bavaria35.ru/
200 OK 13 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1117), with CRLF line terminators
Hash f23e3065f87d126f970be99c553c1458
2655473fccd8e7b872e437a75a547390bf615c96
32d4a6f4d25f14b8c3756b0cbf18516cfb73347d43bc4599be11e074beaa047d
GET / HTTP/1.1
Host: bavaria35.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZxqHysfL9UVy0W6oVv%2FM%2FlynZC8DsbCeZ%2F5nLwPBa4GNccYvvTbmYDXLX2KG9NRDjTn3%2BZJzYykc6qioYAg2iTDf8xDz%2FoXWIxS1%2B1RmCoJlVD435WOSHHfg5GNSrK8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77cc26891ee0b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bbea1550fedd5eb9c265712fab75b137
2c2f981747898a380265f766345f2bb9c8c983fd
c728286e38c31a4d3f7a39702e0a5f69c14bf69e01a88bc4479714953fbda278
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C728286E38C31A4D3F7A39702E0A5F69C14BF69E01A88BC4479714953FBDA278"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3373
Expires: Wed, 21 Dec 2022 00:23:59 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 04c14564c7083355371e41c5a09acada
ea488e34661be5420c798c7e26f193b4dee7bb37
d7e5c37d8e6cbed236670d050f84f288539642f7a41a54b0abd39357f7c42232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7E5C37D8E6CBED236670D050F84F288539642F7A41A54B0ABD39357F7C42232"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11767
Expires: Wed, 21 Dec 2022 02:43:53 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 20 Dec 2022 22:45:50 GMT
content-type: application/json
age: 2516
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cf03270e3476f7482a2cc7ddc6a9e857
ab70d5ee87b01e0601f8e518bf36f97c8ceeba9a
43a4e796860a1481636dac103488cadc68c261d13cfe835d273efc368e569f97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43A4E796860A1481636DAC103488CADC68C261D13CFE835D273EFC368E569F97"
Last-Modified: Sun, 18 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3394
Expires: Wed, 21 Dec 2022 00:24:20 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zU/4bZ1LqJc0OeZbe5RisIypIDcyoQVGSSnqBnQhMyhxEkdpYDwZbc5QRktIMuJR3Ot+ZNjNWNA=
x-amz-request-id: ZA86G4ENP5R0TPZ8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 20 Dec 2022 22:29:37 GMT
age: 3489
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 23:27:46 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1f0136396c7d6778473ac1f70dad77d
4b293f160beb849a8c5230fa3d9dc1c9d1742787
3e9770ea0d67d557da693b5134336fb27dc6522e5ac3cabebd747fe3ab95e66d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E9770EA0D67D557DA693B5134336FB27DC6522E5AC3CABEBD747FE3AB95E66D"
Last-Modified: Mon, 19 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7250
Expires: Wed, 21 Dec 2022 01:28:36 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
bavaria35.ru/style.min.css
200 OK 1.4 kB URL HTTP/1.1 bavaria35.ru/style.min.css
IP
File type ASCII text, with very long lines (4794)
Hash 763611d9ff56003ebd843781570ebd7e
bf9f5d4cdb6f8c62acafeb5d961416d50e1916a3
ed95f8946d3c8badc5e0c2cd254751a852bc251477863856ceb8124ef360ddf2
GET /style.min.css HTTP/1.1
Host: bavaria35.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bavaria35.ru/
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 14 Oct 2022 00:42:40 GMT
ETag: W/"6348b080-12bb"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P01%2F8qJEwZZKCKPISiOORGwnBJUJJ1CMam0Mqc6YjvNnvThkG%2BpYPI2vbYaKhhXMR335sieiPaAqNjb5d9bgXpqI8RMFwVWNEoBdTwJWVDWLsPazJHHjU0ZJk7E0SVk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cc268b491cb4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd5dcc19ad887a983d93503509fbe8e1
2a5480d2428547c221a9bd79289252cc7caf0259
e688f00ea9f6e5742554156c905a6c54878610d5acf807dc91cb2deed7b76eb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash c3b3b721f2c0866e75e3d2ddbec9e06e
56fa9b173b68910445efc8489f06297f8dfd1554
3fa82ed5c33aed6de3156053769dd010829be0f0f18176f23ec46f51f74b05b1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 08:58:34 GMT
Expires: Mon, 26 Dec 2022 08:58:33 GMT
Etag: "56fa9b173b68910445efc8489f06297f8dfd1554"
Cache-Control: max-age=465646,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77cc268c8f8bb512-OSL
power-seeds.com.ua/image/cache/catalog/image/catalog/pawerseeds/auto-ak-47-pawer-seeds.webp
200 OK 175 kB URL HTTP/2 power-seeds.com.ua/image/cache/catalog/image/catalog/pawerseeds/auto-ak-47-pawer-seeds.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1416x2465, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 175 kB (175322 bytes)
Hash 0a11011b94ec7f4bc7a1ea299db9cc08
8646319486aee4d581dbc983e0be81b5c0629023
cc4a8a39dd4852ef66d371da32751821f644084f110292e5e55455aab1a233ed
GET /image/cache/catalog/image/catalog/pawerseeds/auto-ak-47-pawer-seeds.webp HTTP/1.1
