ganjaplan.7fi.ru/viewtopic.php?id=378
91.194.2.84200 OK 35 kB URL HTTP/1.1 ganjaplan.7fi.ru/viewtopic.php?id=378
IP 91.194.2.84:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (6778), with CRLF, LF, NEL line terminators
Hash 91c69f93f11728ca0932aff025cd5921
025ccf027e79d65728f7fc7328ce52c3b77c63a6
0c39bc8bd4da09e951357013d046d657a95e5d26eb77ab218bdd802c00ba54c8
Analyzer Verdict Alert fortinet Phishing
GET /viewtopic.php?id=378 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: text/html; charset=windows-1251
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6347
Expires: Mon, 12 Dec 2022 05:58:57 GMT
Date: Mon, 12 Dec 2022 04:13:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7201
Expires: Mon, 12 Dec 2022 06:13:11 GMT
Date: Mon, 12 Dec 2022 04:13:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 04:08:34 GMT
content-type: application/json
age: 276
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8384
Expires: Mon, 12 Dec 2022 06:32:55 GMT
Date: Mon, 12 Dec 2022 04:13:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4gXr2pG5u4WokfJtEoxSgwVPqVbGrdtcXT9l4ctS2nR30/KElKVS/5l/7vMrRiab+NoQCGMge9s=
x-amz-request-id: WHWA3AAYF86GW8M3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 03:49:27 GMT
age: 1424
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 04:13:11 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
yandex.st/share/share.js
178.154.131.215200 OK 14 kB IP 178.154.131.215:0
File type Unicode text, UTF-8 text, with very long lines (32058)
Hash 0846935dee0d2ebbb7af7cbce113d5b8
f07346e034d5ad76aa90b38e195500574aafbb4e
2b682e5417a0a08596a80bc834ffeb32948d54373b4020d54fac626e559c1270
GET /share/share.js HTTP/1.1
Host: yandex.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=216013
Content-Encoding: gzip
Etag: W/"db7132f94e4730c128b638f72b46c899"
Expires: Wed, 14 Dec 2022 16:12:15 GMT
Last-Modified: Wed, 24 Oct 2018 16:00:42 GMT
NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
Strict-Transport-Security: max-age=43200000; includeSubDomains;
Timing-Allow-Origin: *
Vary: Accept-Encoding
X-Nginx-Request-Id: b59fe646a18fc828
ganjaplan.7fi.ru/style/Quicktime/Quicktime.css
91.194.2.84200 OK 4.7 kB URL HTTP/1.1 ganjaplan.7fi.ru/style/Quicktime/Quicktime.css
IP 91.194.2.84:0
File type ASCII text, with CR, LF line terminators
Hash 75d236ac2714b7162dd73b6c4643cf88
4767ffaf017749041d57af8d3fb80465a1fe248a
5901a88742bc1c1a69b8155c105118615f592529932c7653b48b7b7fa4ea1176
GET /style/Quicktime/Quicktime.css HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: text/css
Last-Modified: Sun, 23 Mar 2008 19:29:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"47e6af7c-5445"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/style/extra.css?v=14
91.194.2.84200 OK 5.3 kB URL HTTP/1.1 ganjaplan.7fi.ru/style/extra.css?v=14
IP 91.194.2.84:0
File type Unicode text, UTF-8 text, with very long lines (374)
Hash 0786b30c8750ff9f4d70b537371a3f9b
57e0e0afe8c9743f8fde7940fd8106e6c44e482c
d447881e8abec1e2b5032a3889b407b4ca4ccedaa9adee6302903bda8ecb6d9e
GET /style/extra.css?v=14 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: text/css
Last-Modified: Tue, 06 Apr 2021 06:46:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"606c03cd-5359"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/style/mobile.css?2
91.194.2.84200 OK 2.7 kB URL HTTP/1.1 ganjaplan.7fi.ru/style/mobile.css?2
IP 91.194.2.84:0
Hash 50bbfaed06b9ced48f1f9596a9778011
4900dc5bd03b4979970960a2b8d3f78e21513874
293d1cd9b43ee93b7d7db96893ed0cba0d357791fb163c09920144bd9415fed7
Analyzer Verdict Alert fortinet Phishing
GET /style/mobile.css?2 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: text/css
Last-Modified: Mon, 01 Nov 2021 18:38:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61803432-3040"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/js/extra.js?v=1
91.194.2.84200 OK 1.7 kB URL HTTP/1.1 ganjaplan.7fi.ru/js/extra.js?v=1
IP 91.194.2.84:0
Hash 19496073833e71e4a9944399d2fad541
feb283cb79b79ef146a950f52e7f36fd41f005c8
fc634b35ef9a808f98b03d748c8c91d33b0f90a2c3f67c58a062e3d65e8cadf8
Analyzer Verdict Alert fortinet Phishing
GET /js/extra.js?v=1 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: application/javascript
Last-Modified: Tue, 06 Apr 2021 06:46:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"606c03cd-1115"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/js/libs.min.js?v=2
91.194.2.84200 OK 51 kB URL HTTP/1.1 ganjaplan.7fi.ru/js/libs.min.js?v=2
IP 91.194.2.84:0
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Hash 651e10669f7f7c1832074fb3e3c9cbe3
a28847ef2a18d9aa63197314b9e41fa7439c2871
6d5466413ed92731bed64127979cd6f35d6b8a4ed38b46cf0d82c475e62b35e8
Analyzer Verdict Alert fortinet Phishing
GET /js/libs.min.js?v=2 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 May 2021 05:58:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60a205fa-24703"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
91.194.2.84200 OK 1.3 kB URL HTTP/1.1 ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
IP 91.194.2.84:0
Hash 0344bcb09574e16ac0390dda246aee3e
b6f7a98b22fd936fccb594df1363fee654460287
57e672d7289f7142fb8e2fe0c212a132fae3a1a57aeaf348bf799ea6d4a14d08
GET /style/Quicktime/Quicktime_cs.css HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: text/css
Last-Modified: Tue, 23 Oct 2012 14:54:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5086afa7-1620"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ganjaplan.7fi.ru/img/Quicktime/bg.gif
91.194.2.84200 OK 2.5 kB URL HTTP/1.1 ganjaplan.7fi.ru/img/Quicktime/bg.gif
IP 91.194.2.84:0
File type GIF image data, version 89a, 10 x 396\012- data
Hash 7f876304d98e721cd423bcb5e29f6e16
9a25bb03827370eab74929a54fa968572ed3225a
614c8bb5379d6fe3688956e4239f56f36bb3a475c3dd374b61f706f2fdece7a4
GET /img/Quicktime/bg.gif HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 2505
Last-Modified: Sun, 23 Mar 2008 19:37:00 GMT
Connection: keep-alive
ETag: "47e6b15c-9c9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ganjaplan.7fi.ru/vc?408847;0;0.3758008652406363
91.194.2.84200 OK 43 B URL HTTP/1.1 ganjaplan.7fi.ru/vc?408847;0;0.3758008652406363
IP 91.194.2.84:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
