea5c0b49-OSL
alt-svc: h3=":443"; ma=86400
widget.replain.cc/dist/media/notification.c5bc0cbc.mp3
178.21.8.220206 Partial Content 25 kB URL GET HTTP/2 widget.replain.cc/dist/media/notification.c5bc0cbc.mp3
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash ac905963f5794835331c32a4908c6c2f
f6e9ca416fa57b164cd95e0047392407c5466f49
d29d3345cf4f562771b5b807bc898e977d32a63e49bb4b084dc86acae4597c1e
GET /dist/media/notification.c5bc0cbc.mp3 HTTP/1.1
Host: widget.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sat, 25 Nov 2023 21:45:30 GMT
content-type: audio/mpeg
content-length: 24659
last-modified: Fri, 17 Nov 2023 05:37:31 GMT
etag: "6556fc1b-6053"
expires: Sun, 24 Nov 2024 21:45:30 GMT
pragma: public
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-range: bytes 0-24658/24659
X-Firefox-Spdy: h2
widget.replain.cc/dist/js/widget.97750545.js
178.21.8.220200 OK 118 kB URL GET HTTP/2 widget.replain.cc/dist/js/widget.97750545.js
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type ASCII text, with very long lines (46361)
Size 118 kB (118168 bytes)
Hash e9c915ae10c24b6943a7a56d5951b304
6fd431e39e3b90b0470802bea3bbe1e38eaa23cf
f378ee4ea49addfdc6f149511531838f112c333d8e6b67b7024861ee13a2ccdc
GET /dist/js/widget.97750545.js HTTP/1.1
Host: widget.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 05:37:31 GMT
etag: W/"6556fc1b-50c7b"
expires: Sun, 24 Nov 2024 21:45:29 GMT
pragma: public
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ws.replain.cc/widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null
178.21.8.220 0 B URL ws.replain.cc/widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null
IP 178.21.8.220:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null HTTP/1.1
Host: ws.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.alviy.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: u6cReAKKPzGLvcXVk/LShQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sat, 25 Nov 2023 21:45:30 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e8OfzJdIG4/iBtpG8NXwsA9wtgE=
Strict-Transport-Security: max-age=31536000; includeSubDomains
widget.replain.cc/dist/js/lang-en-json.a0a90a5e.js
178.21.8.220200 OK 5.3 kB URL GET HTTP/2 widget.replain.cc/dist/js/lang-en-json.a0a90a5e.js
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash e6062f899bbba487bca402ccce8e997f
ac1d18db937ff6b61cc93c93389c8672e41c9ea3
5a8a0ff86a11cd18c607dac56caae5ddf40d3a0512b71cb3ec482650d4cb08f4
GET /dist/js/lang-en-json.a0a90a5e.js HTTP/1.1
Host: widget.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:30 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 05:37:31 GMT
etag: W/"6556fc1b-11aa"
expires: Sun, 24 Nov 2024 21:45:30 GMT
pragma: public
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.alviy.com/redirect/dynnamn.ru
188.114.97.1200 OK 9.7 kB URL User Request GET HTTP/3 www.alviy.com/redirect/dynnamn.ru
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10316), with no line terminators
Hash ef528c3c0fc04168a338ea12ff0c5dd0
e1160c617397728dd1830f14b67688301224b8f7
bfa9c58e4edf49605ad331b98bfb4aa27c711a7f0bb4a860cc90c63539eeee6f
GET /redirect/dynnamn.ru HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: text/html; charset=utf-8
set-cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DOQYgTsA3S1v1EqbmETXRTLeXskQvbMdW500INSJSzfs%2BzYCpGTLwSeGYSWPoh5xQn3rELesKmoirvw4ZOO4g0RJIGcuvJIBKXs76wWGeGj8MdHRcuAyWJLeiTu0EwN2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82bd142f0ff40b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.alviy.com/static/css/global.css?ver=1
