GET bookmakersbet.top/wp-content/uploads/2016/04/hockey-bet-min.jpg
51.158.25.7200 OK 27 kB URL GET HTTP/2 bookmakersbet.top/wp-content/uploads/2016/04/hockey-bet-min.jpg
IP 51.158.25.7:443
Certificate IssuerLet's Encrypt
Subjectbookmakersbet.top
Fingerprint6B:D8:67:23:FC:C0:DF:8E:33:08:72:CA:58:D3:3D:FD:2A:9F:A7:FF
ValidityThu, 07 Sep 2023 09:01:29 GMT - Wed, 06 Dec 2023 09:01:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 790x250, components 3\012- data
Hash 7ad078dfd496683ac4ae22c09f0211c0
356b975a32681f80dab98d9932a16b2b4416680c
90137eb07e313222860d192883788d64c153dfe710f3a7d35acc2f56ef761754
GET /wp-content/uploads/2016/04/hockey-bet-min.jpg HTTP/1.1
Host: bookmakersbet.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 24 Oct 2023 23:22:30 GMT
content-type: image/jpeg
content-length: 26669
expires: Thu, 23 Oct 2025 23:22:30 GMT
cache-control: public, max-age=63072000, stale-while-revalidate=12614400
last-modified: Tue, 24 Oct 2023 23:22:30 GMT
age: 786
accept-ranges: bytes
wsr-cache: HIT 89 (358)
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/ads-track-digest256/111.0/1684443982
34.120.158.37 56 kB URL tracking-protection.cdn.mozilla.net/ads-track-digest256/111.0/1684443982
IP 34.120.158.37:0
Hash eccf8436aa08de0d355cd2c068568453
e05e69cb2970888f00770ab772d77354df830f05
71a2d75150b4656ff17a9589a66e9e03661fa4ea1dfdf16c1d848efaae082439
GET /ads-track-digest256/111.0/1684443982 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: k+3X3aQ18Zqq8UqOX6FAnwg6Qotemt3z8GGz8HZbVQf3/9OUIdZ1GkejDltjIC6UD+vfv58HQ+M=
x-amz-request-id: 3KBNCQY8E6ZDW8YR
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 56118
via: 1.1 google
date: Tue, 24 Oct 2023 21:52:41 GMT
age: 6176
last-modified: Thu, 18 May 2023 21:16:40 GMT
etag: "eccf8436aa08de0d355cd2c068568453"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/analytics-track-digest256/111.0/1683905755
34.120.158.37 10 kB URL tracking-protection.cdn.mozilla.net/analytics-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 27ca7a562ad626165a25126b5975bc58
de8e9d89b673f3e1375e2a70f3c9d696726dfbe4
405d79f4b44125a2147ac70652ea7e7a544c1a5b34b376f683ea3e90445e7e42
GET /analytics-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: uyx7GY9/4BhxI4/1OYM7on/tmC2ijN42h89Rg/hJl29POWKJ+S6+987Z3AcsfKAvyzfOssEO7NU=
x-amz-request-id: QPNZNJ23NQ064SR0
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 10262
via: 1.1 google
date: Tue, 24 Oct 2023 11:17:48 GMT
age: 44269
last-modified: Fri, 12 May 2023 15:46:41 GMT
etag: "27ca7a562ad626165a25126b5975bc58"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/base-cryptomining-track-digest256/111.0/1683905755
34.120.158.37 2.3 kB URL tracking-protection.cdn.mozilla.net/base-cryptomining-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 7938ce04b9288ce2553c06df7544718e
0f6bcdb2770858cfc9018dd76d3ac16386afd3e0
efedbe30e6f1ac7617b022b31ccd2920f0d518e9a7f8818447e117fbc7cd30ee
GET /base-cryptomining-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: fBZn5E17IrpF0Eyspl6/Y6fFxSPSR8VRfKAl4qv0R8Sajfetdyp2D0pqDm9UfxTeXqR++hG26v4=
x-amz-request-id: XZPEXW5TD8BWS85R
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 2293
via: 1.1 google
date: Tue, 24 Oct 2023 21:54:12 GMT
age: 6085
last-modified: Fri, 12 May 2023 15:46:54 GMT
etag: "7938ce04b9288ce2553c06df7544718e"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/base-email-track-digest256/111.0/1683905755
34.120.158.37 7.0 kB URL tracking-protection.cdn.mozilla.net/base-email-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 02560eef6a3e694713d21ba526dbf2d2
c300dbaeeb367bd302eaf2941a97cdd54c84bde9
6796e1d3ffc1d5316c498c022fd22be9e15842a3b3166f664d14042b614e491c