Analyzer Verdict Alert fortinet Phishing
GET /vc?408847;0;0.3758008652406363 HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Expires: Sun, 11 Dec 2022 04:13:11 GMT
Cache-Control: no-cache
ganjaplan.7fi.ru/img/Quicktime/arrow.gif
91.194.2.84200 OK 918 B URL HTTP/1.1 ganjaplan.7fi.ru/img/Quicktime/arrow.gif
IP 91.194.2.84:0
File type GIF image data, version 89a, 10 x 10\012- data
Hash 5cd24532edd6c00a9c80ac7a57b62d83
1afa97e0e6893e85052af614eddb772789c2a04b
4db68bae0de18a9d3029957354ddc3be4e12ce43bb92e8e2d78b5ed6a32c3e66
GET /img/Quicktime/arrow.gif HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 918
Last-Modified: Sun, 23 Mar 2008 19:37:00 GMT
Connection: keep-alive
ETag: "47e6b15c-396"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ganjaplan.7fi.ru/img/Quicktime/header.gif
91.194.2.84200 OK 887 B URL HTTP/1.1 ganjaplan.7fi.ru/img/Quicktime/header.gif
IP 91.194.2.84:0
File type GIF image data, version 89a, 10 x 30\012- data
Hash 60230e68b051b086e119569b01f2fce7
44852369c83dea148d7c70a3fad17366be998c87
d12f56e6f38108fb3d51fa1c9a3bfdd5c0331214d751e6e1a95375ad1a568e1c
GET /img/Quicktime/header.gif HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 887
Last-Modified: Sun, 23 Mar 2008 19:37:00 GMT
Connection: keep-alive
ETag: "47e6b15c-377"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ganjaplan.7fi.ru/img/Quicktime/menu.gif
91.194.2.84200 OK 107 B URL HTTP/1.1 ganjaplan.7fi.ru/img/Quicktime/menu.gif
IP 91.194.2.84:0
File type GIF image data, version 89a, 1 x 32\012- data
Hash bbdaa5cf5b07d240d100b38f01e9638f
f2121250a0807803b852f3640307043288c22d0e
aedfba8b8818e19c87611d4c789fd56296ae48b4622289c8e4f7eacee2eb2baf
GET /img/Quicktime/menu.gif HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 107
Last-Modified: Sun, 23 Mar 2008 19:37:00 GMT
Connection: keep-alive
ETag: "47e6b15c-6b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ganjaplan.7fi.ru/img/Quicktime/h2.gif
91.194.2.84200 OK 189 B URL HTTP/1.1 ganjaplan.7fi.ru/img/Quicktime/h2.gif
IP 91.194.2.84:0
File type GIF image data, version 89a, 5 x 24\012- data
Hash d3abd12058db5295bf645ae5c9ac735b
3fd353584dbcd774cc42f44a10bf22f6cbfaeff8
8ab842a2289c06fc9e98c34510dfba617932ab30e40a45630f9ba8824398e273
GET /img/Quicktime/h2.gif HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/style/Quicktime/Quicktime_cs.css
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:22 GMT
Content-Type: image/gif
Content-Length: 189
Last-Modified: Sun, 23 Mar 2008 19:37:00 GMT
Connection: keep-alive
ETag: "47e6b15c-bd"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
151.101.193.229200 OK 67 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
IP 151.101.193.229:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (557)
Hash 126fdba4163dd2e73333915be3da12e0
41dacdc637ebabe3cb3aea71fa989418c8e8bf90
7c68d8da32105bdb6bebce79e220492f3147198a93d7cb4b535570132287681e
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.253.0
x-jsd-version-type: version
etag: W/"28b83-JJaJnBP42lnJf5ryvhVfnZ59Tvo"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Dec 2022 04:13:11 GMT
age: 35276
x-served-by: cache-fra-eddf8230043-FRA, cache-bma1634-BMA
x-cache: MISS, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 67174
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash 1e6504a59e45ad33b52eb434021b1c95
341fd8dc9a27c9047b6cd494d49feaf0b0b2ef1c
cd8df142864f4601db522b4b0e8f273daa6999d5db6236ce9ee6c02c9ae54f88
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "9E60D12CB603C2CFF4DB5C05497B57E02239F72E"
Expires: Mon, 12 Dec 2022 15:00:00 GMT
Last-Modified: Mon, 12 Dec 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 155
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0425e99b4ed-OSL
w.uptolike.com/widgets/v1/uptolike.js
95.163.114.204200 OK 8.3 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/uptolike.js
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (565)
Hash 6075742d564fbc306a88508d7e0e5d3d
769855acd94bae595564826b23fa3f738c806799
cda0005e8be6a96fed733b0ea7cfa06fbcb3123c3692ed3d3ce7e8ee83587c63
GET /widgets/v1/uptolike.js HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=29930654318; Expires=Wed, 11 Dec 2024 04:13:11 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMHLpaTQMBAAIMGc8KzQMCjBnPCs0DAwAKTLUaP7svT2uH0SPYGzNrI="; Expires=Wed, 11 Dec 2024 04:13:11 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=1800
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Expires: Mon, 12 Dec 2022 04:43:11 GMT
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 03:33:17 GMT
age: 2394
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
forumstatic.ru/img/smilies/MyBB/light/wink.gif
91.194.2.83200 OK 927 B URL HTTP/1.1 forumstatic.ru/img/smilies/MyBB/light/wink.gif
IP 91.194.2.83:0
File type GIF image data, version 89a, 19 x 20\012- data
Hash 858c309462ca49e69af59be5e8845cd8
8857e1183dafada144384b31fbb3205aa5c2a9ec
f100c2921b8ceaebfae0c62e99b0029ed0a923d278551ac0cc4fe475684b276d
GET /img/smilies/MyBB/light/wink.gif HTTP/1.1
Host: forumstatic.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: image/gif
Content-Length: 927
Last-Modified: Mon, 06 Apr 2015 16:34:26 GMT
Connection: keep-alive
ETag: "5522b592-39f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 4193e75c7f0442c2ef70a0925e82af9d
d079d770599e60ea0f20a33de2300153c4018cb6
9d6e11903c686d01ac15d6464ad641f3d189cb43a9b5dd94c13263ba1ab0b394
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Fri, 16 Dec 2022 02:36:05 GMT
ETag: "d079d770599e60ea0f20a33de2300153c4018cb6"
Last-Modified: Mon, 12 Dec 2022 02:36:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1910
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0441f31b4ed-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 461965c68fc564a4a3e6cf45541a5063
3f55cc84667a6bba4aee11892375579502ad928b
d83a88be198a186c6d0fdcc3df51c1823dc91801765cc66f567961ca7a7fc6bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D83A88BE198A186C6D0FDCC3DF51C1823DC91801765CC66F567961CA7A7FC6BD"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4629
Expires: Mon, 12 Dec 2022 05:30:20 GMT
Date: Mon, 12 Dec 2022 04:13:11 GMT
Connection: keep-alive
