bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
302 Moved Temporarily 154 B URL HTTP/1.1 bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
Analyzer Verdict Alert fortinet Phishing
GET /admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 04 Feb 2023 01:29:08 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15098
Expires: Sat, 04 Feb 2023 05:40:46 GMT
Date: Sat, 04 Feb 2023 01:29:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8161
Expires: Sat, 04 Feb 2023 03:45:09 GMT
Date: Sat, 04 Feb 2023 01:29:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11545
Expires: Sat, 04 Feb 2023 04:41:33 GMT
Date: Sat, 04 Feb 2023 01:29:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 00:43:35 GMT
content-type: application/json
age: 2733
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: etsnBiU7UcZIUqghJqZ6xRSBpqdRbPYfI36hL+FP75JNB4vnr8QE8hUDRgkSR30y0bNkt2mO8ds=
x-amz-request-id: ZWBDSQ8GJHRDQNDZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 00:52:38 GMT
age: 2190
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 01:07:19 GMT
age: 1309
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8827
Expires: Sat, 04 Feb 2023 03:56:16 GMT
Date: Sat, 04 Feb 2023 01:29:09 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Jk1X+xxCXM8MvlXVacCZaA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +EVMAPcF9VkpHinaNQYYOdAAO+o=
bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
200 OK 9.9 kB URL HTTP/2 bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (492), with CRLF, LF line terminators
Hash 0ee68ab280ae6089caaabbda5fd2e685
60378cc438345504f63b3cc6050b375a327422b0
c79369c84543acaf1e5d00d38aa7d87cf9405e1e48866c452bedb0d2e3560f9c
Analyzer Verdict Alert fortinet Phishing
GET /admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/html; charset=utf-8
content-length: 9862
server: Jino.ru/mod_pizza
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; path=/; HttpOnly
default=594d696afdb0e56eee179f97ddc23e53; path=/; httponly
language=ru-ru; expires=Mon, 06-Mar-2023 01:29:09 GMT; Max-Age=2592000; path=/; domain=bioseptm.ru
currency=RUB; expires=Mon, 06-Mar-2023 01:29:09 GMT; Max-Age=2592000; path=/; domain=bioseptm.ru
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/animate.css
200 OK 502 B URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/animate.css
IP
Hash 03e030e48a0dbc17c9ccb687f48e8bdc
dca5cdf8730dbf09c833f6c08f8e702a4abb9e1a
f90fa023f0241a84ca8acfbfc9d1106c1b9b56a088cf8fb88208bcb1a99e0dcb
GET /catalog/view/theme/fastor/css/animate.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 502
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:41 GMT
etag: "71c-5c7a9f1aa82fe-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/bootstrap.css
200 OK 16 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/bootstrap.css
IP
File type assembler source, ASCII text, with very long lines (318)
Hash 5027864e42b9e56fb4798549ec49a0b2
79eb89baa9ff796635653ffc5d87e9f1e0e57c00
3805d7540c8bfb230a1a7fac95f1a074098e1dc5607d81412b701d5ebc21f2bb
GET /catalog/view/theme/fastor/css/bootstrap.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 15651
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:41 GMT
etag: "19ff6-5c7a9f1b21476-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/responsive.css
200 OK 14 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/responsive.css
IP
Hash af94636a6537d2d2556521e04c1f3d45
7e88cdef4a66d9211098c292929353b972f89947
04ae3a02b2c7bd54199319edb52eb1982bdc4c077c2844c781bcd5a4f9d7e5eb
GET /catalog/view/theme/fastor/css/responsive.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 13929
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:42 GMT
etag: "1deb2-5c7a9f1c24105-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/menu.css
200 OK 17 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/menu.css
IP
Hash dbd9679f3e2a96d9f5b487adb5b465f8
78f0e6a9edf91ddedb57e62d48c154be65f91d73
496e3bed1dc81f3bda4adff6363b1329779c866e1828e6ad6d84d4227d36b606
GET /catalog/view/theme/fastor/css/menu.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 16865
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:42 GMT
etag: "2d3dd-5c7a9f1bfb898-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/owl.carousel.css
200 OK 1.2 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/owl.carousel.css
IP
Hash 1ac2da1c254d7fe244e80e8313298dd6
62ee8ac38005d1459ef37efe2a9da9391704a514
3c04419127bd01a2dd33052c1b0960b63a585733b4e9cb1a6ecf1cf31ef82c61
GET /catalog/view/theme/fastor/css/owl.carousel.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 1239
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:42 GMT
etag: "186e-5c7a9f1bf56f0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/font-awesome.min.css
200 OK 6.7 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28900)
Hash 44199db135a3cf78e3cf4bf6e3170033
96a27c54fd2723ff930c3faa8cf6c600a90ff78a
80e21be34b782b126cd2908f142df631e4396099a1e62255253b6299b3e9a0aa
GET /catalog/view/theme/fastor/css/font-awesome.min.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 6666
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:42 GMT
etag: "7187-5c7a9f1b87927-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/wide-grid.css
200 OK 292 B URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/wide-grid.css
IP
Hash dad8007e678b46f9b9364590baeef6df
b2109665ee846aa51242e640284c90d9aa083228
cefdc9f57092a6dc881d8abad92f5774edc13dc4cab44eb00df3292e57599074
GET /catalog/view/theme/fastor/css/wide-grid.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 292
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:43 GMT
etag: "5b2-5c7a9f1c7c710-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/javascript/jquery/magnific/magnific-popup.css
200 OK 1.9 kB URL HTTP/2 bioseptm.ru/catalog/view/javascript/jquery/magnific/magnific-popup.css
IP
File type ASCII text, with CRLF line terminators
Hash b111487f8a753ee48fb1c3ec27257067
ae57394579f045acc6d7707e7d8d1fce152595e7
dfc65dafbda97aa04443b523b49271614187b5370a7924edd714c612c9ac6851
GET /catalog/view/javascript/jquery/magnific/magnific-popup.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