GET /base-email-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: s72R9PzN7yfsjG0WaCfu9cZNUbl6xjpsCRaSzbVtIwtCVeGn989H/hlT2AVfj1UinGoE5J0Upos=
x-amz-request-id: JM875E22Q9K0JWMH
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 6965
via: 1.1 google
date: Tue, 24 Oct 2023 18:38:54 GMT
age: 17803
last-modified: Fri, 12 May 2023 15:46:56 GMT
etag: "02560eef6a3e694713d21ba526dbf2d2"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/base-fingerprinting-track-digest256/111.0/1683905755
34.120.158.37 3.6 kB URL tracking-protection.cdn.mozilla.net/base-fingerprinting-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 84a28e1e64a4aca618879e590fb29c47
ddea829bfd334fe48e25374f36119c6ce19bdfeb
e87ee13b3afbcefcfd7f87bdd26b12aa18b79437ebd4a3cf689f78aefa0a7d1e
GET /base-fingerprinting-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: fWvJzIjSbpwbzEIekLYqtE//QmcnXXF6R92lsvBYfauNbX21NY8WyPc87MkAkbCSiXuL2zX52Nw=
x-amz-request-id: ZS0WDAM5GV64FM41
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 3637
via: 1.1 google
date: Tue, 24 Oct 2023 12:04:30 GMT
age: 41467
last-modified: Fri, 12 May 2023 15:46:52 GMT
etag: "84a28e1e64a4aca618879e590fb29c47"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/content-email-track-digest256/111.0/1683905755
34.120.158.37 8.9 kB URL tracking-protection.cdn.mozilla.net/content-email-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash b9c2809ffc057abb94df0750c8cb57dd
e8ab5e486a0b53147eb8d66ca4585a06c5bbd210
b9816319448d2ccb8ef6a6e2aaefe13a9fa96335bdc1fd57c281dfe7ff95ede9
GET /content-email-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: Inhn5Erzdy0tS6QIkTxM4oFWus2VLNylWoNdEsuKrGLn1O9L9Jhw4O/PKpvRr3TXZ1U+u8pV1pc=
x-amz-request-id: GX1JNCEDD7M8ZFY8
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 8853
via: 1.1 google
date: Tue, 24 Oct 2023 03:39:56 GMT
age: 71741
last-modified: Fri, 12 May 2023 15:46:57 GMT
etag: "b9c2809ffc057abb94df0750c8cb57dd"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/content-track-digest256/111.0/1683905755
34.120.158.37 15 kB URL tracking-protection.cdn.mozilla.net/content-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash d78d9f71f82fcce3a0d9079ec988ed05
13f8a07b0437728b11cefeda36b6211262d3af16
7449b095579811871ecad49889db2ae188486b18ab96f903a20941e34cfef7ee
GET /content-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: SLnPM+dDhgEggP4LmPforSdszmJLYvtl2xaVa47/ff11sMkcswg1IPdQmO7znxg3+T1lSb+xFEw=
x-amz-request-id: P8TB4B20FH7S01M0
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 15382
via: 1.1 google
date: Tue, 24 Oct 2023 16:39:52 GMT
age: 24945
last-modified: Fri, 12 May 2023 15:46:39 GMT
etag: "d78d9f71f82fcce3a0d9079ec988ed05"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
GET cs.rin.ru/cs/img/003.jpg
185.100.87.208200 OK 60 kB IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x255, components 3\012- data
Hash b0f4815669208f16ce0c794f250420a0
36f35e1fa82d621bf514876125245153657eabcc
18907bcee40125655bb3296844ed941ab982eef156697740aca613d2ce80a28b
GET /cs/img/003.jpg HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:37 GMT
content-type: image/jpeg
content-length: 60096
last-modified: Wed, 29 Apr 2020 22:00:00 GMT
etag: "eac0-5a47511c7f800"
accept-ranges: bytes
alt-svc: h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/cs/img/003.jpg
strict-transport-security: max-age=31536000; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/111.0/1683905755
34.120.158.37 1.5 MB URL tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/111.0/1683905755
IP 34.120.158.37:0
Size 1.5 MB (1470328 bytes)
Hash 2146c997750a1c7e55eb69a5a1a5e5b4
69ba29aca5c6a4bea1365e895b3c5b31df31220a
507d674f59748ff86ff629a2eb98b3cd343aec0a21e58089793341dc96361188