mc.yandex.ru/watch/59396?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Ajaghkvs77dh9tvchj66zn%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A785249555482%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041309%3Aet%3A1670818390%3Ac%3A1%3Arn%3A822765631%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Ans%3A1670818388944%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/59396?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Ajaghkvs77dh9tvchj66zn%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A785249555482%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041309%3Aet%3A1670818390%3Ac%3A1%3Arn%3A822765631%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Ans%3A1670818388944%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash bfc6f5f7e66032e6dcbfbd2f047b6492
0e71ea5424566a277c1b96721bac9ea9dc1c0587
b45b8f4e40aa9a1723a85919d5371fdaf5e2a305af8072f70197635b37940305
GET /watch/59396?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Ajaghkvs77dh9tvchj66zn%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A785249555482%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041309%3Aet%3A1670818390%3Ac%3A1%3Arn%3A822765631%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Ans%3A1670818388944%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/59396/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Ajaghkvs77dh9tvchj66zn%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A785249555482%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041309%3Aet%3A1670818390%3Ac%3A1%3Arn%3A822765631%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Ans%3A1670818388944%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Mon, 12 Dec 2022 04:13:11 GMT
access-control-allow-origin: http://ganjaplan.7fi.ru
set-cookie: yabs-sid=536222401670818391; Path=/; SameSite=None; Secure
i=bo3CCK5EQ+CQnbals6YVTNErZnHNuFNdAEXpnE9aOtXn1BhxbVHQlbO59dEyhmgjwpdVSzIbASXkFBNe1E23XkD679M=; Expires=Thu, 09-Dec-2032 04:13:07 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9373047551670818391; Expires=Tue, 12-Dec-2023 04:13:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9373047551670818391; Expires=Tue, 12-Dec-2023 04:13:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702354391.yc.1670818391#1702354391.yrts.1670818391#1702354391.yrtsi.1670818391; Expires=Tue, 12-Dec-2023 04:13:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:11 GMT
last-modified: Mon, 12-Dec-2022 04:13:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e12bb655426d080117693ba116f398cf
8fe1f7f8d0b191baed2decba3523656da97077f5
2c25ba0d1c806de98d5489934acd8e2f17487e4f7e40c7f0d39094ce49f91b8d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 38
Cache-Control: max-age=104063
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 04:13:11 GMT
Etag: "63959db0-1d7"
Expires: Tue, 13 Dec 2022 09:07:34 GMT
Last-Modified: Sun, 11 Dec 2022 09:06:56 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1670818389909572
95.163.114.204200 OK 84 B URL HTTP/1.1 w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1670818389909572
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type ASCII text, with no line terminators
Hash 4aa9f255369f8e94af8726eb4dbe36ce
59b1b08b52fa212f41c315aabf7cde2c7cd772c2
55dbb08fa27732311f907cebcf973159e370001e568e024657043638a08ef22e
GET /widgets/v1/version.js?cb=cb__utl_cb_share_1670818389909572 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:11 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 23 Nov 2022 19:31:36 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29930654352; Expires=Wed, 11 Dec 2024 04:13:11 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="; Expires=Wed, 11 Dec 2024 04:13:11 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ganjaplan.7fi.ru/favicon.ico
91.194.2.84200 OK 318 B URL HTTP/1.1 ganjaplan.7fi.ru/favicon.ico
IP 91.194.2.84:0
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash 840e141d31c8e6ac1dd25b3ef7e14996
173f3fff8e64cd778cf9ed03cfac4c041bb1f4ea
2bf8aacfcde39096ca3437a9600810125b7694b56436e33e4417bbc7fa831686
GET /favicon.ico HTTP/1.1
Host: ganjaplan.7fi.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/viewtopic.php?id=378
Cookie: uid=W8ICVGOWqmJ020NgD/s+AgA=; _ym_uid=1670818390714344753; _ym_d=1670818390; _ym_visorc=w
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:23 GMT
Content-Type: image/x-icon
Content-Length: 318
Last-Modified: Thu, 03 May 2012 17:37:31 GMT
Connection: keep-alive
ETag: "4fa2c25b-13e"
Expires: Wed, 11 Jan 2023 04:13:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
counter.yadro.ru/hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529
88.212.201.198302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
HTTP/1.1 302 Moved Temporarily
Date: Mon, 12 Dec 2022 04:13:11 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529
Content-Length: 32
Expires: Sat, 11 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 04:13:11 GMT
access-control-allow-origin: *
etag: "6392ed22-2b"
expires: Mon, 12 Dec 2022 05:13:11 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 11:09:06 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
87.250.251.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (598)
Hash 1a5da2d1a98a493b4c8afe8b03c8c406
8a359aebaeb96faf18be6ab782a56db7d47de607
fe720067e49fb7bbc23b61b978352d26dee95d035f69bde667df72e1ecf7e346
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73711
date: Mon, 12 Dec 2022 04:13:11 GMT
access-control-allow-origin: *
etag: "6392ed22-11fef"
expires: Mon, 12 Dec 2022 05:13:11 GMT
last-modified: Fri, 09 Dec 2022 11:09:06 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash f52672911d18ee0d5fc986d3bc5552b3
18f5faa1b988cf3dd8da3e4948cbee300f4f8e16
f12ba3c7fe043fd27ac14e0ae4e82c9bfa2f1da2a88e9db2bf6c9d0bd03db5c2
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 16 Dec 2022 03:06:44 GMT
ETag: "18f5faa1b988cf3dd8da3e4948cbee300f4f8e16"
Last-Modified: Mon, 12 Dec 2022 03:06:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 375
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a04639fb0b31-OSL
counter.yadro.ru/hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529
88.212.201.198200 OK 109 B URL HTTP/1.1 counter.yadro.ru/hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 15\012- data
Hash e0eb1afd4c8e245f5d943e561b027fcf
2cb523b4922d5a873aad3631658983dd37ce5c0e