Host: power-seeds.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 27 Dec 2022 23:27:46 GMT
content-type: image/webp
last-modified: Mon, 19 Dec 2022 15:59:18 GMT
accept-ranges: bytes
content-length: 175322
date: Tue, 20 Dec 2022 23:27:46 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
jahforum.net/uploads/monthly_2018_12/cannabis-plant.jpg.cd71bf02e5e82c2db9beed21d4bde559.jpg
200 OK 12 kB URL HTTP/2 jahforum.net/uploads/monthly_2018_12/cannabis-plant.jpg.cd71bf02e5e82c2db9beed21d4bde559.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 700x400, components 3\012- data
Hash edd9ae858a024b5dd7de7293b4ba79df
29f27086889aeecea7d02980bcea4c4df6decdcb
3a43eb97f2791f796a8218216d80974fd583396ba43dcbae78fe3d258c214b2e
GET /uploads/monthly_2018_12/cannabis-plant.jpg.cd71bf02e5e82c2db9beed21d4bde559.jpg HTTP/1.1
Host: jahforum.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 23:27:46 GMT
content-type: image/jpeg
content-length: 12175
last-modified: Fri, 21 Dec 2018 11:09:45 GMT
etag: "5c1cc9f9-2f8f"
x-powered-by: PleskLin
cache-control: max-age=2678400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tRywT7EXjEYu5EEYQ32XqGgBy6MspQwFS8%2FSgO%2FEulxhYP49qoYe%2B9qrIHXiXOMn%2FEMY3YdHjYYxuzjUfcpeiECzmf29y7kGL8tecmgS2yaaqFqwOs0%2BYnQpJMqc4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cc268c29e4b4f4-OSL
X-Firefox-Spdy: h2
img.freepik.com/premium-photo/beautiful-girl-with-hemp-leaves-near-the-face-woman-with-hemp_170532-330.jpg
200 OK 37 kB URL HTTP/2 img.freepik.com/premium-photo/beautiful-girl-with-hemp-leaves-near-the-face-woman-with-hemp_170532-330.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 417x626, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 458c70488beeff124a5cb17099295628
03a88f41796a1283e700dbb14c773735576b95d2
3fd0c9a6d95b892a465c20f4ea876f19820e6357825f0885ba5693f4989872b7
GET /premium-photo/beautiful-girl-with-hemp-leaves-near-the-face-woman-with-hemp_170532-330.jpg HTTP/1.1
Host: img.freepik.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "573f235226530f8384f765615343c340"
last-modified: Mon, 24 Oct 2022 23:31:59 GMT
content-length: 36822
content-type: image/webp
cache-control: private, no-transform, max-age=604800
expires: Tue, 27 Dec 2022 23:27:46 GMT
date: Tue, 20 Dec 2022 23:27:46 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=226
X-Firefox-Spdy: h2
i.ytimg.com/vi/1By1oZo4mZs/maxresdefault.jpg
200 OK 154 kB URL HTTP/2 i.ytimg.com/vi/1By1oZo4mZs/maxresdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 154 kB (153998 bytes)
Hash 2dbf14da5e2b221e5fbaea506e318b53
99cd1ed1320ff74d197d02d8adbe92614b13dbc2
4b5f19d984ce6deb7c549e7b0867b168979150d591245733bfdfcd657f5a7d06
GET /vi/1By1oZo4mZs/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 153998
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 23:27:46 GMT
expires: Wed, 21 Dec 2022 01:27:46 GMT
cache-control: public, max-age=7200
etag: "1580888650"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 83c9f3f5556ab5897fd8b9e19d0e0dd2
071aef14867bdd498babd011b4c000b410070a11
31bb940f8c15eeecca4e3e03f2d539c89ec92f951d285b711fff4434585bb777
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:46 GMT
Server: ECS (amb/6BA4)
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929bcc117b41dc9ee4aa1f0c3d391e95
904ebca36cf581235410eb7480899296e8522f11
8aa33c4d47d01cec3cb526b605e506bdc2f344a6664dc7ddd5c3ab69b73c15e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8AA33C4D47D01CEC3CB526B605E506BDC2F344A6664DC7DDD5C3AB69B73C15E1"
Last-Modified: Tue, 20 Dec 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21568
Expires: Wed, 21 Dec 2022 05:27:14 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 3cc5b2c1ceb065ca65fb1a260c52f1bd
e6200deaa44d625453f45f34bd590976be8c580d
a52afc4cfbff681425e57619c1eaa5ff5fe62887959af91074cdab68fd75ddb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=165080
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:46 GMT
Etag: "63a226ca-117"
Expires: Thu, 22 Dec 2022 21:19:06 GMT
Last-Modified: Tue, 20 Dec 2022 21:19:06 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9d5518b05926e5fc608ad00c4abf3e01
273178a68589773d7c28a2360e64685937a5caa6
c0401c937edee3f05e3e41ab2b09af061962bcfa8471f2d0a0d91c3fe732843d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
growpro.ua/upload/images/picture-e1520153896582.jpg
200 OK 208 kB URL HTTP/2 growpro.ua/upload/images/picture-e1520153896582.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1584x1008, components 3\012- data
Size 208 kB (207917 bytes)
Hash 91e9a21c43dc8c981b77912ad7d64da8
04e1a1174d7743e6464ee0b21cbf9e9b09fe9fce
c19059729a88d0e6a900a9f260a6ec448d667d40f5ef1522022ca5133fcbd0ca