GET /google-trackwhite-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: kvRBrJj6vZ/RxvaA6W7qiEnNUu8v/0sUE1bn1YHFOwMPDB++H4z5Wlnv+phSvoOA7rU4BBlhM5xZsldVzpzmGQ==
x-amz-request-id: RHZ1FT8RVB8GD5X0
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Tue, 24 Oct 2023 06:19:46 GMT
age: 62151
last-modified: Fri, 12 May 2023 15:46:50 GMT
etag: "2146c997750a1c7e55eb69a5a1a5e5b4"
content-type: application/octet-stream
content-length: 1470328
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
GET cs.rin.ru/bootstrapcdn/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
185.100.87.208200 OK 18 kB URL GET HTTP/2 cs.rin.ru/bootstrapcdn/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrapcdn/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://cs.rin.ru/bootstrapcdn/bootstrap/3.3.7/css/bootstrap.min.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:37 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 08/03/2021 23:23:50
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: f55e829c3dfbe34ff5359497aef924b9
cdn-cache: HIT
cf-cache-status: HIT
age: 14893473
accept-ranges: bytes
vary: Accept-Encoding, Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-ray: 81b6098c2f8829c4-OTP
alt-svc: h3=":443"; ma=86400, h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/bootstrapcdn/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
x-frame-options: DENY
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: cross-origin, same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2
GET cs.rin.ru/file/a/2023/10/4/055.jpg
185.100.87.208200 OK 24 kB URL GET HTTP/2 cs.rin.ru/file/a/2023/10/4/055.jpg
IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 597x237, components 3\012- data
Hash b76003baf078ed7b0a66354726d086bc
a326834cd7a407d4df90f924b6ebfd4e853785d2
f79bfdb54d707c6e07b1c2ef1a125132fa9da22fc6cbd7d502f10cd988128de2
GET /file/a/2023/10/4/055.jpg HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:37 GMT
content-type: image/jpeg
content-length: 23870
last-modified: Wed, 04 Oct 2023 17:23:27 GMT
etag: "5d3e-606e743eea020"
accept-ranges: bytes
alt-svc: h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/file/a/2023/10/4/055.jpg
strict-transport-security: max-age=31536000; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/111.0/1684443982
34.120.158.37 345 kB URL tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/111.0/1684443982
IP 34.120.158.37:0
Size 345 kB (344663 bytes)
Hash aacf54fd5b2994c73b3e4e5e13f4b5a2
10494f54553c768432a556492e655aa774456927
bee12d3c1d013147f78ee8ce7d9fa5e83679cc650763c6f4f49a10ff2d4537e5
GET /mozstd-trackwhite-digest256/111.0/1684443982 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 2mZ2LM03R49Q17MK+++g0LW2rV3YFzXcC6PXirCON3hSw2ZHfCvl2K+p6hi2WMqhOzkH3FpEFNQ=
x-amz-request-id: PP1VZ7XRZ2HBXYDD
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 344663
via: 1.1 google
date: Tue, 24 Oct 2023 12:04:41 GMT
age: 41456
last-modified: Thu, 18 May 2023 21:16:46 GMT
etag: "aacf54fd5b2994c73b3e4e5e13f4b5a2"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/social-track-digest256/111.0/1683905755
34.120.158.37 2.2 kB URL tracking-protection.cdn.mozilla.net/social-track-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash f901679cf935d4b6067610a7287d0b99
fffa5389bec50a175f18deaf8933401edc4bd262
d553a4537f796d580ea8f696062c19540f1d332e2b478942f6ddea3952c6df4c
GET /social-track-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 6arUu1PN7QB/j51N4yMe8iKs43UU7pM4PD43Wu2yvy2fECqPGvjhCe3ZoiZp7SqQvDYE1kWl+VY=
x-amz-request-id: HWJ9GEYHJKGNT720
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 2197
via: 1.1 google
date: Tue, 24 Oct 2023 00:36:17 GMT
age: 82760