a948030ad93eae915a36f0abae793b30ec4771f7d41f1dd585f4dd8c859873e5
GET /hit;build2?t25.10;r;s1280*1024*24;uhttp%3A//ganjaplan.7fi.ru/viewtopic.php%3Fid%3D378;0.24909531786040529 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ganjaplan.7fi.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: image/gif
Content-Length: 109
Connection: keep-alive
Expires: Sat, 11 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
w.uptolike.com/widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.204200 OK 42 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (783)
Hash 36e31a5362200127257f343ad21c9f3e
f5b05b2a24ca19d756b4cecf0ec80b304a0c7d2a
2ff107bc4ae47641d278b80ed6fa1a75f0a6f84bcd8f9aa16be825e32aace97a
GET /widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Mon, 12 Dec 2022 04:43:12 GMT
Content-Encoding: gzip
push.services.mozilla.com/
35.161.26.194101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.26.194:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lcQQXVEqSRX6VeRjQdPxvA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eC3c3yKX4rLei1xcxaBOvioEyDE=
w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.204200 OK 4.4 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (585)
Hash 51f01f98377569bbbc324944b01bdbdf
916b5de4cc082a3ff9414c3a88542fc32c2ec89a
f5d5637c94689e5b58c9b3b0d9a18acc3a5ed5550f33ec9c86a3d3f25e16e7bb
GET /widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Mon, 12 Dec 2022 04:43:12 GMT
Content-Encoding: gzip
w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.204200 OK 624 B URL HTTP/1.1 w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (511)
Hash db0f291b1ee364d9de4ad30906fac72a
46ae53e00d5964e1fbd0d75c0483f4718db48e8e
9b2a1dadf125f7367489db7e4bd8c22b34ec3126220422467b0de51f0274f64d
GET /widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Mon, 12 Dec 2022 04:43:12 GMT
Content-Encoding: gzip
w.uptolike.com/widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyMTQ5NTMxMiUyMiUyQyUyMnVybCUyMiUzQSUyMmh0dHAlM0ElMkYlMkZnYW5qYXBsYW4uN2ZpLnJ1JTJGdmlld3RvcGljLnBocCUzRmlkJTNEMzc4JTIyJTdEJTVE&mode=0&callback=callback__utl_cb_share_1670818390675130
95.163.114.204200 OK 380 B URL HTTP/1.1 w.uptolike.com/widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyMTQ5NTMxMiUyMiUyQyUyMnVybCUyMiUzQSUyMmh0dHAlM0ElMkYlMkZnYW5qYXBsYW4uN2ZpLnJ1JTJGdmlld3RvcGljLnBocCUzRmlkJTNEMzc4JTIyJTdEJTVE&mode=0&callback=callback__utl_cb_share_1670818390675130
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (374)
Hash 8fc9598ba0d5a86ff0c4c67e078b04d1
a25e72b51485878b3e8040b1f1ca1dfc210de43b
d5cbd96293ddface1d667115606a0c3a490dae645e22c877d017bf5b9b5a987a
GET /widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyMTQ5NTMxMiUyMiUyQyUyMnVybCUyMiUzQSUyMmh0dHAlM0ElMkYlMkZnYW5qYXBsYW4uN2ZpLnJ1JTJGdmlld3RvcGljLnBocCUzRmlkJTNEMzc4JTIyJTdEJTVE&mode=0&callback=callback__utl_cb_share_1670818390675130 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 23 Nov 2022 19:31:36 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Encoding: gzip
w.uptolike.com/widgets/v1/imp?pid=1495312&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&vp=a8277a68-98eb-4079-ae96-e1143a96d6b6&ttl=JUQwJUJBJUQwJUIwJUQwJUJBJTIwJUQxJTgxJUQwJUI0JUQwJUI1JUQwJUJCJUQwJUIwJUQxJTgyJUQxJThDJTIwJUQxJTg3JUQxJTgyJUQwJUJFJUQwJUIxJUQxJThCJTIwJUQwJUJBJUQwJUJFJUQxJTgyJTIwJUQwJUJDJUQwJUI1JUQwJUJEJUQxJThGJTIwJUQxJTgyJUQxJTgwJUQwJUIwJUQxJTg1JUQwJUJEJUQxJTgzJUQwJUJC&rnd=0.7316232562772778
95.163.114.204204 No Content 0 B URL HTTP/1.1 w.uptolike.com/widgets/v1/imp?pid=1495312&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&vp=a8277a68-98eb-4079-ae96-e1143a96d6b6&ttl=JUQwJUJBJUQwJUIwJUQwJUJBJTIwJUQxJTgxJUQwJUI0JUQwJUI1JUQwJUJCJUQwJUIwJUQxJTgyJUQxJThDJTIwJUQxJTg3JUQxJTgyJUQwJUJFJUQwJUIxJUQxJThCJTIwJUQwJUJBJUQwJUJFJUQxJTgyJTIwJUQwJUJDJUQwJUI1JUQwJUJEJUQxJThGJTIwJUQxJTgyJUQxJTgwJUQwJUIwJUQxJTg1JUQwJUJEJUQxJTgzJUQwJUJC&rnd=0.7316232562772778
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v1/imp?pid=1495312&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&vp=a8277a68-98eb-4079-ae96-e1143a96d6b6&ttl=JUQwJUJBJUQwJUIwJUQwJUJBJTIwJUQxJTgxJUQwJUI0JUQwJUI1JUQwJUJCJUQwJUIwJUQxJTgyJUQxJThDJTIwJUQxJTg3JUQxJTgyJUQwJUJFJUQwJUIxJUQxJThCJTIwJUQwJUJBJUQwJUJFJUQxJTgyJTIwJUQwJUJDJUQwJUI1JUQwJUJEJUQxJThGJTIwJUQxJTgyJUQxJTgwJUQwJUIwJUQxJTg1JUQwJUJEJUQxJTgzJUQwJUJC&rnd=0.7316232562772778 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
w.uptolike.com/static/buttons/fonts/icomoon.woff?qq11232333=1232131231321
95.163.114.204200 OK 9.1 kB URL HTTP/1.1 w.uptolike.com/static/buttons/fonts/icomoon.woff?qq11232333=1232131231321
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type Web Open Font Format, TrueType, length 9144, version 0.0\012- data
Hash 2596eafba8821cbd54fb4c4294eea5f2
53046bf3bccd35a24e515fcfbd34b31ec27c841e
3f72dc1fd03fba15c9200144bf1df7286ad1e2560b50a5ecc12e68c9c1e36f29
GET /static/buttons/fonts/icomoon.woff?qq11232333=1232131231321 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: font/woff
Content-Length: 9144
Connection: keep-alive
Last-Modified: Wed, 16 Aug 2017 14:30:13 GMT
ETag: "599456f5-23b8"
Expires: Tue, 16 May 2023 07:57:03 GMT
Cache-Control: max-age=15552000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
w.uptolike.com/widgets/v1/extra.js?rnd=0.9545379129807002
95.163.114.204200 OK 1.9 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/extra.js?rnd=0.9545379129807002
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (695)
Hash 72d7a736132c48fe8522fdc8942e7405
901498c42b44b12c64c92f095a2822c5827f9454
9c29f92e8c323368230f0d2b16aa8d03544eb2eca99b8414d05151dec7263092
GET /widgets/v1/extra.js?rnd=0.9545379129807002 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 23 Nov 2022 19:31:36 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29930654352; Expires=Wed, 11 Dec 2024 04:13:12 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="; Expires=Wed, 11 Dec 2024 04:13:12 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
mc.yandex.ru/metrika/watch.js
87.250.251.119302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
mc.yandex.ru/watch/201230?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2)
87.250.251.119302 Found 503 B URL HTTP/2 mc.yandex.ru/watch/201230?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2)