188.114.97.1200 OK 1.6 kB URL GET HTTP/3 www.alviy.com/static/css/global.css?ver=1
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type ASCII text, with very long lines (1616), with no line terminators
Hash e0784520ba13ef32fa5c6e86ac13dd32
ecb52ea83c0b59487e14e62c33c1f3ceb685c943
7ea71bf013b04c1b9419e0e126846f74c92ec40ab12c580668e19ac38369316f
GET /static/css/global.css?ver=1 HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1838
etag: W/"63a36663-72e"
last-modified: Wed, 21 Dec 2022 20:02:43 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tO0%2F%2F3Bh9vljl2MiwC2RVpNcGPVpAjd4VYwn0XWXRvlizW8%2BGfCS0BfD3w2JUrNQv8C8cMEJMjXQWnc3YLcL9Fy6Qr7OzQMr6Foi9GhTiW25AZZGFHhfKjJbs05CxJ3L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431ca490b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
widget.replain.cc/dist/css/widget.bbae7d05.css
178.21.8.220200 OK 47 kB URL GET HTTP/2 widget.replain.cc/dist/css/widget.bbae7d05.css
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dist/css/widget.bbae7d05.css HTTP/1.1
Host: widget.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: text/css
last-modified: Fri, 17 Nov 2023 05:37:31 GMT
etag: W/"6556fc1b-b5f3"
expires: Sun, 24 Nov 2024 21:45:29 GMT
pragma: public
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
app.replain.cc/logo-default.png
178.21.8.220200 OK 3.1 kB URL GET HTTP/2 app.replain.cc/logo-default.png
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type PNG image data, 80 x 80, 8-bit gray+alpha, non-interlaced\012- data
Hash 578fff1eb3954ee17e18e3b8c310b193
731698d6a98303348590e8876d8df22c55b0106a
b3c27860935996ad254158082b7e75bacf50aaec182564f215461d8380840905
GET /logo-default.png HTTP/1.1
Host: app.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:30 GMT
content-type: image/png
content-length: 3063
last-modified: Fri, 17 Nov 2023 04:23:24 GMT
etag: "6556eabc-bf7"
expires: Sun, 24 Nov 2024 21:45:30 GMT
pragma: public
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ws.replain.cc/widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null
178.21.8.220101 Switching Protocols 0 B URL GET HTTP/1.1 ws.replain.cc/widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widget?reconnected=0&chatId=eb3b23c8-7883-4ea4-9bde-4364cfa64ef2&clientId=zkfBYI9AW3QqT0pa2Nc1MKF0J&token=aa4ccad02d53f565666a58fbec1ff6efcebc2dab879915c751aad825e2649e0e2dbca9ec969e706a14f87f393ec1fb4c5913e32b42898875e9504ad03862fe4e78ad8481f596a8d02a153f0cc0bfdc014aad6edaccbce308c4fd50a6f7249d3bbb75f5bc188506421d77c3bab777b306bf79d6d984dfdd20f24f29b3813fc2b2&page=https%3A%2F%2Fwww.alviy.com%2Fredirect%2Fdynnamn.ru&lang=null HTTP/1.1
Host: ws.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.alviy.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: u6cReAKKPzGLvcXVk/LShQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sat, 25 Nov 2023 21:45:30 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e8OfzJdIG4/iBtpG8NXwsA9wtgE=
Strict-Transport-Security: max-age=31536000; includeSubDomains
app.replain.cc/auth
178.21.8.220200 OK 0 B IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /auth HTTP/1.1
Host: app.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.alviy.com/
Origin: https://www.alviy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:30 GMT
content-type: text/plain; charset=utf-8
content-length: 0
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
vary: Accept-Encoding
access-control-allow-origin: https://www.alviy.com
access-control-allow-headers: Authorization, Content-Type
access-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE
access-control-allow-credentials: true
allow: POST
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
X-Firefox-Spdy: h2
www.alviy.com/static/icons/globe.svg
188.114.97.1200 OK 1.4 kB URL GET HTTP/3 www.alviy.com/static/icons/globe.svg
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1414), with no line terminators
Hash ea9fcf72d4158e7dde7a9138854c01a2
4166bb02dec0ba8b148947eba889c63428f409f6
ab38a6ab908732e112dab6dde1ea78378840422954dd0e6876dc48cb4c3209de
GET /static/icons/globe.svg HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Dec 2022 20:02:44 GMT
etag: W/"63a36664-574"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FtBYU0kP6oO88Ve3M51i3faKWf1c%2Fnr4NbD9KjAIdPbY2PlQ9E49MH%2B%2BGub%2BFEtJQUZ1ilZULaNyjrOFtl4vqMsANJhN%2FP20xlBN2lwnXtq7MPAaiz3LrkiMabam5ZoT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431da500b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
widget.replain.cc/dist/client.js
178.21.8.220200 OK 3.6 kB URL GET HTTP/2 widget.replain.cc/dist/client.js
IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3680), with no line terminators
Hash 07916c909e58784e0316332456a60f08
48d87b7783dee81fb5de6b4b36ef6c98c1f167d9
4053950cc1828498548149c6d0b5554c91d86221cc89afb7cf3187db52154884
GET /dist/client.js HTTP/1.1
Host: widget.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 05:38:08 GMT
etag: W/"6556fc40-de8"
expires: Sat, 25 Nov 2023 22:45:29 GMT
cache-control: max-age=3600, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.alviy.com/favicon.svg
188.114.97.1200 OK 2.3 kB URL GET HTTP/3 www.alviy.com/favicon.svg
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (2436), with no line terminators
Hash 232f18c55c52299f6c47497e3bc5fe95
98744fc20118f22bb146bcc7eebe0287d4135d59
7392d0fd781728035d216be62856a16fac3533bced5d8a2cf38b350427624d7d
GET /favicon.svg HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok; _ga_RBB7C7CSQJ=GS1.1.1700948732.1.0.1700948732.0.0.0; _ga=GA1.1.2121322957.1700948732
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:29 GMT
content-type: image/svg+xml; charset=utf-8
last-modified: Wed, 21 Dec 2022 20:02:43 GMT
cache-control: public, max-age=43200
expires: Sun, 26 Nov 2023 09:45:29 GMT
etag: W/"1671652963.757536-2274-3508410221"
cf-cache-status: BYPASS
set-cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-Q.lehW2yFelrfH_cFrSotVunwWW2o; HttpOnly; Path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qH5ae4Mk28968FkhqaSnsrpyamo07OsmRwnFsxKdcVLjXIrqnzhrC%2B6bNgp1a4gJSAcorVxipLFaDBLrSimRDTBR%2FzdccuU4P47pc4tC6aVesIvvG6zrTWt8KID186Wk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd14376e950b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
alviy.com/redirect/dynnamn.ru
188.114.97.1301 Moved Permanently 9.7 kB URL User Request GET HTTP/2 alviy.com/redirect/dynnamn.ru
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/dynnamn.ru HTTP/1.1
Host: alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: text/html; charset=utf-8
location: https://www.alviy.com/redirect/dynnamn.ru
set-cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.yvsCfg7CloKNknV9DloUu6IyGuM; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zDkBnOVc%2B2Yk2fq%2Bnm0K9mDjNykgMucP%2B9qadoQ0H71k24jjW0HlOdClpQTamqjNFf42BPk5O6uDrOM2FWpk3O6WjrIJ2%2FTJYhyMsPIOwLAzKQ9zG3J4b%2BBMcws%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82bd142d3d03b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.alviy.com/static/css/bootstrap.min.css
188.114.97.1200 OK 182 kB URL GET HTTP/3 www.alviy.com/static/css/bootstrap.min.css