GET /upload/images/picture-e1520153896582.jpg HTTP/1.1
Host: growpro.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 23:27:46 GMT
content-type: image/jpeg
content-length: 207917
last-modified: Sun, 08 Sep 2019 09:17:22 GMT
etag: "5d74c722-32c2d"
expires: Sun, 01 Jan 2023 16:19:13 GMT
cache-control: max-age=2678400
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PFEV%2BwClGLF221TMIv6ExrJYwuM7DjLwx7reb3OYecaCvW%2FK5KmUXqqMmugNFqf%2BAdjomZgVB%2FMxlBER4fJVI46ccBu%2FadFpK4RQ3uaHoxS9FP%2FrCTKFp8Sr%2FDUT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cc268daf9ab523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cs12.pikabu.ru/post_img/big/2020/05/28/5/1590650984161738125.jpg
200 OK 64 kB URL HTTP/2 cs12.pikabu.ru/post_img/big/2020/05/28/5/1590650984161738125.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 950x500, components 3\012- data
Hash 6422abd551ee5ec3fb200800fe55036e
27357b31cdd20f38a231991a69dd70622f969ab7
9e0d1d36025b5ea7b1edfa086a7db388647325eaa4cbb263465bf48741ad51ba
GET /post_img/big/2020/05/28/5/1590650984161738125.jpg HTTP/1.1
Host: cs12.pikabu.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=ifEsqcgM4fYBg1uikW0j; Domain=.pikabu.ru; HttpOnly; Path=/; Expires=Wed, 20-Dec-2023 23:27:46 GMT
date: Tue, 20 Dec 2022 23:27:46 GMT
content-type: image/jpeg
content-length: 64466
last-modified: Thu, 28 May 2020 07:29:44 GMT
etag: "5ecf6868-fbd2"
expires: Tue, 27 Dec 2022 23:27:46 GMT
cache-control: max-age=604800
access-control-allow-origin: https://pikabu.ru
timing-allow-origin: https://pikabu.ru
access-control-allow-methods: GET, HEAD, OPTIONS
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
accept-ranges: bytes
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 454fe028f6a12ae4a6a0ec2399158da6
159a9627816c24553f1dba66754635a391632525
7c164baeb91fee78c932ad265137ee7b35470da1c7c154f46f74ffb3034e339d
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 24 Dec 2022 23:04:36 GMT
ETag: "159a9627816c24553f1dba66754635a391632525"
Last-Modified: Tue, 20 Dec 2022 23:04:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cc268cefc1b521-OSL
canna-seeds.com.ua/content/images/20/58987334162597.jpg
200 OK 66 kB URL HTTP/1.1 canna-seeds.com.ua/content/images/20/58987334162597.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 626x640, components 3\012- data
Hash 70669bc4b7cf706438b1c14d3ddef499
1213c99ab49cd7cc03bb9918b8cf5464aefb8671
93364bf40c895973b18568609d1e67540f78d16e12ff6edec8c8924a5380d23b
GET /content/images/20/58987334162597.jpg HTTP/1.1
Host: canna-seeds.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Tue, 20 Dec 2022 23:27:46 GMT
Content-Type: image/jpeg
Content-Length: 65987
Connection: keep-alive
Last-Modified: Wed, 15 May 2019 09:14:22 GMT
ETag: "101c3-588e9933690cc"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d7305ac0cf6df0499a2e2d4458c4d23
2d19ab395b39043d918bd2cd5ce82ce0be72fb4e
a91548463285986221408e24cc8033b560d14498b7fe64cf54bb666345b4f7ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A91548463285986221408E24CC8033B560D14498B7FE64CF54BB666345B4F7EE"
Last-Modified: Sun, 18 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21544
Expires: Wed, 21 Dec 2022 05:26:50 GMT
Date: Tue, 20 Dec 2022 23:27:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 737055f85379253f0b70dcd5f4fe525f
ef40bc0f1422d1c93ecb049824cc6f06a3edc234
a7e836ff8725961e41e63efb4f6b83b5c0849ce2999226259b8d118395276e71
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7E836FF8725961E41E63EFB4F6B83B5C0849CE2999226259B8D118395276E71"
Last-Modified: Tue, 20 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 21 Dec 2022 05:27:47 GMT
Date: Tue, 20 Dec 2022 23:27:47 GMT
Connection: keep-alive
st.depositphotos.com/1020618/4966/i/600/depositphotos_49661799-stock-photo-young-cannabis-plants.jpg
200 OK 27 kB URL HTTP/2 st.depositphotos.com/1020618/4966/i/600/depositphotos_49661799-stock-photo-young-cannabis-plants.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 75a79e0d6ed9d396941ac12b11b8f5fb
558bd78b3b78e99fc491ffb1224ef057c3a4d5ad
5a44dd24423ef2295af399b3c7ebcf0f8ca0dd9225dc03400ec3b7d54416575e
GET /1020618/4966/i/600/depositphotos_49661799-stock-photo-young-cannabis-plants.jpg HTTP/1.1
Host: st.depositphotos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 26658
last-modified: Tue, 15 Jul 2014 21:16:20 GMT
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=61201679
expires: Thu, 28 Nov 2024 07:55:46 GMT
date: Tue, 20 Dec 2022 23:27:47 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ba76977ac6e1ff4cba7f51adfd0918cb
41b4503d0cc7dc22d28ca6b584e845bbde9ab262
e2b5507629112ebc28c416f9413df3e08c2905fc5f523d5811ca3953eb8a6405