IP 87.250.251.119:0
Hash 3ea3ecff4ff9d42c34e21b9fdcf5c3d3
1f7668039f03a355c2a914e8b987adef9e1a47db
e333c61728acacf4cbc33b51138bfecf49776b88bc2e2511c7b368e067005688
GET /watch/201230?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/201230/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
date: Mon, 12 Dec 2022 04:13:12 GMT
access-control-allow-origin: http://ganjaplan.7fi.ru
set-cookie: yabs-sid=2655067501670818392; Path=/; SameSite=None; Secure
i=/mHxBOoFiGjuVN3F26SBi90xIQZkofiux3N+W9xXLYFeZm8EMSriqt/djjarVeiERjiARMzCZItR0pKWsFcsvYmiCVI=; Expires=Thu, 09-Dec-2032 04:13:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7324752971670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7324752971670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702354392.yc.1670818392#1702354392.yrts.1670818392#1702354392.yrtsi.1670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:12 GMT
last-modified: Mon, 12-Dec-2022 04:13:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a51def2d2d23f100d8b808b3d57362c9
a981bf2683fda8edb2b49e3fcec50c6ced73927c
dc0994ff3be07e5d45fd2c1ea5e163de734c79667a9b828fdccd1465fa5b1097
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC0994FF3BE07E5D45FD2C1EA5E163DE734C79667A9B828FDCCD1465FA5B1097"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4990
Expires: Mon, 12 Dec 2022 05:36:22 GMT
Date: Mon, 12 Dec 2022 04:13:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4fbd1bbbd21398b2ee21e2dd5679e5b5
fb26a5dc3f674528a1bf5481993c40a5890e34f6
06eac640c89ee8eade761411190d6546d8697bf86d12350512f641e4038b1c83
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06EAC640C89EE8EADE761411190D6546D8697BF86D12350512F641E4038B1C83"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Mon, 12 Dec 2022 07:17:16 GMT
Date: Mon, 12 Dec 2022 04:13:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cbcef59e525003a71dac18f7ff668fa1
ec2cf38f0c2471ed02ec9bb9406adbf1f2f35a5e
e683b23d2406655c7fa0aff02010a1987b17d3bd4c357acc8e0f96e68ec962ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E683B23D2406655C7FA0AFF02010A1987B17D3BD4C357ACC8E0F96E68EC962AD"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5035
Expires: Mon, 12 Dec 2022 05:37:07 GMT
Date: Mon, 12 Dec 2022 04:13:12 GMT
Connection: keep-alive
supraneet.ru/minus/
62.109.6.15200 OK 0 B IP 62.109.6.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /minus/ HTTP/1.1
Host: supraneet.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.13.12
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Monday, 12-Dec-2022 04:13:12 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
af.click.ru/collect_stat.js
217.197.112.80200 OK 913 B URL HTTP/1.1 af.click.ru/collect_stat.js
IP 217.197.112.80:0
ASN #20655 e-Style ISP LLC
Hash 9531806d16d72f9659eaab01bd09689b
7640f092c2b928c614bb46251477a3c80b3e820b
a01ed62761c70d35a7f2dd5f497451e70b85e85bb8f1774cee68d53554e6ecaa
GET /collect_stat.js HTTP/1.1
Host: af.click.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript
Content-Length: 913
Last-Modified: Fri, 18 Nov 2022 09:50:15 GMT
Connection: keep-alive
ETag: "63775557-391"
Accept-Ranges: bytes
cntrsync.ru/alt.js
92.63.102.100200 OK 0 B IP 92.63.102.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /alt.js HTTP/1.1
Host: cntrsync.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.13.12
Date: Mon, 12 Dec 2022 04:13:12 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Monday, 12-Dec-2022 04:13:12 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
mc.yandex.ru/metrika/watch.js
87.250.251.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (888)
Hash 229a79926d4a66881f6257edc84a22dd
e349b15ae1ef8f4ab36d4cf62440709e049af9d9
0ce5753fde92e8e9de5ee34817c73f477653aaa4e793e9087ed8d4dd7e785661
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ganjaplan.7fi.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58084
date: Mon, 12 Dec 2022 04:13:12 GMT
access-control-allow-origin: *
etag: "6392ed22-e2e4"
expires: Mon, 12 Dec 2022 05:13:12 GMT
last-modified: Fri, 09 Dec 2022 11:09:06 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/201230/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
87.250.251.119200 OK 416 B URL HTTP/2 mc.yandex.ru/watch/201230/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (416), with no line terminators
Hash 6c46c64ae0f97bda11ca3098d5ca7f45
d3a87ddfb63f263b9b8220d179774072205eb0c6
cb1861c68a54e65f0e5eb02e2efa5d89182336652018cd6cb93309633c46b022
GET /watch/201230/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A2%3Adp%3A0%3Als%3A338872442671%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041310%3Aet%3A1670818390%3Ac%3A1%3Arn%3A1013379528%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818390%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ganjaplan.7fi.ru
Referer: http://ganjaplan.7fi.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 416
date: Mon, 12 Dec 2022 04:13:12 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ganjaplan.7fi.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:12 GMT
last-modified: Mon, 12-Dec-2022 04:13:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
87.250.251.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash f51d5272a4b87544907966c0253941f6
532bfeece772131ab20b271ea8c06f2a1860291e
db431bc36e9911051546b59cb34a52ff98da1f24c57e4a8d8259f093adacae91
GET /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ganjaplan.7fi.ru
Referer: http://ganjaplan.7fi.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Mon, 12 Dec 2022 04:13:12 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ganjaplan.7fi.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:12 GMT
last-modified: Mon, 12-Dec-2022 04:13:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Mon, 12 Dec 2022 06:22:39 GMT
Date: Mon, 12 Dec 2022 04:13:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Mon, 12 Dec 2022 06:22:39 GMT
Date: Mon, 12 Dec 2022 04:13:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Mon, 12 Dec 2022 06:22:39 GMT
Date: Mon, 12 Dec 2022 04:13:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c9bdec4-23b4-47d9-b623-556f664c1757.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c9bdec4-23b4-47d9-b623-556f664c1757.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 21eb88f40afd0bb66fdf8413994ef404