content-length: 1940
server: Jino.ru/mod_pizza
last-modified: Tue, 07 Nov 2017 11:42:00 GMT
etag: "1f71-55d630f191200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bioseptm.ru/catalog/view/theme/fastor/js/jquery-2.1.1.min.js
200 OK 30 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/jquery-2.1.1.min.js
IP
File type ASCII text, with very long lines (32061)
Hash 5de8769c7ab306a22dc48d88d2af952b
bd8a7f0404cbdcb9c03ab876af55adfb8da1d629
c0710b9760862129ed30e4422843de6c59b288985211a9e828647ea72d8526b8
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/jquery-2.1.1.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 29497
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "14915-5c7a9f223aa21-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/jquery.easing.1.3.js
200 OK 2.0 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/jquery.easing.1.3.js
IP
Hash a6759141afcbcf0a161171becbdb51f3
77e91d639ecf18d8bb76e4f40e3d53fe2b11f787
3299718703ddc77d79ca733312395b64bf49932ea9687cf40f48c88af1d78bf8
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/jquery.easing.1.3.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 1986
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "1fa1-5c7a9f2292c44-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/jquery-migrate-1.2.1.min.js
200 OK 3.1 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/jquery-migrate-1.2.1.min.js
IP
File type ASCII text, with very long lines (7085)
Hash e1084a25976d8b8999acadc7350ffb48
99b723d38b78d8347e8dfa60193b12864a370227
b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/jquery-migrate-1.2.1.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 3063
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "1c1f-5c7a9f2246d71-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/twitter-bootstrap-hover-dropdown.js
200 OK 604 B URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/twitter-bootstrap-hover-dropdown.js
IP
File type ASCII text, with very long lines (1239), with no line terminators
Hash ffddb9973bec550eaa02d979906ab4c4
fafc1e27ea38e272b11e0d0c1b363921ccc9c1e2
f3e579a8f866804665e1231f692386e278dde3e1bad93112c3caf97dc98206f4
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/twitter-bootstrap-hover-dropdown.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 604
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:50 GMT
etag: "4d7-5c7a9f2358077-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/echo.min.js
200 OK 1.3 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/echo.min.js
IP
Hash 9d58cd90c405c37656f38e96854d277f
268e0da3d3e40f5f6a790f6d57cb6b87e8e54540
74fb5184d9bc0b1c26cb73afb6acc2d47ebdd4f9418a22a0d5c51c3ada1f26ba
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/echo.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 1258
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "f92-5c7a9f220b06d-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/bootstrap.min.js
200 OK 7.5 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (28397), with no line terminators
Hash bee64064a48ab8bce5803ba15ff5248b
55305c3d1521312fbbaad510b97c74bac9effbf5
60b08ec745d86690e06c0db77ac300f36d63d1adbe81dbd75607c3386286960d
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/bootstrap.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 7467
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "6eed-5c7a9f21ef706-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/tweetfeed.min.js
200 OK 1.5 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/tweetfeed.min.js
IP
File type ASCII text, with very long lines (526)
Hash fb9ff259ed90bae012602196ef05eaaf
06bc2cb371380505959d8cb787dd685cd3ab8da2
7271ef011fc434e99b642d121879bdc9f1ad4a34b113d8ff4bf9a2ba4572b28d
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/tweetfeed.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 1515
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:50 GMT
etag: "da3-5c7a9f233de81-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/common.js
200 OK 4.1 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/common.js
IP
Hash 8b3028a1f9b16484090108feed733025
d20ff417762ca7f00efcf8a26dc94c8fa4ad914e
fe6ac90418785e4ff7bc6b5d5533d1d03720f9e68003698cdd42334b7f1bb413
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/common.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 4138
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "4907-5c7a9f220b06d-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/bootstrap-notify.min.js
200 OK 2.5 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/bootstrap-notify.min.js
IP
File type HTML document, ASCII text, with very long lines (7410)
Hash bd53c5a25526989a7b0513f847e690df
7eda6243e7761e96ab2cf131e51c9ff97fdcb418
56e2f4504fa67b301e8ffd7a5d3fdf93fd317d4a73fb62105ba1452b25517ba5
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/bootstrap-notify.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 2508
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "1de1-5c7a9f21e8d8f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/javascript/jquery/magnific/jquery.magnific-popup.min.js
200 OK 7.6 kB URL HTTP/2 bioseptm.ru/catalog/view/javascript/jquery/magnific/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20763), with CRLF line terminators
Hash 5e00fb0a37e43d6500200e8ac2824139
010ad1746cce98b56736568e8abb72ffcd7ea32f
9b8dbfab125fa133cbe84158544f86d94bec52353bcb4b79453b99c5c1cd1711
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/javascript/jquery/magnific/jquery.magnific-popup.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 7566
server: Jino.ru/mod_pizza
last-modified: Tue, 07 Nov 2017 11:42:00 GMT
etag: "519f-55d630f191200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/owl.carousel.min.js
200 OK 8.5 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/owl.carousel.min.js
IP
Hash 1d56e765b2c0740a5f8ceb683b2f38ab
32460d4f61b83de1be97f3b96e3ead3361a2f05c
678204c58a39fa366fb71472ab40566f42ea2fe7386687c6c77a4e8b58edc980
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/owl.carousel.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 8454