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E2B5507629112EBC28C416F9413DF3E08C2905FC5F523D5811CA3953EB8A6405"
Last-Modified: Tue, 20 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1341
Expires: Tue, 20 Dec 2022 23:50:08 GMT
Date: Tue, 20 Dec 2022 23:27:47 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 34555d5f8ed42d7ea24e2ba47ebb3a33
b4b51d8a88d0d327d0df544b07bcada1253dbcc5
55fdbe775ee38bd349248557009af6e73e97f63c8651c8a1ef3bc6c0067cfa1f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=121151
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:46 GMT
Etag: "63a17b31-1d7"
Expires: Thu, 22 Dec 2022 09:06:59 GMT
Last-Modified: Tue, 20 Dec 2022 09:06:57 GMT
Server: nginx
Content-Length: 471
semyanich-420.fun/resized/thumbnail/semyanich/83/sort_Sumos_OG_Kush_Sumo_seeds__IagtxHjVaHoIkvTh.jpg
200 OK 234 kB URL HTTP/2 semyanich-420.fun/resized/thumbnail/semyanich/83/sort_Sumos_OG_Kush_Sumo_seeds__IagtxHjVaHoIkvTh.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 721x824, components 3\012- data
Size 234 kB (234295 bytes)
Hash 8adeb01a3554d319054735636ae22308
e3b81e82ef5f8339fbf11fab0b8c5ae90503d5c8
6d662eb882360ac517b572c8ccff1560c7f4713f1093a1b8878a9f3535ecf849
GET /resized/thumbnail/semyanich/83/sort_Sumos_OG_Kush_Sumo_seeds__IagtxHjVaHoIkvTh.jpg HTTP/1.1
Host: semyanich-420.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 234295
last-modified: Sat, 14 Nov 2020 14:43:11 GMT
etag: "5fafecff-39337"
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iDa1rh0HsPQmqqtzs%2Ffx5yCTezh%2BuQyMbEoHp9oEDGBKHD37O0dHQNtqjgHwbR0UAiM5TndNy%2BZwWeUTkJ8N3cd3z2aNP1gBzZ7rVjGfHdsQ1nAy0sz2OpCn7XeT7DamvfBDeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cc268dbd9db511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rasta-seeds.com.ua/Media/images/catalog/big/1c5cbac1e8c03b194e044fa4d3506c81.jpg
200 OK 148 kB URL HTTP/1.1 rasta-seeds.com.ua/Media/images/catalog/big/1c5cbac1e8c03b194e044fa4d3506c81.jpg
IP
ASN #59939 WIBO Baltic UAB
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 400x380, components 3\012- data
Size 148 kB (147825 bytes)
Hash 3eb939add5940249ac11159f4cb42e5c
00bd94361283db42a6021ddd06f52a40dd790ed6
314a6858d63bfe1e50663a8e862b49303c5a53ea9b86238cf2796a6cc046be4a
GET /Media/images/catalog/big/1c5cbac1e8c03b194e044fa4d3506c81.jpg HTTP/1.1
Host: rasta-seeds.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:30:22 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 24 Nov 2020 06:05:54 GMT
ETag: "4204d-24171-5b4d41a7fb9f1"
Accept-Ranges: bytes
Content-Length: 147825
Cache-Control: max-age=604800
Expires: Tue, 27 Dec 2022 23:30:22 GMT
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.eapteka.ru/upload/offer_photo/361/973/1.jpeg?t=1582649812
200 OK 81 kB URL HTTP/1.1 www.eapteka.ru/upload/offer_photo/361/973/1.jpeg?t=1582649812
IP
ASN #201706 Servicepipe LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 650x650, components 3\012- data
Hash 0adc25100c348bbc8282db70fd061e33
f681a5e4395ec2bc79b5cddd006da8e0776dc9f8
35000da45f7165537fffc475f4ed5e8b6192e852ced75a3eb64dac71faee200f
GET /upload/offer_photo/361/973/1.jpeg?t=1582649812 HTTP/1.1
Host: www.eapteka.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 20 Dec 2022 23:27:47 GMT
Content-Type: image/jpeg
Content-Length: 81425
Connection: keep-alive
Keep-Alive: timeout=15
set-cookie: spid=1671578866939_9d5f5966eea20bcdcb70f5f3793b069a_fkpsvle1u664t21h; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; Secure; SameSite=None
Last-Modified: Tue, 25 Feb 2020 16:56:52 GMT
ETag: "5e5551d4-13e11"
Expires: Fri, 23 Dec 2022 23:27:46 GMT
Cache-Control: max-age=259200, access plus 1 year
Accept-Ranges: bytes
X-SP-CRID: 265927727:1
Strict-Transport-Security: max-age=31536000
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash a4e58201e5d1b0647e690e89ec6c94d0
193e9447998b153666ef8c578629b39ad0f029f5
ba46e5af31931f9a24f5e3423dc64ab87fd2d4b34bec19d1dff9c51a10a3e049
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 24 Dec 2022 20:40:18 GMT
ETag: "193e9447998b153666ef8c578629b39ad0f029f5"
Last-Modified: Tue, 20 Dec 2022 20:40:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cc268d0cc0b511-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd5dcc19ad887a983d93503509fbe8e1
2a5480d2428547c221a9bd79289252cc7caf0259
e688f00ea9f6e5742554156c905a6c54878610d5acf807dc91cb2deed7b76eb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 20 Dec 2022 22:33:24 GMT
age: 3263
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9d5518b05926e5fc608ad00c4abf3e01
273178a68589773d7c28a2360e64685937a5caa6