d6d6804120d4c8a7f33425ce99cc7801286a39c8
78340bbac6950c4f7006182b173a0a0b93518412c65a4192d9977ffb92250f20
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c9bdec4-23b4-47d9-b623-556f664c1757.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7304
x-amzn-requestid: 5ec21e2f-1a2f-4198-b56f-ee3890d3cd87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEJHHppoAMF9YA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d6d-0b5121b00eabc19a1adad514;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:36:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Kj4J1IQHwqdJWUFSCPPAqgnYl4tZv60HvKBRB9Ce_dG2uXScEdF6ug==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:01:59 GMT
etag: "d6d6804120d4c8a7f33425ce99cc7801286a39c8"
content-type: image/jpeg
age: 22274
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e259f6cfee2d6c0e6ed8f96667e49d29
e82afaa50d42a9f4f90681c20dfa4b6b0fbf0203
b7c94aa74cbb7477541aee3382a8754b2ece20f647366aab6743fddac2cfbb8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: 6fe7f356-3243-4bd0-b3b4-6a372b0b50be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD7RGx2IAMFk8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d14-0313b6d539d75742114dab10;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:35:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xVD9tE77stQz0W8-59L1GvXaziDHQce7zswS48xfDK9P5m0AXXSjZA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:55:27 GMT
age: 22666
etag: "e82afaa50d42a9f4f90681c20dfa4b6b0fbf0203"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
age: 22534
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4418c2ea-4d6b-42e4-b986-77cd48499c65.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4418c2ea-4d6b-42e4-b986-77cd48499c65.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 665db2974528174adf4da45c9e4b15c5
bc5da80d2b23ecd8cb1dc0f343cd70cac5229f93
6ac19de84424ab4d05b265c486d04e060b961c5acc566265d63639e8f3e9bac3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4418c2ea-4d6b-42e4-b986-77cd48499c65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8894
x-amzn-requestid: 6c1e691c-7512-45af-a72f-640c769e4e18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuHSGoAMFdJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-57aef859427d9cca66bb2799;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WarTF-L4qx_MgfnGaoVBnOe4PIKxCRjqgWdVg0ZhEeMsEaxMNBMDRg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "bc5da80d2b23ecd8cb1dc0f343cd70cac5229f93"
content-type: image/jpeg
age: 22534
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde328206-b913-49f3-9a85-6ccf3ddb1dee.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde328206-b913-49f3-9a85-6ccf3ddb1dee.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03a041f97f828bf7e3cb9af23202d164
66360922920cdf1a9412930d5fd0339fe4845b6d
63f96ad2555a107107efcade18fdeb4cc9f2aaf65650c6945b300a9ff41f6655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde328206-b913-49f3-9a85-6ccf3ddb1dee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5979
x-amzn-requestid: 929d1f96-64db-4280-8b90-852246063c37
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD33GQJIAMF4Ng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cfe-79604f955b788ac9319e2e3e;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lkyT46jQIc9ZPYgCyWS2l5HBQIIHqSlJ4Lu3DrOQHf-JbrSK_zQ6_g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:55:12 GMT
age: 22681
etag: "66360922920cdf1a9412930d5fd0339fe4845b6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
34.120.237.76200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86bce3d677c0dd541440ebf38920020d
f11e21b6ad97e07b1d7103ad40a2e158e06fda73
9e23bc16cd1402d9124ebb9e625a5580f677ca9e008d3e04dc95080072fd1df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b1117224-be51-4e21-8b3b-01e5485f0af0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD2yH4loAMFuWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cf8-1382e1a6710239ec629eedb8;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A--8wjYJWCj_JD6eaj3FoD0dLarj6gvH2uQrmsEDLgPwZdQgtUmaoA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "f11e21b6ad97e07b1d7103ad40a2e158e06fda73"
content-type: image/jpeg
age: 22534
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/zp/support.html
95.163.114.204200 OK 3.8 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/zp/support.html
IP 95.163.114.204:0
ASN #12695 LLC Digital Network
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a4af8c67ad0a2a6f681a742faca4463e
50794dee2e25cb8ec2187256750e00dc3231faa7
10ace92ddcb397879ff3569155caf7c3e28c3b4ee8c35eaddb48af927520ecf5
GET /widgets/v1/zp/support.html HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Cookie: utl_id2=29930654352; utl_dat="CMrOpaTQMBAAIMqf8KzQMCjKn/Cs0DAwAK+SvUAqXXDiw7+ShG0PUU0="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Mon, 12 Dec 2022 04:43:13 GMT
Content-Encoding: gzip
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash ab2bac12c9b36bc83bcd336570673b07
0479dc93c9e0d5b8ea769b7f0634467de1abdf73
dc68d26b6cfc3197910f4e83f4e6bf81d51f4cdb2ad12aa24b61057584c45b3f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 16 Dec 2022 00:53:54 GMT
ETag: "0479dc93c9e0d5b8ea769b7f0634467de1abdf73"
Last-Modified: Mon, 12 Dec 2022 00:53:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2439
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0505c4d1bfa-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash ab2bac12c9b36bc83bcd336570673b07
0479dc93c9e0d5b8ea769b7f0634467de1abdf73
dc68d26b6cfc3197910f4e83f4e6bf81d51f4cdb2ad12aa24b61057584c45b3f
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 16 Dec 2022 00:53:54 GMT
ETag: "0479dc93c9e0d5b8ea769b7f0634467de1abdf73"
Last-Modified: Mon, 12 Dec 2022 00:53:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2439
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0505bdeb4ed-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash c2863f09b8e4e00161fa021bf0526824
a430e3ddb60d489dca22d7644ddc53e084ee3038
fb497e890bb62e014ec368212fdf07c7de0f179d030edcc7d5091600069c45d8
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 16 Dec 2022 03:28:57 GMT