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:50 GMT
etag: "9906-5c7a9f236e006-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/logon.png
200 OK 5.8 kB URL HTTP/2 bioseptm.ru/image/catalog/logon.png
IP
File type PNG image data, 97 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 2494e0cf36b870fa5e40bc71870b90bd
d824d3aef409f2d727f592af15f4ac446c0ffd47
7bc8bc5e0d374c6dac28e2d6d7f2facfbe2f636e344975931e13cf239dd0c6cd
GET /image/catalog/logon.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 5817
server: Jino.ru/mod_pizza
last-modified: Thu, 22 Jul 2021 08:37:29 GMT
etag: "16b9-5c7b2328af7e2"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/icon-cart-hover.png
200 OK 3.0 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/icon-cart-hover.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 344029befed2a0e814027ab53788f1ff
10c2ebd1351a0f0a0bf682237b6e6acc2299240e
126ce65df86e5a039fc7d2dbb2201537e9f46c524e8699e934621d290080d065
GET /catalog/view/theme/fastor/img/icon-cart-hover.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 3037
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:47 GMT
etag: "bdd-5c7a9f208235e"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/icon-cart.png
200 OK 3.0 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/icon-cart.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 079e2fb90668618465e8e362ebc05d8a
54858e588fb0f479b66a0bc36c16314b0f1db1e6
9797f156a800d62858a9d6892e5542b76ffc4919d3a7dbc661fb9717813e15fb
GET /catalog/view/theme/fastor/img/icon-cart.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 3032
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:47 GMT
etag: "bd8-5c7a9f2090205"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/house.png
200 OK 584 B URL HTTP/2 bioseptm.ru/image/catalog/architecture/house.png
IP
File type PNG image data, 68 x 62, 8-bit colormap, non-interlaced\012- data
Hash efcd7e4d3e110b1c718f081d5d0f01d3
bdceb9bb3ba1f8f1af5c5d3c340ff2ea5873c132
23a3495f1a5ceba960c944e35d93dff2fbc3d4b50613fd7c6b3db18421177a7a
GET /image/catalog/architecture/house.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 584
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:26 GMT
etag: "248-5c7aa02a2f4ee"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/jquery-ui-1.10.4.custom.min.js
200 OK 11 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/jquery-ui-1.10.4.custom.min.js
IP
File type ASCII text, with very long lines (33869)
Hash 1ba11fcb3fefa9fa4e70f824a1a34bd8
e3f8d2fc8ea5eeb7dc40e69acfb8e19631f50b4b
8a8d3b6b680e8134f6986671e30aec5a6e6ce9c74aee3ce7fdf54d3600521d68
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/jquery-ui-1.10.4.custom.min.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 10654
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:49 GMT
etag: "854c-5c7a9f2258a98-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/property.png
200 OK 522 B URL HTTP/2 bioseptm.ru/image/catalog/architecture/property.png
IP
File type PNG image data, 68 x 62, 8-bit colormap, non-interlaced\012- data
Hash 5f6e5d7ec384abd361dcfd51eaa143bd
1c6246d92d094171bea3bdfd56c51ccb32c10cd0
f5eec83fe81e596bcfa1bf52a254fe99cbe14757ab77eb4e55bcbe8e6f414719
GET /image/catalog/architecture/property.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 522
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:26 GMT
etag: "20a-5c7aa02aad86e"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/apartments.png
200 OK 251 B URL HTTP/2 bioseptm.ru/image/catalog/architecture/apartments.png
IP
File type PNG image data, 68 x 62, 4-bit colormap, non-interlaced\012- data
Hash e672ad2105b2582cb44340688ce7c0ce
54cdeebd212a269c135c9da50cd7372b81ab4e9c
cd18f5f39c3bedb8c236edd1f65f4b51a0fb2b6d4250ea9bb91ee27d7730f6da
GET /image/catalog/architecture/apartments.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 251
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:25 GMT
etag: "fb-5c7aa0299f82f"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/other.png
200 OK 395 B URL HTTP/2 bioseptm.ru/image/catalog/architecture/other.png
IP
File type PNG image data, 68 x 62, 8-bit colormap, non-interlaced\012- data
Hash f3be31d30d84978ddf1c56907ede7bae
143526a499a5ce048e02b3fce840403621dce3a0
2ca57a0ef46b355ca08f95c4e6233454583ea4ddfa565957452659e414c74378
GET /image/catalog/architecture/other.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 395
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:26 GMT
etag: "18b-5c7aa02a9fdaf"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/banners/home_banner_2.jpg
200 OK 13 kB URL HTTP/2 bioseptm.ru/image/catalog/banners/home_banner_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 555x216, components 3\012- data
Hash ccb14a8421f9b26199381641b7297f34
2f101d6c54e93d45025cb5e32328801bab185fb4
c4d6f32a195513ddff0c6485c1a960da229cad7d9ef034e2df8a14fc9af56c89
GET /image/catalog/banners/home_banner_2.jpg HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/jpeg
content-length: 13396
server: Jino.ru/mod_pizza
last-modified: Thu, 19 Aug 2021 21:01:49 GMT
etag: "3454-5c9efdc072dd9"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/blank.gif
200 OK 42 B URL HTTP/2 bioseptm.ru/image/catalog/blank.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /image/catalog/blank.gif HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/gif
content-length: 42
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:22 GMT
etag: "2a-5c7aa026655a4"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/banners/home_banner_1.jpg
200 OK 12 kB URL HTTP/2 bioseptm.ru/image/catalog/banners/home_banner_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 555x216, components 3\012- data
Hash 86b4c7deda620b5ab85cfa59463c203d
b74098aef5e46fad886b0d3649c05a2a0849585c
06851df930b311e32b845d3a413521651a0dc2ef6689132f0f21a5aef80e4d91
GET /image/catalog/banners/home_banner_1.jpg HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/jpeg
content-length: 12088
server: Jino.ru/mod_pizza
last-modified: Thu, 19 Aug 2021 21:01:49 GMT
etag: "2f38-5c9efdc06d019"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/hoknuowa4eashsfl1mkg.jpg