c0401c937edee3f05e3e41ab2b09af061962bcfa8471f2d0a0d91c3fe732843d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rb7.ru/system/images/image_links/510329/5030CAE70516CD27_320.jpg
200 OK 23 kB URL HTTP/2 rb7.ru/system/images/image_links/510329/5030CAE70516CD27_320.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 320x240, components 3\012- data
Hash 6cc0b3303e30334385ba6d8198d91a0c
eeeeda0379103cd8a7f1b258fd32ef3c1136ca30
e2568a62aa2a3b6dcd2a1cdc14dbb7c39fc5caff44c1412774be1bd03ca3e98b
GET /system/images/image_links/510329/5030CAE70516CD27_320.jpg HTTP/1.1
Host: rb7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 22753
last-modified: Sat, 30 Nov 2019 05:12:53 GMT
etag: "5de1fa55-58e1"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eadadfec0a65bce69128230cfa49f936
1ae7fbb4969315fc2d13cf0a63d1909c499147db
bbd8831dd832214747d09faca8a7092b1e72dbaec35ee513bf6663caaea3e488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eadadfec0a65bce69128230cfa49f936
1ae7fbb4969315fc2d13cf0a63d1909c499147db
bbd8831dd832214747d09faca8a7092b1e72dbaec35ee513bf6663caaea3e488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bavaria35.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 102906
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.czm.su/sites/default/files/pictures/09-2020/antidepressanty-bez-retsepta-nazvania-tseny-14.jpg
200 OK 25 kB URL HTTP/2 www.czm.su/sites/default/files/pictures/09-2020/antidepressanty-bez-retsepta-nazvania-tseny-14.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 400x223, components 3\012- data
Hash 6922d1def2eb9f93aa2409228ce24c78
3a2364f2a9ecb98b9c105be500875bc3e5f4944b
1b6c58c6c51b32e8f2897c52e3c50975a29386f6f2f448847d6ba1a168650085
GET /sites/default/files/pictures/09-2020/antidepressanty-bez-retsepta-nazvania-tseny-14.jpg HTTP/1.1
Host: www.czm.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 24931
last-modified: Thu, 22 Apr 2021 14:52:40 GMT
etag: "60818db8-6163"
expires: Wed, 20 Dec 2023 23:27:47 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d0c2b6760f2b58f445446dd2276d5af4
aeedf417b1ebde86ce837ca02ba934abb938b1a4
8fe72d0ce839150559da5ddf46bf87d26b6b9cbe34d09641b29a53be24997c81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1492
Cache-Control: max-age=122636
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Etag: "63a17b2b-1d7"
Expires: Thu, 22 Dec 2022 09:31:43 GMT
Last-Modified: Tue, 20 Dec 2022 09:06:51 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bavaria35.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:56:02 GMT
expires: Tue, 19 Dec 2023 18:56:02 GMT
cache-control: public, max-age=31536000
age: 102705
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b49d45bf89ff9f1b356ec01b9c4279e6
a510ce68bac6e3ba9fb8a23828ef297bc8f17804
dfc6ef4b65152ab325417778d78071cddb5f63cedeecb04b2a08dcfcf9ffb34b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFC6EF4B65152AB325417778D78071CDDB5F63CEDEECB04B2A08DCFCF9FFB34B"
Last-Modified: Tue, 20 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Wed, 21 Dec 2022 05:27:35 GMT
Date: Tue, 20 Dec 2022 23:27:47 GMT
Connection: keep-alive
errors-seeds.com.ua/image/catalog/product_images/errors_seeds_silver/auto-afghani-silver.jpg
200 OK 308 kB URL HTTP/2 errors-seeds.com.ua/image/catalog/product_images/errors_seeds_silver/auto-afghani-silver.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=640, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=480], baseline, precision 8, 480x480, components 3\012- data
Size 308 kB (308516 bytes)
Hash 0779d138062d78125c1cf4daf27ee67c
b353813dcdbfb5dc882fcb883898060916277475
bf7288ee1f86ffbd8299c158195058fa137f53c52d8699e7c388cf579baa347b
GET /image/catalog/product_images/errors_seeds_silver/auto-afghani-silver.jpg HTTP/1.1
Host: errors-seeds.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 308516
last-modified: Mon, 20 Jun 2022 15:25:36 GMT
etag: "62b09170-4b524"
expires: Thu, 19 Jan 2023 23:27:46 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ehp1kmU6FjDYqhm%2FjnqXGN35O4X5jjvMTwD41780nnw6T%2F9aFkcnvrSPk2w2TCG%2FiH83z22zK%2B%2BDHXfyw%2BCgiSz%2FJGH8G269IUYdjKZjKgrYXb6IcaADJ5Rt2Zyezl9GjVuzOfQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77cc268e0fe41bfa-OSL
X-Firefox-Spdy: h2
semena-konopli.com.ua/image/cache/catalog/product/master-seed/foto/Northern%20Lights/semena-konopli-northern-lights-marikhuana-kannabis_1-min-700x700.jpg
200 OK 208 kB URL HTTP/1.1 semena-konopli.com.ua/image/cache/catalog/product/master-seed/foto/Northern%20Lights/semena-konopli-northern-lights-marikhuana-kannabis_1-min-700x700.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 700x700, components 3\012- data
Size 208 kB (208020 bytes)
Hash 769c17e898169a6f6250e2864279a91e