ETag: "a430e3ddb60d489dca22d7644ddc53e084ee3038"
Last-Modified: Mon, 12 Dec 2022 03:28:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1810
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0510c1c0b31-OSL
vk.com/share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dvk&callback=callback__utl_cb_share_1670818391801882
87.240.137.164200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dvk&callback=callback__utl_cb_share_1670818391801882
IP 87.240.137.164:0
File type ASCII text, with no line terminators
Hash 6de86497641c67868bfddcbf5a8bf434
6065bb53c9addbda818a6b172597326ebc31e8dc
51d446e1b704e289975e53c6945dee986d432bb439d02a2afcee7ce1b5bddcf8
GET /share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dvk&callback=callback__utl_cb_share_1670818391801882 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 12 Dec 2022 04:13:13 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112829
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Mon, 11 Dec 2023 09:01:34 GMT; path=/; domain=.vk.com
remixstlid=9117484075315992901_m3e8OzyOCx9aegx4w16V0hEfB7CVx4oDR68ZtRiclrw; expires=Tue, 12 Dec 2023 04:13:13 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 3c24ec85f13bf2349d1492723476cb37
5a371eceaab9436c44b6f7c37bf2129655f0fca7
369f9e3a2860104466de5b672b26a3609db3ada4f460ced97d6c330f1a961428
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 16 Dec 2022 01:59:04 GMT
ETag: "5a371eceaab9436c44b6f7c37bf2129655f0fca7"
Last-Modified: Mon, 12 Dec 2022 01:59:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2423
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0516c1bb4ed-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 3c24ec85f13bf2349d1492723476cb37
5a371eceaab9436c44b6f7c37bf2129655f0fca7
369f9e3a2860104466de5b672b26a3609db3ada4f460ced97d6c330f1a961428
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 16 Dec 2022 01:59:04 GMT
ETag: "5a371eceaab9436c44b6f7c37bf2129655f0fca7"
Last-Modified: Mon, 12 Dec 2022 01:59:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2423
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7783a0516c1eb4ed-OSL
vk.com/share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391801484
87.240.137.164200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391801484
IP 87.240.137.164:0
File type ASCII text, with no line terminators
Hash 6de86497641c67868bfddcbf5a8bf434
6065bb53c9addbda818a6b172597326ebc31e8dc
51d446e1b704e289975e53c6945dee986d432bb439d02a2afcee7ce1b5bddcf8
GET /share.php?act=count&format=json&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391801484 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 12 Dec 2022 04:13:13 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112829
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sat, 16 Dec 2023 12:34:41 GMT; path=/; domain=.vk.com
remixstlid=9100032626759958628_ktLDZ9muhbIhDF0P1wUyjlMYrscOI69mETLcYIuIazc; expires=Tue, 12 Dec 2023 04:13:13 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
connect.mail.ru/share_count?func=mrc__shareInit279&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_167081839180326
94.100.180.55200 OK 102 B URL HTTP/1.1 connect.mail.ru/share_count?func=mrc__shareInit279&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_167081839180326
IP 94.100.180.55:0
Hash 8987ea3c9acf82e440c6db3776c9302c
43dd05a99f7b23795fa7bfb9a0cc19c55e16bf51
1004c38f69d1f08c0b7a23faebac6e7b4c867a67f30d5976fed7ac79f7b3d8fa
GET /share_count?func=mrc__shareInit279&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_167081839180326 HTTP/1.1
Host: connect.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: text/javascript; charset=UTF-8
Content-Length: 102
Connection: keep-alive
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://cspreport.mail.ru/xxssprotection
X-WebKit-CSP-Report-Only: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript:
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, no-store, must-revalidate, private
connect.mail.ru/share_count?func=mrc__shareInit134&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dmr&callback=callback__utl_cb_share_1670818391803517
94.100.180.55200 OK 112 B URL HTTP/1.1 connect.mail.ru/share_count?func=mrc__shareInit134&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dmr&callback=callback__utl_cb_share_1670818391803517
IP 94.100.180.55:0
Hash 178a34f53580caa4387faef59b393b80
b3af0404cf541dcdf0829778ca8be1e98dd77ae1
d24c9e7ab97588be46ee9daed63d510339ffe5a522b0036c5dce77bd737c975b
GET /share_count?func=mrc__shareInit134&url_list=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dmr&callback=callback__utl_cb_share_1670818391803517 HTTP/1.1
Host: connect.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 04:13:13 GMT
Content-Type: text/javascript; charset=UTF-8
Content-Length: 112
Connection: keep-alive
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://cspreport.mail.ru/xxssprotection
X-WebKit-CSP-Report-Only: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https://* data: ; frame-src https://* about: javascript:
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, no-store, must-revalidate, private
api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dps&callback=callback__utl_cb_share_1670818391802373
23.38.200.197200 OK 115 B URL HTTP/2 api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dps&callback=callback__utl_cb_share_1670818391802373
IP 23.38.200.197:0
File type ASCII text, with no line terminators
Hash 00ee3ac108f26c136987a0fa03df8675
92e48661469bc40c926ccd19b048274cde4ceee4
0c9934cd6ecb05e74b2ffd5a5a6363e22f6885bcaecc7d5255148b9fb3c460de
GET /v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dps&callback=callback__utl_cb_share_1670818391802373 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-length: 115
expires: Mon, 12 Dec 2022 04:28:13 GMT
x-envoy-upstream-service-time: 144
cache-control: no-cache, no-store, must-revalidate
x-pinterest-rid: 7590811896398202
date: Mon, 12 Dec 2022 04:13:13 GMT
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
akamai-grn: 0.274f2417.1670818393.ee917ab0
x-cdn: akamai
X-Firefox-Spdy: h2
api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391802990
23.38.200.197200 OK 105 B URL HTTP/2 api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391802990