200 OK 120 kB URL HTTP/2 bioseptm.ru/image/catalog/hoknuowa4eashsfl1mkg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1156x650, components 3\012- data
Size 120 kB (120292 bytes)
Hash 270120b14e6517f9207503c816a6671d
52a903e006f76922914f1cbcb3b4db89afe050ae
d03b6f26953735e12f28659caefb7b54f5d4a1eb11a4577a273dfc0078ad425f
GET /image/catalog/hoknuowa4eashsfl1mkg.jpg HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/jpeg
content-length: 120292
server: Jino.ru/mod_pizza
last-modified: Thu, 22 Jul 2021 06:06:26 GMT
etag: "1d5e4-5c7b0165cbc86"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/js/megamenu.js
200 OK 1.3 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/js/megamenu.js
IP
Hash 9f9e1a3a8d90c3be1870d26853b52e59
1f668ffdb2e1dd4ef8869df19b53d5a4c8bda6d1
d281bed499b92c7cc4ea358e2f86c2014e709fe44755b159220d65b122fb1bfe
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/js/megamenu.js HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
content-length: 1264
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:50 GMT
etag: "1b2d-5c7a9f2302565-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19866
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 01:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19866
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 01:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3753
Expires: Sat, 04 Feb 2023 02:31:43 GMT
Date: Sat, 04 Feb 2023 01:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19866
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 01:29:10 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Open+Sans:800,700,600,500,400,300,200,100
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:800,700,600,500,400,300,200,100
IP
Hash e4e55cb01cc4a27691ab228de5660a44
f5f99401273a6008b2e4cc186bb5f2083a9a29e9
d60949c9bb9968efcec03376d2b5330a453184737499ec6099e1fcc44eebfb56
GET /css?family=Open+Sans:800,700,600,500,400,300,200,100 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 01:29:10 GMT
date: Sat, 04 Feb 2023 01:29:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b5c35cdff2fb0758db780212b0b1f77
edbb557a3bf57128467335685aebbd4831d802f8
e0fa59843073ba8bd171c66610bc1b3d59a1a94c4991e6023507b9453ca0edba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9349
x-amzn-requestid: ecd1913d-7dbe-4ffd-ba85-0549aab51a06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyayOGPlIAMFQ7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dda4da-6a9b8d146155fa8b6c1c02d6;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 00:20:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jGBEz2d-SXXPBZhwlJgR4w248y-NY2c-18euLre5PULjWUIfhfUmNQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 00:30:47 GMT
age: 3503
etag: "edbb557a3bf57128467335685aebbd4831d802f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:47:06 GMT
age: 13324
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41580a501cc07c328e6ab6b167a110dc
a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e
0fa45161e563101b3f1293f951a3edf84c88c9f3b29bed9b54f952ca325bf21d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7101
x-amzn-requestid: 479d8004-430a-45b9-99fa-11cbcc605a7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHxqoAMFaug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-25ac3c54427748bc191fd1ba;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1-NjCSeyrUAwvL2BDl1JXYK0WY0ze5FZz5-chZ6x2IEnDQBw9rEv6w==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:11:51 GMT
age: 11839
etag: "a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f926cd4f39b1a10b152e5959b28ae29e
2b1982d21321071394e363888e007598e968fb35
a51b246a9aa5a2583cae7fd4f0a3bdf73f0b318b7838828d36ea5674a5f26753
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13309
x-amzn-requestid: f6a3f0f3-d91b-4f4d-8265-0f87742ba5d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyFeBFX4oAMFfpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd82bf-5808ceec265756c702d212dc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:55:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WWjzs8W8GmSAM0-Uc8XBTxz67RJJCIzp3fBYhkoIWZ26UrobmZV8mw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:14:12 GMT
etag: "2b1982d21321071394e363888e007598e968fb35"
content-type: image/jpeg
age: 11698
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:44 GMT
age: 12206
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 392b61306c346508d3ac4a2f28218f9c
d2de32b52e0d3f4fc6acaf687b3521294b01dc03
018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:21 GMT
age: 12229
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/bg-megamenu.png
200 OK 2.8 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/bg-megamenu.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e47642e38aa9be6a140569d785794f0f
0ae7b1931a66792d98cece9a3e463c449139259e
0a3d05a9d4815a00bc2daa34169766215a7af4dd05a2cb5c3645443d0dc4c600
GET /catalog/view/theme/fastor/img/bg-megamenu.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 2792
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:46 GMT
etag: "ae8-5c7a9f1fb2f03"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/loader.gif
200 OK 1.5 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/loader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 3f5c5f4f887a30b1d1bfed9e4cd4e19e
40a149604e637fa0f3c84460129cf83803ed1a4d
9b5c37c80ccd103c8075d88ed542ac53ac2ad2f84ad000626d8ea8c6094f063a
GET /catalog/view/theme/fastor/img/loader.gif HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/gif
content-length: 1456
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:47 GMT
etag: "5b0-5c7a9f20e321f"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/bg-body.png
200 OK 608 kB URL HTTP/2 bioseptm.ru/image/catalog/architecture/bg-body.png
IP
File type PNG image data, 2000 x 863, 8-bit colormap, non-interlaced\012- data
Size 608 kB (608096 bytes)
Hash 851f1ad5babbc103cb52f56701fca25c
1c8295178893ab3f26303b67f6e79dfd6c5302ab
2f22e02e3b98efac1ebbfe3a9d3fb3691a597bf8e3c90da9a9ced8ba15fd8c8e
GET /image/catalog/architecture/bg-body.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 608096