c4c969433ce732445cd6d39b351ee853ca52819e
7c78ee6d6080605d54a6932e690b71a892da9ae279dee0655dc0aced2e6fb250
GET /image/cache/catalog/product/master-seed/foto/Northern%20Lights/semena-konopli-northern-lights-marikhuana-kannabis_1-min-700x700.jpg HTTP/1.1
Host: semena-konopli.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 20 Dec 2022 23:27:47 GMT
Content-Type: image/jpeg
Content-Length: 208020
Last-Modified: Thu, 08 Dec 2022 18:06:24 GMT
Connection: keep-alive
ETag: "639227a0-32c94"
Expires: Tue, 27 Dec 2022 23:27:47 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eadadfec0a65bce69128230cfa49f936
1ae7fbb4969315fc2d13cf0a63d1909c499147db
bbd8831dd832214747d09faca8a7092b1e72dbaec35ee513bf6663caaea3e488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn-i.pageflow.io/_a10392/_e21563/main/image_files/processed_attachments/000/270/724/v1/large/coltivatore_coI_camice_bianco.JPG
200 OK 156 kB URL HTTP/2 cdn-i.pageflow.io/_a10392/_e21563/main/image_files/processed_attachments/000/270/724/v1/large/coltivatore_coI_camice_bianco.JPG
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1400x769, components 3\012- data
Size 156 kB (156242 bytes)
Hash e95aed22e524b7a23dcd21897bfb6861
9fe48bf3635b380fd69a0d7b0421c57dcc557b56
8816f8a67b57da9a6006689abef513d806937e50caac1fce34413144ccdae033
GET /_a10392/_e21563/main/image_files/processed_attachments/000/270/724/v1/large/coltivatore_coI_camice_bianco.JPG HTTP/1.1
Host: cdn-i.pageflow.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.2
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 156242
x-amz-id-2: vdppDClwcCJq5/YyHU/o8TXOd2QGjbvza1f5j3sIVwnwGHZJy7SjvDIcFU15WgMa2AI/S+3LM80=
x-amz-request-id: WP7429BPSXJYHW4T
last-modified: Wed, 17 Jul 2019 15:08:30 GMT
x-amz-version-id: .phCsDUa_ntdbmbaThQs7bBe37elR9tU
etag: "e95aed22e524b7a23dcd21897bfb6861"
x-amz-storage-class: INTELLIGENT_TIERING
cache-control: public, max-age=31536000
x-varnish: 126200195 109848586
age: 259961
via: 1.1 varnish-v4
x-cache: hit
x-account: 10392
x-entry: 21563
x-environment: production
x-cache-server: cdn-production-varnish-5744b4f5d5-s6nzc
x-dns-region: eu
x-url: _2f_i-production_2f_main_2f_image_files_2f_processed_attachments_2f_000_2f_270_2f_724_2f_v1_2f_large_2f_coltivatore_coI_camice_bianco_2e_JPG
access-control-allow-headers: *
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
stv24.tv/wp-content/uploads/2018/11/21/ilovlya_narkotiki-800x600-1024x608.jpg
200 OK 70 kB URL HTTP/2 stv24.tv/wp-content/uploads/2018/11/21/ilovlya_narkotiki-800x600-1024x608.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x608, components 3\012- data
Hash 831971be6a6ec0413decbf70a8d4d3de
3148593e0eb774525a49374151a0d46f37940461
1959b97995c54c7371c25fe85d11b03c2e3ccd448ba091538565a070f706c3c3
GET /wp-content/uploads/2018/11/21/ilovlya_narkotiki-800x600-1024x608.jpg HTTP/1.1
Host: stv24.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=65MRHQZPmNUJPN8Wsz1h; Domain=.stv24.tv; HttpOnly; Path=/; Expires=Wed, 20-Dec-2023 23:27:47 GMT
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/jpeg
content-length: 69775
last-modified: Wed, 21 Nov 2018 06:34:48 GMT
cache-control: max-age=18000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
etag: "5bf4fc88-1108f"
expires: Wed, 21 Dec 2022 04:27:47 GMT
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 83c9f3f5556ab5897fd8b9e19d0e0dd2
071aef14867bdd498babd011b4c000b410070a11
31bb940f8c15eeecca4e3e03f2d539c89ec92f951d285b711fff4434585bb777
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=153538
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 23:27:47 GMT
Etag: "63a1f9b5-116"
Expires: Thu, 22 Dec 2022 18:06:45 GMT
Last-Modified: Tue, 20 Dec 2022 18:06:45 GMT
Server: nginx
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash f69ea6ea658aaf18d1dc85c81e04c440
077c0b550f2e6d15a00fcc7c7778268e410f1c1d
46f72d7ccbe94476b0850633165b7996759b30a7653563128cbd83d4713b1142
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 13:35:53 GMT
Expires: Sun, 25 Dec 2022 13:35:52 GMT
Etag: "077c0b550f2e6d15a00fcc7c7778268e410f1c1d"
Cache-Control: max-age=395884,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77cc268ef9b5b512-OSL
i.otzovik.com/objects/b/800000/792809.png
200 OK 82 kB URL HTTP/2 i.otzovik.com/objects/b/800000/792809.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 311f17fc8fc3e3d3ef1dc1dd5ab53618
9e06f1156887ed03445be312e0d13d23cc01595c
ee53623e71837cfe5872655383e78ec1ea13ced99b4353c66dfb256033653d71
GET /objects/b/800000/792809.png HTTP/1.1
Host: i.otzovik.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/png
content-length: 82252
last-modified: Mon, 28 Nov 2016 16:52:01 GMT