last-modified: Fri, 12 May 2023 15:46:42 GMT
etag: "f901679cf935d4b6067610a7287d0b99"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/social-tracking-protection-facebook-digest256/111.0/1683905755
34.120.158.37 468 B URL tracking-protection.cdn.mozilla.net/social-tracking-protection-facebook-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 092bf11bed810e853f65d296f1e8b9e3
fed3b3a85aaf2bf1790fb115201b0dfdefe3982c
8c89c977f2c3f91b1050c645843453edc3d5bfcbe5e4af4b945b385f1b60046f
GET /social-tracking-protection-facebook-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 3Mei64jJEJtR+IVfW1cv+pqdxmCR+A4dXJmL+3DD9VM/YcdJxM3BbNFSbaRNlGZ1lEpmhI9ARfI=
x-amz-request-id: ZJTCFVH6X08VAYDP
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 468
via: 1.1 google
date: Tue, 24 Oct 2023 16:33:14 GMT
age: 25343
last-modified: Fri, 12 May 2023 15:46:44 GMT
etag: "092bf11bed810e853f65d296f1e8b9e3"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/social-tracking-protection-linkedin-digest256/111.0/1683905755
34.120.158.37 148 B URL tracking-protection.cdn.mozilla.net/social-tracking-protection-linkedin-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 90a72e82e4192224c509d557fd1d0d0c
19fe3346057c74364b7a2a2c1de0011a19c153d8
1024a91771abf18dd0a4de9dcc166ba7f9d224c803b6a5854f3f2db8d9a3c4a2
GET /social-tracking-protection-linkedin-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: DxgS4W8nS+BSRvedUe+JXXPAfMTlDLst7akpDVbhDXdsXnxtceV/3/m2mQxZdnjv885SK5IPH/c=
x-amz-request-id: DKQGK3KYCCD6AXKK
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 148
via: 1.1 google
date: Tue, 24 Oct 2023 16:24:51 GMT
age: 25846
last-modified: Fri, 12 May 2023 15:46:46 GMT
etag: "90a72e82e4192224c509d557fd1d0d0c"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/social-tracking-protection-twitter-digest256/111.0/1683905755
34.120.158.37 244 B URL tracking-protection.cdn.mozilla.net/social-tracking-protection-twitter-digest256/111.0/1683905755
IP 34.120.158.37:0
Hash 44186218fd668b3ffe6d95bc9c2acf06
e5b11bad035d82c42f2783024bb40fb2fa00d7e6
6d7715ed174a8438063ca39237b2e0c7e204dd68d0396866bc898a7e7aa70372
GET /social-tracking-protection-twitter-digest256/111.0/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: GP2gYh6OTNkzGkaEhHSfeZe7U3BItYcDlQsUMfH3pwWgD/OlOnlnIWrPadg8aA0XSXNGFfISdGs=
x-amz-request-id: 9MT8FAT1BSH2KCFA
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 244
via: 1.1 google
date: Tue, 24 Oct 2023 16:33:53 GMT
age: 25304
last-modified: Fri, 12 May 2023 15:46:45 GMT
etag: "44186218fd668b3ffe6d95bc9c2acf06"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
185.100.87.208200 OK 9.5 kB URL User Request GET HTTP/2 IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9997), with no line terminators
Hash a0aa42a9e059459a6f1ef3b88293192b
d8dca1694c15978c0a878564d57ac34b9e3156cd
c315e112f467819fb45407b0f2ceff591d38b97997fe5f1e73f128a1424fe07e
GET / HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:36 GMT
content-type: text/html; charset=windows-1251
vary: Accept-Encoding
pragma: no-cache
cache-control: none
expires: -3d
alt-svc: h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/
strict-transport-security: max-age=31536000; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
content-encoding: gzip
X-Firefox-Spdy: h2
GET cs.rin.ru/counter/?js=13&d=cs.rin.ru&rf=&jv=false&wh=1280x1024&cl=24&rand=0.75424305030555891698190538006
185.100.87.208404 Not Found 5.4 kB URL GET HTTP/2 cs.rin.ru/counter/?js=13&d=cs.rin.ru&rf=&jv=false&wh=1280x1024&cl=24&rand=0.75424305030555891698190538006
IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5438), with no line terminators
Hash 87025dcc50a8452803f2605125a4eacb
567489ef2770d004b9a50a310893f327159160c9