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:26 GMT
etag: "94760-5c7aa02a3cfad"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bioseptm.ru/catalog/view/theme/fastor/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
Analyzer Verdict Alert fortinet Phishing
GET /catalog/view/theme/fastor/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bioseptm.ru/catalog/view/theme/fastor/css/font-awesome.min.css
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-length: 71896
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:44 GMT
etag: "118d8-5c7a9f1d4e27a"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/add-to-cart-2.png
200 OK 3.0 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/add-to-cart-2.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash bac8ed306fbc264269d0286927300041
0562baf47c04adf2f4464bf0ae4b9cda4a051336
ddc3a43662663245be6285ac06f4d71a1125035f9bd0da5370ab7cccf7a1db51
GET /catalog/view/theme/fastor/img/add-to-cart-2.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 2997
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:45 GMT
etag: "bb5-5c7a9f1edd131"
accept-ranges: bytes
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/img/add-to-cart.png
200 OK 3.0 kB URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/img/add-to-cart.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 03ff6e9c60948a64d7bb7d3344a20104
a4a3df2d37c06940b55347ef5b0e65dd0cd6f028
d1b56bb7aa737cbad279c080dcf99214f9a8e85529dd6f7c93883c15e305f27f
GET /catalog/view/theme/fastor/img/add-to-cart.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 2964
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:45 GMT
etag: "b94-5c7a9f1ef5bb7"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bioseptm.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:52:01 GMT
expires: Thu, 01 Feb 2024 07:52:01 GMT
cache-control: public, max-age=31536000
age: 236229
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bioseptm.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 369389
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bioseptm.ru/image/catalog/architecture/bg-footer.png
200 OK 19 kB URL HTTP/2 bioseptm.ru/image/catalog/architecture/bg-footer.png
IP
File type PNG image data, 2000 x 573, 4-bit colormap, non-interlaced\012- data
Hash 4aea7530c2544527594a6898d3c500fe
e9a7d62e68e68351e648de7e10e414384963566d
f867bec7e8c524eb1f5464c4a4da617dcd1757ed69ac755251246ab19cf63080
GET /image/catalog/architecture/bg-footer.png HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: image/png
content-length: 19210
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:51:25 GMT
etag: "4b0a-5c7aa029e749b"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bioseptm.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 04:05:29 GMT
expires: Tue, 30 Jan 2024 04:05:29 GMT
cache-control: public, max-age=31536000
age: 422621
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quiz.marquiz.ru/static/fonts/Gilroy/Regular.woff2
200 OK 28 kB URL HTTP/2 quiz.marquiz.ru/static/fonts/Gilroy/Regular.woff2
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type Web Open Font Format (Version 2), TrueType, length 28260, version 1.0\012- data
Hash 2c8b07ea9c186608d63d64b7dfe9045f
2d550e6f5d1179483b99bc8f2fd47613b88c0f11
25209e0f01765fad0a6331ad3baf3ed94bd0eaed8c26d87694c5a57524a6030d
GET /static/fonts/Gilroy/Regular.woff2 HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: font/woff2
content-length: 28260
last-modified: Wed, 01 Jun 2022 07:15:14 GMT
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
etag: "2c8b07ea9c186608d63d64b7dfe9045f"
x-cache: Hit from cloudfront
via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 2y4t2k1QYmk2TXLAy-ZBquJLCsmJQovBRGpX1VrZtq7nZHIBIqeISA==
age: 426
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
script.marquiz.ru/v2.js
200 OK 59 kB IP
ASN #34879 OOO Sovremennye setevye tekhnologii
Hash 556f16a6df008b8305a86f14e1593afc
5c956c1ab6d86b543db818cbf3690436806ed6e0
d9c08475df6936f963414db62286a884db368193aa36b06d5d72ab673cf7becd
GET /v2.js HTTP/1.1
Host: script.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 07:59:07 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
cache-control: public,max-age=86400,immutable
etag: W/"a2a1e1d36416ee4867549c128868ecc1"
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 59202edf772149f3e7805f2a4994d252.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: yI5Az2Gu0gS63ND2M5V3ry9002AaXlQVyOYkNSHCnMc05YQBpbpd6Q==
age: 16
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/static/fonts/Gilroy/SemiBold2.woff2
200 OK 29 kB URL HTTP/2 quiz.marquiz.ru/static/fonts/Gilroy/SemiBold2.woff2
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type Web Open Font Format (Version 2), TrueType, length 28892, version 1.0\012- data
Hash a72293461a122cdc3c8430e8d58a4219
4de27ddd675c3d4bea9c497a2743545e1da19cd6
c0eb55048100de95c96b40e8c5bec08f2fc771c3fd96c73d36587bfd0c7a3ba0
GET /static/fonts/Gilroy/SemiBold2.woff2 HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: font/woff2
content-length: 28892
last-modified: Thu, 09 Jun 2022 07:46:39 GMT
etag: "a72293461a122cdc3c8430e8d58a4219"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
via: 1.1 9e68c5632e1f9f77f8da043a0495769a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: SJNtZ-lQCO88vmAAIwiSmakzXIk0STvzXVfTXfwHsA6fmPwa73IZtw==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
quiz.marquiz.ru/img/loader.4c98b8f7.svg
200 OK 815 B URL HTTP/2 quiz.marquiz.ru/img/loader.4c98b8f7.svg
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 4c98b8f74af51b62c57ed9d900fc54bc
999945034f1c3e67b4d8c6ff8ede61b8d0e3774f
52bf3dc76bce8ad0316d768f848c31357e34cafc0cc412c390661fad9f4a7f4d
GET /img/loader.4c98b8f7.svg HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/css/app.8a758a05.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: image/svg+xml
content-length: 815
last-modified: Wed, 01 Jun 2022 07:15:13 GMT
etag: "4c98b8f74af51b62c57ed9d900fc54bc"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