etag: "583c60b1-1414c"
expires: Thu, 19 Jan 2023 23:27:47 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0YhL3FoNyjZKGgdpG1aAkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rsEDz6H/R2e9zvEJs487mJOMUqY=
inpramed.ru/upload/medialibrary/b46/b461d8a1a43da42aa29fbefb87251438.png
200 OK 827 kB URL HTTP/2 inpramed.ru/upload/medialibrary/b46/b461d8a1a43da42aa29fbefb87251438.png
IP
ASN #44128 Internet-Pro LLC
File type PNG image data, 896 x 504, 8-bit/color RGBA, non-interlaced\012- data
Size 827 kB (827426 bytes)
Hash 3353effab1af63e4900f6c4c77031535
cd7cddcaacc88b007e42d0c101c15914732a3f2a
cf132e3584d56d8df6203c60872a36d9ce4f67591590cc474876e34706512d63
GET /upload/medialibrary/b46/b461d8a1a43da42aa29fbefb87251438.png HTTP/1.1
Host: inpramed.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.1
date: Tue, 20 Dec 2022 23:27:47 GMT
content-type: image/png
content-length: 827426
last-modified: Wed, 15 Jul 2020 05:40:00 GMT
etag: "5f0e96b0-ca022"
expires: Thu, 19 Jan 2023 23:27:47 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
bavaria35.ru/favicon.ico
200 OK 643 B IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash dbdcf6539ce26802b8a69fdf4801582a
ad99ed1d41915acdcc9837947919b4700f513252
2d6d10e412b38a1559c7abea0db0adf291695954db0d31bbc2b8bc0f151ad89f
GET /favicon.ico HTTP/1.1
Host: bavaria35.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bavaria35.ru/
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 23:27:47 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 07 Apr 2019 21:44:32 GMT
ETag: W/"47e-585f7a00a5000"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2F1HCS8TphLnPL8D6IQzjr7EkHgwlN0MmuPCBy%2FA7NIQBuPT8IUgkpGmpoVJRP1TJ%2FTXo3av483i102qlUx6Ogzv8TjFtlFSKy5DBZz3OZBh3VEeIjbtS%2FSFHmtiBNk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cc2691cea6b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4486
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 23:27:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4486
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 23:27:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4486
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 23:27:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4486
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 23:27:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4486
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 23:27:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83a9d0c8-fdf9-4f4f-b99c-1935dcf7629e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83a9d0c8-fdf9-4f4f-b99c-1935dcf7629e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4541599985b2a64e9b2785c37db4c842
58124cd04759248b1dc79ee9007973e88528811d
97ad9cbbbf1ea628dcf73aa51cd2a9a3d6e69485c22de5fcce93f3fefd74472b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83a9d0c8-fdf9-4f4f-b99c-1935dcf7629e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11945
x-amzn-requestid: d5edb450-6aa9-4600-b853-e6e984bc6e5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DHqioAMFR_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-5651cf1257294aa758e6c610;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: mYvqqXuNUjX5UY9k6Gc8UqRM-G-qxGMpL_kD0FISV8f9pwbXXpXXAg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:37:41 GMT
age: 6607
etag: "58124cd04759248b1dc79ee9007973e88528811d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa7b189-c1d5-4440-b415-f3188b6a0f14.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa7b189-c1d5-4440-b415-f3188b6a0f14.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe10e1948eda329f8af1bb3549282c3d
68bc80d4e1cf43094452a666950d44788c6e561b
af172978ad005988e99eba1625443b87a287ae5bf371c1637c2fbc926adefa83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa7b189-c1d5-4440-b415-f3188b6a0f14.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15929
x-amzn-requestid: 5464c25f-83e6-446d-8809-47f2b016432c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKcIqG95oAMFvqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a73d0-2d68c5222d56e6ce6fc14b56;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 01:09:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sEjeAUy98R9axnbJI3QPA9uEC6_An_3nTWJ-IxhLzf2r_lBhD9YS5A==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:50:33 GMT
age: 5835
etag: "68bc80d4e1cf43094452a666950d44788c6e561b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b67d0976563ea9460d94e27ff920f9da
f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92
c7ec3c4b87b700796008690562a6033481a7ad826fb2f45875cd6add06189568
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10154