bbaed476e7788c628fd0ab93884924bf57aaeff7d0d16f864e0d094b5f82715a
GET /counter/?js=13&d=cs.rin.ru&rf=&jv=false&wh=1280x1024&cl=24&rand=0.75424305030555891698190538006 HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Tue, 24 Oct 2023 23:35:37 GMT
content-type: text/html
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET cs.rin.ru/yadrocounter/hit?t52.1;r;s1280*1024*24;uhttps%3A//cs.rin.ru/;0.48037427178860337
185.100.87.208404 Not Found 5.4 kB URL GET HTTP/2 cs.rin.ru/yadrocounter/hit?t52.1;r;s1280*1024*24;uhttps%3A//cs.rin.ru/;0.48037427178860337
IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5438), with no line terminators
Hash 87025dcc50a8452803f2605125a4eacb
567489ef2770d004b9a50a310893f327159160c9
bbaed476e7788c628fd0ab93884924bf57aaeff7d0d16f864e0d094b5f82715a
GET /yadrocounter/hit?t52.1;r;s1280*1024*24;uhttps%3A//cs.rin.ru/;0.48037427178860337 HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Tue, 24 Oct 2023 23:35:38 GMT
content-type: text/html
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET cs.rin.ru/bootstrapcdn/bootstrap/3.3.7/css/bootstrap.min.css
185.100.87.208200 OK 121 kB URL GET HTTP/2 cs.rin.ru/bootstrapcdn/bootstrap/3.3.7/css/bootstrap.min.css
IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type ASCII text, with very long lines (65371)
Size 121 kB (121200 bytes)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrapcdn/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:37 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-06-08 21:21:23
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
access-control-allow-origin: *
cdn-requestid: f3a3007506374a305b1a96efe5ee1490
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 93733
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-ray: 81b609886a71b9e4-OTP
content-encoding: br
alt-svc: h3=":443"; ma=86400, h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/bootstrapcdn/bootstrap/3.3.7/css/bootstrap.min.css
x-frame-options: DENY
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: cross-origin, same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
X-Firefox-Spdy: h2
GET cs.rin.ru/favicon.ico
185.100.87.208200 OK 1.2 kB IP 185.100.87.208:443
Certificate IssuerLet's Encrypt
Subjectcs.rin.ru
Fingerprint3B:9D:5D:4C:69:30:98:FD:BA:11:4E:90:9F:8E:59:57:3F:C4:E7:50
ValiditySat, 30 Sep 2023 00:00:21 GMT - Fri, 29 Dec 2023 00:00:20 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 5fca16a17be6508b9fe8dd5b140c2844
d875da7a7d8373da9554adc8731e28a09106e431
b9d1c1e32c898c508737a4eaaf66f204630fbef3783d809259c6e9639886696f
GET /favicon.ico HTTP/1.1
Host: cs.rin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cs.rin.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Oct 2023 23:35:38 GMT
content-type: image/x-icon
last-modified: Tue, 10 Oct 2017 21:05:44 GMT
vary: Accept-Encoding
etag: W/"59dd3628-47e"
alt-svc: h2="edeivvkpaftuicvrm4d3zj4s27ogcqom4yettv2uquay7oliy674ylad.onion:443"; ma=86400; persist=1
onion-location: http://csrinrutkb3tshptdctl5lyei4et35itl22qvk5ktdcat6aeavy6nhid.onion/favicon.ico
strict-transport-security: max-age=31536000; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin
reporting-endpoints: cspreport="/forum/cspreport.php"
content-security-policy: child-src 'self' https://www.youtube-nocookie.com; connect-src 'self'; default-src 'none'; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com; img-src 'self' https:; manifest-src 'none'; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; worker-src 'none'; base-uri 'none'; form-action 'self' 'unsafe-inline'; frame-ancestors 'none'
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
content-encoding: gzip
X-Firefox-Spdy: h2