via: 1.1 9e68c5632e1f9f77f8da043a0495769a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: takC1pgyKUMRpUMN8xUXBVCGgYRcfXNe9QqLC-oWZ03g45xg3RBZLA==
age: 83
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a01a6301eeb9f67250bcd06111caef8
2f103f949ae68b24faf298685d119f5de1d289e7
fc82c4c42d0dfb5f6631f46a8d3171c531e99d0bae0d4ae7084fe2b717606b56
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC82C4C42D0DFB5F6631F46A8D3171C531E99D0BAE0D4AE7084FE2B717606B56"
Last-Modified: Thu, 02 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10438
Expires: Sat, 04 Feb 2023 04:23:10 GMT
Date: Sat, 04 Feb 2023 01:29:12 GMT
Connection: keep-alive
api.us.marquiz.io/v1/Quizzes/60b64131d13a77004976133a?lng=en-US&tz=UTC
404 Not Found 130 B URL HTTP/1.1 api.us.marquiz.io/v1/Quizzes/60b64131d13a77004976133a?lng=en-US&tz=UTC
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7c477017c4fb98877776d179709dc47
e000f306f0c9a0a4752914cdf7b54021a80d70f5
dfc3103f29290aa27a402be0b46ea32b35c4e802fa931ee8ee9deb84ddd69885
GET /v1/Quizzes/60b64131d13a77004976133a?lng=en-US&tz=UTC HTTP/1.1
Host: api.us.marquiz.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quiz.marquiz.ru
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: https://quiz.marquiz.ru
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
X-Xss-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=0; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Content-Type: application/json; charset=utf-8
Date: Sat, 04 Feb 2023 01:29:12 GMT
Transfer-Encoding: chunked
Via: 1.1 vegur
quiz.marquiz.ru/css/final-page.2e16040d.css
200 OK 259 kB URL HTTP/2 quiz.marquiz.ru/css/final-page.2e16040d.css
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
Size 259 kB (258562 bytes)
Hash 0ca423b098939730232ae2e6eca54ec0
c7aff0822d367b585bd1d7bb961ef6e7475872bc
1e8db4d366bf5de001bfb9ef6b2e78c39684692081c751ddde9770fa19639a26
GET /css/final-page.2e16040d.css HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: text/css
last-modified: Wed, 18 Jan 2023 07:15:05 GMT
etag: W/"0d7fcdee15e7fe2be82413e8ed611608"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3c1b8c037c66c46a8ac162f1eef5d682.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: kyt4uyMeOanNnSnT-cD4kpcjq_k6boVF2UqaofY-gb_bn4P2URdisQ==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/date~final-page.a062d7db.js
200 OK 8.7 kB URL HTTP/2 quiz.marquiz.ru/js/date~final-page.a062d7db.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type Unicode text, UTF-8 text, with very long lines (29400), with no line terminators
Hash 61d8839e6f1ffbe322c7f6b46c41a892
f76d9b9c35f969e603b847651f5cbb2da8d290ff
3be5896c8d23957c6d4714b81fb47e136e48e620fc6f5ac1b13f74ff60e9a674
GET /js/date~final-page.a062d7db.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 07:57:15 GMT
etag: W/"338c3fd685c78717b57a4e5912319c66"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e6c9a537bd3796ea580cf02a62b7c246.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: GUEkdX4d9B9hHQPfNE9i3zgnpRtKaaOoGpiz7Vs_BdRb1v_Z-2gedw==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
api.marquiz.ru/v1/analytics/opening?lng=en-US&tz=UTC
204 No Content 0 B URL HTTP/1.1 api.marquiz.ru/v1/analytics/opening?lng=en-US&tz=UTC
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/analytics/opening?lng=en-US&tz=UTC HTTP/1.1
Host: api.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://quiz.marquiz.ru/
Origin: https://quiz.marquiz.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://quiz.marquiz.ru
Vary: Origin, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 86400
Content-Length: 0
Date: Sat, 04 Feb 2023 01:29:12 GMT
Via: 1.1 vegur
ocsp.pki.goog/gts1c3
200 OK 1.1 kB IP
File type gzip compressed data, max compression\012- data
Hash 3fe841511b167db197066ab147ba8b3e
c62c8d683a0e1e7f6e42d7491bd80e839445fd0b
527dc9c3ff746a7596605e18ec1d77e8cc87b2888a323c311f76ae8a27694405
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quiz.marquiz.ru/js/chunk-vendors.9318ccee.js
200 OK 230 kB URL HTTP/2 quiz.marquiz.ru/js/chunk-vendors.9318ccee.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
Size 230 kB (230312 bytes)
Hash ce150a0126f863ebdc7c069c8386f1f4
6a6bbd9a9e4e258be3787322e52a977d346b21b3
2cdcb011f79ceade5d5fd18b98f37c2a95d12b118c221c72afceb700758f90ad
GET /js/chunk-vendors.9318ccee.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: application/javascript
last-modified: Wed, 18 Jan 2023 07:15:06 GMT
etag: W/"f3f5c891cae38d931102a6e59ae6370a"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1be9b204bafba40c329df0fd4961700e.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: xIrKEi-wE0nkfaVisfjALQuvyq4phJnqqEieCWFqVjSHBDHCaCBgxg==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/quiz.bbbb9576.js
200 OK 73 kB URL HTTP/2 quiz.marquiz.ru/js/quiz.bbbb9576.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
Hash 6104d101dcdb618d7d2937b727f6dd5f
917b2b16aa44c79a66d60f81112f8f1f52aadfc3
7527d905ca548b0f643e5cf86fa6c7ec23ecd1a8b9e72c75f61357391dd0cfd0
GET /js/quiz.bbbb9576.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 07:57:15 GMT
etag: W/"12c5f7079e7d85159293da3787f3f2a6"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 3f6ea9dc2daf7899e40c190c4d465fd0.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: T8Mhdjqesd3YkAmw9DV0vRTI2sXokpRcLaOF639hi3c-MYKmknEzgw==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/img/discount-badge-union.fe3a0b73.svg
200 OK 326 B URL HTTP/2 quiz.marquiz.ru/img/discount-badge-union.fe3a0b73.svg
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash fe3a0b73c7cda7e28ae9e0d35c7fefe1
a5aa440564075197d0a1add58ac2772abe44bbbe
5d7f3f69f8b139b575e2e3fce3d934e6d1d7ef52976406028efb37ba14de7bed
GET /img/discount-badge-union.fe3a0b73.svg HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/css/app.8a758a05.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: image/svg+xml
content-length: 326
last-modified: Fri, 25 Nov 2022 08:07:13 GMT
etag: "fe3a0b73c7cda7e28ae9e0d35c7fefe1"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
x-cache: Hit from cloudfront
via: 1.1 88944815e9efa1cfbf5b6acdd146175a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: NK-QSeoXvQQtaftI6IZTUfAzKVaCF36mq3JMH18QeTs8Phtp-58rPA==