x-amzn-requestid: f317432b-7dda-439b-bc02-9c76412e9de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DGlfoAMF5Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-13a5af4c477a1019544222f4;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zee8fH2mx78hr5oICfnTrdmJeFcioNt_4_eo8ffiKApLll4cbLR82A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:50:12 GMT
age: 5856
etag: "f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde55ab04-2a71-4a6c-9a09-dd8c0fc6e99a.webp
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde55ab04-2a71-4a6c-9a09-dd8c0fc6e99a.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ddcf3f904e165f7acde4fb588ea1a733
6abbc321a48f41d151fc2a99535ae0557f0bc3fe
8a3cf8bd93eb93a475b85c39d2bb2a595875f457b693929625b4c85a1d4892aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde55ab04-2a71-4a6c-9a09-dd8c0fc6e99a.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8519
x-amzn-requestid: 935e0884-2cf9-45d8-8d57-5f212bb82c54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dX5QbF3cIAMF-2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639fd59c-09675fa360f1f1184868e62f;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 03:08:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dFpUbB69aU0HqISsZeVsWQl0IY4BJJwMlSqboBJs3AWvAMKZ65xnQw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 04:07:08 GMT
age: 69640
etag: "6abbc321a48f41d151fc2a99535ae0557f0bc3fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31ce91c9-2f56-4bfd-bfc9-6081785436ca.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31ce91c9-2f56-4bfd-bfc9-6081785436ca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4514b9d40760436bf655b4931fd7f16a
9847b2e222a3bd7a07d62dcdeba78d9224c041e3
c82ad7443b03e55bfe38dcb9b3960ca662ca2cc9b6ae85ddcb445acc13797d31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31ce91c9-2f56-4bfd-bfc9-6081785436ca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4840
x-amzn-requestid: 85fe919f-fb74-4409-8e0d-414e5f55e551
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6xeaHmCIAMF3qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63942f8f-68283fcb7e35aae96bd5b1a4;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 07:04:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: osD-zP73jTRraTC_WIVCNFbvjvDREyO9OtlZco-BkfZtCEIcwKrzbg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 04:27:06 GMT
age: 68442
etag: "9847b2e222a3bd7a07d62dcdeba78d9224c041e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbff75350-af26-4cdc-a530-ee13f1464846.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbff75350-af26-4cdc-a530-ee13f1464846.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f8a00da147fc1ea45e26ab2f08184d1
746935e11a26447009e10be55e05b14df3b71fef
0a6306992800db29e85e972cf240ebe70f6032f208d8122071a1dc81e3ad25ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbff75350-af26-4cdc-a530-ee13f1464846.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8801
x-amzn-requestid: e8ead79d-9d25-4ea8-be70-44acf4394424
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dYbu-FKgIAMFoig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a00cc6-0ef5f9f1224069f44a9c9507;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 07:03:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mFYJekLqBW5d6QqwPDBa3c6EkkG_lPqmZeSrPSBvaPUBJ-3bFjr6pQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 07:30:56 GMT
age: 57412
etag: "746935e11a26447009e10be55e05b14df3b71fef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Crimson+Text:wght@400;700&family=Libre+Baskerville:wght@400;700&family=Noto+Sans+JP:wght@400;700&family=Open+Sans:wght@400;700&family=Oswald:wght@400;700&family=Roboto+Slab:wght@400;700&family=Roboto:wght@400;700&family=Zilla+Slab:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Crimson+Text:wght@400;700&family=Libre+Baskerville:wght@400;700&family=Noto+Sans+JP:wght@400;700&family=Open+Sans:wght@400;700&family=Oswald:wght@400;700&family=Roboto+Slab:wght@400;700&family=Roboto:wght@400;700&family=Zilla+Slab:wght@400;700&display=swap
IP
GET /css2?family=Crimson+Text:wght@400;700&family=Libre+Baskerville:wght@400;700&family=Noto+Sans+JP:wght@400;700&family=Open+Sans:wght@400;700&family=Oswald:wght@400;700&family=Roboto+Slab:wght@400;700&family=Roboto:wght@400;700&family=Zilla+Slab:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bavaria35.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Dec 2022 23:27:46 GMT
date: Tue, 20 Dec 2022 23:27:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
104.21.63.186
23.38.202.22
104.18.21.226
23.32.98.213
185.43.222.190
104.26.5.139
93.184.220.29
188.114.96.1
89.108.104.70
136.243.146.52
95.211.247.68
92.222.236.232