IP 23.38.200.197:0
File type ASCII text, with no line terminators
Hash 8043a13148104127404d68971400e06a
af43b7e9569d7fdb0aee6174f39fac0186b7407a
ee3a88871e755138f3a8441b208d82a02faef640f5d9bd13c7f9d899cb211525
GET /v1/urls/count.json?&url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391802990 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-length: 105
expires: Mon, 12 Dec 2022 04:28:14 GMT
x-envoy-upstream-service-time: 2
cache-control: no-cache, no-store, must-revalidate
x-pinterest-rid: 9968426982978397
date: Mon, 12 Dec 2022 04:13:14 GMT
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
akamai-grn: 0.274f2417.1670818393.ee917aa4
x-cdn: akamai
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/59396?wv-check=19689&wv-type=0&wmode=0&wv-part=1&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=528391899&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/59396?wv-check=19689&wv-type=0&wmode=0&wv-part=1&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=528391899&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/59396?wv-check=19689&wv-type=0&wmode=0&wv-part=1&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=528391899&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 48
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 04:13:19 GMT
access-control-allow-origin: http://ganjaplan.7fi.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:19 GMT
last-modified: Mon, 12-Dec-2022 04:13:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/59396?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=850795353&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2)
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/59396?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=850795353&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/59396?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=900297958&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&rn=850795353&browser-info=et%3A1670818398%3Aw%3A1268x939%3Av%3A943%3Az%3A0%3Ai%3A20221212041317%3Au%3A1670818390714344753%3Avf%3Ajaghkvs77dh9tvchj66zn%3Ast%3A1670818398&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 04:13:19 GMT
access-control-allow-origin: http://ganjaplan.7fi.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:19 GMT
last-modified: Mon, 12-Dec-2022 04:13:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.smntq.com/c83ul/smart.js
95.217.109.66200 OK 0 B URL HTTP/2 cdn.smntq.com/c83ul/smart.js
IP 95.217.109.66:0
ASN #24940 Hetzner Online GmbH
GET /c83ul/smart.js HTTP/1.1
Host: cdn.smntq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 12 Dec 2022 04:13:12 GMT
content-type: text/javascript;charset=UTF-8
set-cookie: smart=c554928d2ea7488d84297478062486b6; expires=Sat, 15-Jan-2028 04:13:12 GMT; Max-Age=160704000; path=/; SameSite=None; Secure; domain=cdn.smntq.com
mode: no-cors
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, x-compress, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2)
87.250.251.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2)
IP 87.250.251.119:0
GET /watch/23414332?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ganjaplan.7fi.ru
Connection: keep-alive
Referer: http://ganjaplan.7fi.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&charset=utf-8&browser-info=pv%3A1%3Avf%3A75hb7wgiaos0bcg3ctw4j%3Afp%3A682%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A942%3Acn%3A3%3Adp%3A0%3Als%3A154718558481%3Ahid%3A900297958%3Az%3A0%3Ai%3A20221212041311%3Aet%3A1670818391%3Ac%3A1%3Arn%3A957108441%3Arqn%3A1%3Au%3A1670818390714344753%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C29%2C114%2C42%2C-6%2C0%2C%2C463%2C13%2C%2C%2C%2C759%3Aco%3A0%3Aeu%3A1%3Ans%3A1670818388944%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670818391%3At%3A%D0%BA%D0%B0%D0%BA%20%D1%81%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D0%BA%D0%BE%D1%82%20%D0%BC%D0%B5%D0%BD%D1%8F%20%D1%82%D1%80%D0%B0%D1%85%D0%BD%D1%83%D0%BB&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29ti%282%29
date: Mon, 12 Dec 2022 04:13:12 GMT
access-control-allow-origin: http://ganjaplan.7fi.ru
set-cookie: yabs-sid=289123571670818392; Path=/; SameSite=None; Secure
i=+nD7mxw87I2UoeTdrGj6O54K8A5yB5NOLj7JUCg3y15d9BmQxuS/Q8AK+WjRMs7db9xLhDrhOLodMcMN8Gm0ZR5ADTA=; Expires=Thu, 09-Dec-2032 04:12:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1799576871670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1799576871670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702354392.yc.1670818392#1702354392.yrts.1670818392#1702354392.yrtsi.1670818392; Expires=Tue, 12-Dec-2023 04:13:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 04:13:12 GMT
last-modified: Mon, 12-Dec-2022 04:13:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dok&callback=callback__utl_cb_share_1670818391800711
217.20.152.207200 OK 0 B URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dok&callback=callback__utl_cb_share_1670818391800711
IP 217.20.152.207:0
GET /dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378%26_utl_t%3Dok&callback=callback__utl_cb_share_1670818391800711 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 12 Dec 2022 04:13:13 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=1756041642988509843; Domain=.ok.ru; Expires=Sat, 30-Dec-2090 07:27:20 GMT; Path=/; Secure; HttpOnly
_statid=3452dcb2-fa0f-4202-a74f-9ba028467d17; Domain=.ok.ru; Expires=Sat, 30-Dec-2090 07:27:20 GMT; Path=/; Secure; HttpOnly
landref=w.uptolike.com; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391800557
217.20.152.207200 OK 0 B URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391800557
IP 217.20.152.207:0
GET /dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fganjaplan.7fi.ru%2Fviewtopic.php%3Fid%3D378&callback=callback__utl_cb_share_1670818391800557 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 12 Dec 2022 04:13:13 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=313698221959261224; Domain=.ok.ru; Expires=Sat, 30-Dec-2090 07:27:20 GMT; Path=/; Secure; HttpOnly
_statid=8f4e5259-570f-4eb5-bd07-751920bc7776; Domain=.ok.ru; Expires=Sat, 30-Dec-2090 07:27:20 GMT; Path=/; Secure; HttpOnly
landref=w.uptolike.com; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2