age: 15
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
api.marquiz.ru/v1/analytics/opening?lng=en-US&tz=UTC
200 OK 103 B URL HTTP/1.1 api.marquiz.ru/v1/analytics/opening?lng=en-US&tz=UTC
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b0f2bd2182ae70e2ce21c0aa695b47a3
43dc5063e5cbc0b49fd04e148e4bdd1fe5b97f50
d61541a4398987c3667bd71a4b49455b720586bb78ce2a06483159f36e79ae81
POST /v1/analytics/opening?lng=en-US&tz=UTC HTTP/1.1
Host: api.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 111
Origin: https://quiz.marquiz.ru
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: https://quiz.marquiz.ru
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
X-Xss-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=0; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Content-Type: application/json; charset=utf-8
Content-Length: 103
Etag: W/"67-Q9xQY+XLwLSf0E4UjkvdH+W5f1A"
Date: Sat, 04 Feb 2023 01:29:12 GMT
Via: 1.1 vegur
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17076, version 1.0\012- data
Hash e248902a9f045310063e7a14a46fd9ae
aec66565f555ee0ca4d39e584a1b484db127fa3b
262a1054100218e2efaa4b2e214e4fb8e920c5a30a53300b80145511df3de895
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://quiz.marquiz.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 04:28:36 GMT
expires: Wed, 31 Jan 2024 04:28:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 21:07:51 GMT
content-type: font/woff2
age: 334836
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hgwipn3sa-res.cloudinary.com/image/upload/w_250,f_auto,q_auto,g_auto,c_fill,dpr_1/aspr6gbvxic8cgdljkvs.png
200 OK 6.1 kB URL HTTP/2 hgwipn3sa-res.cloudinary.com/image/upload/w_250,f_auto,q_auto,g_auto,c_fill,dpr_1/aspr6gbvxic8cgdljkvs.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x167, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d2e497ca5bd4f9a1f81108cc472c751a
dde4a5ed0176492b7d694fd7f94b41a7ce8f38ea
08619f04a63eb34d1061e4955841342f746c1e49143f4e46e828229f59ca1337
GET /image/upload/w_250,f_auto,q_auto,g_auto,c_fill,dpr_1/aspr6gbvxic8cgdljkvs.png HTTP/1.1
Host: hgwipn3sa-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="aspr6gbvxic8cgdljkvs.webp"
content-type: image/webp
etag: "d2e497ca5bd4f9a1f81108cc472c751a"
last-modified: Tue, 20 Apr 2021 09:20:20 GMT
content-length: 6084
date: Sat, 04 Feb 2023 01:29:13 GMT
cache-control: private, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data
x-content-type-options: nosniff
server-timing: akam;dur=201;cpu=34;start=2023-02-04T01:29:12.876Z;desc=miss,rtt;dur=5,cloudinary;dur=81;start=2023-02-04T01:29:12.939Z
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/final-page.8654917f.js
200 OK 77 kB URL HTTP/2 quiz.marquiz.ru/js/final-page.8654917f.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
Hash 0b9ec9f05ed0961932ca602b3b787de5
638f856bc7654496e3fe07245338a15c2d0df972
b0e11d96612421c923968a979195abc64d4043ec1d8be9c752b9a89d0ac39620
GET /js/final-page.8654917f.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 07:57:15 GMT
etag: W/"c790ecc3b01e15873b0b32e58c04f518"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 43235ad12d781e3fd6dab94bb2a51ca0.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: IBjB3D9ODPx0eQ_RMccJD38nH3AE8AWSEssBNhcfN-OVLlIX0Z0psg==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
hgwipn3sa-res.cloudinary.com/image/upload/w_auto,f_auto,q_auto,g_auto,c_fill,h_650,dpr_1/hoknuowa4eashsfl1mkg.jpg
200 OK 109 kB URL HTTP/2 hgwipn3sa-res.cloudinary.com/image/upload/w_auto,f_auto,q_auto,g_auto,c_fill,h_650,dpr_1/hoknuowa4eashsfl1mkg.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1156x650, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 109 kB (109252 bytes)
Hash 6a6e6eae698a5b84509e022991e66ee6
1f88a87f439d59cb129db504cd8ad6529892c6ab
baebf3594fb0ccfa2443f5625fc7b83a403be0aa9457b55f512ac1cfa685d1ca
GET /image/upload/w_auto,f_auto,q_auto,g_auto,c_fill,h_650,dpr_1/hoknuowa4eashsfl1mkg.jpg HTTP/1.1
Host: hgwipn3sa-res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="hoknuowa4eashsfl1mkg.webp"
content-type: image/webp
etag: "6a6e6eae698a5b84509e022991e66ee6"
last-modified: Sun, 06 Jun 2021 10:20:07 GMT
content-length: 109252
date: Sat, 04 Feb 2023 01:29:13 GMT
cache-control: private, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent,Save-Data,DPR,Sec-CH-DPR,Width,Sec-CH-Width
content-dpr: 1
x-content-type-options: nosniff
server-timing: akam;dur=271;cpu=31;start=2023-02-04T01:29:12.882Z;desc=miss,rtt;dur=5,cloudinary;dur=154;start=2023-02-04T01:29:12.944Z
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 03 Feb 2023 23:45:20 GMT
expires: Sat, 04 Feb 2023 01:45:20 GMT
cache-control: public, max-age=7200
age: 6233
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/app.191c06a6.js
200 OK 69 kB URL HTTP/2 quiz.marquiz.ru/js/app.191c06a6.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
File type Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Hash d1e0807cc22d885500819a7109416bbf
d59ecff0fcb0bb0acb1d8e4bd6f0f81f6e213fb3
78e57e6d4fae7b1512fd0c16052390f69ea0cd851b041907b31d1ae6122fbe0f
GET /js/app.191c06a6.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 07:57:14 GMT
etag: W/"1abee44ca2f02c6a2717b86cb5c0b883"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a481094379fbeeb96ddc8b0f96f0ce90.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: AUburx_4fWQgZVweP0mleWEw9qcAi0zVOotmhPgiUBtFplGK27hkIw==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&gjid=338756665&_gid=527295450.1675474187&_u=YEBAAUAAAAAAACAAIC~&z=755030782
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&gjid=338756665&_gid=527295450.1675474187&_u=YEBAAUAAAAAAACAAIC~&z=755030782
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&gjid=338756665&_gid=527295450.1675474187&_u=YEBAAUAAAAAAACAAIC~&z=755030782 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://quiz.marquiz.ru
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://quiz.marquiz.ru
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 04 Feb 2023 01:29:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 621b586028d5acaf29b8777ca0872ce1