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type ASCII text, with very long lines (65182)
Size 182 kB (181453 bytes)
Hash 9e398213f3ea23cc693ed7a8e1de5c13
f4f0217c8c9aa251d250d4a925d2cc3471d74d20
46079ffe1d51a0090b2139a2420812a0071a5ecf60ed04edeee319fd380ff92b
GET /static/css/bootstrap.min.css HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 20:02:43 GMT
etag: W/"63a36663-2c4cd"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tmx99ZFvRNZytfhNfSoJsTOyYy1zvpgjjsCFvr4lznNIngQhDmA4gLdBGjLaKoLZNDPLkg%2FM7BDYtCTWOEafkZSZrnpKUGgtEBYU5QQlaOzgOk7aWLgiDPNPfGW3pjd8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431da4b0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.alviy.com/static/css/bootstrap.css
188.114.97.1200 OK 179 kB URL GET HTTP/3 www.alviy.com/static/css/bootstrap.css
IP 188.114.97.1:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectalviy.com
Fingerprint09:DA:C7:B6:50:41:D5:75:14:4F:6B:F5:CF:FA:2F:97:DE:A1:47:E3
ValidityMon, 16 Oct 2023 03:17:29 GMT - Sun, 14 Jan 2024 03:17:28 GMT
File type ASCII text, with very long lines (65271)
Size 179 kB (178961 bytes)
Hash c61803e9126b257755ec1d3404bd917e
ffb71d4e9fb8734ae25e05f42d6be5a3d105e392
f4e34d02c85d6e631d4b8f857de84d9d446ea27be46965e6bef4cde621b9bc7c
GET /static/css/bootstrap.css HTTP/1.1
Host: www.alviy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/redirect/dynnamn.ru
Cookie: session=eyJsYW5nIjoiZW4ifQ.ZWJq-A.Ssd3xC7B4zkbdTzY4r_jTfxHwok
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 25 Nov 2023 21:45:28 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=224035
etag: W/"63a36663-36b23"
last-modified: Wed, 21 Dec 2022 20:02:43 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1aSPKW%2FyC4R3vv5fHIuhIMCRhwhDqEbozviQHPkYWiBcz379nUvRh7G38od41QGXIvCdomLv76N37tYwwyYqrZ6pvDOm2k0tTJZ7fvCaRvXilQimnvfYaqVyvNDHmRBw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bd1431da4f0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Montserrat
142.250.74.106200 OK 1.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Montserrat
IP 142.250.74.106:443
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1849), with no line terminators
Hash 471367a5d894df4be300326e8e1f53cd
ff889bd9695cf2f739f69001519ea374580c9561
97be6bb8e1c1e6809b029ddef8cc7f031b137f53a2b8c516e5669b981fd5432e
GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Nov 2023 21:45:28 GMT
date: Sat, 25 Nov 2023 21:45:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.replain.cc/auth
178.21.8.220200 OK 320 B IP 178.21.8.220:443
ASN #197695 Domain names registrar REG.RU, Ltd
Requested by https://www.alviy.com/redirect/dynnamn.ru
Certificate IssuerLet's Encrypt
Subjectwidget.replain.cc
Fingerprint6F:5F:4F:A8:8B:38:10:5F:1E:07:27:B2:5D:DD:17:F3:9E:F3:25:FC
ValidityMon, 30 Oct 2023 07:06:48 GMT - Sun, 28 Jan 2024 07:06:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (330), with no line terminators
Hash 4d637fbd31849ceee1346ade9d5eec83
39df105f46ba722bb2e95df0282fd718736150dd
f922c3c2af3c75b1a239f6479469499231403a5576c905d0b1d69c1fe976a417
POST /auth HTTP/1.1
Host: app.replain.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 74
Origin: https://www.alviy.com
DNT: 1
Connection: keep-alive
Referer: https://www.alviy.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Nov 2023 21:45:30 GMT
content-type: application/json; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Authorization, Content-Type
access-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE
access-control-allow-credentials: true
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2