9d2a358576d0acab58e2eacf7765b686cee9181f
a7c99a5217e394c715679780ae1e3e60202653547212b0a4fd2efab0e1a01015
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de88149c85daf1f2f8f183d16f581394
4b88639d92a9defef7e575ff50f00348d7a4fc91
5bcde8fa6ee36e3a745249b5a5d1c583b0b17e1bd37a3d5b83ce9255b818680d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 04 Feb 2023 01:29:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-113524925-1&cid=1673493769.1675474187&jid=4944196&_u=YEBAAUAAAAAAACAAIC~&z=478941465 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 04 Feb 2023 01:29:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8176ac8bbb8fa05f36bdfa163da09e0c
b936c84c5fa7e781b12a17952c82bca546ca0575
1aa7e39fd02514a4023036a8a100d7e7898ee220063ebfb41c509264c81ed727
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de88149c85daf1f2f8f183d16f581394
4b88639d92a9defef7e575ff50f00348d7a4fc91
5bcde8fa6ee36e3a745249b5a5d1c583b0b17e1bd37a3d5b83ce9255b818680d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ac51fd6789cbe19c2d484c9022b0e39
bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9
300b5e50cb910f9f4905ee7313d98763b68f85f5874db499cc94469fb14cabfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9500
x-amzn-requestid: 8fe94388-e8d9-4329-b73a-e9a356df76bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9QEA1IAMF3Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8054-51f954ac4bec16d1055e38f5;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkTJ6wQ4eFYBPDyS0l5vLeWvHHiQIx-cYyFzT4ggHJ8M5Gg3dozFxQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:59:51 GMT
age: 12566
etag: "bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/quiz~swiper.bd851657.js
200 OK 0 B URL HTTP/2 quiz.marquiz.ru/js/quiz~swiper.bd851657.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
GET /js/quiz~swiper.bd851657.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 07:57:14 GMT
etag: W/"33c48eb915806bea852174d92eaf9d7a"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3c1b8c037c66c46a8ac162f1eef5d682.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: 7PKH9E6f_nJa2F8sUtdpQ6PtDrnM4_k--BSPW4Iq88C8pWH-VkqE9g==
age: 1
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/js/chunk-218c9962.c5e75b08.js
200 OK 0 B URL HTTP/2 quiz.marquiz.ru/js/chunk-218c9962.c5e75b08.js
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
GET /js/chunk-218c9962.c5e75b08.js HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 10:28:58 GMT
etag: W/"0a7993624c155e9bbd771553ee4aca01"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6be22242aae4af4e7e7512e5e8fcb512.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 2Ge3yqr7wG9OMe7__-zYtegJp_TBK5wuWaINCrHFWZDj97kNQq6dWw==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
200 OK 0 B URL HTTP/2 bioseptm.ru/catalog/view/theme/fastor/css/stylesheet.css
IP
GET /catalog/view/theme/fastor/css/stylesheet.css HTTP/1.1
Host: bioseptm.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/admin/model/tool/Earthlink/Earth_link/cb7e2e140b7e6707b58be304d8bebb09/hhessdh.html
Cookie: PHPSESSID=73d18d846b779f30e173d221787bafb4; default=594d696afdb0e56eee179f97ddc23e53; language=ru-ru; currency=RUB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:29:10 GMT
content-type: text/css
server: Jino.ru/mod_pizza
last-modified: Wed, 21 Jul 2021 22:46:43 GMT
etag: "8a954-5c7a9f1cb979c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
quiz.marquiz.ru/css/chunk-vendors.574c9868.css
200 OK 0 B URL HTTP/2 quiz.marquiz.ru/css/chunk-vendors.574c9868.css
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
GET /css/chunk-vendors.574c9868.css HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: text/css
last-modified: Wed, 15 Jun 2022 07:39:12 GMT
etag: W/"37af10a41f447dc25e6eb1f08a9af633"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5ffe5df2b6c8f15be82e79251546b54a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: H7nneIiob_H56dysDWYayo7XVX5I11YOa0UKmiC9vSuFx7RnpD_cYQ==
age: 1
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:300,400,500,600,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300,400,500,600,700
IP
GET /css?family=Poppins:300,400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 01:29:10 GMT
date: Sat, 04 Feb 2023 01:29:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quiz.marquiz.ru/img/marquiz.6c626418.svg
200 OK 0 B URL HTTP/2 quiz.marquiz.ru/img/marquiz.6c626418.svg
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
GET /img/marquiz.6c626418.svg HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:12 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Jun 2022 07:46:39 GMT
etag: W/"6c6264184bd225ad9cb8a675a48a757b"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3c1b8c037c66c46a8ac162f1eef5d682.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: HlGXeLRcjoDzqKrupRV9QL6kD33KHUN6cmOAXe6jQjqDL9bLZsWyPg==
strict-transport-security: max-age=31536000
x-ngenix-cache: HIT
X-Firefox-Spdy: h2
quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
200 OK 0 B URL HTTP/2 quiz.marquiz.ru/60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline
IP
ASN #204878 OOO Sovremennye setevye tekhnologii
GET /60b64131d13a77004976133a?href=https%3A%2F%2Fbioseptm.ru%2Fadmin%2Fmodel%2Ftool%2FEarthlink%2FEarth_link%2Fcb7e2e140b7e6707b58be304d8bebb09%2Fhhessdh.html&mode=inline HTTP/1.1
Host: quiz.marquiz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioseptm.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:29:11 GMT
content-type: text/html
last-modified: Fri, 03 Feb 2023 07:57:14 GMT
etag: W/"07fc3ec27398ae4170b5f94d2c220202"
x-amz-server-side-encryption: AES256
access-control-allow-origin: *
cache-control: public,max-age=60,immutable
content-encoding: gzip
vary: Accept-Encoding, Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 2ec95fe7e41d4394d0fc48587428057e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: K2eCrOplbv9EVBcqp99DzuvcaI42WSN2NnbZgREpPNHdqeXcQgN2eQ==
strict-transport-security: max-age=31536000
x-ngenix-cache: MISS
X-Firefox-Spdy: h2
81.177.135.246
142.250.74.78
23.33.119.27
63.32.161.232
0.0.0.0